Google Cloud DNS Zone Modified or Deleted

 1title: Google Cloud DNS Zone Modified or Deleted
 2id: 28268a8f-191f-4c17-85b2-f5aa4fa829c3
 3status: test
 4description: Identifies when a DNS Zone is modified or deleted in Google Cloud.
 5references:
 6    - https://cloud.google.com/dns/docs/reference/v1/managedZones
 7author: Austin Songer @austinsonger
 8date: 2021-08-15
 9modified: 2022-10-09
10tags:
11    - attack.impact
12logsource:
13    product: gcp
14    service: gcp.audit
15detection:
16    selection:
17        gcp.audit.method_name:
18            - Dns.ManagedZones.Delete
19            - Dns.ManagedZones.Update
20            - Dns.ManagedZones.Patch
21    condition: selection
22falsepositives:
23    - Unknown
24level: medium

References

• REST Resource: managedZones  |  Cloud DNS  |  Google Cloud

  

  REST Resource: managedZones Stay organized with collections Save and categorize content based on your preferences. Resource: ManagedZone A zone is a subtree of the DNS namespace under one administr...

  
  Read More

Related rules

• AADInternals PowerShell Cmdlets Execution - ProccessCreation
• AADInternals PowerShell Cmdlets Execution - PsScript
• AWS EC2 Disable EBS Encryption
• AWS EFS Fileshare Modified or Deleted
• AWS EFS Fileshare Mount Modified or Deleted