Netskope provides forensics capabilities to scan your Organizations, Folders, and Projects for DLP violations. You can configure Google Cloud Storage in your organization, folder, or project as the destination to store forensic-related objects.
The following workflow diagram provides a visual representation of the steps required to configure your Google Cloud Storage as a forensic destination.
To learn more: Enabling Forensics for Google Cloud Storage.