Panther low experimental python

GCP SQL Config Changes

Monitoring changes to Sql Instance configuration may reduce time to detect and correct misconfigurations done on sql server.

View Source

Detection Logic

def rule(event):
    return event.deep_get("protoPayload", "methodName") == "cloudsql.instances.update"


def dedup(event):
    return event.deep_get("resource", "labels", "project_id", default="<UNKNOWN_PROJECT>")

Field Validations

Loading…

Comments (0)

Loading comments...