Releases
1.8.2512.0
Added raw log inclusion option to activity log-related extended commands
- Added raw option to google-workspace-admin-logs, google-workspace-drive-logs, google-workspace-login-logs, google-workspace-meet-logs, google-workspace-chat-logs commands
- When enabled, raw data is included in the line field as a JSON string
Added option to include raw logs in the Activity Log Collector
- Added
include_event_rawoption to control whether raw logs are collected
When reinstalling the app, please deactivate the Google Workspace app first before proceeding with the upgrade.
Dec 19, 2025, 6:14:58 PM
1.7.2504.0
New feature
- Google Workspace Group command and schema has been added
- Google Workspace User command has new "group" option
- Added support for Google Workspace playbook execution
Dec 3, 2025, 2:46:05 PM
1.6.2502.2
Google Workspace drive activity collector bug patch
- Missing error handling for empty list responses for Google Drive activity logs
Dec 3, 2025, 2:45:59 PM
1.6.2502.1
Improvements
- Added 4 detection rules
- Admin Role Assigned (T1098.003)
- Executable File Download (T1204.002)
- New Trusted Domain Added (T1562.007)
- User Unsuspended (T1078.004)
Dec 3, 2025, 2:45:46 PM
1.6.2502.0
Improvements
- Added originating_app_name when collecting Google Drive activity logs.
- Added google-workspace-drive-apps, google-workspace-drive-app extended query commands.
Grant new scope for domain-wide delegation
- https://www.googleapis.com/auth/drive.apps.readonly
Dec 3, 2025, 2:45:39 PM
1.5.2501.0
New feature
- Added Google Chat activity log schema, logger model, and dashboard.
- Google Workspace dashboards now support time filter in the dashboard panel.
Dec 3, 2025, 2:45:31 PM
1.4.2411.1
Bug patch
- Fixed infinite loading bug of Google Workspace Alert Center collector.
- Fixed an issue where google-workspace-users command output is limited to 100 users
Dec 3, 2025, 2:45:19 PM
1.4.2411.0
Support Google Workspace alert center
- Added phishing mail, alert center, service notice dashboards.
Grant new scope for domain-wide delegation
- https://www.googleapis.com/auth/apps.alerts
Dec 3, 2025, 2:44:59 PM
1.3.2410.0
Added new Google Workspace loggers and dashboards
- Added Google Workspace login logger
- Added Google Workspace admin activity logger
- Added Google Drive activity logger
- Added Google Meet activity logger
- Added Google Workspace login dashboard
- Added Google Workspace admin dashboard
- Updated Google Workspace user dashboard: Support 2FA KPI
- Updated Google Drive dashboard
- Updated Google Meet dashboard
Oct 6, 2024, 7:53:40 PM
1.2.2408.0
- Support for HTTP proxy settings
- Troubleshooting internal behavior around connection profiles
Sep 4, 2024, 11:18:54 PM
1.1.2309.0
Added query commands for Google Sheets
- google-workspace-sheets-values
- google-workspace-sheets-write-values
Grant new scope for domain-wide delegation
- https://www.googleapis.com/auth/spreadsheets
Sep 9, 2023, 11:16:55 PM
1.0.2307.0
Switching sonar apps
- Added sonar app manifest and dashboards.
- Changed service key in connect profile to accept full string instead of file path
Aug 5, 2023, 1:17:35 PM
1.0.2210.0
First release. Support following commands:
- google-workspace-users
- google-workspace-domains
- google-workspace-drive-logs
- google-workspace-meet-logs
- google-workspace-oauth-logs
Oct 18, 2022, 2:08:35 AM