--- title: What is Security Investigation Tool? description: Security Investigation Tool? --- [Skip to content](https://support.econz.net/customer/what-is-security-investigation-tool#main-content) English Show submenu for translations [Customer portal](https://support.econz.net/portal?hsLang=en) ![logo.jpg\]](https://support.econz.net/hs-fs/hubfs/logo.jpg?height=40&name=logo.jpg) Open main navigation Close main navigation - English Show submenu for translations - [Customer portal](https://support.econz.net/portal) - Go to Econz Website Go to Econz Website Hello. How can we help you? - There are no suggestions because the search field is empty. 1. [Help Center](https://support.econz.net/customer?hsLang=en) 2. [Google Workspace](https://support.econz.net/customer/google-workspace?hsLang=en) 3. [Security](https://support.econz.net/customer/google-workspace?hsLang=en#security) # What is Security Investigation Tool? ## Security Investigation Tool? As a super administrator, you can use the security investigation tool to identify, triage, and take action on security and privacy issues in your domain. Your ability to run a search in the investigation tool depends on your [Google edition](https://support.google.com/a/answer/10077880), your [administrative privileges](https://support.google.com/a/answer/1219251), and the [data source](https://support.google.com/a/answer/11482175) You should have super administrator privileges as well as the administrator with investigation tool privileges (Custom admin privilege). **You can use the investigation tool to:** - Access data about devices - Access data about Gmail messages, including email content. - View search results that list suspended users. - Access Drive log data to investigate file sharing in your organization etc To access data in the investigation tool, from the Google **Admin console** Home page, click **Security**\> **Security Center**\> **Investigation tool.**   Here, for example, we have selected Gmail as the Data source and filtered the data using the **condition** Date.  Click on **Search** so the email data will be listed. Select the email that we want to investigate, and click on the **Action button**, we can see a lot of options which is listed in the image, and the administrator will be able to perform this action if required for that particular email.   Also, we can save, share, delete, and duplicate any investigations that you own. This enables you to retain search criteria for ongoing use and to collaborate with others in your organization while managing investigations.     Under Reporting in the Google Admin console, Google Workspace administrators can search log event data (previously called audit logs) to review user and administrator activity for an organization. But the more-advanced **security investigation tool**—which is available for Enterprise Plus and Education Plus—enables admins to identify, triage, and take action on security and privacy issues. Supported editions for the security investigation tool include Enterprise Plus, Education Standard, and Education Plus. Admins with Cloud Identity Premium, Enterprise Standard, and Education Standard can also use the investigation tool for a subset of data sources. Please check the supporting article for more information. [About the Investigation Tool](https://support.google.com/a/answer/7575955?hl=en&ref_topic=7563358) [Data sources for the investigation tool](https://support.google.com/a/answer/11482175#) - [Google Workspace](https://support.econz.net/customer/google-workspace?hsLang=en#main-content) - [Reset and recover passwords](https://support.econz.net/customer/google-workspace?hsLang=en#reset-and-recover-passwords) - [Email issue](https://support.econz.net/customer/google-workspace?hsLang=en#email-issue) - [catch-all address](https://support.econz.net/customer/google-workspace?hsLang=en#catch-all-address) - [Download Google Data](https://support.econz.net/customer/google-workspace?hsLang=en#download-google-data) - [Gmail](https://support.econz.net/customer/google-workspace?hsLang=en#gmail) - [MX Records](https://support.econz.net/customer/google-workspace?hsLang=en#mx-records) - [Company Logo](https://support.econz.net/customer/google-workspace?hsLang=en#company-logo) - [Sharing drive files to the trusted domains](https://support.econz.net/customer/google-workspace?hsLang=en#sharing-drive-files-to-the-trusted-domains) - [Mobile Device Management](https://support.econz.net/customer/google-workspace?hsLang=en#mobile-device-management) - [Restrict emails based on a size](https://support.econz.net/customer/google-workspace?hsLang=en#restrict-emails-based-on-a-size) - [Create