Security Command Center 會分析各種記錄檔,找出可能影響 Google Workspace 資源的潛在威脅。如需這些威脅的建議回應方式,請參閱「回應 Google Workspace 威脅發現結果」。
Event Threat Detection 提供下列以記錄檔為基礎的偵測功能:
-
Initial Access: Account Disabled Hijacked -
Initial Access: Disabled Password Leak -
Initial Access: Government Based Attack -
Initial Access: Suspicious Login Blocked -
Persistence: SSO Enablement Toggle -
Persistence: SSO Settings Changed -
Persistence: Strong Authentication Disabled -
Persistence: Two Step Verification Disabled
後續步驟
- 瞭解 Event Threat Detection。
- 瞭解如何回應 Google Workspace 威脅調查結果。
- 請參閱威脅發現項目索引。