{"id":987516042,"date":"2023-11-29T23:13:52","date_gmt":"2023-11-29T23:13:52","guid":{"rendered":"https:\/\/workspace.trace.pt\/monitor-insider-risk-of-google-workspace-data-with-chronicle\/"},"modified":"2023-11-29T23:13:52","modified_gmt":"2023-11-29T23:13:52","slug":"monitor-insider-risk-of-google-workspace-data-with-chronicle","status":"publish","type":"post","link":"https:\/\/workspace.trace.pt\/en\/monitor-insider-risk-of-google-workspace-data-with-chronicle\/","title":{"rendered":"Monitor insider risk of Google Workspace data with Chronicle"},"content":{"rendered":"<h3>What\u2019s changing\u00a0<\/h3>\n<div>Admins can now more seamlessly integrate their Google Workspace data with Chronicle (<a href=\"https:\/\/cloud.google.com\/blog\/products\/identity-security\/google-completes-acquisition-of-mandiant\">Google\u2019s cloud-native Security Operations platform<\/a>), to quickly detect, investigate and take action on risky activity and threats. Admins can now leverage reduced time spent syncing data from Workspace to Chronicle, as well as Chronicle\u2019s curated preconfigured out-of-the-box detections.\n<\/div>\n<div><\/div>\n<div class=\"separator\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjChHVC2QMK5zCxYNnxDuhSJwaC4OVx3sh4c8dc20DrEy30NlJRZvnMgPONNXzld2VBjHMODRkyatLQ5W9bSyYNAGtJ535anNZbGXEFH7hE-FLH2Pp7cLjewDfSHWObvLOl3-Y79YpZVc9jT36INsxoolkyvLtYDVIRh82aUWGxBi_wkSS-YDYpf2W5Aew\/s1600\/c1.png\"><\/a><\/div>\n<div class=\"separator\"><\/div>\n<div class=\"separator\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiF_OhBYDHWkT_4piZCOYXf9EH-bCpsSSwLJtjY2-CJ__XfD5ldi1PkKT8ySXE-xP7smdwfq_FofKirZ8yLkEU_QwZJxEJ0IdTdm_2sQAo1OkhObcmbKALrmRPrfwm6ljtmB_GUwAPr18icP0uJiQXGvo9LzoGlBHuQW9N4wnTE7tDn3qUuTdPw7mvxpZ4\/s1600\/c2.png\"><\/a><\/div>\n<p><\/p>\n<div class=\"separator\"><\/div>\n<div>\n<h3>Who\u2019s impacted<\/h3>\n<div>Admins<\/div>\n<div><\/div>\n<h3>Why it matters\u00a0<\/h3>\n<div>As an admin, you can already use the Alert Center to view notifications and take action on potentially issues within your domain. Now you can take this a step further by using Chronicle, leveraging its rich risk management capabilities and recommendations:<\/div>\n<div>Chronicle can help detect and investigate potential threats at every level of sophistication by monitoring your data in real time.\u00a0Data insights are available at your fingertips, with rich context and visualization alongside industry best recommendations, helping you make better decisions faster.\u00a0Further, you can deploy Chronicle\u2019s out-of-the-box use cases, helping to cut down on time spent building rules and playbooks.\u00a0You can also build and automate repeatable playbooks with full-fledged security orchestration, automation and response capabilities (SOAR).<\/div>\n<\/div>\n<div>\n<h3>Getting started<\/h3>\n<div>Admins:\u00a0Visit the Help Center to learn more about <a href=\"https:\/\/support.google.com\/a\/answer\/13624543\">exporting logs to Chronicle to monitor insider risk<\/a>. Please reach out to your sales representative for more information on pricing.End users: There is no end user impact or action required.<\/div>\n<div><\/div>\n<h3>Rollout pace<\/h3>\n<div>This feature is available now.<\/div>\n<div><\/div>\n<h3>Availability<\/h3>\n<div>Available to Google Workspace Enterprise Standard and Enterprise Plus customers\u00a0<\/div>\n<div><\/div>\n<h3>Resources<\/h3>\n<div><a href=\"https:\/\/chronicle.security\/\">Chronicle<\/a><a href=\"https:\/\/support.google.com\/a\/answer\/13624543\">Google Workspace Admin Help: Monitor insider risk with Chronicle<\/a><a href=\"https:\/\/support.google.com\/a\/answer\/13624543\">Google Workspace Admin Help: Exporting logs to Chronicle to monitor insider<\/a><a href=\"https:\/\/support.google.com\/a\/answer\/9105393\">Google Workspace Admin Help: About the Alert Center<\/a><a href=\"https:\/\/cloud.google.com\/blog\/products\/identity-security\/google-completes-acquisition-of-mandiant\">Cloud Blog: Google + Mandiant: Transforming Security Operations and Incident Response<\/a><\/div>\n<\/div>\n<div><\/div>","protected":false},"excerpt":{"rendered":"<p>What\u2019s changing\u00a0 Admins can now more seamlessly integrate their Google Workspace data with Chronicle (Google\u2019s cloud-native Security Operations platform), to quickly detect, investigate and take action on risky activity and threats. Admins can now leverage reduced time spent syncing data from Workspace to Chronicle, as well as Chronicle\u2019s curated preconfigured out-of-the-box detections. Who\u2019s impacted Admins [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-987516042","post","type-post","status-publish","format-standard","hentry","category-noticias"],"acf":[],"_links":{"self":[{"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/posts\/987516042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/comments?post=987516042"}],"version-history":[{"count":0,"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/posts\/987516042\/revisions"}],"wp:attachment":[{"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/media?parent=987516042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/categories?post=987516042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/workspace.trace.pt\/en\/wp-json\/wp\/v2\/tags?post=987516042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}