Additional details
Investigate, remediate, search and restore Gmail Content within the investigation tool.
Malicious emails can be a critical source of data for an admin investigating attempted attacks within their domain or identifying other potential security risks. Now, superadmins or admins with “View detailed content” permission who enter justification for the access request can choose to view the content of email messages that match their risk criteria directly in the investigation tool. They can also choose whether to include deleted emails as part of the investigation. Use our Help Center to learn more about Gmail message content in the investigation tool.
This makes it easier to understand the full context of risks associated with emails and can make it quicker to identify, triage, and take action on security and privacy issues in your domain.
See Gmail content directly in the investigation tool
“Group-by” option around specific search attributes when querying logs in the investigation tool
When customizing a search in the investigation tool, you can group items by a particular search attribute to quickly understand the breadth of an issue. For example, when conducting a search based on device log events, you can group the search criteria based on the device model. Use our Help Center to find out how to add a group-by option when customizing a search.
Save and share investigations in the investigation tool
We want to make sure admins are able to work together to assess their organization’s exposure to security issues. Admins can now save their investigations in the security investigation tool and share them with other admins to improve collaboration. Use our Help Center to learn how to save, share, and change ownership of investigations.
User logs in the security center
There are new charts in the Security Dashboards and new data sources in the investigation tool related to user login logs and the state of users in the organization. Use our Help Center to see more about how to search and investigate user log events.
Helpful links Help Center: About the security center
Help Center: About the security investigation tool
Availability Rollout details
G Suite editions
- Available to G Suite Enterprise, G Suite Enterprise for Education, and Cloud Identity Premium
- Not available to G Suite Basic, G Suite Business, G Suite for Education, and G Suite for Nonprofits
On/off by default?
These features will be ON by default.
Stay up to date with G Suite launches
