Google Drive

Details
Content
Dependencies
Version History

Google Drive allows users to store files on their servers, synchronize files across devices, and share files. This integration helps you to create a new drive, query past activity and view change logs performed by the users, as well as list drives and files, and manage their permissions.

To configure the ingestion of data from Google Workspace, see the information here.

Classifiers

Name	Description
Google Drive - Classifier	Classifies Google Drive Incidents.
Google Drive - Incoming Mapper	Maps incoming Google Drive incident fields.

Incident Fields

Name	Description
Google Drive Activity Copied Shared Drive Title	The title of the shared drive.
Google Drive Activity DLP Change Type	The type of Data Leak Prevention (DLP) change.
Google Drive Activity Restriction Changes	The set of changes made to restrictions.
Google Drive Activity Delete Type	The type of delete action taken.
Google Drive Activity Assigned Current User	True if this is the user making the request.
Google Drive Activity Assigned Person Name	The user to whom the comment was assigned.
Google Drive Activity Targets
Google Drive Activity Old Title	The previous title of the drive object.
Google Drive Activity New Title	The new title of the drive object.
Google Drive Activity Reference Type	The reference type corresponding to this event.
Google Drive Activity Removed Permissions	The set of permissions removed by this change.
Google Drive Activity Identified As
Google Drive Activity Assignment Subtype	The sub-type of this event.
Google Drive Activity Added Parents	The added parent object(s).
Google Drive Activity Copied Folder Type	The type of a Drive folder.
Google Drive Activity Suggestion Subtype	The sub-type of this event.
Google Drive Activity Copied Item Is File	A Drive item which is a file.
Google Drive Activity Copied Item Title	The title of the Drive item.
Google Drive Activity Mentioned Users	Users who are mentioned in this comment.
Google Drive Activity Post Subtype	The sub-type of this event.
Google Drive Activity Copied Shared Drive Name	The resource name of the shared drive.
Google Drive Activity Created New	Indicates the object was newly created (e.g. as a blank document), not derived from a Drive object or external object.
Google Drive Activity Uploaded	Indicates the object originated externally and was uploaded to Drive.
Google Drive Activity Assigned Unknown User	A user about whom nothing is currently known.
Google Drive Activity Copied Item Name	The target Drive item. The format is "items/ITEM_ID".
Google Drive Activity Restore Type	The type of restore action taken.
Google Drive Activity Removed Parents	The removed parent object(s).
Google Drive Activity Added Permissions	The set of permissions added by this change.
Google Drive Activity Assigned Deleted User	A user whose account has since been deleted.

Layouts

Name	Description
Google Drive Activity	Google Drive Activity Layout

Incident Types

Name	Description
Google Drive Activity

Integrations

Name	Description
Google Drive	Google Drive allows users to store files on their servers, synchronize files across devices, and share files. This integration helps you to create a new drive, query past activity, and view change logs performed by the users.

Classifiers

Name	Description
Google Drive - Classifier	Classifies Google Drive Incidents.
Google Drive - Incoming Mapper	Maps incoming Google Drive incident fields.

