Threat actors can exfiltrate data from Google Drive without leaving a trace

Google Workspace (formerly G Suite) has a weak spot that can prevent the discovery of data exfiltration from Google Drive by a malicious outsider or insider, Mitiga researchers say. A problem for digital forensic analysts and incident responders “Google Workspace provides visibility into a company’s Google Drive resources using ‘Drive log events,’ for actions such as copying, deleting, downloading, and viewing files. Events that involve external domains also get recorded, like sharing an object with … More →

The post …

analysts data data exfiltration digital digital forensics discovery don't miss drive enterprise exfiltrate data exfiltration forensic google google drive google workspace g suite hot stuff incident incident responders incident response insider malicious mitiga problem researchers resources smbs threat threat actors threat hunting trace visibility workspace