Security Command Center 会分析各种日志,以发现影响 Google Workspace 资源的潜在威胁。如需了解针对这些威胁的建议响应措施,请参阅对 Google Workspace 威胁发现结果做出响应。
Event Threat Detection 支持以下基于日志的检测:
Persistence: Strong Authentication DisabledInitial Access: Account Disabled HijackedInitial Access: Disabled Password LeakInitial Access: Government Based AttackInitial Access: Suspicious Login BlockedPersistence: SSO Enablement TogglePersistence: SSO Settings ChangedPersistence: Two Step Verification Disabled