Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition
The Suspicious device activities report enables you to view details of suspicious activities on your corporate devices during a specified time range. Only devices under advanced management are included in this report.
Use this report to view device IDs, device owners, and the timestamps of the suspicious device activities.
If a device property is updated on a mobile device, this change is counted as a suspicious activity. Device properties include the serial number, the device model, the name of operating system, and more.
To view the Suspicious device activities report:
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
Security
Security center
- In the lower-right corner of the Suspicious device activities panel, click VIEW REPORT.
You can customize the report to view data over a specific time range: Today, Yesterday, This week, Last week, This month, Last month, or Days ago (up to 180 days); or enter a Start date and End date. Click Apply after you set the date range.
By default, the graph displays data for All domains. To select a specific domain, choose from the Domain drop-down list.
Note: This report provides data for Android devices only, and not for iOS devices.
