Log in to Google Security Operations

Google Security Operations is designed to work exclusively with the Google Chrome or Mozilla Firefox browsers.

Google recommends upgrading your browser to the most current version. You can download the latest version of Chrome from https://www.google.com/chrome/.

Google Security Operations is integrated into your single sign-on solution (SSO). You can log in to Google Security Operations using the credentials provided by your enterprise.

  1. Launch Chrome or Firefox.

  2. Ensure you have access to your corporate account.

  3. To access the Google Security Operations application, where customer_subdomain is your customer-specific identifier, navigate to: https://customer_subdomain.backstory.chronicle.security.

Begin your investigation by entering the domain, email, username, hostname, IP address, file hash, or URL you want to investigate. You can also click the date and time function, to the left, to focus your search on a specific date and time by navigating through the pop-up calendar and clock setting. The times and dates of all recorded events have been converted to UTC for consistency across all of your security data.