Ringkasan ancaman Cloud Run

Security Command Center melakukan pemantauan runtime dan control plane resource Cloud Run. Untuk mengetahui respons yang direkomendasikan terhadap ancaman ini, lihat Merespons temuan ancaman Cloud Run.

Jenis temuan runtime

Deteksi runtime berikut tersedia dengan Deteksi Ancaman Cloud Run:

  • Execution: Added Malicious Binary Executed
  • Execution: Added Malicious Library Loaded
  • Execution: Built in Malicious Binary Executed
  • Execution: Container Escape
  • Execution: Kubernetes Attack Tool Execution
  • Execution: Local Reconnaissance Tool Execution
  • Execution: Malicious Python executed
  • Execution: Modified Malicious Binary Executed
  • Execution: Modified Malicious Library Loaded
  • Malicious Script Executed
  • Malicious URL Observed
  • Reverse Shell
  • Unexpected Child Shell

    • Jenis temuan bidang kontrol

    Deteksi bidang kontrol berikut tersedia dengan Event Threat Detection:

  • Execution: Cryptomining Docker Image
  • Impact: Cryptomining Commands
  • Privilege Escalation: Default Compute Engine Service Account SetIAMPolicy

    • Langkah berikutnya