Security Command Center analyzes various logs for potential threats that affect network
resources. For recommended responses to these
threats, see [Respond to network threat
findings](https://docs.cloud.google.com/security-command-center/docs/respond-network-threats).

The following log-based detections are
available with
[Event Threat Detection](https://docs.cloud.google.com/security-command-center/docs/concepts-event-threat-detection-overview.md.txt):

<br />

- [`Active Scan: Log4j Vulnerable to RCE`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/log4j-active-scan-success.md.txt)
- [`Cloud IDS: THREAT_IDENTIFIER`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/cloud-ids-threat-activity.md.txt)
- [`Command and Control: DNS Tunneling`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/yl2-dns-tunneling.md.txt)
- [`Defense Evasion: VPC Route Masquerade Attempt`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/yl2-vpc-route-masquerade.md.txt)
- [`Impact: VPC Firewall High Priority Block`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/yl2-vpc-firewall-high-priority-block.md.txt)
- [`Impact: VPC Firewall Mass Rule Deletion`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/yl2-vpc-firewall-mass-rule-deletion.md.txt)
- [`Initial Access: Log4j Compromise Attempt`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/log4j-compromise-attempt.md.txt)
- [`Log4j Malware: Bad Domain`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/bad-domain-google-log4j-intel.md.txt)
- [`Log4j Malware: Bad IP`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/bad-ip-google-log4j-intel.md.txt)
- [`Malware: bad domain`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/bad-domain-live-google-intel.md.txt)
- [`Malware: bad IP`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/bad-ip-live-google-intel.md.txt)
- [`Malware: Cryptomining Bad Domain`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/bad-domain-google-crypto-intel.md.txt)
- [`Malware: Cryptomining Bad IP`](https://docs.cloud.google.com/security-command-center/docs/findings/threats/bad-ip-google-crypto-intel.md.txt)

<br />

## What's next

- Learn about [Event Threat Detection](https://docs.cloud.google.com/security-command-center/docs/concepts-event-threat-detection-overview.md.txt).
- Learn how to [respond to network threat
  findings](https://docs.cloud.google.com/security-command-center/docs/respond-network-threats).
- Refer to the [Threat findings index](https://docs.cloud.google.com/security-command-center/docs/threat-findings-index.md.txt).