Update gcp_service_account_modified.yml
This commit is contained in:
@@ -11,11 +11,11 @@ logsource:
|
||||
detection:
|
||||
selection:
|
||||
gcp.audit.method_name:
|
||||
- *.serviceAccounts.patch
|
||||
- *.serviceAccounts.create
|
||||
- *.serviceAccounts.update
|
||||
- *.serviceAccounts.patch
|
||||
- *.serviceAccounts.enable
|
||||
- *serviceAccounts.patch
|
||||
- *serviceAccounts.create
|
||||
- *serviceAccounts.update
|
||||
- *serviceAccounts.patch
|
||||
- *serviceAccounts.enable
|
||||
condition: selection
|
||||
level: medium
|
||||
tags:
|
||||
|
||||
Reference in New Issue
Block a user