Detection rules › By catalog entry

GoogleWorkspace-user_accounts

Catalog entry	Rules
2sv_disable	2
email_forwarding_out_of_domain	2
titanium_unenroll	1

2sv_disable

2 detection rules reference this catalog entry. View catalog entry.

Elastic (1)

Google Workspace 2SV Policy Disabled By User severity high T1556

Panther (1)

GSuite User Two Step Verification Change severity low T1556

email_forwarding_out_of_domain

2 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Google Workspace Out Of Domain Email Forwarding severity medium T1114,T1114.003

Panther (1)

Gsuite Mail forwarded to external domain severity medium T1114

titanium_unenroll

1 detection rules reference this catalog entry. View catalog entry.

Panther (1)

GSuite User Advanced Protection Change severity low T1685

Back to all GoogleWorkspace-user_accounts catalog entries