Google Cloud SQL Database or User Modified/Deleted

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•27

Detects when a Google Cloud SQL database instance or its user accounts are created, deleted, or modified. This can indicate malicious activity such as data destruction, unauthorized access attempts, or attempts to disrupt services.