Incident Fields

Name	Description
Google Drive Activity Copied Shared Drive Title	The title of the shared drive.
Google Drive Activity DLP Change Type	The type of Data Leak Prevention (DLP) change.
Google Drive Activity Restriction Changes	The set of changes made to restrictions.
Google Drive Activity Delete Type	The type of delete action taken.
Google Drive Activity Assigned Current User	True if this is the user making the request.
Google Drive Activity Assigned Person Name	The user to whom the comment was assigned.
Google Drive Activity Targets
Google Drive Activity Old Title	The previous title of the drive object.
Google Drive Activity New Title	The new title of the drive object.
Google Drive Activity Reference Type	The reference type corresponding to this event.
Google Drive Activity Removed Permissions	The set of permissions removed by this change.
Google Drive Activity Identified As
Google Drive Activity Assignment Subtype	The sub-type of this event.
Google Drive Activity Added Parents	The added parent object(s).
Google Drive Activity Copied Folder Type	The type of a Drive folder.
Google Drive Activity Suggestion Subtype	The sub-type of this event.
Google Drive Activity Copied Item Is File	A Drive item which is a file.
Google Drive Activity Copied Item Title	The title of the Drive item.
Google Drive Activity Mentioned Users	Users who are mentioned in this comment.
Google Drive Activity Post Subtype	The sub-type of this event.
Google Drive Activity Copied Shared Drive Name	The resource name of the shared drive.
Google Drive Activity Created New	Indicates the object was newly created (e.g. as a blank document), not derived from a Drive object or external object.
Google Drive Activity Uploaded	Indicates the object originated externally and was uploaded to Drive.
Google Drive Activity Assigned Unknown User	A user about whom nothing is currently known.
Google Drive Activity Copied Item Name	The target Drive item. The format is "items/ITEM_ID".
Google Drive Activity Restore Type	The type of restore action taken.
Google Drive Activity Removed Parents	The removed parent object(s).
Google Drive Activity Added Permissions	The set of permissions added by this change.
Google Drive Activity Assigned Deleted User	A user whose account has since been deleted.

Incident Types

Name	Description
Google Drive Activity

Parsing Rules

Name	Description
GoogleDrive Parsing Rule

Modeling Rules

Name	Description
Google Drive Modeling Rule

Integrations

Name	Description
Google Drive	Google Drive allows users to store files on their servers, synchronize files across devices, and share files. This integration helps you to create a new drive, query past activity, and view change logs performed by the users.

Required Content Packs (2)

Pack Name	Pack By
Filters And Transformers	By: Cortex XSOAR
Base	By: Cortex XSOAR

Optional Content Packs (6)

Pack Name	Pack By
RiskIQ Digital Footprint	By: RiskIQ
SANS	By: Cortex XSOAR
NIST	By: Cortex XSOAR
Common Types	By: Cortex XSOAR
Phishing	By: Cortex XSOAR
Chronicle	By: Chronicle

All level dependencies (1)

Pack Name	Pack By
Filters And Transformers	By: Cortex XSOAR

1.2.26 - 4751368 (March 6, 2023)

Integrations

Updated the Docker image to: demisto/googleapi-python3:1.0.0.49545.

Related pull requests:
- 25085

Download

1.2.25 - R4718798 (March 1, 2023)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.48575.

Related pull requests:
- 24703

Download

1.2.24 - R4646022 (February 19, 2023)

Layouts

Google Drive Activity
This item is no longer supported in XSIAM.

Related pull requests:
- 24221

Download

1.2.23 - 4258430 (December 21, 2022)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 21247

Download

1.2.22 - 4227458 (December 16, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.41311.

Related pull requests:
- 23075

Download

1.2.21 - 4134061 (December 1, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.37871.
Added the support-all-drives argument to the google-drive-file-permission-delete command.

