Skip to the card

Card 280 of 9842026-09-28 issue

Observed arrival · 2026-09-28

GCP Forensics: cloud incident analysis in your browser

gcpforensics.com Visit website
Editorial interest 84/100 Selection signal · not a rating of the site

A browser-based analyzer for Google Cloud audit and VPC Flow logs that produces a compromise verdict, incident timeline, and remediation checklist.

Landing page captured for the 2026-09-28 issue.
For
Google Cloud incident responders
Worth noticing
Its sample incident is explicitly fictional and strings together a leaked key, owner-role grant, startup-script backdoor, public bucket, and deleted log sink.

Field notes

The collection guide offers Cloud Shell, console-download, and existing log-sink routes, with commands for exporting logs. It also explains that Data Access logs are off by default for most services and require the Private Logs Viewer role; that missing coverage can leave data reads invisible. The sample is labeled fictional, and the page warns that an attacker with Owner rights may delete logs and sinks.

Observed signals

Read the marks

Editorial observations of this landing page, not a rating.

○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
ƒJavaScriptBrowser-side code central

One card from the complete issue

Regulated by Arithmetic

233,109 arrived 1,000 judged 984 catalogued Enter the complete issue
gcpforensics.com

Landing page observed 2026-09-28. The live site may have changed.