A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | Feature list | GAT (Yes / NO / 6 month Roadmap) | Comments | |||||||||||||||||
2 | Capture Doc's audit logs, generate alerts based on filters/threshold defined | Yes, treshhold alerting is now part of Alarms module. | We also identify trending documents. | GAT runs every single audit here and enforces every single policy everytime an Admin logs into the domain. No other Audit tool enforces policy with this frequency. (email has a 6 hour window between scans). | ||||||||||||||||
3 | Reset the affected users' passwords | No/Not on roadmap | Admin function | |||||||||||||||||
4 | Review your secondary email addresses | Yes | For email delegation. Google also have the concept of a secondary recovery email address which we do not audit presently | |||||||||||||||||
5 | Examine mail activity | Yes, in great detail | ||||||||||||||||||
6 | Audit user settings | Yes, in great detail | ||||||||||||||||||
7 | Users' filters settings | Yes - email forwarding identified | ||||||||||||||||||
8 | Identify users forwarding options with emails address listed | Forwarding listed | ||||||||||||||||||
9 | Enable account activity alerts | Yes | Currently alerting enabled for negative events. Non-use, use after long idle and excessive use all forming part of alarms module. | |||||||||||||||||
10 | List of services & websites that are authorized to access your Google Account data | Yes | ||||||||||||||||||
11 | Ability to perform bulk data management actions (sharing, file copy, and ownership permission management) (Google docs, sites, email) | Soon - On Roadmap for Docs, emails | Will be done in the context of a strong security model. | |||||||||||||||||
12 | Ability to perform bulk user management actions (transfer of ownership, file copying, permissions) (Google docs, sites, email) | Soon - On Roadmap for Docs | See above. | |||||||||||||||||
13 | ||||||||||||||||||||
14 | Users | |||||||||||||||||||
15 | List all users (sortable) | Yes | ||||||||||||||||||
16 | List all Admin accounts (sortable) | Yes | ||||||||||||||||||
17 | List all Suspended accounts (sortable) | Yes | ||||||||||||||||||
18 | List accounts by created/ last login/ last access dates | Yes | ||||||||||||||||||
19 | Identify deleted accounts | Yes | ||||||||||||||||||
20 | List all organizations (sortable) | Yes | ||||||||||||||||||
21 | List users by organization (sortable) | Yes | ||||||||||||||||||
22 | List users by group membership (sortable) | Yes | ||||||||||||||||||
23 | Identify all groups a user is a member of | Yes | ||||||||||||||||||
24 | List users by email quota (sortable) | Yes | ||||||||||||||||||
25 | List users by Docs quota (sortable) | Yes | ||||||||||||||||||
26 | List user by percentage quota used | Yes | ||||||||||||||||||
27 | List users by number of documents in account (sortable) | Yes | ||||||||||||||||||
28 | List users by number of documents they create (sortable) | Yes | ||||||||||||||||||
29 | List users by number of documents they share out (sortable) | Yes | ||||||||||||||||||
30 | List users by number of documents shared in | Yes | ||||||||||||||||||
31 | List users by number of documents shared out | Yes | ||||||||||||||||||
32 | Identify all users with forwarding set and the forward address | Yes | ||||||||||||||||||
33 | Identify accounts with delegated email | Yes | ||||||||||||||||||
34 | Identify and sort deleted, suspended and active accounts | Yes | ||||||||||||||||||
35 | Identify top sender/receiver of attachments from internal (sortable) | Yes | ||||||||||||||||||
36 | Identify top sender/receiver of emails to external (sortable) | Yes | ||||||||||||||||||
37 | Identify top sender/receiver of attachments to external (sortable) | Yes | ||||||||||||||||||
38 | Identify top sender/receiver of emails from external (sortable) | Yes | ||||||||||||||||||
39 | Schedule daily reports for all email activity | Yes | ||||||||||||||||||
40 | All of the above sender/receiver stats are available daily for the last 30 days or for the full period totaled. | Yes | ||||||||||||||||||
41 | Identify to receiver of attachments from external (sortable) | Yes | ||||||||||||||||||
42 | 30 days mail usage and load graphs (internal and external) for each user, create filter/alert for deviation | Yes | ||||||||||||||||||
43 | List users by Number of calendars | Yes | ||||||||||||||||||
44 | List users by calendar, document and email collaboration | Yes | We measure collaboration differently than sharing. You can share a document with 9 people, but only 3 might read or edit it. We detect those who engaged and we score them individually. This gives a unique collaboration score for each individual. For email's only emails responded to are counted, for calendar appointments, only confirmed appointments are counted. | |||||||||||||||||
45 | List users by Total collaborative activity | Yes | The total collaborative activity is calculated weekly and the figures show are a measure of the internal collaborative enagement of each individual during the previous week. Everyone agrees collaboration is important, GAT is the only audit tool that measures it. | |||||||||||||||||
46 | List users by Google+ activity | Yes | ||||||||||||||||||
47 | List user by Google+ id | Yes | ||||||||||||||||||
48 | Identify all users by their internal Google id | Yes | This id will match their Google+ id if they have a Google+ account | |||||||||||||||||
49 | List users by third party apps installs | Yes | ||||||||||||||||||
50 | List users by printer, ownership and activity | Yes | ||||||||||||||||||
51 | List users by number sites owned | Yes | ||||||||||||||||||
52 | List users by Google Apps productivity | Yes | Counts sheets, Docs and Presentations both created and edited over a 7 day period. | |||||||||||||||||
53 | List user by approved devices (Chrome and Android) | Yes | ||||||||||||||||||
54 | List users by number of mobile apps | Yes | ||||||||||||||||||
55 | List users by login times | Yes | ||||||||||||||||||
56 | List users by negative login events against that account, recently and totals | Yes | ||||||||||||||||||
