This repository was archived by the owner on Aug 15, 2025. It is now read-only.

24 lines (16 loc) · 738 Bytes

3.15 - Cloud Storage buckets modified or deleted by unfamiliar user identities

Any Cloud Storage buckets modified or deleted by unfamiliar user identities

Category: Cloud Provisioning Activity
Use Cases: Detect, Audit
Data Sources: Audit Logs - Admin Activity

Queries or Rules

BigQuery	Log Analytics	Google SecOps
Contribute query	Contribute query	Contribute rule

Event Generation

No event generation steps provided. Contribute emulation test to this use case.

Sample Event

No log samples provided. Contribute log samples to this use case.