Filter data in Domain view

Supported in:

Domain view lets you investigate whether or not specific domains are present within your enterprise and what impact they might have had on your assets.

To access Domain view in Google Security Operations, complete the following steps:

  1. Enter the domain (ending with a known public suffix) or URL you need to investigate in the search bar. Click SEARCH.

  2. Select the domain from the DOMAINS menu. Domain view is displayed.

  3. Click the Filtering Icon icon in the top right corner of the Google Security Operations user interface to open the Procedural Filtering menu. Procedural Filtering lets you further filter information pertaining to an asset, including by event type, log source, network connection status, and Top Level Domain (TLD).

    The following Procedural Filtering options are available in Domain view:

    • ASSETS
    • EVENT TYPE
    • LOG SOURCE
    • NETWORK CONNECTION STATUS
    • TLD