57 | Explore the full IP login history of a user filtered by all or negative events | Yes | GAT has very sophisticated IP filtering for user activity. It is possible to report by both user and address (or network), this allows Admins and security offices to quickly see if there is a high number of fails associated with a particular address or network. This would otherwise go undetected if each fail was against a string of individual accounts, but collectively comming from the one group of attackers. | |||||||||||||||||
58 | Display user login location on a map | Yes | Geo-Location | |||||||||||||||||
59 | List users by 2FA enabled | Yes | ||||||||||||||||||
60 | List users by Productivity | Yes | This major section allows you to look at user individually, in groups or in OUs and sort them based on Drive productivity as defined by Docs, Sheets and Presentations created or edited. It also looks at overall file production, sharing and visits attracted. | |||||||||||||||||
61 | Get all of the detail above for a particular key user, group of users or an Organisation. | Yes | ||||||||||||||||||
62 | ||||||||||||||||||||
63 | Google Docs/Drive | |||||||||||||||||||
64 | List previous names for documents | Yes | ||||||||||||||||||
65 | List all documents that are public | Yes | ||||||||||||||||||
66 | List all documents that are public with a link | Yes | ||||||||||||||||||
67 | List all documents that are published | Yes | ||||||||||||||||||
68 | List all documents that are shared outside the domain, but not public. | Yes | ||||||||||||||||||
69 | List all documents that are shared inside the domain | Yes | ||||||||||||||||||
70 | List all documents that are private | Yes | ||||||||||||||||||
71 | List all documents by type (docs, spreadsheets, presentations, PDFs, drawings, forms, scripts, other files, collections, other files, trashed and deleted) | Yes | We belive 'deleted' audit is unique to GAT. These are documents that have been removed from Trash to hide their very existence. However if any document, was detected at any time by GAT, we retain it's full use history (but not contents.) | |||||||||||||||||
72 | List all documents shared in | Yes | ||||||||||||||||||
73 | List all documents shared out | Yes | ||||||||||||||||||
74 | Search all documents by name | Yes | Name can be a regular expression or an exact name. The default is part match. | |||||||||||||||||
75 | Search all document contents by text string or strings (this is a full blind text search which will return all the Metadata for matching documents) | Yes | GAT also allows multiple searches to be combined together. You can search for all documents used by a group 'sales' of which user A is a member. Then you can combine that with a previous search for all documents not owned by A, this will returned a result of all documents used by sales, except those owned by A. This can further be refined by asking for the set up those that are spreadsheets and are share out. | |||||||||||||||||
76 | Search all documents by Google file id. (allows you to find the file returned by Google file audit) | Yes | ||||||||||||||||||
77 | Search all documents by owner | Yes | In common with all the search criteria we allow searches to be 'negated'. We think this is unique to GAT. If you search for all documents owned by user A, you can then find all documents not owned by A | |||||||||||||||||
78 | Search all documents by editor | Yes | ||||||||||||||||||
79 | Search all documents by viewer | Yes | ||||||||||||||||||
80 | Search all documents by users | Yes | ||||||||||||||||||
81 | Search all documents by visitors | Yes | This is a really important audit feature. Using the information here you can tell if user read the document that was shared with them. You need to understand this to understand collabolration. We also use it to identify trending documents in certain timeframes. Useful to identify if a certain document is going 'viral' or not. GAT can also report local visitors to external public documents. | |||||||||||||||||
82 | Search all of the above criteria using regular expressions (except text search) | Yes | ||||||||||||||||||
83 | Search all of the above by group | Yes | ||||||||||||||||||
84 | Search all of the above by organization | Yes | ||||||||||||||||||
85 | Search all of the above by date range | Yes | ||||||||||||||||||
86 | Search for all documents created in a date range | Yes | ||||||||||||||||||
87 | Search for all documents changed in a date range | Yes | ||||||||||||||||||
88 | Search for all documents viewed in a date range | Yes | ||||||||||||||||||
89 | Sort all documents above by metadata change | Yes | ||||||||||||||||||
90 | Sort all documents above by ACL change | Yes | ||||||||||||||||||
91 | Sort all documents above by update | Yes | ||||||||||||||||||
92 | Sort all documents above by visits | Yes | ||||||||||||||||||
93 | Identify trending of documents visited, 1 day trend, 3 day trend, 7 day trend, lifetime trend. Ability to create/send alert if there is deviation | Yes | ||||||||||||||||||
94 | Identify editor history showing date and time | Yes | ||||||||||||||||||
95 | Identify visitor history showing date and time, plus all documents visited in a +/- 4 hour window to help identify cut and paste histories. | Yes | ||||||||||||||||||
96 | Save and retain searches | Yes | ||||||||||||||||||
97 | Turn any search above into a scheduled search with output to pdf or csv. | Yes | GAT can turn ANY search into a policy. In the previous example of the complelx search, 4 seperate searches were combined. This combined search could then be scheduled to become a policy or an audit. A policy might say remove all external spreadsheet shares from sales, except for spreadseets owned by A. Policies are run automatically on every scan. | |||||||||||||||||
98 | Admins can remove any user as an editor (from 1 or all docs) (Bulk Operation) | Yes | ||||||||||||||||||
99 | Admins can remove any user as a viewer (from 1 or all docs) (Bulk Operation) | Yes | ||||||||||||||||||
100 |