Google Workspace Artifact Reference Guide

This Google Workspace Artifact Reference Guide provides a list of events of interest when investigating Google Workspace incidents. While the events are not inherently malicious and the list is not comprehensive, in the scope of an incident they can provide a starting point for sifting through large amounts of audit log data.

April 10, 2024

Login to download

Cheat Sheet - Google Workspace Artifact Reference Guide

Related Content

Spring 2024 Update FOR585 Smartphone Forensic Analysis In Depth

Digital Forensics, Incident Response & Threat Hunting

Spring 2024 Update: Explore the Latest Enhancements to SANS FOR585: Smartphone Forensic Analysis In-Depth

We are excited to announce the latest update to the SANS Institute's FOR585: Smartphone Forensic Analysis In-Depth!

Heather Mahalik Barnhart

Blog: Google Chrome Platform Notification Analysis

Digital Forensics, Incident Response & Threat Hunting

February 29, 2024

Google Chrome Platform Notification Analysis

In this post, Chad Tilbury uses the new Arsenal Recon LevelDB Recon tool to examine the Chrome Platform Notifications database.

Digital Forensics, Incident Response & Threat Hunting

January 5, 2024

Helping CTI Analysts Approach and Report on Emerging Technology Threats and Trends (Part 1)

How to approach, research, and develop analytic assessments on emerging technologies and threat trends (Part 1)