Implementing Google Workspace Activity and Usage (GWAUR) integration

[JocLRojas]

Describe the feature

We want to implement Google Workspace Activity and Usage Reporting (GWAUR) integration to monitor and analyze user activities, admin actions, and system events within Google Workspace. This integration will allow us to collect logs such as login attempts, file access, sharing changes, and other critical events for security and compliance purposes.

Use Case

This integration will enable organizations to:

• Detect suspicious activities.
• Monitor compliance with data governance policies.
• Correlate Google Workspace events with other security events in the SIEM for better threat detection.

Proposed Solution

• Use Google Workspace API to fetch activity and usage reports.
• Develop a integration to parse and forward logs to the SIEM.

Other Information

No response

Acknowledgements

• [x] I may be able to implement this feature request
• [ ] This feature might incur a breaking change