Incident Response with Google Workspace

Don't let a security event or concern relating to Google Workspace turn into a crisis. This session is designed for technical and non-technical stakeholders who would like additional knowledge and context to support investigation/response efforts for incidents within their Google Workspace environments. We'll introduce tools and techniques that allow response teams and technical staff to quickly analyze issues and contain breaches. The session will also provide examples for common issues, response playbooks, and hands-on investigative techniques. Highlights include using Google’s Audit and Investigation for fast searches of e-mails and Drive metadata, analyzing e-mail headers to trace phishing attempts or other concerns, and reviewing security log data to uncover details about potential unauthorized activity.