G Suite Security Alert Center (v1.1.56)
Fetch alert types, delete or recover alerts, retrieve an alert's metadata, and create or view alert feedback.
- Author
- Cortex XSOAR
- Support
- xsoar
- URL
- https://www.paloaltonetworks.com/cortex
- Categories
- Data Enrichment & Threat Intelligence
Incident fields (17)
- GSuiteSAC Alert ID
- GSuiteSAC Alert Severity
- GSuiteSAC Alert Source
- GSuiteSAC Alert Status
- GSuiteSAC Alert Type
- GSuiteSAC Create Time
- GSuiteSAC Customer ID
- GSuiteSAC Deleted
- GSuiteSAC End Time
- GSuiteSAC Etag
- GSuiteSAC Feedback Create Time
- GSuiteSAC Feedback Email
- GSuiteSAC Feedback ID
- GSuiteSAC Feedback Type
- GSuiteSAC Security Investigation Tool Link
- GSuiteSAC Start Time
- GSuiteSAC Update Time
Integrations (1)
- G Suite Security Alert Center
Layouts (1)
- G Suite Security Alert Center
README
Using the G Suite Security Alert Center pack, you can retrieve the most recent alerts for a domain, prioritize them, and then notify members of your organization. After your team responds to the alert, you can then attach feedback to the alert based on the team’s findings.
An alert is a warning of a potential security issue that Google has detected. Alerts include the following information:
- Source from which the alert originated.
- Name of the alert.
- Time the alert occurred.
- Specific data associated with the alert.
As an administrator, use the G Suite Security Alert Center pack to:
- Fetch different alert types such as Suspicious login, Device compromised, Leaked password, and more.
- Retrieve an alert’s metadata.
- Delete or undelete alerts.
- Provide feedback for alerts.
- Fetch existing feedback for a particular alert.
This pack includes the G Suite Security Alert Center integration.