GAT+ | How to Set Up Google Drive DLP Alerts for Shared Out Files

GAT+ allows Google Workspace admins to create Alert rules for Google Drive file usage.

Alerts can be based on a number of actions like the number of files downloaded, the number of shared out documents per day.

Alerts based on specific contents with documents, spreadsheets, presentations, PDF, and text files that are shared out.

Configuring Alert Rules

Open GAT+ navigate to Alert rules under the Configuration tab

Select users

Click on the + sign and a new window will be displayed, fill in the details as shown below:

• Set up a Name for the rule
• Set the checkmark to Enabled
• Set the Type to Drive

Choose the scope whom will be affected by this alert rule

• It can be a user, group, or org.unit.

To apply it to all users on your domain enter /* for the Org. Unit

Pick and select the Recipient it can be any local user from your domain or someone from outside.

Note: If no recipient selects the alerts will be simply reported in the Alerts tab on the left-hand side menu.

The rules on which an alert will be generated are:

• Alert on number of files downloaded (files in a 24 hour period)
• Alert on number of files shared out(files in a 24 hour period)
• Alert rule can be added as an alert if the regex matches a newly shared out file  (doc, spreadsheet, presentation, PDF, text files):
• Alert if “share to” address matches specified pattern.

Set up the rule

For Alert if the regex matches a newly shared out file (doc, spreadsheet, presentation, PDF, text files)

Click on the + button to add a rule.

Two options will be displayed:

Custom: Select and add custom Regex pattern

Click on the Select button and predefined Regex pattern examples will be displayed.

Pick any of the rule examples and click on the “Select” button beside it

Note: If you would like us to add additional Regex patterns that you think is important, please email us at support@gatlabs.com with your suggestion.

The rule will be added

Click on the + sign underneath to add multiple Regex patterns.

Additional rules

Additionally, you can set extra actions:

• Notify the user if you want to show a custom message to the end-user who shared out this document.
• Remove shares if you want to remove the external shares automatically.

Click on the Save button to activate the rule.

Viewing Alert Rules

Alert rules can be found in the Alert rules under the configuration

An admin can quickly see the name of the rule, the type of the rule if it is enabled, what scope, and the recipients.

Under the summary tab, an admin can see exactly the alerts enabled for this rule.

Under the actions tab, the rule can be viewed (eye icon), it can be edited from the pen icon or deleted from the x button.

Result

When the rules are violated the Recipients will receive email notifications and a record for the rule will be generated and placed under Alerts 

The recipient will receive an email notification below.

All the Alerts can be seen under the Audit and Management area in GAT+.

If you would like to run a trial of our products please install GAT+ from the Google Workspace Marketplace and contact us at support@gatlabs.com with any questions you may have.

To request a demo please click here and fill the form, we will get back to you in less than 12 hours during weekdays.

If you trailed GAT in the past and you would like to run a fresh trial again, please enquire through this form.