Google Calendar Event](https://support.econz.net/customer/google-workspace?hsLang=en#create-google-calendar-event) - [less secure app](https://support.econz.net/customer/google-workspace?hsLang=en#less-secure-app) - [Drive & Docs](https://support.econz.net/customer/google-workspace?hsLang=en#drive-docs) - [Users](https://support.econz.net/customer/google-workspace?hsLang=en#users) - [Install GCPW](https://support.econz.net/customer/google-workspace?hsLang=en#install-gcpw) - [Add email aliases for user from google admin console](https://support.econz.net/customer/google-workspace?hsLang=en#add-email-aliases-for-user-from-google-admin-console) - [Set up Google Workspace user signatures in Gmail](https://support.econz.net/customer/google-workspace?hsLang=en#set-up-google-workspace-user-signatures-in-gmail) - [Add or remove printers](https://support.econz.net/customer/google-workspace?hsLang=en#add-or-remove-printers) - [New updates to Google Workspace](https://support.econz.net/customer/google-workspace?hsLang=en#new-updates-to-google-workspace) - [DNS](https://support.econz.net/customer/google-workspace?hsLang=en#dns) - [DNS Records](https://support.econz.net/customer/google-workspace?hsLang=en#dns-records) - [Admin roles](https://support.econz.net/customer/google-workspace?hsLang=en#admin-roles) - [Security](https://support.econz.net/customer/google-workspace?hsLang=en#security) - [Forms & Surveys](https://support.econz.net/customer/google-workspace?hsLang=en#forms-surveys) - [password](https://support.econz.net/customer/google-workspace?hsLang=en#password) - [Calendar](https://support.econz.net/customer/google-workspace?hsLang=en#calendar) - [Google vault](https://support.econz.net/customer/google-workspace?hsLang=en#google-vault) - [har file](https://support.econz.net/customer/google-workspace?hsLang=en#har-file) - [Cloud Data Sync](https://support.econz.net/customer/google-workspace?hsLang=en#cloud-data-sync) - [LDAP](https://support.econz.net/customer/google-workspace?hsLang=en#ldap) - [Routing](https://support.econz.net/customer/google-workspace?hsLang=en#routing) - [Data Migration](https://support.econz.net/customer/google-workspace?hsLang=en#data-migration) - [Organizational Unit(OU)](https://support.econz.net/customer/google-workspace?hsLang=en#organizational-unitou) - [License and subscription](https://support.econz.net/customer/google-workspace?hsLang=en#license-and-subscription) - [GWSMO](https://support.econz.net/customer/google-workspace?hsLang=en#gwsmo) - [Report and Audit](https://support.econz.net/customer/google-workspace?hsLang=en#report-and-audit) - [SMTP](https://support.econz.net/customer/google-workspace?hsLang=en#smtp) - [GWMME](https://support.econz.net/customer/google-workspace?hsLang=en#gwmme) - [password sync](https://support.econz.net/customer/google-workspace?hsLang=en#password-sync) - [Google Sites](https://support.econz.net/customer/google-workspace?hsLang=en#google-sites) - [Google services](https://support.econz.net/customer/google-workspace?hsLang=en#google-services) - [jamboard](https://support.econz.net/customer/google-workspace?hsLang=en#jamboard) - [Google Add-ons](https://support.econz.net/customer/google-workspace?hsLang=en#google-add-ons) - [GCPW](https://support.econz.net/customer/google-workspace?hsLang=en#gcpw) - [Keep](https://support.econz.net/customer/google-workspace?hsLang=en#keep) - [outlook](https://support.econz.net/customer/google-workspace?hsLang=en#outlook) - [Devices](https://support.econz.net/customer/google-workspace?hsLang=en#devices) - [Apps](https://support.econz.net/customer/google-workspace?hsLang=en#apps) - [Spam, phishing, and malware](https://support.econz.net/customer/google-workspace?hsLang=en#spam-phishing-and-malware) - [Windows](https://support.econz.net/customer/google-workspace?hsLang=en#windows) - [Meet Hardware](https://support.econz.net/customer/google-workspace?hsLang=en#meet-hardware) - [user settings](https://support.econz.net/customer/google-workspace?hsLang=en#user-settings) - [Google takeout](https://support.econz.net/customer/google-workspace?hsLang=en#google-takeout) - [Chrome Device Management](https://support.econz.net/customer/google-workspace?hsLang=en#chrome-device-management) - [networks](https://support.econz.net/customer/google-workspace?hsLang=en#networks) - [Chrome Enterprise Management](https://support.econz.net/customer/google-workspace?hsLang=en#chrome-enterprise-management) [![](https://support.econz.net/hs-fs/hubfs/econz%20logo.png?width=600&height=164&name=econz%20logo.png)](http://econz.cloud) Help Center Copyright © 2026, Econz IT Services Pvt Ltd