Virtual Machine

The GCPVM entity represents a Google Compute Engine virtual machine instance.

Field	Type	Possible Operators	Description
Guid	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Unique identifier for the entity in Forestall
FSName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Display name used in Forestall
GCPTier	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	GCP tier classification assigned by Forestall
InstanceId	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Unique numeric ID of the VM instance.
Name	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Full resource name of the VM.
Status	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Current status of the VM (for example RUNNING, TERMINATED).
MachineType	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Machine type of the VM.
Zone	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Zone the VM runs in.
HasPublicIp	BOOLEAN	N/A (toggle)	Whether the VM has an external (public) IP address.
UsesDefaultServiceAccount	BOOLEAN	N/A (toggle)	Whether the VM runs as the project's default Compute Engine service account.
SerialPortEnabled	BOOLEAN	N/A (toggle)	Whether interactive access to the serial console is enabled.
IpForwardingEnabled	BOOLEAN	N/A (toggle)	Whether IP forwarding is enabled, so the VM can send and receive packets for other addresses.
risk	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Risk score assigned to the entity
ExposurePoint	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Exposure point score assigned to the entity
OsLoginEnabled	BOOLEAN	N/A (toggle)	Whether OS Login is enabled for the VM, so SSH access is controlled through IAM instead of metadata SSH keys.