gcp | Detection.FYI

gworkspace

Sep 24, 2026 ·
Share on:

Read More
audit

Apr 28, 2026 ·
Share on:

Read More

Recent Posts

Potential Arbitrary File Download Using Office Application
Credential Dumping Attempt Via WerFault
Potential PowerShell Obfuscation Using Alias Cmdlets
Suspicious Login Activity Classified By Google
Potential Netcat Reverse Shell Execution
HackTool - Dumpert Process Dumper Execution
Persistence Via Sudoers Files
AWS IAM Backdoor Users Keys

Language

SIGMA 4111 ELASTIC 2147 MQL 1271

Tags

RESOURCES-INVESTIGATION-GUIDE 2071 USE-CASE-THREAT-DETECTION 1656 PERFORMANCE-NORMAL 1377 DOMAIN-ENDPOINT 1262 ATTACK.EXECUTION 1108 ATTACK.STEALTH 1036 DATA-SOURCE-ELASTIC-DEFEND 1014 RULE-TYPE-EVENT-CORRELATION-EQL 969 ATTACK.PERSISTENCE 868 ATTACK.PRIVILEGE-ESCALATION 743 NOISE-LOW 729 DOMAIN-CLOUD 626 OS-WINDOWS 592 PLATFORM-WINDOWS 584