Skip to content
Threat Feed
Subscribe

Tag

Gworkspace

3 briefs RSS
medium advisory

Detection of Google Workspace Suspicious Login Events

Google Workspace audit logs identify suspicious authentication attempts including unauthorized application access, programmatic login anomalies, and general suspicious sign-in events.

Google Workspace cloud identity-security gcp gworkspace
1r 1t
medium advisory

Google Workspace Suspicious Login Activity

Detect Google Workspace login activity that Google has classified as suspicious, potentially indicating initial access, privilege escalation, defense evasion, or persistence attempts.

Google Workspace initial-access privilege-escalation defense-evasion persistence gworkspace
3r 1t
medium advisory

Detection of Out-of-Domain Email Forwarding in Google Workspace

Detects automatic email forwarding to external domains in Google Workspace, which may indicate data leakage or misuse by malicious insiders or compromised accounts.

Google Workspace data-leakage gworkspace email-forwarding
2r 1t