Google LLC has rolled out more security updates to G Suite, a collection of productivity tools that includes commercial versions of services such as Docs, Drive, Gmail and Sheets.

The updates are targeted at administrators who monitor access to G Suite features via the security center.

New features include a security alert that’s triggered whenever someone tried to export data from a business web domain. Admins mostly perform this task as part of a data backup operation, but data can also be exported by attackers using a compromised account to try to steal information.

Data exports are time-consuming operations, taking an average of 72 hours to complete, Google said. As such, the alert should give admins plenty of time to examine what’s going on, and put a stop to the operation should it be necessary.

In line with this update, Google is also making it possible for admins to retain any security alerts that have been deleted for up to 30 days. This is so that attackers who gain access to a compromised admin account cannot hide deleted security alerts before a real administrator sees them.

Google is also improving so-called “phishing” attack detection in Gmail accounts managed via G Suite. Phishing refers to attacks that involve spoofing a legitimate Web address and sending out emails in an attempt to steal confidential information such as passwords and other login credentials.

“We’re leveraging machine learning to generate alerts on suspicious incoming mail in Gmail,” Google said in a blog post. “The new alerts will notify admins when malware or phishing is detected after an email has been delivered to user inboxes. In these events, admins in G Suite Enterprise domains can proactively investigate the emails and if necessary, bulk remove suspicious emails from users’ inbox.”

Finally, Google is adding a new one-click search feature for emails and IP addresses in G Suite logs, which gives admins easier access to past activity that might be related to suspicious activity.

Image: Google