image credit: Pxhere

Threat actors can exfiltrate data from Google Drive without leaving a trace

June 1, 2023

Google Workspace (formerly G Suite) has a weak spot that can prevent the discovery of data exfiltration from Google Drive by a malicious outsider or insider, Mitiga researchers say.

A problem for digital forensic analysts and incident responders
“Google Workspace provides visibility into a company’s Google Drive resources using ‘Drive log events,’ for actions such as copying, deleting, downloading, and viewing files. Events that involve external domains also get recorded, like sharing an object with an external user,” Mitiga‘s Ariel Szarf and Or Aspir explained.

Read More on Help Net Security