Panoramica delle minacce di Cloud Run

Security Command Center esegue il monitoraggio runtime e del control plane delle risorse Cloud Run. Per le risposte consigliate a queste minacce, vedi Rispondere ai risultati delle minacce di Cloud Run.

Tipi di risultati di runtime

Le seguenti rilevazioni di runtime sono disponibili con Cloud Run Threat Detection:

  • Execution: Added Malicious Binary Executed
  • Execution: Added Malicious Library Loaded
  • Execution: Built in Malicious Binary Executed
  • Execution: Container Escape
  • Execution: Kubernetes Attack Tool Execution
  • Execution: Local Reconnaissance Tool Execution
  • Execution: Malicious Python executed
  • Execution: Modified Malicious Binary Executed
  • Execution: Modified Malicious Library Loaded
  • Malicious Script Executed
  • Malicious URL Observed
  • Reverse Shell
  • Unexpected Child Shell

    • Tipi di risultati del control plane

    Con Event Threat Detection sono disponibili i seguenti rilevamenti del control plane:

  • Execution: Cryptomining Docker Image
  • Impact: Cryptomining Commands
  • Privilege Escalation: Default Compute Engine Service Account SetIAMPolicy

    • Passaggi successivi