Analytics BIOC Informational
✕

GCP Virtual Private Cloud (VPC) Network Deletion

A GCP VPC network was deleted. An attacker might use this technique to interrupt business resources and workflows.

Module:
Cortex Cloud
Licensed by:
Cloud Runtime Security (CRS)
Data source:
Gcp Audit Log
ATT&CK tactics: Impact (TA0040)
ATT&CK techniques: Network Denial of Service (T1498)
Attacker's goals:

Block the availability of targeted resources to users/services.

Investigative actions:

Check which services were affected by the VPC deletion. Check the cloud identity activity before and after the VPC network deletion.

Test period:
N/A (single event)
Deduplication:
1 Day