GCP IAM - New Authentication Token for Service Account

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Detects when new authentication token is created for service account.

Attribute Value
Type Analytic Rule
Solution GoogleCloudPlatformIAM
ID 80e4db30-5636-4fbd-8816-24c3ded8d243
Severity Medium
Status Available
Kind Scheduled
Tactics LateralMovement
Techniques T1550
Required Connectors GCPIAMDataConnector
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
GCPIAM ?
GCP_IAM_CL 🔶 ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to GoogleCloudPlatformIAM