Create a filter set in Cloud Asset Inventory to identify service accounts with high privileges and IAM principals with Gmail domains.

Scan and alert vulnerabilities and misconfigurations by using Secure Health Analytics detectors in Security Command Center Premium.

Set up filters on Cloud Audit Logs to flag log entries for specific, risky API calls, and display the calls in a Cloud Log Analytics dashboard.

Alert and track emerging attacks detected in your environment by using Event Threat Detection detectors.