Playbook: GCP Unusual Service Account Usage

Описание: In today’s new Splunk SOAR (formerly known as Splunk Phantom) Community Playbook Tech Talk, we will show how a Splunk Enterprise search can trigger automated enrichment, an analyst prompt, and rapid response actions to prevent damage caused by malicious account access. See more follow up resources on our community discussion site.