Google Cloud Threat Detection - Building Targeted Detections for GCP Attacks

Learn to detect and analyze Google Cloud Platform (GCP) threats in this 29-minute conference talk that draws inspiration from Sherlock Holmes' investigative methods. Explore real-world GCP attack scenarios, focusing on tactics like lateral movement, privilege escalation, and data exfiltration. Examine essential telemetry and event logging techniques that aid in identifying malicious activities. Master the process of building targeted threat detections by studying topics including Default Service Account vulnerabilities, Service Account Key Creation, External Principals management, SSH Key security, and data exfiltration prevention. Gain practical insights to strengthen your cloud security posture and develop more effective threat detection strategies for your GCP environment.