Alert Detail View

​

Overview

The Alert Detail View provides a comprehensive interface for viewing and managing individual alerts. It features a rich text editor for descriptions, file attachments, and multiple tabs for different aspects of the alert.

​

Layout Structure

​

Main Content Area

1. Header Section

   • Back to list navigation
   • Severity badge
   • Editable title
   • Action buttons

2. Description Section

   • Rich text editor
   • Support for formatting
   • File attachment integration
   • Image embedding

3. Attachments Section

   • Image gallery with lightbox
   • File list with previews
   • Drag-and-drop upload
   • Attachment management

​

Right Sidebar

1. Action Panel

   • Status updates
   • Team assignments
   • Tag management
   • Custom field updates
   • Case creation/linking

2. Details Section

   • Creation information
   • Last update timestamp
   • Source details
   • Reference information

​

Activity Timeline

• Chronological activity log
• Status changes
• Assignment updates
• Comment additions
• Attachment uploads

​

Tab Navigation

​

Observables Tab

Learn more about Observables

• List of associated indicators
• Observable management
• Type categorization
• Enrichment status

​

TTPs Tab

Learn more about TTPs

• MITRE ATT&CK mapping
• Technique details
• Procedure documentation
• Tactic categorization

​

Similar Alerts Tab

Learn more about Similar Alerts

• Related alert discovery
• Similarity scoring
• Merge capabilities
• Pattern identification

​

AI Insights Tab

Learn more about AI Insights

• Automated analysis
• Risk assessment
• Recommended actions
• Pattern recognition

​

Editing Capabilities

​

Title Editing

• Direct inline editing
• Auto-save functionality
• Character limits
• Validation rules

​

Description Management

• Rich text formatting
• Image embedding
• Link integration
• Version tracking

​

File Attachments

• Multiple file upload
• Image preview
• File type support
• Size limitations

​

Collaboration Features

​

Comments and Notes

• Rich text comments
• @mentions support
• Reply threading
• Notification integration

​

Team Assignment

• Single/multiple assignees
• Team visibility settings
• Assignment history
• Auto-assignment rules

​

Best Practices

1. Content Organization

   • Use clear titles
   • Structure descriptions well
   • Categorize attachments
   • Tag appropriately

2. Collaboration

   • Update status regularly
   • Document key findings
   • Use @mentions effectively
   • Keep activity log clear

3. Investigation

   • Review all tabs
   • Document observations
   • Link related items
   • Update findings regularly

​

Next Steps