The GCPVM entity represents a Google Compute Engine virtual machine instance.
| Field | Type | Possible Operators | Description |
|---|---|---|---|
| Guid | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Unique identifier for the entity in Forestall |
| FSName | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Display name used in Forestall |
| GCPTier | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | GCP tier classification assigned by Forestall |
| InstanceId | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Unique numeric ID of the VM instance. |
| Name | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Full resource name of the VM. |
| Status | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Current status of the VM (for example RUNNING, TERMINATED). |
| MachineType | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Machine type of the VM. |
| Zone | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Zone the VM runs in. |
| HasPublicIp | BOOLEAN | N/A (toggle) | Whether the VM has an external (public) IP address. |
| UsesDefaultServiceAccount | BOOLEAN | N/A (toggle) | Whether the VM runs as the project’s default Compute Engine service account. |
| SerialPortEnabled | BOOLEAN | N/A (toggle) | Whether interactive access to the serial console is enabled. |
| IpForwardingEnabled | BOOLEAN | N/A (toggle) | Whether IP forwarding is enabled, so the VM can send and receive packets for other addresses. |
| risk | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | Risk score assigned to the entity |
| ExposurePoint | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | Exposure point score assigned to the entity |
| OsLoginEnabled | BOOLEAN | N/A (toggle) | Whether OS Login is enabled for the VM, so SSH access is controlled through IAM instead of metadata SSH keys. |