Wazuh high stable xml

GCP emergency event with source IP $(gcp.jsonPayload.sourceIP) from $(gcp.resource.labels.location) with response code $(gcp.jsonPayload.responseCode)

GCP emergency event with source IP $(gcp.jsonPayload.sourceIP) from $(gcp.resource.labels.location) with response code $(gcp.jsonPayload.responseCode)

View Source

Detection Logic

Rule ID: 65010

Field Validations

Loading…

Comments (0)

Loading comments...