GCP-NET - VPC Network Peering Change
This rule detects changes to VPC Network Peering configurations in Google Cloud Platform (GCP). VPC peering allows internal IP address connectivity across different VPC networks. Unauthorized modifications, such as adding or updating peering connections, could indicate an adversary attempting to establish lateral movement paths between network environments, facilitate data exfiltration, or modify network architecture to bypass security perimeters.
Sigma
