Details
Content
Dependencies
Version History

Google Drive allows users to store files on their servers, synchronize files across devices, and share files. This integration helps you to create a new drive, query past activity and view change logs performed by the users, as well as list drives and files, and manage their permissions.

Google Drive

This pack includes XSIAM content.

To configure the ingestion of data from Google Workspace, see the information here.

Pay attention: Timestamp parsing is available for UTC (+0000) timezone of the following formats:
- %Y-%m-%dT%H:%M:%SZ - UTC (+0000) format.
- %Y-%m-%dT%H:%M:E3SZ - UTC (+0000) format with 3 digits of fractional precision.

Google Drive

This pack includes XSIAM content.

To configure the ingestion of data from Google Workspace, see the information here.

Pay attention: Timestamp parsing is available for UTC (+0000) timezone of the following formats:
- %Y-%m-%dT%H:%M:%SZ - UTC (+0000) format.
- %Y-%m-%dT%H:%M:E3SZ - UTC (+0000) format with 3 digits of fractional precision.

Classifiers

Name	Description
Google Drive - Classifier	Classifies Google Drive Incidents.
Google Drive - Incoming Mapper	Maps incoming Google Drive incident fields.

Incident Fields

Name	Description
Google Drive Activity Mentioned Users	Users who are mentioned in this comment.
Google Drive Activity Copied Folder Type	The type of a Drive folder.
Google Drive Activity Targets
Google Drive Activity Assigned Person Name	The user to whom the comment was assigned.
Google Drive Activity New Title	The new title of the drive object.
Google Drive Activity Identified As
Google Drive Activity Copied Item Title	The title of the Drive item.
Google Drive Activity Added Parents	The added parent object(s).
Google Drive Activity Added Permissions	The set of permissions added by this change.
Google Drive Activity Removed Parents	The removed parent object(s).
Google Drive Activity Removed Permissions	The set of permissions removed by this change.
Google Drive Activity Old Title	The previous title of the drive object.
Google Drive Activity Assignment Subtype	The sub-type of this event.
Google Drive Activity Copied Shared Drive Name	The resource name of the shared drive.
Google Drive Activity Copied Item Is File	A Drive item which is a file.
Google Drive Activity Restriction Changes	The set of changes made to restrictions.
Google Drive Activity Copied Item Name	The target Drive item. The format is "items/ITEM_ID".
Google Drive Activity Uploaded	Indicates the object originated externally and was uploaded to Drive.
Google Drive Activity Reference Type	The reference type corresponding to this event.
Google Drive Activity Assigned Deleted User	A user whose account has since been deleted.
Google Drive Activity Assigned Current User	True if this is the user making the request.
Google Drive Activity Copied Shared Drive Title	The title of the shared drive.
Google Drive Activity Restore Type	The type of restore action taken.
Google Drive Activity DLP Change Type	The type of Data Leak Prevention (DLP) change.
Google Drive Activity Post Subtype	The sub-type of this event.
Google Drive Activity Assigned Unknown User	A user about whom nothing is currently known.
Google Drive Activity Suggestion Subtype	The sub-type of this event.
Google Drive Activity Created New	Indicates the object was newly created (e.g. as a blank document), not derived from a Drive object or external object.
Google Drive Activity Delete Type	The type of delete action taken.

Incident Types

Name	Description
Google Drive Activity

Integrations

Name	Description
Google Drive	Google Drive allows users to store files on their servers, synchronize files across devices, and share files. This integration helps you to create a new drive, query past activity, and view change logs performed by the users.

Layouts

Name	Description
Google Drive Activity	Google Drive Activity Layout

Classifiers

Name	Description
Google Drive - Classifier	Classifies Google Drive Incidents.
Google Drive - Incoming Mapper	Maps incoming Google Drive incident fields.

