Forensics and evidence preservation - SkilBrill

Skip to content

Home
Courses
About
Contact
Blog
- Freshers

Search for:

Home - Lessons - Google Cloud Security - M5 — Threat Detection and Security Operations - Forensics and evidence preservation

Google Cloud Security Forensics and evidence preservation

Google Cloud Security

0% Completed

M1 — The Google Cloud Security Model

Shared responsibility and the inheritance model

Organisation, folder and project as control boundaries

Assured Workloads and compliance regimes

The Google Cloud security control catalogue

Threat landscape for cloud estates

Building a control-to-obligation map

M2 — Identity, Access and Least Privilege

IAM policy fundamentals and inheritance

Basic, predefined and custom roles

Service accounts and key sprawl

Workload identity federation and external identity

Deny policies and organisation policy constraints

Access reviews, approvals and audit

M3 — Network Security and Edge Defence

VPC firewall design and hierarchical policy

VPC Service Controls perimeters and ingress/egress rules

Cloud Armor policies, WAF rules and DDoS

Cloud Load Balancing security features

Private Google access, NAT and egress control

Hybrid connectivity security with VPN and Interconnect

M4 — Data Protection, Encryption and Secrets

Encryption at rest and customer-managed keys

Cloud KMS key hierarchy and rotation

Secret Manager access and auditing

Data classification and sensitive data discovery

DLP for discovery and de-identification

Residency, sovereignty and transfer controls

M5 — Threat Detection and Security Operations

Security Command Center findings and sources

Cloud Audit Logs: admin, data and system access

Log sinks, exclusions and log-based alerting

Detection engineering for cloud-native attacks

Incident response in a cloud estate

Forensics and evidence preservation

M6 — Compliance, Governance and Audit

Control design versus control operation

Evidence collection and retention

Continuous compliance assessment

Assured Workloads and regional compliance

Regulatory mapping: DPDP, GDPR, PCI DSS, HIPAA

Reporting to audit committee and regulators

M7 — Application and Supply Chain Security

Identity for workloads and service-to-service trust

Binary Authorization and deployment attestation

Artifact Registry access and vulnerability scanning

Cloud Run and GKE workload hardening

Secrets handling in build and runtime

Third-party and open-source risk

M8 — Capstone: Secure a Cloud Estate

Threat model a multi-project estate

Design the IAM and perimeter architecture

Build the detection and alert set

Produce the compliance mapping and evidence pack

Run a simulated incident from detection to closure

Present the posture to the audit committee

Announcements Course Info

Global Trusted Software Training Partner Since 2022

SkilBrill Training Institute delivers industry-focused technology education that bridges the gap between academic learning and real-world demands. Our structured programs combine foundational theory with practical application, ensuring every graduate is confident and job-ready from day one.

Learn More About Us

© 2026 SkilBrill Training Institute. All Rights Reserved. Privacy Policy Terms Refunds Outcomes

📞 Enroll Now

Start Your Journey

Fill in your details and our team will get back to you within 24 hours

Please enable JavaScript in your browser to complete this form.

Full Name *

Email *

Course Interested In *

Mode of Course *