Google Cloud Re-identifies Sensitive Information

 Original Source: [Sigma source]
Title: Google Cloud Re-identifies Sensitive Information
Status: test
Description:Identifies when sensitive information is re-identified in google Cloud.
References:
  -https://cloud.google.com/dlp/docs/reference/rest/v2/projects.content/reidentify
Author: Austin Songer @austinsonger
Date: 2021-08-15
modified:2022-10-09
Tags:
  • -'attack.impact'
  • -'attack.t1565'
Logsource:
  • product: gcp
  • service: gcp.audit
Detection:
  selection:
    gcp.audit.method_name: 'projects.content.reidentify'
  condition:selection
Falsepositives:
  -Unknown
Level: medium