GCP Access Policy Deleted

SigmaHQ Detections@sigmaHQ

•updated Dec 1, 2024•2•0•45

Detects when an access policy that is applied to a GCP cloud resource is deleted. An adversary would be able to remove access policies to gain access to a GCP cloud resource.