Re: Google IR scripts, was Re: [SECURITY] [EXTERNAL] Re: [SECURITY] REN-ISAC TAG Service Announcement: O365 Community Scripts Repository

[Kevin Wilcox <wilcoxkm () APPSTATE EDU>]

On Mon, 28 Jan 2019 at 23:21, Valdis Kletnieks <valdis.kletnieks () vt edu>
wrote:


> On Mon, 28 Jan 2019 17:31:05 -0500, Kevin Wilcox said:
>
> > On a serious note (not that haggis and blood pudding aren't serious
> > business), is the community interested in a Google equivalent of some of
> > these?
>
> What is the Google equivalent of haggis?

A TeamDrive create log, a Drive file permission change log and a token
usage log all wrapped in their version of JSON, shipped via syslog, boiled
in a Splunk forwarder and presented with at-read attempts at enrichment? =)

Given I'm a massive fan of Scottish cuisine, that's a bit unfair to the
haggis...

kmw