Incident Fields

Name	Description
Google Drive Activity Removed Parents	The removed parent object(s).
Google Drive Activity Suggestion Subtype	The sub-type of this event.
Google Drive Activity Copied Folder Type	The type of a Drive folder.
Google Drive Activity Assigned Person Name	The user to whom the comment was assigned.
Google Drive Activity Copied Item Name	The target Drive item. The format is "items/ITEM_ID".
Google Drive Activity Assigned Current User	True if this is the user making the request.
Google Drive Activity Assigned Unknown User	A user about whom nothing is currently known.
Google Drive Activity Restriction Changes	The set of changes made to restrictions.
Google Drive Activity Copied Shared Drive Name	The resource name of the shared drive.
Google Drive Activity Post Subtype	The sub-type of this event.
Google Drive Activity Old Title	The previous title of the drive object.
Google Drive Activity Targets
Google Drive Activity Copied Shared Drive Title	The title of the shared drive.
Google Drive Activity Added Permissions	The set of permissions added by this change.
Google Drive Activity Assignment Subtype	The sub-type of this event.
Google Drive Activity Delete Type	The type of delete action taken.
Google Drive Activity Reference Type	The reference type corresponding to this event.
Google Drive Activity Assigned Deleted User	A user whose account has since been deleted.
Google Drive Activity Added Parents	The added parent object(s).
Google Drive Activity Mentioned Users	Users who are mentioned in this comment.
Google Drive Activity Uploaded	Indicates the object originated externally and was uploaded to Drive.
Google Drive Activity Copied Item Title	The title of the Drive item.
Google Drive Activity DLP Change Type	The type of Data Leak Prevention (DLP) change.
Google Drive Activity Created New	Indicates the object was newly created (e.g. as a blank document), not derived from a Drive object or external object.
Google Drive Activity Removed Permissions	The set of permissions removed by this change.
Google Drive Activity Copied Item Is File	A Drive item which is a file.
Google Drive Activity Restore Type	The type of restore action taken.
Google Drive Activity Identified As
Google Drive Activity New Title	The new title of the drive object.

Incident Types

Name	Description
Google Drive Activity

Integrations

Name	Description
Google Drive	Google Drive allows users to store files on their servers, synchronize files across devices, and share files. This integration helps you to create a new drive, query past activity, and view change logs performed by the users.

Modeling Rules

Name	Description
Google Drive Modeling Rule

Parsing Rules

Name	Description
GoogleDrive Parsing Rule

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (6)

Pack Name	Pack By
Common Types	By: Cortex XSOAR
Chronicle	By: Chronicle
NIST	By: Cortex XSOAR
Phishing	By: Cortex XSOAR
RiskIQ Digital Footprint	By: RiskIQ
SANS	By: Cortex XSOAR

All level dependencies (2)

Pack Name	Pack By
Filters And Transformers	By: Cortex XSOAR
Base	By: Cortex XSOAR

1.3.11 - R1741355 (December 3, 2024)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.115338.

Related pull requests:
- 37146
- 37142

Download

1.3.10 - 1602991 (November 6, 2024)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.115085.

Related pull requests:
- 37075
- 37069

Download

1.3.9 - 1552510 (October 27, 2024)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.113882.

Related pull requests:
- 36797
- 36788
- 36789
- 36793
- 36792
- 36787

Download

1.3.8 - 1504524 (October 14, 2024)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.112316.

Related pull requests:
- 36505
- 36495
- 36494
- 36493
- 36492
- 36491
- 36490
- 36489
- 36486
- 36485
- 36484
- 36483
- 36488
- 36487

Download

1.3.7 - 927547 (April 1, 2024)

Integrations

Google Drive

Fixed an issue where the user_id argument was missing in the yml file.

Related pull requests:
- 33692

Download

1.3.6 - 924992 (March 31, 2024)

Integrations

Google Drive

Documentation and metadata improvements.

Related pull requests:
- 33642

Download

1.3.5 - 883873 (March 11, 2024)

Integrations

Google Drive

Fixed an issue where google-drive-file-upload command failed to upload file to a shared drive.
Updated the Docker image to: demisto/googleapi-python3:1.0.0.89487.

Related pull requests:
- 33290

Download

1.3.4 - 876540 (March 7, 2024)

Integrations

Google Drive

Improved implementation of google-drive-file-get-parents command.
Updated the Docker image to demisto/googleapi-python3:1.0.0.89217.

Related pull requests:
- 33209
- 33254

Download

1.3.3 - 839519 (February 20, 2024)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.87804.

Related pull requests:
- 33009

Download

1.3.2 - R828628 (February 14, 2024)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.86179.

Related pull requests:
- 32539

Download

1.3.1 - 762016 (January 14, 2024)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.85008.

Related pull requests:
- 32185

Download

1.3.0 - 743135 (January 4, 2024)

Integrations

Google Drive

Added the google-drive-file-get-parents command.
Updated the Docker image to: demisto/googleapi-python3:1.0.0.83805.

Related pull requests:
- 31975
- 31945

Download

1.2.48 - 729445 (January 1, 2024)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.83805.

Related pull requests:
- 31882

Download

1.2.47 - 7209615 (December 19, 2023)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.83610.

Related pull requests:
- 31562

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	August 14, 2020
Last Release	December 3, 2024

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.