Create rule to audit user taking screenshot on sensitive drive data

I need to set up a rule where i can get the audit logs of user who are secretly taking screenshots of files in gdrive with their names as well as their device name.