Difference between revisions of "Datadog SIEM Content Packs for Google Workspace"

From wikieduonline
Jump to navigation Jump to search
Line 25: Line 25:
  
 
== See also ==
 
== See also ==
 +
* {{dd gsuite}}
 
* {{Content Packs}}
 
* {{Content Packs}}
 
* {{DD SIEM}}
 
* {{DD SIEM}}
* {{Google Workspace}}
 
  
 
[[Category:Google]]
 
[[Category:Google]]

Revision as of 11:25, 12 October 2024


High

Medium

  • Domain added to Google Workspace allowlisted domains
  • Google Workspace accessed by Google
  • Google Workspace administrator has disabled 2-step verification for organizational unit


Low

  • Google Workspace admin role created
  • Google Workspace administrator initiated a data transfer request
  • Google Workspace user assigned administrative role
  • Google Workspace user disabled 2-step verification
  • Google Workspace user forwarding email out of non Google Workspace domain
  • Google Workspace user has unenrolled from Advanced Protection
  • Large amount of downloads on Google Drive
  • User attempted login with leaked password

See also

Advertising: