GAT Feature List (DJ)

	A	B	C	D
1	Feature list	GAT (Yes / NO / 6 month Roadmap)	Comments
2	Capture Doc's audit logs, generate alerts based on filters/threshold defined	Yes, treshhold alerting is now part of Alarms module.	We also identify trending documents.	GAT runs every single audit here and enforces every single policy everytime an Admin logs into the domain. No other Audit tool enforces policy with this frequency. (email has a 6 hour window between scans).
3	Reset the affected users' passwords	No/Not on roadmap	Admin function
4	Review your secondary email addresses	Yes	For email delegation. Google also have the concept of a secondary recovery email address which we do not audit presently
5	Examine mail activity	Yes, in great detail
6	Audit user settings	Yes, in great detail
7	Users' filters settings	Yes - email forwarding identified
8	Identify users forwarding options with emails address listed	Forwarding listed
9	Enable account activity alerts	Yes	Currently alerting enabled for negative events. Non-use, use after long idle and excessive use all forming part of alarms module.
10	List of services & websites that are authorized to access your Google Account data	Yes
11	Ability to perform bulk data management actions (sharing, file copy, and ownership permission management) (Google docs, sites, email)	Soon - On Roadmap for Docs, emails	Will be done in the context of a strong security model.
12	Ability to perform bulk user management actions (transfer of ownership, file copying, permissions) (Google docs, sites, email)	Soon - On Roadmap for Docs	See above.
13
14	Users
15	List all users (sortable)	Yes
16	List all Admin accounts (sortable)	Yes
17	List all Suspended accounts (sortable)	Yes
18	List accounts by created/ last login/ last access dates	Yes
19	Identify deleted accounts	Yes
20	List all organizations (sortable)	Yes
21	List users by organization (sortable)	Yes
22	List users by group membership (sortable)	Yes
23	Identify all groups a user is a member of	Yes
24	List users by email quota (sortable)	Yes
25	List users by Docs quota (sortable)	Yes
26	List user by percentage quota used	Yes
27	List users by number of documents in account (sortable)	Yes
28	List users by number of documents they create (sortable)	Yes
29	List users by number of documents they share out (sortable)	Yes
30	List users by number of documents shared in	Yes
31	List users by number of documents shared out	Yes
32	Identify all users with forwarding set and the forward address	Yes
33	Identify accounts with delegated email	Yes
34	Identify and sort deleted, suspended and active accounts	Yes
35	Identify top sender/receiver of attachments from internal (sortable)	Yes
36	Identify top sender/receiver of emails to external (sortable)	Yes
37	Identify top sender/receiver of attachments to external (sortable)	Yes
38	Identify top sender/receiver of emails from external (sortable)	Yes
39	Schedule daily reports for all email activity	Yes
40	All of the above sender/receiver stats are available daily for the last 30 days or for the full period totaled.	Yes
41	Identify to receiver of attachments from external (sortable)	Yes
42	30 days mail usage and load graphs (internal and external) for each user, create filter/alert for deviation	Yes
43	List users by Number of calendars	Yes
44	List users by calendar, document and email collaboration	Yes	We measure collaboration differently than sharing. You can share a document with 9 people, but only 3 might read or edit it. We detect those who engaged and we score them individually. This gives a unique collaboration score for each individual. For email's only emails responded to are counted, for calendar appointments, only confirmed appointments are counted.
45	List users by Total collaborative activity	Yes	The total collaborative activity is calculated weekly and the figures show are a measure of the internal collaborative enagement of each individual during the previous week. Everyone agrees collaboration is important, GAT is the only audit tool that measures it.
46	List users by Google+ activity	Yes
47	List user by Google+ id	Yes
48	Identify all users by their internal Google id	Yes	This id will match their Google+ id if they have a Google+ account
49	List users by third party apps installs	Yes
50	List users by printer, ownership and activity	Yes
51	List users by number sites owned	Yes
52	List users by Google Apps productivity	Yes	Counts sheets, Docs and Presentations both created and edited over a 7 day period.
53	List user by approved devices (Chrome and Android)	Yes
54	List users by number of mobile apps	Yes
55	List users by login times	Yes
56	List users by negative login events against that account, recently and totals	Yes
57	Explore the full IP login history of a user filtered by all or negative events	Yes	GAT has very sophisticated IP filtering for user activity. It is possible to report by both user and address (or network), this allows Admins and security offices to quickly see if there is a high number of fails associated with a particular address or network. This would otherwise go undetected if each fail was against a string of individual accounts, but collectively comming from the one group of attackers.
58	Display user login location on a map	Yes	Geo-Location
59	List users by 2FA enabled	Yes
60	List users by Productivity	Yes	This major section allows you to look at user individually, in groups or in OUs and sort them based on Drive productivity as defined by Docs, Sheets and Presentations created or edited. It also looks at overall file production, sharing and visits attracted.
61	Get all of the detail above for a particular key user, group of users or an Organisation.	Yes
62
63	Google Docs/Drive
64	List previous names for documents	Yes
65	List all documents that are public	Yes
66	List all documents that are public with a link	Yes
67	List all documents that are published	Yes
68	List all documents that are shared outside the domain, but not public.	Yes
69	List all documents that are shared inside the domain	Yes
70	List all documents that are private	Yes
71	List all documents by type (docs, spreadsheets, presentations, PDFs, drawings, forms, scripts, other files, collections, other files, trashed and deleted)	Yes	We belive 'deleted' audit is unique to GAT. These are documents that have been removed from Trash to hide their very existence. However if any document, was detected at any time by GAT, we retain it's full use history (but not contents.)
72	List all documents shared in	Yes
73	List all documents shared out	Yes
74	Search all documents by name	Yes	Name can be a regular expression or an exact name. The default is part match.
75	Search all document contents by text string or strings (this is a full blind text search which will return all the Metadata for matching documents)	Yes	GAT also allows multiple searches to be combined together. You can search for all documents used by a group 'sales' of which user A is a member. Then you can combine that with a previous search for all documents not owned by A, this will returned a result of all documents used by sales, except those owned by A. This can further be refined by asking for the set up those that are spreadsheets and are share out.
76	Search all documents by Google file id. (allows you to find the file returned by Google file audit)	Yes
77	Search all documents by owner	Yes	In common with all the search criteria we allow searches to be 'negated'. We think this is unique to GAT. If you search for all documents owned by user A, you can then find all documents not owned by A
78	Search all documents by editor	Yes
79	Search all documents by viewer	Yes
80	Search all documents by users	Yes
81	Search all documents by visitors	Yes	This is a really important audit feature. Using the information here you can tell if user read the document that was shared with them. You need to understand this to understand collabolration. We also use it to identify trending documents in certain timeframes. Useful to identify if a certain document is going 'viral' or not. GAT can also report local visitors to external public documents.
82	Search all of the above criteria using regular expressions (except text search)	Yes
83	Search all of the above by group	Yes
84	Search all of the above by organization	Yes
85	Search all of the above by date range	Yes
86	Search for all documents created in a date range	Yes
87	Search for all documents changed in a date range	Yes
88	Search for all documents viewed in a date range	Yes
89	Sort all documents above by metadata change	Yes
90	Sort all documents above by ACL change	Yes
91	Sort all documents above by update	Yes
92	Sort all documents above by visits	Yes
93	Identify trending of documents visited, 1 day trend, 3 day trend, 7 day trend, lifetime trend. Ability to create/send alert if there is deviation	Yes
94	Identify editor history showing date and time	Yes
95	Identify visitor history showing date and time, plus all documents visited in a +/- 4 hour window to help identify cut and paste histories.	Yes
96	Save and retain searches	Yes
97	Turn any search above into a scheduled search with output to pdf or csv.	Yes	GAT can turn ANY search into a policy. In the previous example of the complelx search, 4 seperate searches were combined. This combined search could then be scheduled to become a policy or an audit. A policy might say remove all external spreadsheet shares from sales, except for spreadseets owned by A. Policies are run automatically on every scan.
98	Admins can remove any user as an editor (from 1 or all docs) (Bulk Operation)	Yes
99	Admins can remove any user as a viewer (from 1 or all docs) (Bulk Operation)	Yes
100