Sitemap
All pages on the site.
Home
Blog
- GCP Data Access logs: off by default, and other blind spots
- A GCP compromise walkthrough (fictional case study)
- VPC Flow Logs analysis in GCP: spotting exfiltration
- GCP log sink deleted? Detecting defense evasion in logs
- GCS and BigQuery exfiltration: evidence in audit logs
- GCP crypto mining and startup-script backdoors: detection
- GCP service account impersonation: tracing the chain
- SetIamPolicy abuse: finding owner grants and outsiders
- Leaked GCP service account key: how to investigate it
- GCP audit logs analysis: step by step in your browser
- Cloud Audit Logs types explained, and how to export them
- Google Cloud incident response: a compromised project