Anvilogic medium experimental other

GCP: API Key Created [snowflake-gcpaudit]

This use case detects when an API key has been created for a GCP project.

View Source

Detection Logic

select * from gcpaudit where event_time > dateadd(hour, -2, sysdate()) and event_name ilike 'google.api.apikeys.v1.ApiKeys.CreateApiKey'

Field Validations

Loading…

Comments (0)

Loading comments...