Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleGovernment Attack Warning

A government-backed attacker could try to steal a password or other personal information of one of your users by sending an email containing a harmful attachment, links to malicious software or to fake websites.

Source table → cloud.gsuite.alerts

Expand
titleDrive Open To Public

An attacker may access data objects from improperly secured cloud storage.

Source table → cloud.gsuite.audit.drive

Expand
titleAccess Transparency Event

A Google Access Transparency log event has been generated. Google is accessing your data.

Source table → cloud.gsuite.reports.access_transparency

Expand
title2SV Disabled

An adversary may attempt to disable the second factor authentication in order to weaken an organization’s security controls.

Source table → cloud.gsuite.reports.admin

Expand
titleLogin Account Warning

An attacker could steal the credentials of one of your users.

Source table → cloud.gsuite.reports.login

Expand
titleMobile Suspicious Activity

An attacker could steal the credentials or the mobile device of one of your users.

Source table → cloud.gsuite.reports.mobile

Expand
titleExcessive OAuth Permissions Request

An adversary may steal application access tokens as a means of acquiring credentials to access remote systems and resources.

Source table → cloud.gsuite.reports.token

Expand
titleUnauthorized OAuth App

Detects authentications from OAuth apps outside of your predefined list of approved OAuth applications.

Source table → cloud.gsuite.reports.token