GCP Access Policy Deleted (32438676-1dba-4ac7-bf69-b86cba995e05)
Detects when an access policy that is applied to a GCP cloud resource is deleted. An adversary would be able to remove access policies to gain access to a GCP cloud resource.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Account Manipulation - T1098 (a10641f4-87b4-45a3-a906-92a149cb2c27) | Attack Pattern | GCP Access Policy Deleted (32438676-1dba-4ac7-bf69-b86cba995e05) | Sigma-Rules | 1 |