## https://sploitus.com/exploit?id=2FD54F47-55BD-5772-A527-E5DCC5489AB9
This repository is a community-driven set of security analytics for auditing cloud usage and detecting threats to data & workloads in Google Cloud. It provides a list of sample security analytics for auditing cloud usage and detecting threats, which may assist detection engineers, threat hunters, and data governance analysts. The repository includes YARA-L rules for Google Security Operations, SQL queries for BigQuery, and SQL queries for Log Analytics. The security use cases are grouped into six categories depending on underlying activity type and log sources: Login & Access Patterns, IAM, Keys & Secrets Admin Activity, Cloud Provisioning Activity, Cloud Workload Usage, Data Usage, and Network Activity. The repository is not meant to be a comprehensive set of threat detections, but a collection of community-contributed samples to get started with detective controls.