GCP Cloud Storage Bulk Object Download

Darshan Thummar@Mighty

•updated Jun 12, 2026•0•0•3

This rule detects a high volume of HTTP GET requests to storage.googleapis.com, indicating a potential bulk download of objects from Google Cloud Storage. The threshold is set to 50 requests within 60 seconds from a single source IP address.