David French 01c904f2dd [New Rule] GCP Firewall Rule Created (#312) ...

* new-rule-gcp-firewall-rule-created

* Add FP info to rule

* Add ATT&CK metadata

* Update name to align with other rules

Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com>

Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com>

2020-09-24 09:27:41 -06:00

..

collection_gcp_pub_sub_topic_creation.toml

Create collection_gcp_pub_sub_topic_creation.toml (#331)

2020-09-24 11:12:59 -04:00

credential_access_gcp_iam_service_account_key_deletion.toml

[New Rule] GCP IAM Service Account Key Deletion (#309)

2020-09-24 10:15:15 -04:00

credential_access_gcp_key_created_for_service_account.toml

[New Rule] GCP Key Created for Service Account (#314)

2020-09-24 09:16:18 -06:00

defense_evasion_gcp_firewall_rule_created.toml

[New Rule] GCP Firewall Rule Created (#312)

2020-09-24 09:27:41 -06:00

defense_evasion_gcp_firewall_rule_deleted.toml

[New Rule] GCP Firewall Rule Deleted (#310)

2020-09-24 09:03:55 -06:00

defense_evasion_gcp_firewall_rule_modified.toml

[New Rule] GCP Firewall Rule Modified (#311)

2020-09-24 09:06:19 -06:00

defense_evasion_gcp_storage_bucket_permissions_modified.toml

[New Rule] GCP Storage Bucket Permissions Modified (#313)

2020-09-24 09:14:13 -06:00

exfiltration_gcp_logging_sink_modification.toml

Create exfiltration_gcp_logging_sink_modification.toml (#317)

2020-09-24 10:32:10 -04:00

impact_gcp_iam_role_deltion.toml

Create impact_gcp_iam_role_deltion.toml (#329)

2020-09-24 10:51:10 -04:00

impact_gcp_service_account_deleted.toml

[New Rule] GCP Service Account Deleted (#319)

2020-09-24 09:21:29 -06:00

impact_gcp_service_account_disabled.toml

Create impact_gcp_service_account_disabled.toml (#320)

2020-09-24 09:23:10 -06:00

impact_gcp_storage_bucket_deleted.toml

[New Rule] GCP Storage Bucket Deleted (#315)

2020-09-24 09:17:52 -06:00

initial_access_gcp_iam_custom_role_creation.toml

Create initial_access_gcp_iam_custom_role_creation.toml (#316)

2020-09-24 10:19:40 -04:00

persistence_gcp_service_account_created.toml

[New Rule] GCP Service Account Created (#318)

2020-09-24 09:19:14 -06:00