Skip to content

[Security Solution][AI4DSOC] Remove code check that decides which alerts table and which flyout to show in Cases #218741

@PhilippeOberti

Description

@PhilippeOberti

Description

Shortly before the RSA conference, we realized that the Cases page was showing the alerts table from the alerts page (under the Alerts tab), instead of the alerts table from the AI4DSOC alert summary page. Also in the main Activity tab, the flyout for the alert details was not the one for AI4DSOC. The proper implementation should be done at a high level, probably leveraging configurations.
Because of time constraints, it was decided to implement a check in the code, as follow:

const AIForSOC = capabilities[SECURITY_FEATURE_ID].configurations;
if (AIForSOC) {
  // show alerts summary table or flyout
} else {
  // show alerts page table or flyout
}

This should be revisited and cleaned up.

Acceptance Criteria

  • there should not be any checks in the code at run time

Metadata

Metadata

Assignees

No one assigned

    Labels

    Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:ResponseOpsPlatform ResponseOps team (formerly the Cases and Alerting teams) t//Team:Threat HuntingSecurity Solution Threat Hunting TeamTeam:Threat Hunting:InvestigationsSecurity Solution Threat Hunting Investigations Team
    No fields configured for Enhancement.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions