Google Workspace Alerts Aggregated By Severity
This rule generates alerts based on Google Workspace Alerts Center data and aggregates them by severity. It processes events from 'Google Workspace Alerts' and assigns a risk score based on the severity of the alert (LOW, MEDIUM, HIGH). The rule also extracts various details from the alerts such as event count, event type, product event type, security category details, security category, security investigation tool link, security summary, and alert severity.
YARA-L
