Google Cloud DNS Zone Modified or Deleted

 1title: Google Cloud DNS Zone Modified or Deleted
 2id: 28268a8f-191f-4c17-85b2-f5aa4fa829c3
 3status: test
 4description: Identifies when a DNS Zone is modified or deleted in Google Cloud.
 5references:
 6    - https://cloud.google.com/dns/docs/reference/v1/managedZones
 7author: Austin Songer @austinsonger
 8date: 2021/08/15
 9modified: 2022/10/09
10tags:
11    - attack.impact
12logsource:
13    product: gcp
14    service: gcp.audit
15detection:
16    selection:
17        gcp.audit.method_name:
18            - Dns.ManagedZones.Delete
19            - Dns.ManagedZones.Update
20            - Dns.ManagedZones.Patch
21    condition: selection
22falsepositives:
23    - Unknown
24level: medium

References

• ManagedZones  |  Cloud DNS  |  Google Cloud

  

  cloudLoggingConfig nested object cloudLoggingConfig.enableLogging boolean If set, enable query logging for this ManagedZone. False by default, making logging opt-in. cloudLoggingConfig.kind string ...

  
  Read More

Related rules

• AWS EC2 Disable EBS Encryption
• AWS EFS Fileshare Modified or Deleted
• AWS EFS Fileshare Mount Modified or Deleted
• AWS EKS Cluster Created or Deleted
• AWS ElastiCache Security Group Modified or Deleted