From Alerts to investigations
You can launch into the investigation tool from the alert center by simply clicking the investigation tool icon, which pre-populates and opens in a new tab automatically.
Coming soon! A step-by-step video showing how to start an investigation from an alert
From Security Dashboard to investigations
In the bottom right of each chart, you will see either Investigate or View Report. Choose Investigate and a search will be automatically built for you in the investigation tool. If you see View Report, then the chart provides the ability to export data to Sheets in lieu of launching into an investigation.