Monitor usage patterns for service accounts and keys  |  IAM Documentation  |  Google Cloud
Tags
attack-pattern: Data
Common Information
Type Value
UUID 723284f3-e747-460e-85e0-44f8462cdaa8
Fingerprint 2fa1d1d179c78cc5
Analysis status DONE
Considered CTI value 2
Text language
Published June 12, 2020, midnight
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Oct. 22, 2024, 9:51 a.m.
Headline Monitor usage patterns for service accounts and keys
Title Monitor usage patterns for service accounts and keys  |  IAM Documentation  |  Google Cloud
Detected Hints/Tags/Attributes 17/1/13
Attributes
Details Type #Events CTI Value
Details Domain 5
iam.googleapis.com
Details Email 1
projects/my-project/serviceaccounts/my-service-account@my-project.iam.gserviceaccount.com
Details Email 1
projects/my-project/serviceaccounts/my-account@my-project.iam.gserviceaccount.com
Details File 1
serviceaccounts.key
Details File 1
labels.key
Details sha1 1
90c48f61c65cd56224a12ab18e6ee9ca9c3aee7c
Details sha1 1
e5e3800831ac1adc8a5849da7d827b4724b1fce8
Details sha1 1
b97699f042b8eee6a846f4f96259fbcd13e2682e
Details sha1 1
0f561cc41650ff521899de2fd653bd3de08e2da4
Details Url 1
https://monitoring.googleapis.com/v3/projects/project_id/timeseries?filter=metric.type="metric_type"&interval.endtime=end_time&interval.starttime
Details Url 1
https://monitoring.googleapis.com/v3/projects/project_id/timeseries?filter=metric.type="iam.googleapis.com/service_account/authn_events_count
Details Url 1
https://iam.googleapis.com/v1/projects/project_id/serviceaccounts/sa_name@project_id.iam.gserviceaccount.com/keys?keytypes=key_types
Details Url 1
https://monitoring.googleapis.com/v3/projects/project_id/timeseries?filter=metric.type="iam.googleapis.com/service_account/key/authn_events_count