Profile

CommunityPlatform_1350x900.jpg

Christopher Andrews

Edit My Profile

My Content

1 to 15 of 15 total

RE: Google and KnowBe4

Posted By Christopher Andrews 12-14-2023 10:57:27 AM
Found In Egroup: Google Workspace \ view thread
What are the issues that you are having? Delivery or false positive click reporting? _____ Christopher Andrews Boston College Collaboration Team Principal Collaboration Systems Administrator 617-552-6365

RE: Reports of potential Google Drive data loss - Drive reset to May 2023

Posted By Christopher Andrews 11-28-2023 12:47:13 PM
Found In Egroup: Google Workspace \ view thread
We have had one user report this to use. They have 33 GB of Drive files at google, but their local Google Drive sync folder (on windows) shows 450 GB. We reported this to Google support and promptly got an admin notice about this issue and the attached list of affected contained just this user. This ...

RE: dmarc enforcement

Posted By Christopher Andrews 09-26-2023 09:03:23 AM
Found In Egroup: Google Workspace \ view thread
Two most important things you need are a champion in management and a firm go live date to complete a DMARC project. Without these people will ignore your requests. We hired DMARCian to guide us to 100% reject. We also use DMARCian for reporting. Big wins:* We dropped the abuse of our listserv.bc.edu ...

RE: Third-party backup for Google Drive?

Posted By Christopher Andrews 09-19-2023 07:55:49 AM
Found In Egroup: Google Workspace \ view thread
How long do you keep student data after they leave? We give students ~ 6 months to get their data out of Google and then delete the accounts and data. That loss of access will motivate a handful of students to ask for an extension and they get a 24 hour window to get their data. _____ Christopher Andrews ...

RE: Phishing through file sharing

Posted By Christopher Andrews 03-27-2023 11:14:58 AM
Found In Egroup: Google Workspace \ view thread
I have put in a feature request for Google Drive logging of action on files owned by external users. Please comment and thumbs up if this would be useful for you and your institution. https://www.googlecloudcommunity.com/gc/Feature-Ideas/In-the-Google-Drive-logs-show-actions-related-to-Drive-files-not/idi-p/537520 ...

RE: Phishing through file sharing

Posted By Christopher Andrews 03-24-2023 10:15:58 AM
Found In Egroup: Google Workspace \ view thread
We have seen a similar attack, a PDF is shared that contains a link to a credential harvesting site hosted outside of Google. Yes, users no matter how much warning and training will click on these and enter their passwords. They will also click the accept this login attempt messages from their Gmail ...

RE: Phishing through file sharing

Posted By Christopher Andrews 03-24-2023 09:50:57 AM
Found In Egroup: Google Workspace \ view thread
Same issue: Google support will not help you if the person sharing the file is a consumer account The shared messages come from a Google Drive email account and no actionable message attributes (like the sharer) are shared in logs so you cannot alert on a new person sharing with large numbers of your ...

RE: Phishing through file sharing

Posted By Christopher Andrews 03-24-2023 08:02:38 AM
Found In Egroup: Google Workspace \ view thread
No good solutions. Google does not surface Google Drive logs for Drive files owned by users outside your Google tenant.Google Workspace support will refuse to help if the Google Drive file is owned by a personal account. They will not even write a Spam report for you, you have to use the consumer grade ...

RE: Last sign in conundrum

Posted By Christopher Andrews 02-27-2023 11:11:18 AM
Found In Egroup: Google Workspace \ view thread
This should look at the last seven days and show you the latest values, so if the usage logs are delayed a couple of days you will still get the latest data. SELECT STRING_AGG(accounts.admin_set_name ORDER BY _PARTITIONTIME DESC LIMIT 1) AS `DisplayName` , user_email AS `Email` , record_type AS `Type` ...

RE: Last sign in conundrum

Posted By Christopher Andrews 02-27-2023 09:59:56 AM
Found In Egroup: Google Workspace \ view thread
If you have Workspace Bigquery logs configured you can get the info there: SELECT accounts.admin_set_name AS `DisplayName` , user_email AS `Email` , record_type , accounts.is_archived , accounts.is_suspended , accounts.is_disabled , accounts.disabled_reason , DATETIME(TIMESTAMP_SECONDS(accounts.last_login_time), ...

RE: Getting "current" storage usage numbers

Posted By Christopher Andrews 02-24-2023 09:50:02 AM
Found In Egroup: Google Workspace \ view thread
If you have Google Workspace logging and metrics configured to go to Big Query you can use that. Here is a simple query to get the current values for a given day: SELECT accounts.admin_set_name AS `DisplayName` , user_email AS `Email` , record_type , accounts.is_disabled AS `IsDisabled` , accounts.used_quota_in_mb ...

RE: Best Practices for Third-party email service providers / SPF and DKIM

Posted By Christopher Andrews 12-12-2022 08:03:57 AM
Found In Egroup: Google Workspace \ view thread
Boston College has completed the move to 100% reject DMARC on our domain. We did have to engage a vendor to help us with the process, but we moved quickly once the vendor was engaged. We had champions in ITS Security and the BC board/upper management. This helped us with our messaging on DMARC. We have ...

RE: Why doesn't allowlisting keep messages from getting the "scare banner"?

Posted By Christopher Andrews 09-21-2022 01:25:54 PM
Found In Egroup: Google Workspace \ view thread
This is most likely the spoofing setting in Gmail: https://support.google.com/a/answer/9157861?product_name=UnuFlow&visit_id=637993845959066955-3411851590&rd=1&src=supportwidget0#zippy=%2Cturn-on-spoofing-and-authentication-protection For some reason Google only looks at passing SPF for this spoofing ...

RE: DMARC rejections increasing in frequency

Posted By Christopher Andrews 08-15-2022 07:40:27 AM
Found In Egroup: Google Workspace \ view thread
You need to make sure that all IPs related to your email gateways are added as inbound gateways in your Gmail configuration. This will cause Google to look to the previous hop for SPF validation, instead of marking SPF as a fail because your email gateways are not in the SPF records of the sending domains. ...

RE: Meet really unreliable in my office on Safari

Posted By Christopher Andrews 11-10-2021 09:22:35 AM
Found In Egroup: Google Workspace \ view thread
Google Meet is very CPU intensive, having anything else that uses a lot of CPU, like browser plugins or a VPN connection will result in poor Google Meet performance. Check your CPU usage when running Meet in Safari and see if you are maxing out your CPU _____ Christopher Andrews Boston College Collaboration ...