List the ways to access Google SecOps search?

Google SecOps provides a few distinct entry points to its search experience, reflecting the platform's split between SIEM-focused and SOAR-focused search targets.

• SIEM Search page: accessed via Investigation > Search on the navigation bar, for querying UDM events and alerts.
• SOAR Search page: a separate search focused specifically on cases and entities, supporting bulk actions like case merging.
• Gemini natural language search: typing a plain-language question that Gemini translates into the underlying query syntax.
• Raw Log Search / Filters: browsing and selecting UDM fields directly to build a search expression, rather than typing YARA-L syntax freehand.

Which entry point makes sense depends on what an analyst is looking for: the SIEM Search page is the right tool for investigating raw telemetry and detection output, while the SOAR Search page is the right tool for locating and managing cases and the entities involved in them — a distinction that mirrors the platform's broader separation between SIEM-specific and SOAR-specific administrative settings.