diff --git a/packs/gcp_audit.yml b/packs/gcp_audit.yml index 3807f3781..488b7f00d 100644 --- a/packs/gcp_audit.yml +++ b/packs/gcp_audit.yml @@ -8,16 +8,26 @@ PackDefinition: - GCP.BigQuery.Large.Scan - GCP.Cloud.Storage.Buckets.Modified.Or.Deleted - GCP.Destructive.Queries + - GCP.DNS.Zone.Modified.or.Deleted + - GCP.Firewall.Rule.Created + - GCP.Firewall.Rule.Deleted + - GCP.Firewall.Rule.Modified - GCP.GCS.IAMChanges - GCP.GCS.Public + - GCP.IAM.AdminRoleAssigned - GCP.IAM.CorporateEmail - GCP.IAM.CustomRoleChanges - GCP.IAM.OrgFolderIAMChanges - GCP.Inbound.SSO.Profile.Created + - GCP.K8s.ExecIntoPod + - GCP.Log.Bucket.Or.Sink.Deleted - GCP.Logging.Settings.Modified + - GCP.Logging.Sink.Modified - GCP.Permissions.Granted.to.Create.or.Manage.Service.Account.Key + - GCP.Service.Account.Access.Denied - GCP.Service.Account.or.Keys.Created - GCP.SQL.ConfigChanges + - GCP.UnusedRegions - GCP.User.Added.to.IAP.Protected.Service - GCP.VPC.Flow.Logs.Disabled - GCP.Workforce.Pool.Created.or.Updated