Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

GCP-IAM - Service Account Creation

Christopher Scott@Scocha

•updated Aug 8, 2026•2•0•4

An IAM service account deleted or disabled, excluding the known Terraform automation account.

Sigma

Tags

T1136.003 - Cloud Account Cloud Api Call Admin Activity GCP GCP Audit Logs

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?