Gmail audit logs have been updated to enhance incident investigations and data access for security. Gmail log events are now available in both the general audit and investigation tool and the Security investigation tool. This expansion provides broader access to this crucial security data for administrators. Furthermore, these Gmail log events are now accessible programmatically through the Google Workspace Admin SDK Reports API. This allows for automated data retrieval and analysis. A new "message content accessed" log event has been introduced specifically for Gemini and Gemini for Workspace app data access. This event offers more granular reporting on how Gemini interacts with Gmail messages. These Gemini access logs will be gradually rolled out over the coming weeks. These changes are important for organizations to effectively investigate security incidents and understand their data usage. Administrators can begin their analysis in the Audit and Investigation tool or the Admin SDK Reports API as these changes become available. This feature is available for Google Workspace editions with eligible audit log licenses.