22. One or more non-transitory storage media storing instructions which, when executed by one or more computing devices, cause: extracting a set of accessed domain names from a set of events stored in a field-searchable data store, wherein each accessed domain name in the set of accessed domain names was not detected in events generated prior to generation of the set of events; identifying a respective registration time for each accessed domain name in the set of accessed domain names, wherein the respective registration time is indicative of when the accessed domain name was first detected within the set of events; identifying a subset of accessed domain names in the set of accessed domain names for which the identified respective registration time of each accessed domain name in the subset is recent relative to times for other accessed domain names in the set of accessed domain names; determining, for each accessed domain name in the subset, an access count corresponding to how many times the set of events indicates that the accessed domain name in the subset was accessed; causing display of information relating to the access count.
27. The one or more non-transitory storage media of claim 22 , wherein the instructions which, when executed by the one or more computing devices, cause: receiving an input corresponding to a selection of a particular identified accessed domain name; presenting additional detail pertaining to events in the set of events that included the particular identified accessed domain name.