gcp-scc-finding-description-event-times

Finding descriptions and external URIs may contain sensitive resource or incident details.

gcphigh service: gcp:scc emits ContainsSecret

Where it sits

locationsecuritycenter.organizations.sources.findings.list.listFindingsResults[].finding.{description,eventTime,externalUri}
location kindmetadata
data kindspii sensitive_data
emits edgeContainsSecret
serviceSecurity Command Center (gcp:scc)

Collection recipe

access moderead_api
operationsecuritycenter.organizations.sources.findings.list
response pathlistFindingsResults[].finding.{description,eventTime,externalUri}
encodingjson
params{"parent": "organizations/\u003corganization\u003e/sources/-"}

Required permissions

securitycenter.findings.list

References

move · open · esc close