Google Workspace - Bulk Download Of Files
A Google Workspace user is attempting to download, print or email as an attachment a suspicious amount of files over a short time period. This can indicate an attacker trying to exfiltrate data.
Microsoft Sentinel (KQL)

