Detection rules › By event

GoogleWorkspace-user_accounts

Event	Rules
2sv_disable	2
email_forwarding_out_of_domain	2
titanium_unenroll	1

2sv_disable

2 detection rules reference this event. View event page.

Elastic (1)

Google Workspace 2SV Policy Disabled By User severity high T1556

Panther (1)

GSuite User Two Step Verification Change severity low T1556

email_forwarding_out_of_domain

2 detection rules reference this event. View event page.

Sigma (1)

Google Workspace Out Of Domain Email Forwarding severity medium T1114, T1114.003

Panther (1)

Gsuite Mail forwarded to external domain severity medium T1114

titanium_unenroll

1 detection rules reference this event. View event page.

Panther (1)

GSuite User Advanced Protection Change severity low T1685