Google SecOps
@GoogleSecOps4 followers1,217 downloads379 copies1 like18,177 views
758 detections
Filters
Last updated
All Time
Detection languages
756
2
Categories
189
188
109
81
77
Platforms
257
198
122
112
67
Products / Services
186
94
93
69
52
MITRE Techniques
237
181
109
95
79
CVEs
4
4
Detect when multiple KMS crypto key versions are disabled or destroyed from GCP Cloud KMS.
Detect when GCP Security Command Center services are disabled.
Detect when GCP Workload identity pools are disabled or deleted. Disabling or deleting a pool will prevent any connected identities from accessing all GCP resources.
Identify network traffic based on target country
Detects a successful login after multiple failed MFA pushes
Okta Mismatch Between Source and Response for Verify Push Request
Detects multiple failed requests to access applications
Detects when a new API token is created.
Okta ThreatInsight detects multiple login failures from the same IP across one or more Okta orgs.
Okta's ThreatInsight can identify Password Spray attacks.
Page 69 of 76