gcp:other
Other GCP sources
- Host type
- Google Cloud (and Google Workspace)
- Cost class
- Paid service
- Techniques
- 0
- Rules listed
- 48
- Events
- 0
Licensing
- License or service
- SCC Premium / Enterprise (Standard free)
- What is free
- Standard tier
- What costs
- Premium 5% of spend or PAYG per service; Enterprise subscription; $15k min
- As read on
- 2026-11-01
A vendor statement as read on the date shown; the cost class is the durable part.
Techniques
No ATT&CK analytic names this source.
Rules
Elastic 37
- First Time GCP Vertex AI Agent Engine Sandbox Code Execution by User and Source ASN
- First Time GCP Vertex AI Inference by Caller from Source ASN
- GCP Firewall Rule Creation
- GCP Firewall Rule Deletion
- GCP Firewall Rule Modification
- GCP IAM Custom Role Creation
- GCP IAM Role Deletion
- GCP IAM Service Account Key Deletion
- GCP Logging Bucket Deletion
- GCP Logging Sink Deletion
- GCP Logging Sink Modification
- GCP Pub/Sub Subscription Creation
- GCP Pub/Sub Subscription Deletion
- GCP Pub/Sub Topic Creation
- GCP Pub/Sub Topic Deletion
- GCP Service Account Creation
- GCP Service Account Deletion
- GCP Service Account Disabled
- GCP Service Account Key Creation
- GCP Storage Bucket Configuration Modification
- GCP Storage Bucket Deletion
- GCP Storage Bucket Permissions Modification
- GCP Vertex AI Caller Activity From High Number of Countries
- GCP Vertex AI Caller Impossible Travel
- GCP Vertex AI Elevated Safety Rating on Response
- GCP Vertex AI High GenerateContent Volume From Single IP
- GCP Vertex AI High Request and Token Volume
- GCP Vertex AI Jailbreak Prompt Heuristics
- GCP Vertex AI Prompt or Response Containing Credentials
- GCP Vertex AI Publisher Model Config Modified
- GCP Vertex AI Repeated Assistant Refusals
- GCP Vertex AI Response Blocked by Safety Filters
- GCP Vertex AI Safety Filters Set to BLOCK_NONE
- GCP Virtual Private Cloud Network Deletion
- GCP Virtual Private Cloud Route Creation
- GCP Virtual Private Cloud Route Deletion
- Splunk Enterprise PostgreSQL Recovery Endpoint Injection Artifacts
Microsoft Sentinel 11
- Google DNS - CVE-2020-1350 (SIGRED) exploitation pattern
- Google DNS - CVE-2021-34527 (PrintNightmare) external exploit
- Google DNS - CVE-2021-40444 exploitation
- Google DNS - Exchange online autodiscover abuse
- Google DNS - IP check activity
- Google DNS - Malicous Python packages
- Google DNS - Multiple errors for source
- Google DNS - Multiple errors to same domain
- Google DNS - Possible data exfiltration
- Google DNS - Request to dynamic DNS service
- Google DNS - UNC2452 (Nobelium) APT Group activity
Events
No event-level rows: this source is tiered as a whole.