gcp-scc-finding-properties

Security Command Center findings aggregate scanner evidence, identities, resource data, and arbitrary source properties.

gcpcritical service: gcp:scc emits CanReadData

Where it sits

locationsecuritycenter.organizations.sources.findings.list.listFindingsResults[].finding.{sourceProperties,securityMarks.marks,connections[],contacts,compliances[]}
location kinddata_record
data kindscredential customer_data pii sensitive_data
emits edgeCanReadData
serviceSecurity Command Center (gcp:scc)

Collection recipe

access moderead_api
operationsecuritycenter.organizations.sources.findings.list
response pathlistFindingsResults[].finding.{sourceProperties,securityMarks.marks,connections[],contacts,compliances[]}
encodingjson
params{"parent": "organizations/\u003corganization\u003e/sources/-"}

Required permissions

securitycenter.findings.list

References

move · open · esc close