It could be the case that SRE recognized our accounts since we are hunting on a daily basis. In rare cases SRE's reach out to ISE's who contact us on their beh

It could be the case that SRE recognized our accounts since we are hunting on a daily basis. In rare cases SRE's reach out to ISE's who contact us on their behalf. In this case a file was added. I personally don't see any reason why this would be a bad thing, it's a managed service and we tried to attack it after all. No data was removed, nor is there any indication that there are no audit trails. I hold both the ISE's and SRE's in extremely high regard. (If you try to Hunt for bugs in GCP you will find out why)