Investigative views overview

Supported in:

Google secops SIEM

Google Security Operations lets you investigate many different aspects of the information stored in your Google SecOps account using the investigation views:

• Alert view
• Asset view
• Domain view
• File view
• IP address view
• Uppercase alert view
• User view

Note: UDM search provides enhanced capabilities that let you conduct more thorough investigations of the events and alerts within your Google SecOps instance than is possible using investigation views alone. For more information, see UDM search.

Need more help? Get answers from Community members and Google SecOps professionals.