QUESTION

Google's Alert Center can generate alerts for suspicious activity, such as suspected phising emails and compromised devices. Is there an OOTB method of ingesting these events to Panther?

ANSWER

Panther's G SuiteĀ (Google Workspace) integration is currently only geared towards ingesting audit activity, not security alerts. While it's possible to ingest these alerts via a Pub/Sub log source, you'll need to define schemas for the alerts yourself. We don't have any pre-configured integration at this time.