Menu
Ensure Google Chat externally is restricted to allowed domains
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-gworkspace-3-1-4-2-1The command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Based on SOC occupation classification
Showing SKILL.md
| name | cis-gworkspace-3.1.4.2.1 |
| description | Ensure Google Chat externally is restricted to allowed domains |
| category | cis-gworkspace |
| version | 1.3.0 |
| author | cyberstrike-official |
| tags | ["cis","gcp","google-workspace","google-chat","external-chat"] |
| cis_id | 3.1.4.2.1 |
| cis_benchmark | CIS Google Workspace Foundations Benchmark v1.3.0 |
| tech_stack | ["gcp","google-workspace"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Control how users chat with people outside of your organization. If you allow your users to chat externally, you can also allow them to create and join spaces with people outside your organization.
Restricting external chat to only approved domains potentially limits the spread of company information.
Users will not be able to chat with users in any external domain, only approved domains. This will require some admin-level approval and allowlist maintenance.
AppsGoogle Chat and classic HangoutsExternal Chat SettingsChat externallyAllow users to send messages outside <company> is ONOnly allow this for allowlisted domains is checkedAllow users to send messages outside <company> should be ON, and Only allow this for allowlisted domains should be checked.
AppsGoogle Chat and classic HangoutsExternal Chat SettingsChat externallyAllow users to send messages outside <company> to ONOnly allow this for allowlisted domains to checkedSaveAllow users to send messages outside <company> is set to ONOnly allow this for allowlisted domains is unchecked| Controls Version | Control |
|---|
| IG 1 |
|---|
| IG 2 |
|---|
| IG 3 |
|---|
| v8 | 3.3 Configure Data Access Control Lists | x | x | x |
| v7 | 14.6 Protect Information through Access Control Lists | x | x | x |
Level 1