Google Workspace Attack Surface — Elastic Security Labs
Tags
country: United States Of America
attack-pattern: Data Additional Cloud Roles - T1098.003 Cloud Account - T1136.003 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Email Account - T1087.003 Email Forwarding Rule - T1114.003 Hardware - T1592.001 Unsecured Credentials - T1552 Web Services - T1583.006 Web Services - T1584.006 Email Collection - T1114 New Service - T1050
Show in Graph
Common Information
Type Value
UUID d3a2acd1-2178-4ab7-afc6-1d638565ba7e
Fingerprint 4f98c9d00df7b887
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 3, 2023, midnight
Added to db Nov. 19, 2023, 6:18 a.m.
Last updated Oct. 31, 2024, 2:47 p.m.
Headline Google Workspace Attack Surface
Title Google Workspace Attack Surface — Elastic Security Labs
Detected Hints/Tags/Attributes 72/2/14
Source URLs
Redirection Url
Details Source https://www.elastic.co/security-labs/google-workspace-attack-surface-part-two
URL Provider
Details Provider Source level domain
Details elastic.co www.elastic.co
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 306 ✔ Elastic Security Labs https://www.elastic.co/security-labs/rss/feed.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 3 
workspace.google.com
Details Domain 1 
dejesusarcheology.com
Details Domain 26 
www.googleapis.com
Details Domain 1 
admin.setting.name
Details Email 1 
terrance@dejesusarcheology.com
Details Email 1 
engineering@dejesusarcheology.com
Details Email 1 
ray@dejesusarcheology.com
Details File 7 
data_stream.dat
Details File 25 
event.dat
Details MITRE ATT&CK Techniques 11 
T1136.003
Details MITRE ATT&CK Techniques 8 
T1098.003
Details MITRE ATT&CK Techniques 14 
T1114.003
Details Url 2 
https://workspace.google.com
Details Url 1 
https://www.googleapis.com/auth/admin.reports.audit.readonly