This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Hello! When a deployment is created in Kubernetes, it is possible to add
a field as part of the securityContext named runAsUser. If the value in
this field is 0, that means the deployment is run as root, which is not
good at all from a security persp...
Hello! When a deployment is created in Kubernetes, it is possible to add
a field as part of the securityContext named runAsUser. If the value in
this field is 0, that means the deployment is run as root, which is not
good at all from a security persp...
Amazing news with the detection as code!!!
https://medium.com/google-cloud/detection-as-code-in-google-secops-with-terraform-646de8967278I
have a question regarding this, when I'm deploying a rule, I'm getting
the following error: Error: Error creati...
Hello, when searching for an event, how can I join the value of the key
and its value? For example, I have the next two events, but I'd like to
search only those that are res_kind = Deployment Event
1:...about[0].labels[1].key: "res_kind"about[0].lab...
Hello! when configuring a pub/sub push feed [1], could the push
subscription be located in a different GCP project where Chronicle is
running?And, when configuring the push subscription and as it says in
[2]: "Select Enable authentication, and select...
Is it required if it is documented and in the code? Check that in
https://cloud.google.com/chronicle/docs/ingestion/default-parsers/collect-audit-log
the
target.resource.attribute.labels[req_spec_template_spec_security_context_run_as_user]
is documen...
Hi, I already have another support case but I feel I wasted two months
of time, both from GCP support side and my side. You can test for
yourself and see that the issue still is happening, so there is still no
solution. I think I always responded fas...
[edit 26 Feb 2025] The issue was fixed I just found out what is
happening. When the enabled flag is set to FALSE, the issue happens.
When it is set to TRUE, it works. This seems as a bug in the terraform
code itself. Anyhow, the terraform resource ...
