Skip to main content

GCP Enrichment and Remediation

Download With Dependencies

Playbooks using multiple GCP content packs for enrichment and remediation purposes

What does this pack do?

The pack is intended to contain GCP playbooks that conduct enrichment and/or remediation and can use other multiple GCP
content packs.

There are multiple GCP content packs for multiple GCP products (GSuiteAdmin, GCP-IAM, Google Cloud Compute, etc). The intent was that users can install and use only the packs they need. However, if a GCP playbook uses multiple pack integrations (such
as GSuiteAdmin and GCP-IAM), they can't reside in one of the current packs because they include content from multiple packs. This
pack was created as a place to put GCP playbooks that use GCP integrations from multiple packs with a focus on enrichment and
remediation.

Playbooks

Users are only able to run the playbook in v6.5.0 or higher as it requires commands to execute the task.
This content pack includes the following playbooks:

  • Cloud Response - GCP
    Cloud Response - GCP

  • GCP - Enrichment
    GCP - Enrichment

  • GCP - Firewall Remediation
    GCP - Firewall Remediation

Automation Scripts

GCPProjectHierarchy

Automation to determine GCP project hierarchy by looking up parent objects until the organization level is reached.

GCPProjectHierarchy

GCPOffendingFirewallRule

Automation to determine potential offending firewall rules in GCP based on port, protocol and possibly target tags (network tags).

GCPOffendingFirewallRule

What does this pack do?

The pack is intended to contain GCP playbooks that conduct enrichment and/or remediation and can use other multiple GCP
content packs.

There are multiple GCP content packs for multiple GCP products (GSuiteAdmin, GCP-IAM, Google Cloud Compute, etc). The intent was that users can install and use only the packs they need. However, if a GCP playbook uses multiple pack integrations (such
as GSuiteAdmin and GCP-IAM), they can't reside in one of the current packs because they include content from multiple packs. This
pack was created as a place to put GCP playbooks that use GCP integrations from multiple packs with a focus on enrichment and
remediation.

Playbooks

Users are only able to run the playbook in v6.5.0 or higher as it requires commands to execute the task.
This content pack includes the following playbooks:

  • Cloud Response - GCP
    Cloud Response - GCP

  • GCP - Enrichment
    GCP - Enrichment

  • GCP - Firewall Remediation
    GCP - Firewall Remediation

Automation Scripts

GCPProjectHierarchy

Automation to determine GCP project hierarchy by looking up parent objects until the organization level is reached.

GCPProjectHierarchy

GCPOffendingFirewallRule

Automation to determine potential offending firewall rules in GCP based on port, protocol and possibly target tags (network tags).

GCPOffendingFirewallRule

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

CertificationRead more
Supported ByCortex
CreatedDecember 2, 2022
Last ReleaseApril 20, 2026
WORKS WITH THE FOLLOWING INTEGRATIONS:
DISCLAIMER
By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.