Gmail filters "date installed?"

[Dierk Polzin]

All,

When doing cybersecurity investigations.. 

Is there a way to find out when a Gmail Filter was created?  I don't see that.

gam user <username> show filters

gam user <username> info filters <filterid>

Both these generate the
FilterID, Criteria, Actions

But nothing much else.

Thanks Dierk

[Jay Lee]

What's the filter doing? There's this for forwarding which should include forwarding via filter: 

https://developers.google.com/workspace/admin/reports/v1/appendix/activity/user-accounts#email_forwarding_change

You can see the report with

gam report user_accounts

Jay Lee

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/5303d58d-9552-453a-8456-a2b0045bcff3n%40googlegroups.com.

[Dierk Polzin]

What's the filter doing?

Moving Incoming Emails into Trash

It would also be nice to remove all filters for all users have Criteria: from "xx...@xxxxx.xxx"

I will have to play around with this below..  and just write a script to loop through all users and run at whatever time interval.

https://github.com/GAM-team/GAM/wiki/Users-Gmail-Filters#delete-filters-referencing-a-particular-label-for-a-user

=====

part 1 - create a list of filters for the user..
gam user <username>@xxxxx.xxx print filters > filters_<username>.csv

-- i cannot get the redirect csv filter.csv to work for some reason...

part 2 - delete the filters of your choice.

gam config csv_input_row_filter "'from:regex:sen...@company.com'"  csv filters_<username>.csv gam user "~User" delete filter "~id"

[Ross Scroggs]

Dierk,

Send me a private Meet/Zoom invitation and we'll get a solution.

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/7f4f3ab6-76fe-4867-8eab-da5a90241d36n%40googlegroups.com.