From dashboard and alerts to investigations

From Alerts to investigations

You can launch into the investigation tool from the alert center by simply clicking the investigation tool icon, which pre-populates and opens in a new tab automatically.

From Security Dashboard to investigations

The Security Dashboard may surface trends or issues that you want to investigate further. You can pivot to the Investigation Tool directly from the dashboard.

In the bottom right of each chart, you will see either Investigate or View Report. Choose Investigate and a search will be automatically built for you in the investigation tool. If you see View Report, then the chart provides the ability to export data to Sheets in lieu of launching into an investigation.