SIT (Security Investigation Tool)
The investigation tool is a powerful resource in the Admin console. With it, you can identify, triage, and respond to security and privacy issues in your domain. It is available to admins with premium Google Workspace licenses - such as Education Plus or Enterprise Plus.
A few example use cases for SIT
Search Gmail logs and messages to view email content, delete malicious emails, mark emails as spam or phishing.
Access Drive log data to change ownership, add/remove users, change permissions, view who has accessed a file.
Determine users who have not logged in recently and clean up accounts that shouldn't be active.
Verify when a user last changed their password.
