Hardens Google Workspace environments using enterprise-grade security configurations, identity protection, and data loss prevention policies.
This skill provides a comprehensive framework for securing Google Workspace environments against modern threats like Business Email Compromise (BEC) and unauthorized data exfiltration. It guides administrators through critical hardening steps, including phishing-resistant MFA enforcement with FIDO2 security keys, automated email authentication setup (SPF, DKIM, DMARC), and sophisticated Data Loss Prevention (DLP) rules. By implementing OAuth application controls and auditing external sharing permissions, this skill ensures a high-security posture aligned with CIS benchmarks and enterprise compliance requirements.
主要功能
01Data Loss Prevention (DLP) for Gmail and Drive
02OAuth application and third-party API control
03SPF, DKIM, and DMARC email authentication setup
04Phishing-resistant MFA & FIDO2 enforcement
05Super Admin account hardening & monitoring
060 GitHub stars
使用场景
01Protecting executive accounts from targeted phishing and BEC attacks
02Preventing sensitive data leaks via external Drive sharing
03Achieving CIS benchmark compliance for Google Workspace
