Skip to content

Hide Navigation Hide TOC

Suspicious Login Activity Classified By Google (38360161-76c4-4283-842e-efcf997dafc8)

Detects Google Workspace login activity that's classified as suspicious by Google.

Cluster A Galaxy A Cluster B Galaxy B Level
Suspicious Login Activity Classified By Google (38360161-76c4-4283-842e-efcf997dafc8) Sigma-Rules Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65) Attack Pattern 1
Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65) Attack Pattern Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) Attack Pattern 2