GCP Multiple Secrets Deleted

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•2•0•78

Detects when a user deletes multiple secrets or secret versions from Google Cloud Platform (GCP) Secret Manager within a one-hour period. This activity could indicate an attempt to destroy critical data or disrupt services.