Policies /   POLICY
Nightfall Console  

Monitor bulk downloads from Google Drive

This is a DLP policy template that you can implement easily in the Nightfall platform.

Description Detect when a user downloads more than 25 files in 24 hours
Integration Google Drive
Use Case Prevent Data Exfiltration
Output Settings Alert admins in Slack or Email, recommend configuring alerting to SIEM.
Inclusions Select user drives, shared drives, and user groups you want to monitor.
Exclusions Select drives you don't want to monitor.

Applied Detection Rules

These are the detection rules that will be applied within this policy, defining what types of sensitive data the policy is looking for.

There are no detection rules used in this policy yet.