Detect New Open GCP Storage Buckets
This search looks for GCP PubSub events where a user has created an open/public GCP Storage bucket.
Detect New Open GCP Storage Buckets Help
This search relies on the Splunk Add-on for Google Cloud Platform, setting up a Cloud Pub/Sub input, along with the relevant GCP PubSub topics and logging sink to capture GCP Storage Bucket events (https://cloud.google.com/logging/docs/routing/overview).
Open in Search