Related pull requests:
- 22021
- 22124
- 20857
- 21856
- 22088
- 21530
- 22117
- 21379
- 21901
- 22062
- 22136
- 22020
- 22120
- 22141
- 22133
- 22139
- 22140
- 22144
- 21715
- 21258
- 21695
- 21830
- 21863
- 21996
- 22018
- 22029
- 14484
- 14439
- 14469
- 14483
- 14380
- 14422
- 14465
- 14442
- 14490
- 14492
- 14493
- 14130
- 14489
- 14382
- 14502
- 14124
- 14482
- 14503
- 14499
- 14466
- 12770
- 14501
- 14375
- 12795
- 14350
- 14507
- 13848
- 14378
- 13857
- 14512
- 14384
- 14516
- 14500
- 14481
- 14464
- 14522
- 14459
- 14525
- 14523
- 14076
- 14532
- 14368
- 14519
- 14455
- 13905
- 14537
- 14540
- 14538
- 14372
- 14072
- 14524
- 14498
- 14536
- 14302
- 14550
- 14505
- 14542
- 14468
- 14555
- 14556
- 14541
- 14526
- 14552
- 12335
- 14529
- 14561
- 14470
- 14331
- 13676
- 14475
- 11589
- 14568
- 14569
- 14565
- 13875
- 14558
- 13550
- 14578
- 14579
- 13902
- 14583
- 14511
- 14557
- 14585
- 14587
- 14476
- 14451
- 14596
- 14553
- 14517
- 14508
- 14605
- 14609
- 14607
- 14599
- 14480
- 14600
- 14545
- 14608
- 14604
- 14548
- 14543
- 14602
- 14590
- 14430
- 14611
- 14614
- 14376
- 14613
- 14612
- 14531
- 14591
- 13994
- 14564
- 14615
- 13924
- 14352
- 14626
- 14635
- 14633
- 14632
- 14622
- 14634
- 14625
- 14631
- 14636
- 22143
- 22151
- 22127
- 22150
- 22159
- 22157
- 22131
- 22092
- 20941
- 22165
- 22053
- 22177
- 22180
- 22156
- 22160
- 22182
- 21687
- 22133
- 22190
- 22194
- 22142
- 22205
- 22066
- 21978
- 22198
- 22183
- 22362
- 22403
- 22432
- 22023
- 22447
- 22020
- 21715
- 22053

Download

1.2.20 - 4070054 (November 20, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.37534.

Related pull requests:
- 22356

Download

1.2.19 - R4001473 (November 9, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.36486.

Related pull requests:
- 21920

Download

1.2.18 - 3818129 (October 11, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.34951.

Related pull requests:
- 21540

Download

1.2.17 - R3775849 (October 3, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.33146.

Related pull requests:
- 21048

Download

1.2.16 - 3508696 (August 22, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.33018.

Related pull requests:
- 20676

Download

1.2.15 - 3427401 (August 9, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.32437.

Related pull requests:
- 20389

Download

1.2.14 - 3305407 (July 21, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.32233.

Related pull requests:
- 20133

Download

1.2.13 - 3204921 (July 5, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.31426.

Related pull requests:
- 19895

Download

1.2.12 - 3118515 (June 19, 2022)

Integrations

Google Drive

Removed excessive error traceback printing.
Updated the Docker image to: demisto/googleapi-python3:1.0.0.30802.

Related pull requests:
- 19511

Download

1.2.11 - 3034704 (June 4, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.29817.

Related pull requests:
- 19354

Download

1.2.10 - 2953671 (May 20, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.29296.

Download

1.2.9 - 2781556 (April 19, 2022)

Integrations

Google Drive

Updated formatting of integration parameters.

Download

1.2.8 - 2745974 (April 12, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.28211.

Download

1.2.7 - 2596822 (March 17, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.27548.

Download

1.2.6 - 2507216 (March 3, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.27142.

Download

1.2.5 - 2411339 (February 14, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.26733.

Download

1.2.4 - 2330048 (January 30, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.26208.

Download

1.2.3 - 2249720 (January 13, 2022)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.25823.

Download

1.2.2 - 2179441 (December 29, 2021)

Integrations

Google Drive

Fixed an issue where the parent argument was sent as a single string instead of a string array in the google-drive-file-upload command.

Download

1.2.1 - R2146019 (December 21, 2021)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.25341.

Download

1.2.0 - 1812291 (October 18, 2021)

Integrations

Google Drive

Added a more informative message for error in user_service_account_json in GSuite client

Download

1.1.1 - 7423160 (September 2, 2021)

Integrations

Google Drive

Updated the Docker image to: demisto/googleapi-python3:1.0.0.24037.

Download

PUBLISHER

Cortex

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	November 23, 2020
Last Release	March 6, 2023

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.