[Security Solution]Investigation in timeline present for Ransomware.Feature Alert prevalence

[ghost]

Describe the bug
Investigation in timeline present for Ransomware.Feature Alert prevalence

Build Details

Version: 8.3.0 BC2
Commit:25476b531ba9f32292bde85508d342aa5e1c29eb
Build:53231

Steps

• Login to kibana and go to Security App

• Enable the Endpoint security rule

• Generate the ransomware alert , test-script for this is here
  Testfile.zip

• click on alert details and fly-out

• Observed that investigate in timeline is present for dash value

Screen-Shoot

ksingh.-.ec2-3-89-244-0.compute-1.amazonaws.com.-.Remote.Desktop.Connection.2022-06-07.15-18-39.mp4

Additional Details:

Rule JSON:
ransomware.zip

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[ghost]

#132095

[janmonschke]

@karanbirsingh-qasource I created this PR (#133791) that should fix the issue once and for all :D

However, the changes in that PR change the UX of the table and it would be great to update the QA script for it once it's merged. From that PR onwards, there will be no dedicated Investigate in timeline button but a LinkButton that shows the count which has the same functionality as the previous button.

Since I'm out for the rest of the week, could you maybe update the script when the PR merges?

[ghost]

@karanbirsingh-qasource I created this PR (#133791) that should fix the issue once and for all :D

However, the changes in that PR change the UX of the table and it would be great to update the QA script for it once it's merged. From that PR onwards, there will be no dedicated Investigate in timeline button but a LinkButton that shows the count which has the same functionality as the previous button.

Since I'm out for the rest of the week, could you maybe update the script when the PR merges?

ok @janmonschke we will check the issue after pr merge and also look into the script

[janmonschke]

@karanbirsingh-qasource The PR has been merged 🎉

[ghost]

Hi @janmonschke

we have validated this issue and found the new changes that is change of hover action to clickable button for investigate in prevalence for alert highlights.

Build Details:

Version:8.3.0 BC4
Commit:875ea184462f73a04410981ac9eaf799db28b4f0
Build:53413

Screen-Shoot:

Hence we are closing this issue and adding "QA:Validated" tag to it.

thanks !!