G Suite

Alerts

• G Suite - Login failed: This alert is generated when user fails to login.
• G Suite - Suspicious login: This alert is generated when any suspicious login is detected.

Reports 

• G Suite - Login Failure: This report gives information regarding all the login failures detected in G Suite. Reports contains IP address, logon type, username and other useful information for further analysis.

Reports 

• G Suite - Admin Activities: This report gives the information about the admin activities performed such as user creation, email log search, google chrome, hangout activities, etc. Reports contains IP address, username, customer id, log type and other fields which will be helpful for further investigation.
• G Suite - Mobile Activities: This report gives the information about all the mobile activities such as device application change, OS update, device compliance status, device action, device ownership, device settings change etc. Reports contains user email, device ID, device type, device events, etc. which can be used for further investigation.
• G Suite - Token Activities: This report gives information about all the OAuth token audit activity events like authorize and revoke. Reports contains IP address, application name which used the token, action as authorize or revoke and other useful details for further investigation.

Reports

• G Suite - Login and Logout Activities: This report gives information about all the login and logout activities detected in G Suite. Report contains IP address, username, action as logout, successful login or login failure, logon type and if the login is suspicious, and other useful information.