MDR360 integrations · Identity
DIAMATIX MDR for Google Workspace
Google Workspace login and admin activity is collected into SHIELD SIEM/XDR to detect suspicious account behaviour.
Technical details pending DIAMATIX confirmation
Technical overview
Integration specifications
- Category
- Identity
- Availability
- Production Supported
- Ingestion method
- Google Admin reports API
- Capabilities
- Telemetry Ingestion, Detection & Investigation
- Active response
- Notification and guided response
Telemetry collected
- Login activity
- Admin console activity
- Drive and token events
Onboarding prerequisites
- Service account with read-only reporting scopes
- Super admin approval for API access
How it works
How DIAMATIX SecOps works with it
- 01
Collect
Google Workspace signals are brought into SHIELD SIEM/XDR.
- 02
Investigate
DIAMATIX analysts triage, correlate and filter alerts 24/7.
- 03
Respond
Agreed containment or guided response follows your runbook and MDR360 tier.
Scope, capabilities and response actions are confirmed for your environment during scoping.
Back to all integrationsRunning Google Workspace?
Tell us about your environment and we will confirm coverage for MDR360.