Google Cloud Firewall Rule Modified, Deleted, or Inserted

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•3•0•24

Detects when a firewall rule is modified, deleted, or inserted in Google Cloud Platform (GCP). This activity can indicate an adversary attempting to impair defenses or establish persistence by altering network access controls.