Panther low experimental python

Google Accessed a GSuite Resource

Google accessed one of your GSuite resources directly, most likely in response to a support incident.

View Source

Detection Logic

def rule(event):
    if event.deep_get("id", "applicationName") != "access_transparency":
        return False

    return bool(event.get("type") == "GSUITE_RESOURCE")

Field Validations

Loading…

Comments (0)

Loading comments...