An organization needs to detect security telemetry gaps when a log source unexpectedly stops sending events. Which approach best fits?

Published
  1. Use Security Command Center findings and risk-management capabilities.
  2. Correlate Cloud Audit Logs with resource and identity context.
  3. Monitor source ingestion health and alert on unexpected silence.
  4. Revoke or disable the compromised credential and investigate affected access.

Comments — 0