5.07.md

5.07 - Any queries doing very large scans?

Detect any query that is doing a very large scan (> 1 GB).

Category: Data Usage
Use Cases: Audit, Detect
Data Sources: Audit Logs - Data Access

Queries or Rules

BigQuery	Chronicle
SQL	Contribute rule

Event Generation

No event generation steps provided. Contribute emulation test to this use case.

Sample Event

No log samples provided. Contribute log samples to this use case.