Security Command Center
google.cloud.securitycenter.SecurityCenter.BatchCreateResourceValueConfigs: BatchCreateResourceValueConfigs
#google.cloud.securitycenter.SecurityCenter.BulkMuteFindings: BulkMuteFindings
#google.cloud.securitycenter.SecurityCenter.CreateBigQueryExport: CreateBigQueryExport
#google.cloud.securitycenter.SecurityCenter.CreateEventThreatDetectionCustomModule: CreateEventThreatDetectionCustomModule
#google.cloud.securitycenter.SecurityCenter.CreateFinding: CreateFinding
#google.cloud.securitycenter.SecurityCenter.CreateMuteConfig: CreateMuteConfig
#google.cloud.securitycenter.SecurityCenter.CreateNotificationConfig: CreateNotificationConfig
#google.cloud.securitycenter.SecurityCenter.CreateSecurityHealthAnalyticsCustomModule: CreateSecurityHealthAnalyticsCustomModule
#google.cloud.securitycenter.SecurityCenter.CreateSource: CreateSource
#google.cloud.securitycenter.SecurityCenter.DeleteBigQueryExport: DeleteBigQueryExport
#google.cloud.securitycenter.SecurityCenter.DeleteEventThreatDetectionCustomModule: DeleteEventThreatDetectionCustomModule
#google.cloud.securitycenter.SecurityCenter.DeleteMuteConfig: DeleteMuteConfig
#google.cloud.securitycenter.SecurityCenter.DeleteNotificationConfig: DeleteNotificationConfig
#google.cloud.securitycenter.SecurityCenter.DeleteResourceValueConfig: DeleteResourceValueConfig
#google.cloud.securitycenter.SecurityCenter.DeleteSecurityHealthAnalyticsCustomModule: DeleteSecurityHealthAnalyticsCustomModule
#google.cloud.securitycenter.SecurityCenter.GetBigQueryExport: GetBigQueryExport
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GetEffectiveEventThreatDetectionCustomModule: GetEffectiveEventThreatDetectionCustomModule
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GetEffectiveSecurityHealthAnalyticsCustomModule: GetEffectiveSecurityHealthAnalyticsCustomModule
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GetEventThreatDetectionCustomModule: GetEventThreatDetectionCustomModule
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GetIamPolicy: GetIamPolicy
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GetMuteConfig: GetMuteConfig
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GetNotificationConfig: GetNotificationConfig
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GetOrganizationSettings: GetOrganizationSettings
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GetResourceValueConfig: GetResourceValueConfig
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GetSecurityHealthAnalyticsCustomModule: GetSecurityHealthAnalyticsCustomModule
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GetSimulation: GetSimulation
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GetSource: GetSource
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GetValuedResource: GetValuedResource
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.GroupAssets: GroupAssets
#google.cloud.securitycenter.SecurityCenter.GroupFindings: GroupFindings
#google.cloud.securitycenter.SecurityCenter.ListAssets: ListAssets
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListAttackPaths: ListAttackPaths
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListBigQueryExports: ListBigQueryExports
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListDescendantEventThreatDetectionCustomModules: ListDescendantEventThreatDetectionCustomModules
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListDescendantSecurityHealthAnalyticsCustomModules: ListDescendantSecurityHealthAnalyticsCustomModules
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListEffectiveEventThreatDetectionCustomModules: ListEffectiveEventThreatDetectionCustomModules
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListEffectiveSecurityHealthAnalyticsCustomModules: ListEffectiveSecurityHealthAnalyticsCustomModules
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListEventThreatDetectionCustomModules: ListEventThreatDetectionCustomModules
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListFindings: ListFindings
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListMuteConfigs: ListMuteConfigs
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListNotificationConfigs: ListNotificationConfigs
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListResourceValueConfigs: ListResourceValueConfigs
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListSecurityHealthAnalyticsCustomModules: ListSecurityHealthAnalyticsCustomModules
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListSources: ListSources
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.ListValuedResources: ListValuedResources
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.RunAssetDiscovery: RunAssetDiscovery
#google.cloud.securitycenter.SecurityCenter.SetFindingState: SetFindingState
#google.cloud.securitycenter.SecurityCenter.SetIamPolicy: SetIamPolicy
#google.cloud.securitycenter.SecurityCenter.SetMute: SetMute
#google.cloud.securitycenter.SecurityCenter.SimulateSecurityHealthAnalyticsCustomModule: SimulateSecurityHealthAnalyticsCustomModule
#google.cloud.securitycenter.SecurityCenter.TestIamPermissions: TestIamPermissions
#Data Access audit logs are disabled by default.
google.cloud.securitycenter.SecurityCenter.UpdateBigQueryExport: UpdateBigQueryExport
#google.cloud.securitycenter.SecurityCenter.UpdateEventThreatDetectionCustomModule: UpdateEventThreatDetectionCustomModule
#google.cloud.securitycenter.SecurityCenter.UpdateExternalSystem: UpdateExternalSystem
#google.cloud.securitycenter.SecurityCenter.UpdateFinding: UpdateFinding
#google.cloud.securitycenter.SecurityCenter.UpdateMuteConfig: UpdateMuteConfig
#google.cloud.securitycenter.SecurityCenter.UpdateNotificationConfig: UpdateNotificationConfig
#google.cloud.securitycenter.SecurityCenter.UpdateOrganizationSettings: UpdateOrganizationSettings
#google.cloud.securitycenter.SecurityCenter.UpdateResourceValueConfig: UpdateResourceValueConfig
#google.cloud.securitycenter.SecurityCenter.UpdateSecurityHealthAnalyticsCustomModule: UpdateSecurityHealthAnalyticsCustomModule
#google.cloud.securitycenter.SecurityCenter.UpdateSecurityMarks: UpdateSecurityMarks
#google.cloud.securitycenter.SecurityCenter.UpdateSource: UpdateSource
#google.cloud.securitycenter.SecurityCenter.ValidateEventThreatDetectionCustomModule: ValidateEventThreatDetectionCustomModule
#any: securitycenter.googleapis.com (any method)
#Scope grouping: This repository-authored catalog entry represents a broad attribution scope, not a distinct emitted event or operation. Any sample below is a representative record from that scope; attached rules, if any, are listed separately.
Description
Catch-all entry for securitycenter.googleapis.com. Source-only rules that attribute to the service without a specific method attribute here. Not a distinct audit log operation.
Detection Fields #
Fields referenced by at least one attached detection rule. This view counts distinct rules and is not a complete schema for this catalog entry.
| Name | Rules | Vendors |
|---|---|---|
metadata.log_type | 1 detection rule | YARA-L |
security_result.action | 1 detection rule | YARA-L |
target.application | 1 detection rule | YARA-L |
target.resource.attribute.labels["service_enablement_state"] | 1 detection rule | YARA-L |
Detection Rules #
Full rule details for this catalog entry, including ATT&CK technique mappings and native queries →YARA-L #
T1562