Maintained with ☕️ by
IcePanel logo

[Spotlight Feature] Investigate detections in Google SecOps Search

Share

Services

## Feature Feature **\[Spotlight Feature\] Investigate detections in Google SecOps Search** Google SecOps Search now supports querying, filtering, and analyzing system-generated detections. When searching on events or entities, matching detections will now appear in the **Alerts and Detections** tab, providing a more holistic workflow for threat investigation. For more details, see [Investigate detections in Search](https://cloud.google.com/chronicle/docs/investigation/investigate-detections-in-search). ## Announcement Announcement **Asynchronous Search APIs for large datasets** Google SecOps now supports asynchronous Search APIs that let you perform long-running queries without blocking your applications. This is ideal for searches that return a large volume of results. * **Non-blocking queries**: Initiate searches and receive an operation ID to track progress, so your application remains responsive. * **Handle large result sets**: Retrieve up to 1 million results from data sources including Unified Data Model (UDM) events, data tables, and Entity Context Graph (ECG). * **Paginated results**: View results efficiently in manageable pages. For more information, see [Asynchronous Search APIs](https://cloud.google.com/chronicle/docs/investigation/search-lro-api)and [Result limits for data sources](https://cloud.google.com/chronicle/docs/investigation/udm-search#resultLimitsDataSources).