GWorkspace - Two-step authentification disabled for a user

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Triggers on two-step authentification disabled for a user.

Attribute Value
Type Analytic Rule
Solution GoogleWorkspaceReports
ID c8cc02d0-5da6-11ec-bf63-0242ac130002
Severity Medium
Status Available
Kind Scheduled
Tactics CredentialAccess
Techniques T1111
Required Connectors GoogleWorkspaceReportsAPI
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
GWorkspace_ReportsAPI_access_transparency_CL 🔶 ? ?
GWorkspace_ReportsAPI_admin_CL 🔶 ? ?
GWorkspace_ReportsAPI_calendar_CL 🔶 ? ?
GWorkspace_ReportsAPI_chat_CL 🔶 ? ?
GWorkspace_ReportsAPI_chrome_CL 🔶 ? ?
GWorkspace_ReportsAPI_context_aware_access_CL 🔶 ? ?
GWorkspace_ReportsAPI_data_studio_CL 🔶 ? ?
GWorkspace_ReportsAPI_drive_CL 🔶 ? ?
GWorkspace_ReportsAPI_gcp_CL 🔶 ? ?
GWorkspace_ReportsAPI_gplus_CL 🔶 ? ?
GWorkspace_ReportsAPI_groups_CL 🔶 ? ?
GWorkspace_ReportsAPI_groups_enterprise_CL 🔶 ? ?
GWorkspace_ReportsAPI_jamboard_CL 🔶 ? ?
GWorkspace_ReportsAPI_keep_CL 🔶 ? ?
GWorkspace_ReportsAPI_login_CL 🔶 ? ?
GWorkspace_ReportsAPI_meet_CL 🔶 ? ?
GWorkspace_ReportsAPI_mobile_CL 🔶 ? ?
GWorkspace_ReportsAPI_rules_CL 🔶 ? ?
GWorkspace_ReportsAPI_saml_CL 🔶 ? ?
GWorkspace_ReportsAPI_token_CL 🔶 ? ?
GWorkspace_ReportsAPI_user_accounts_CL 🔶 ? ?
GoogleWorkspaceReports_CL 🔶 ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to GoogleWorkspaceReports