Elastic Security Detection Rules

First Time GCP Vertex AI Inference by Caller from Source ASN

Last updated 5 days ago on 2026-10-23
Created 5 days ago on 2026-10-23

About

Detects the first time in 14 days that a Vertex AI caller (user or service account) runs model inference (GenerateContent, StreamGenerateContent, Predict, or RawPredict) from a source autonomous system (ASN). Stolen Google Cloud credentials, including exported service account keys and OAuth tokens, are used for LLMjacking from attacker infrastructure, which shows up as the victim identity calling models from a hosting provider, VPN, or residential proxy network it has never used before.
Tags
Domain: GenAIDomain: CloudData Source: GCP Vertex AIData Source: GCPData Source: Google Cloud PlatformPlatform: GCPService: GCP Vertex AIUse Case: Threat DetectionTactic: Initial AccessThreat: LLMjackingThreat: Unauthorized AI UsageMitre Atlas: AML.T0012Rule Type: New TermsLanguage: kuery
Severity
low
Risk Score
21
MITRE ATT&CK™

Initial Access (TA0001)(external, opens in a new tab or window)

↳ Valid Accounts (T1078)(external, opens in a new tab or window)

False Positive Examples
Users working from a new network such as travel, a new ISP, or a mobile hotspot. Confirm the location with the user. Service accounts whose workloads move between cloud providers, regions, or CI runners on different networks. Exclude these service accounts or pin their workloads to known networks.
License
Elastic License v2(external, opens in a new tab or window)

Definition

Rule Type
New Terms Rule
Integration Pack
Prebuilt Security Detection Rules
Index Patterns
logs-gcp_vertexai.auditlogs-*
Related Integrations

gcp_vertexai(external, opens in a new tab or window)

Query
text code block:
data_stream.dataset:gcp_vertexai.auditlogs and event.action:(*PredictionService.GenerateContent* or *PredictionService.StreamGenerateContent* or *PredictionService.Predict* or *PredictionService.RawPredict*) and gcp.vertexai.audit.service_name:aiplatform.googleapis.com and client.user.email:* and source.as.number:* and gcp.vertexai.audit.status.code:(0 or not *)

Install detection rules in Elastic Security

Detect First Time GCP Vertex AI Inference by Caller from Source ASN in the Elastic Security detection engine by installing this rule into your Elastic Stack.

To setup this rule, check out the installation guide for Prebuilt Security Detection Rules(external, opens in a new tab or window).