A defender’s MITRE ATT&CK cheat sheet for Google Cloud

This is a defender’s cheat sheet that maps Google Cloud services and common API calls to MITRE ATT&CK tactics to help SOC teams triage alerts, investigate incidents, and understand likely attacker behaviors. The guide emphasizes that many cloud incidents stem from misconfigurations and long‑lived credentials, provides investigation tips, and offers linked mind maps for GCP (with equivalents for AWS and Azure) to speed response and threat-hunting.