Investigation views

Supported in:

Google SecOps SIEM

Google Security Operations lets you investigate many different aspects of the information stored in your Google Security Operations account using the investigation views:

• Alert view
• Asset view
• Domain view
• File view
• IP address view
• Uppercase alert view
• User view

Note: UDM search provides enhanced capabilities that let you conduct more thorough investigations of the events and alerts within your Google Security Operations instance than is possible using investigation views alone. For more information, see UDM search.