Google Drive (v1.5.7)
Google Drive allows users to store files on their servers, synchronize files across devices, and share files. This integration helps you to create a new drive, query past activity and view change logs performed by the users, as well as list drives and files, and manage their permissions.
- Author
- Cortex XSOAR
- Support
- xsoar
- URL
- https://www.paloaltonetworks.com/cortex
- Categories
- Utilities
Incident fields (29)
- Google Drive Activity Added Parents
- Google Drive Activity Added Permissions
- Google Drive Activity Assigned Current User
- Google Drive Activity Assigned Deleted User
- Google Drive Activity Assigned Person Name
- Google Drive Activity Assigned Unknown User
- Google Drive Activity Assignment Subtype
- Google Drive Activity Copied Folder Type
- Google Drive Activity Copied Item Is File
- Google Drive Activity Copied Item Name
- Google Drive Activity Copied Item Title
- Google Drive Activity Copied Shared Drive Name
- Google Drive Activity Copied Shared Drive Title
- Google Drive Activity Created New
- Google Drive Activity DLP Change Type
- Google Drive Activity Delete Type
- Google Drive Activity Identified As
- Google Drive Activity Mentioned Users
- Google Drive Activity New Title
- Google Drive Activity Old Title
- Google Drive Activity Post Subtype
- Google Drive Activity Reference Type
- Google Drive Activity Removed Parents
- Google Drive Activity Removed Permissions
- Google Drive Activity Restore Type
- Google Drive Activity Restriction Changes
- Google Drive Activity Suggestion Subtype
- Google Drive Activity Targets
- Google Drive Activity Uploaded
Integrations (1)
- Google Drive
Layouts (1)
- Google Drive Activity
Modeling rules (1)
- Google Drive Modeling Rule
Parsing rules (1)
- GoogleDrive Parsing Rule
README
Google Drive
This pack includes XSIAM content.
To configure the ingestion of data from Google Workspace, see the information here.
- Pay attention: Timestamp parsing is available for UTC (+0000) timezone of the following formats:
- %Y-%m-%dT%H:%M:%SZ - UTC (+0000) format.
- %Y-%m-%dT%H:%M:E3SZ - UTC (+0000) format with 3 digits of fractional precision.