Detection of File Changes by Google Scans

How does Cisco Cloudlock detect recent changes to a Google Drive file?

Changes to a file in Google Drive are picked up by incremental scans that run at scheduled intervals for each organization. The way that files are scanned is by their ‘change_id’, a Google value that is updated by Google at the time of new activity to a file or its folder that contains the file. If the file ID is the same as when the last scan was executed, the file is simply skipped, but if the ID is different at the time of a new scan, it will run any relevant policy evaluations against it.

For more information on how Google handles auditing of Drive activity, please visit: 

Google Drive file activity