Access Transparency
| eventName | Description | Sample | Rule |
|---|---|---|---|
| ACCESS | A Google Workspace resource was accessed by a Google staff member. Logged under the access_transparency applicationName. | N | N |
ACCESS: Access
#Description
A Google Workspace resource was accessed by a Google staff member. Logged under the access_transparency applicationName.
References #
any: Access Transparency (any event)
#Scope grouping: This repository-authored catalog entry represents a broad attribution scope, not a distinct emitted event or operation. Any sample below is a representative record from that scope; attached rules, if any, are listed separately.
Description
Source-only rules that filter on applicationName 'access_transparency' without specifying an eventName attribute here.
Detection Fields #
Fields referenced by at least one attached detection rule. This view counts distinct rules and is not a complete schema for this catalog entry.
| Name | Rules | Vendors |
|---|---|---|
id.applicationName | 1 detection rule | Panther |
type | 1 detection rule | Panther |
Detection Rules #
Full rule details for this catalog entry, including ATT&CK technique mappings and native queries →Panther #