Google Security Operations is designed to work exclusively with the Google Chrome or Mozilla Firefox browsers.
Google recommends upgrading your browser to the most current version. You can download the latest version of Chrome from https://www.google.com/chrome/.
Google Security Operations is integrated into your single sign-on solution (SSO).
You can log in to Google Security Operations using the credentials provided by your enterprise.
Launch Chrome or Firefox.
Ensure you have access to your corporate account.
To access the Google Security Operations application, where customer_subdomain
is your customer-specific identifier, navigate to:
https://customer_subdomain.backstory.chronicle.security.
Begin your investigation by entering the domain, email, username, hostname,
IP address, file hash, or URL you want to investigate. You can also click the date
and time function, to the left, to focus your search on a specific date and time
by navigating through the pop-up calendar and clock setting. The times and dates
of all recorded events have been converted to UTC for consistency across all of
your security data.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-25 UTC."],[[["Google Security Operations requires either the Google Chrome or Mozilla Firefox browser for access."],["You can log in to Google Security Operations using your enterprise's single sign-on (SSO) credentials."],["To access the application, navigate to `https://customer_subdomain.backstory.chronicle.security`, replacing `customer_subdomain` with your organization's unique identifier."],["Investigations can be initiated by searching for domains, emails, usernames, hostnames, IP addresses, file hashes, or URLs, with the ability to specify date and time."],["All recorded event times and dates within Google Security Operations are consistently displayed in UTC."]]],[]]
