Security Command Center

🎯 SCC Chokepoint Findings

Critical attack path convergence points

Chokepoint findings identify a resource or resource group where high-risk attack paths converge, based on attack path simulations. Remediating a chokepoint finding might remediate multiple toxic combinations.

❌ SCC Error Findings

Security Command Center configuration errors

SCC Error findings identify problems in the configuration of Security Command Center or one of its services that prevent Security Command Center from detecting security issues in your Google Cloud environment. These errors must be resolved to ensure proper security monitoring.

⚙️ SCC Misconfiguration Findings

Security configuration issues

Misconfiguration findings identify vulnerabilities caused by incorrect or suboptimal configuration of GCP resources. These findings can typically be fixed by updating the resource configuration to follow security best practices.

👁️ SCC Observation Findings

Security-relevant observations

Observation findings describe events, configuration details, or other issues in your environment that might not be problems in themselves, but could be concerning if your environment were to be compromised. These findings provide context for security monitoring.

📋 SCC Posture Violation Findings

Security posture and compliance violations

Posture violation findings describe resource configurations that don't align with your organization's security posture templates or Compliance Manager cloud controls. These findings help maintain consistent security standards across GCP resources.

🚨 SCC Threat Detection Findings

Active threats and malicious activity

Threat findings identify potential active attacks or malicious activity detected by Google Cloud Security Command Center Event Threat Detection. These findings require immediate investigation as they indicate ongoing security incidents.

🔗 SCC Toxic Combination Findings

Attack path combinations

Toxic combination findings identify groups of security issues that, when they occur together, create a path to one or more of your high-value resources that a determined attacker could potentially use to reach and compromise those resources.

⚠️ SCC Vulnerability Findings

Software vulnerabilities and security weaknesses

Vulnerability findings identify flaws or weaknesses in software programs, containers, or configurations that attackers could exploit to compromise Google Cloud resources. These findings are generated by various Security Command Center scanners.

🛡️ Security Command Center Findings

Security threats and compliance violations

Security findings generated by Google Cloud Security Command Center V2, providing centralized visibility into security threats, misconfigurations, and compliance violations across Google Cloud Platform resources.