Spotting data exfiltration via Google Drive

SriniKrish — Wed, 08 Nov 2023 11:45:06 GMT

Hello,

I am investigating a data exfiltration from a google drive and have already deployed Harmony to scan the contents of the drive.

The scan came clean and did not return any flags. Probably that is the case as well.

I was trying to run custom queries for google drive and chose template " Show all Drive changes", but query returns no results. Any suggestions here on the query or anything else I can do to get insights on possible exfiltration ?

Thanks,

Srini

Re: Spotting data exfiltration via Google Drive

PhoneBoy — Wed, 08 Nov 2023 21:42:35 GMT

How were you informed of Data Exfiltration exactly?
In any case, the TAC may be necessary to assist with this: https://help.checkpoint.com

topic Re: Spotting data exfiltration via Google Drive in Email and Collaboration

Spotting data exfiltration via Google Drive

Re: Spotting data exfiltration via Google Drive