Long-form writeups and field guides.
A worked example of why long-lived GCP service-account keys are one of the highest-leverage things an attacker looks for — and what to do instead.