If you’re having trouble at any stage please contact us at support@skyformation.com.

Preface

Google G-Suite provides a broad set of office applications as document management,
web mail, presentation creation and more. Google G-Suite services are delivered
as a cloud service. Google G-Suite helps organizations move faster with infinite
scalability and lower cost for their office applications needs. But at the same
time, the public cloud Software as a Service (SaaS) model presents the organization
with new security challenges. <br>

<br>

The main challenges and needs are to:

• Get and retain full audit of activities in Google G-Suite account
  

• Retrieve the Google G-Suite account activities as users' access, permissions    changes, files are uploaded and shared, security changes and more.
  

• The granular activities should be available at the organization's central    log or event management system for compliance, investigation or forensic    needs.
  

• Detect security threats and policy violations in Google G-Suite account
  

What is it

SkyFormation Cloud Connector for Google G-Suite, is part of the SkyFormation
Cloud Connectors module. It continuously ingests audit events from multiple audit
sources in the Google G-Suite account, unify the events into a common application
events format, enrich the events with needed detection context and send the events
to any existing SIEM/SOC system.

How it works

SkyFormation Cloud Connector for Google G-Suite retrieves the events from the
Google G-Suite service through the service APIs. Before sending the events to
the existing SIEM/SOC system the connector will

• Unify the events into the SkyFormation unified application events format
  

• Embed the origin event into the SkyFormation event
• Complement the event with missing information

• Enrich the event with detection context as AD identity information
  

• Encode the resulted event into a standard format as CEF
• Send the event to the existing SIEM/SOC system over syslog

Google G-Suite Audit Sources & Events Supported

How to on-board Google G-Suite Connector to SkyFormation

Adding Google G-Suite Connector To SkyFormation Platform