Observed arrival · 2026-09-28
GCP Forensics: cloud incident analysis in your browser
A browser-based analyzer for Google Cloud audit and VPC Flow logs that produces a compromise verdict, incident timeline, and remediation checklist.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Google Cloud incident responders
- Worth noticing
- Its sample incident is explicitly fictional and strings together a leaked key, owner-role grant, startup-script backdoor, public bucket, and deleted log sink.
Field notes
The collection guide offers Cloud Shell, console-download, and existing log-sink routes, with commands for exporting logs. It also explains that Data Access logs are off by default for most services and require the Private Logs Viewer role; that missing coverage can leave data reads invisible. The sample is labeled fictional, and the page warns that an attacker with Owner rights may delete logs and sinks.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
ƒJavaScriptBrowser-side code central
One card from the complete issue