Email Content Match | PCI Assessment

96 views
Skip to first unread message

Carlos G

unread,
Apr 22, 2019, 6:29:51 PM4/22/19
to GAM for G Suite
Hello,

It's been sometime since I've used GAM but wanted to know if it's possible to search from a specific users inbox against a stand-alone regex policy for Credit Card Number(s)? 

Trying to generate a report utilize a tool like Cloudlock, but at the same time wanted to see if I could use GAM for a second opinion.

Any insight or best practice would be great :)

Thanks in advance!

Ross Scroggs

unread,
Apr 23, 2019, 12:28:03 PM4/23/19
to google-ap...@googlegroups.com
Carlos,

Here is the Gmail query documentation: https://support.google.com/mail/answer/7190

I don't see anything about regex searching.

Ross

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/2df3ddd1-d063-4c37-8b9c-e00cc58a7de2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


--

Carlos G

unread,
Apr 24, 2019, 10:56:37 AM4/24/19
to GAM for G Suite
Hey Ross,

I did some research on "User Gmail Messages Thread" and found that I can meet the PCI Assessment requirements by look into attachments in which, the following was useful :

showattachments [attachmentnamepattern <RegularExpression>] - Display message attachemnts (MIME type text/plain); you can limit the attachments shown with attachmentnamepattern <RegularExpression>

Additionally for anyone interested in conducting regex match on a user/group message thread, you can simply pull down the entire email block and run it against a simple | grep regex match.

# Utilize GAM to show messages including the email body, as this is what I need to run the regex match. Dump output into file.
gam <UserTypeEntity> show messages showbody convertcrnl > audit_file.txt

# Simple grep regex match did the trick to help isolate pattern match. In this case I utilized a regex known to identify VISA|Mastercard card numbers.
echo audit_file.txt| grep -Eo "REGEX_TYPE"

Hope this helps someone down the line!

Carlos

On Tuesday, April 23, 2019 at 9:28:03 AM UTC-7, Ross Scroggs wrote:
Carlos,

Here is the Gmail query documentation: https://support.google.com/mail/answer/7190

I don't see anything about regex searching.

Ross

On Mon, Apr 22, 2019 at 3:29 PM Carlos G <crgom...@gmail.com> wrote:
Hello,

It's been sometime since I've used GAM but wanted to know if it's possible to search from a specific users inbox against a stand-alone regex policy for Credit Card Number(s)? 

Trying to generate a report utilize a tool like Cloudlock, but at the same time wanted to see if I could use GAM for a second opinion.

Any insight or best practice would be great :)

Thanks in advance!

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.


--
Ross Scroggs
Reply all
Reply to author
Forward
0 new messages