Grid controls

By default, the grid view contains all the results returned by the last search. The grid view supports basic grid features such as reordering and sorting columns. The most powerful feature of the grid view is the ability to “pivot” to new hosts, accounts, or logon processes. Pivoting is accomplished by clicking on the value in any of the following grid columns:

Pivoting submits a new search query and updates the Search UI accordingly. Pivoting by process is the only way to search by the Process field. Filtering by process (that is, hiding/displaying specific process values display in the grid) is supported, as discussed in the Graph filter section below.