Navigate the Entity Explorer page

Supported in:

Entities are the objects that form the basis of security events. From the Cases page, click an entity to be redirected to the Entity Explorer page.

The Entity Explorer page gives you insights into:

  • The entity's case involvement over the last three months, which may differ from the side drawer's detail. For example, a URL marked as suspicious = true and highlighted in red in the side drawer, might appear here as false if this same URL is defined according to different criteria in other cases.
  • Basic information about the entity and enriched data gathered from different cases.
  • Linked entities, such as users and IP addresses.
  • The frequency of each type of case.
  • A list of log entries.

To expand or collapse each category, click either keyboard_arrow_down Down Arrow or keyboard_arrow_up Up Arrow next to the category name.

Need more help? Get answers from Community members and Google SecOps professionals.