Cloud Data Loss Prevention (DLP)
| methodName | Description | Log type | Sample | Rule |
|---|---|---|---|---|
| projects. | Re-identifies content that has been de-identified. The items listed in the request were previously de-identified. This method is only permitted when the caller has been granted the dlp.content.reidentify permission. | data_access | N | Y |
projects.content.reidentify: Re-identify content
#Description
Re-identifies content that has been de-identified. The items listed in the request were previously de-identified. This method is only permitted when the caller has been granted the dlp.content.reidentify permission.
Data Access audit logs are disabled by default. Fields referenced by at least one attached detection rule. This view counts distinct rules and is not a complete schema for this catalog entry. Full rule details for this catalog entry, including ATT&CK technique mappings and native queries →Detection Fields #
Name Rules Vendors method_name1 detection rule Sigma Detection Rules #
Sigma #
T1565
any: dlp.googleapis.com (any method)
#Scope grouping: This repository-authored catalog entry represents a broad attribution scope, not a distinct emitted event or operation. Any sample below is a representative record from that scope; attached rules, if any, are listed separately.
Description
Catch-all entry for dlp.googleapis.com. Source-only rules that attribute to the service without a specific method attribute here. Not a distinct audit log operation.