Rule Info
Name
Google Workspace Application Access Level Modified
Author
Bryan Lim
Description
Detects when an access level is changed for a Google workspace application.
An access level is part of BeyondCorp Enterprise which is Google Workspace's way of enforcing Zero Trust model.
An adversary would be able to remove access levels to gain easier access to Google workspace resources.
Reference
Date
2024-01-12 00:00:00
Modified
None
Id
22f2fb54-5312-435d-852f-7c74f81684ca
Tags
attack.persistence attack.privilege-escalation attack.t1098.003
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
github-actions[bot]
Merge PR #5101 from @nasbench - Promote older rules status from `experimental` to `test`
2024-12-01
Nasreddine Bencherchali
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12
Bryan Lim
Merge PR #4621 from @zestsg - Add New GCP / Google Workspace Related Rules
2024-01-12
Scan your endpoints, forensic images or collected files with our portable scanner THOR