IP Address view lets you investigate whether or not specific IP addresses
are present within your enterprise and what impact they might have had on your
assets.
Google Security Operations lets you investigate specific IP addresses to determine if any
are present within your enterprise and what impact these outside systems might
have had on your assets. IP Address view is derived from the same security
information and data that you have forwarded to Google SecOps from your enterprise and
can also examine using Asset view.
From Asset view, you begin your investigation from within your enterprise and
look outward. From IP Address view, you begin your investigation from
outside your enterprise and look in.
To access IP Address view in Google SecOps, complete the following steps:
Enter the IP address you need to investigate in the search bar at the
top of the Google SecOps user interface. Click SEARCH.
Select the IP address from the DESTINATIONS IPS menu. IP Address view is displayed.
Click the
icon in the top right corner of the Google SecOps user interface to open the
Procedural Filtering menu. Procedural
Filtering lets you further filter information pertaining to an asset,
including by event type, log source, network connection status, and Top
Level Domain (TLD).
The following Procedural Filtering options are available in IP Address view:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-05-11 UTC."],[[["IP Address view in Google Security Operations allows users to investigate the presence and impact of specific IP addresses on their enterprise assets."],["Unlike Asset view, which starts investigations within the enterprise and looks outward, IP Address view begins investigations from outside the enterprise, looking inward."],["To access IP Address view, users can search for an IP address in the Google Security Operations interface and select it from the DESTINATIONS IPS menu."],["Procedural Filtering in IP Address view enables further refinement of information by event type, log source, network connection status, and Top Level Domain (TLD)."]]],[]]
icon in the top right corner of the Google SecOps user interface to open the
Procedural Filtering menu. Procedural
Filtering lets you further filter information pertaining to an asset,
including by event type, log source, network connection status, and Top
Level Domain (TLD).