5.07 - Any queries doing very large scans?

April 24, 2024 ยท View on GitHub

Detect any query that is doing a very large scan (> 1 GB).

Category: Data Usage
Use Cases: Audit, Detect
Data Sources: Audit Logs - Data Access

Queries or Rules

BigQueryLog AnalyticsGoogle SecOps
SQLSQLContribute rule

Event Generation

No event generation steps provided. Contribute emulation test to this use case.

Sample Event

No log samples provided. Contribute log samples to this use case.

Contents

  1. 1Queries or Rules
  2. 2Event Generation
  3. 3Sample Event