gcp-vpc-packet-mirroring-captured-traffic

Packet Mirroring can copy unencrypted credentials, tokens, headers, and application payloads to a collector.

gcpcritical service: gcp:vpc emits CanReadData

Where it sits

locationVPC Packet Mirroring collector capture.mirrored packet payloads
location kindpayload
data kindscredential oauth_token customer_data pii sensitive_data
emits edgeCanReadData
serviceVPC / Subnets / Routes (gcp:vpc)

Collection recipe

access modedata_plane
operationVPC Packet Mirroring collector capture
response pathmirrored packet payloads
encodingbinary
params{"packetMirroring": "\u003cpolicy\u003e", "project": "\u003cproject\u003e", "region": "\u003cregion\u003e"}

Required permissions

compute.packetMirrorings.get

References

move · open · esc close