-
Notifications
You must be signed in to change notification settings - Fork 8.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Security Solution] expanded flyout - right section - overview tab - mitre attack #152767
Conversation
Pinging @elastic/security-threat-hunting (Team:Threat Hunting) |
5219c54
to
73059de
Compare
73059de
to
af32b16
Compare
💚 Build Succeeded
Metrics [docs]Module Count
Async chunks
Unknown metric groupsESLint disabled line counts
Total ESLint disabled count
History
To update your PR or re-run it, just comment with: |
I will take a look after the base one is merged:) |
the base one was merged yesterday, this PR is rebased and ready for review, I just had forgotten to update the description! |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice work, getting real data in here! 🕺🏾
Summary
This PR leverages the work done in a previous PR and add the Mitre Attack section under the overview tab of the Security Solution expandable flyout right section panel:
getMitreComponentParts
method to get the display of the mitre attack's descriptionHow to test
xpack.securitySolution.enableExperimental: ['securityFlyoutEnabled']
to thekibana.json
fileyarn es snapshot --license trial
,yarn test:generate
andyarn start --no-base-path
Notes
To generate alerts with Mitre Attack value, you can for example create a new
Custom Query
rule with the following_id is *
query, then in the second section (About rule
), expand theAdvanced Settings
then add some tactic and technique valuesRun tests and storybook
node scripts/storybook security_solution
to run Storybooknpm run test:jest --config ./x-pack/plugins/security_solution/public/flyout
to run the unit testsyarn cypress:open-as-ci
but note that the integration/e2e tests have been written but are now skipped because the feature is protected behind a feature flag, disabled by default. To check them, add'securityFlyoutEnabled'
herehttps://github.com/elastic/security-team/issues/6069
Checklist
Delete any items that are not applicable to this PR.