Splunk SOAR Playbooks: GCP Unusual Service Account Usage

[sorangutan]

In this new Splunk SOAR Playbook, we'll show how a Splunk Enterprise search can trigger automated enrichment, an analyst prompt, and rapid response actions to prevent damage caused by malicious account access.

https://www.splunk.com/en_us/blog/security/splunk-soar-playbooks-gcp-unusual-service-account-usage.html