The investigation tool is a powerful resource in the Admin console. With it, you can identify, triage, and respond to security and privacy issues in your domain. It is available to admins with Education Standard or Education Plus licenses.
Use cases for the Investigation Tool
- Search Gmail logs and messages to view email content, delete malicious emails, mark emails as spam or phishing.
- Access Drive log data to change ownership, add/remove users, change permissions, view who has accessed a file.
- Determine users who have not logged in recently and clean up accounts that shouldn't be active.
- Verify when a user last changed their password.