Google Cloud Platform (GCP)

Overview

Google Cloud Platform (GCP) logs provide unique and crucial visibility into the activities and resources in an organization’s GCP environment.

As Cloud environments are vastly different from regular on-premise environments, many classic security products and auditing and logging mechanisms do not exist anymore in the Cloud environment as they were, which makes the multiple logging mechanisms of GCP all the more important for defending an organization’s GCP environment.

Supported data types

GCP Audit Logs (In Beta)

Table name: gcp_audit

Logs regarding actions in GCP. These include logs for read and write operations on cloud resources. For example - creation of a new Virtual Machine.

GCP Security Command Center Assets

Table name: gcp_security_command_center_assets

Provides a list of all GCP assets currently available in the environment.

GCP Security Command Center Findings

Table name: gcp_security_command_center_findings

Provides alerts from the GCP environment such as misconfigurations.