Wazuh medium stable xml

GCP critical event with source IP $(gcp.jsonPayload.sourceIP) from $(gcp.resource.labels.location) with response code $(gcp.jsonPayload.responseCode)

GCP critical event with source IP $(gcp.jsonPayload.sourceIP) from $(gcp.resource.labels.location) with response code $(gcp.jsonPayload.responseCode)

View Source

Detection Logic

Rule ID: 65008

Field Validations

Loading…

Comments (0)

Loading comments...