6.20 - Connections blocked by Cloud Armor
April 24, 2024 ยท View on GitHub
Detect any connection blocked by Cloud Armor's security policy, indicating potential exploit attempt.
Category: Network Activity
Use Cases: Audit, Detect
Data Sources: HTTP(S) LB Logs
Queries or Rules
| BigQuery | Log Analytics | Google SecOps |
|---|---|---|
| SQL | SQL | Contribute rule |
Event Generation
No event generation steps provided. Contribute emulation test to this use case.
Sample Event
No log samples provided. Contribute log samples to this use case.