Google SecOps
@GoogleSecOps4 followers1,217 downloads379 copies1 like18,177 views
758 detections
Filters
Last updated
All Time
Detection languages
756
2
Categories
189
188
109
81
77
Platforms
257
198
122
112
67
Products / Services
186
94
93
69
52
MITRE Techniques
237
181
109
95
79
CVEs
4
4
Detects when an Okta user failed a number challenge during push notification.
Detects when a user revealed another user's application password.
Detects when a user assumes multiple user accounts.
Detects multiple users login failures from a single IP.
Identifies when an external user account is added to a group in Google Workspace. Security teams can monitor for unexpected user accounts being added to Google Workspace groups to prevent unauthorized access to data.
Identifies when a Google Workspace user transfers the ownership of a file.
Identifies SAML provider configuration changes in Google Workspace. Security teams can monitor for changes to SAML provider configuration that may weaken the organization's security posture.
Identifies when a Google Workspace user shares a file on Google Drive after a suspicious login event occurred.
Detect an AWS account attempting to leave or being removed from an AWS organization.
Detects when an insecure SSL policy is configured for an AWS Application Load Balancer.
Page 70 of 76