Detection rules › By event
GoogleWorkspace-drive
| Event | Rules |
|---|---|
| any | 4 |
| change_acl_editors | 2 |
| change_document_access_scope | 2 |
| change_document_visibility | 3 |
| change_user_access | 5 |
| copy | 5 |
| delete | 1 |
| download | 8 |
| email_as_attachment | 1 |
| source_copy | 1 |
| trash | 4 |
| view | 3 |
| change_owner | 1 |
any
#4 detection rules reference this event. View event page.Splunk (2)
Panther (2)
change_acl_editors
#2 detection rules reference this event. View event page.YARA-L (2)
change_document_access_scope
#2 detection rules reference this event. View event page.YARA-L (2)
change_document_visibility
#3 detection rules reference this event. View event page.YARA-L (2)
Panther (1)
change_user_access
#5 detection rules reference this event. View event page.Splunk (1)
Kusto (1)
YARA-L (2)
Panther (1)
copy
#5 detection rules reference this event. View event page.Elastic (2)
YARA-L (3)
delete
#1 detection rules reference this event. View event page.YARA-L (1)
download
#8 detection rules reference this event. View event page.Elastic (1)
YARA-L (4)
Panther (3)
email_as_attachment
#1 detection rules reference this event. View event page.YARA-L (1)
source_copy
#1 detection rules reference this event. View event page.YARA-L (1)
trash
#4 detection rules reference this event. View event page.YARA-L (1)
Panther (3)
view
#3 detection rules reference this event. View event page.Elastic (1)
YARA-L (2)
change_owner
#1 detection rules reference this event. View event page.Panther (1)