Datadog SIEM Content Packs for Google Workspace

• Google Workspace Alert Center

• Google Workspace Tor client detected

• Google Workspace user assigned super administrative role

• Google Workspace user edited account recovery information

• Domain added to Google Workspace allowlisted domains

• Google Workspace accessed by Google

• Google Workspace administrator has disabled 2-step verification for organizational unit

See also

• Datadog SIEM Content Packs: Cloudtrail, Google Workspace
• Datadog security: Datadog Cloud SIEM, Content Packs, Datadog Cloud SIEM signals
• Google Workspace, Google Workspace API, Admin SDK API, Super admin, Directory API, users.list, users.insert, Admin console (https://admin.google.com), Terraform provider: googleworkspace, Google Workspace: administrator roles, Google Drive, Google Vault, Spaces, Jamboard, Datadog SIEM, Google Endpoint Management, About SSO