Where this collector family fits
Google collectors combine cloud configuration, workloads, storage, access policy, network relationships, audit activity, findings, and selected security operations sources. They help teams evaluate both the environment and the activity around it.
- Cloud inventory and workload coverage
- Access-policy and network-relationship analysis
- Audit and flow-log investigation
- Security Command Center, Workspace, and Chronicle context
Supported collectors in this family
Nova currently implements 17 collectors in this family. Each entry names the source and the customer outcome it supports.
- GCP Audit Logs
- Brings GCP Audit Logs activity into Nova for security monitoring, investigation, and audit review.
- GCP Cloud Armor Logs
- Brings GCP Cloud Armor Logs activity into Nova for security monitoring, investigation, and audit review.
- GCP Cloud SQL Assets
- Keeps GCP Cloud SQL Assets current in Nova for inventory, ownership, exposure, and security-posture review.
- GCP Compute Engine Instances
- Keeps GCP Compute Engine Instances current in Nova for inventory, ownership, exposure, and security-posture review.
- GCP Full Cloud Asset Inventory
- Keeps GCP Full Cloud Asset Inventory current in Nova for inventory, ownership, exposure, and security-posture review.
- GCP GCS Assets
- Keeps GCP GCS Assets current in Nova for inventory, ownership, exposure, and security-posture review.
- GCP GKE Assets
- Keeps GCP GKE Assets current in Nova for inventory, ownership, exposure, and security-posture review.
- GCP IAM Assets
- Keeps GCP IAM Assets current in Nova for inventory, ownership, exposure, and security-posture review.
- GCP IAM Policy Search
- Keeps GCP IAM Policy Search current in Nova for inventory, ownership, exposure, and security-posture review.
- GCP KMS Assets
- Keeps GCP KMS Assets current in Nova for inventory, ownership, exposure, and security-posture review.
- GCP Network and Workload Relationships
- Maps GCP Network and Workload Relationships in Nova for access analysis, exposure review, and attack-path investigation.
- GCP Projects Assets
- Keeps GCP Projects Assets current in Nova for inventory, ownership, exposure, and security-posture review.
- GCP Security Command Center Findings
- Brings GCP Security Command Center Findings findings into Nova for triage, investigation, prioritization, and posture review.
- GCP VPC Flow Logs
- Brings GCP VPC Flow Logs activity into Nova for security monitoring, investigation, and audit review.
- Google Chronicle Alerts
- Brings Google Chronicle Alerts security signals into Nova for triage, investigation, prioritization, and response review.
- Google Cloud PubSub Logs
- Brings Google Cloud PubSub Logs activity into Nova for security monitoring, investigation, and audit review.
- Google Workspace Admin Audit
- Brings Google Workspace Admin Audit activity into Nova for security monitoring, investigation, and audit review.
How the evidence supports customer work
Nova keeps collected data linked to its source as it is used for asset inventory, cloud security, detection, investigation or Threat Hunting. Collecting data does not by itself prove a threat or authorize a response action.
Source coverage is not assumed to be complete. Nova keeps collection health, freshness, gaps, and partial results visible so teams can judge whether the evidence is suitable for the decision at hand.
Questions to answer during evaluation
- Which named sources are required for the use case, and which are optional context?
- What history, accounts, subscriptions, organizations, projects, or devices are available to the source product?
- What delay, volume, and missing-data conditions are acceptable for the intended decision?
- Which customer team owns source access, data interpretation, and ongoing health review?