login on Detection.FYI https://detection.fyi/sigmahq/sigma/cloud/gcp/gworkspace/login/ Recent content in login on Detection.FYI Hugo -- gohugo.io Tue, 28 Apr 2026 23:20:23 +0000 Google Workspace Government Attack Warning https://detection.fyi/sigmahq/sigma/cloud/gcp/gworkspace/login/gcp_gworkspace_govattack/ Tue, 28 Apr 2026 23:20:23 +0000 https://detection.fyi/sigmahq/sigma/cloud/gcp/gworkspace/login/gcp_gworkspace_govattack/ Detects a login attempt in Google Workspace flagged as a potential attack by a government-backed threat actor Suspicious Login Activity Classified By Google https://detection.fyi/sigmahq/sigma/cloud/gcp/gworkspace/login/gcp_gworkspace_suspicious_login/ Tue, 28 Apr 2026 23:20:23 +0000 https://detection.fyi/sigmahq/sigma/cloud/gcp/gworkspace/login/gcp_gworkspace_suspicious_login/ Detects Google Workspace login activity that's classified as suspicious by Google. Google Workspace Out Of Domain Email Forwarding https://detection.fyi/sigmahq/sigma/cloud/gcp/gworkspace/login/gcp_gworkspace_out_of_domain_email_forwarding/ Tue, 28 Apr 2026 00:48:14 +0000 https://detection.fyi/sigmahq/sigma/cloud/gcp/gworkspace/login/gcp_gworkspace_out_of_domain_email_forwarding/ Detects automatic email forwarding to external domains in Google Workspace, which may indicate data leakage or misuse.