Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security Solution][Exceptions] - Update entry item UI #135254

Closed
10 tasks done
yctercero opened this issue Jun 27, 2022 · 3 comments
Closed
10 tasks done

[Security Solution][Exceptions] - Update entry item UI #135254

yctercero opened this issue Jun 27, 2022 · 3 comments
Assignees
@yctercero
Labels
Feature:Rule Exceptions Security Solution Detection Rule Exceptions area Team:Security Solution Platform Security Solution Platform Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. v8.4.0

Comments

@yctercero
Copy link
Contributor

yctercero commented Jun 27, 2022 •
edited
Loading

Use cases

  • As a detection engineer or analyst I want to see an overview of the exception
  • As a detection engineer or analyst I want to be able to remove one exception from a single rule.
  • As a detection engineer or analyst I want to be able to edit an exception .

To Do

  • Can view exception item name
  • Can take action on item
  • Can view comments
  • Can view created/updated by
  • Can view conditions
  • Can view what list it is linked to
  • Can view what rules it is linked to

Designs

Screen Shot 2022-06-27 at 12 45 04 PM

Testing

  • A user can view the following information of an exception list
    • Create a rule
    • Add an exception item to that rule
    • Go to rule's exceptions view and ensure you can see the item name, creation/updated information, what rules it is linked to, what lists it is linked to, the conditions
    • Comments, if they exist, are visible
  • A user can edit the exception
    • Create a rule
    • Add an exception item to that rule
    • Go to rule's exceptions view, select the actions button
    • Select to edit
    • Edit a condition and save
    • Should see updated condition
  • A user can delete the exception
    • Create a rule
    • Add an exception item to that rule
    • Go to rule's exceptions view, select the actions button
    • Select to delete
    • Should see item disappear from view

Docs Notables

  • Update doc screenshots
@yctercero yctercero added Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Feature:Rule Exceptions Security Solution Detection Rule Exceptions area Team:Security Solution Platform Security Solution Platform Team v8.4.0 labels Jun 27, 2022
@yctercero yctercero self-assigned this Jun 27, 2022
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

@yctercero yctercero mentioned this issue Jun 27, 2022
Merged
9 tasks
yctercero added a commit that referenced this issue Jul 8, 2022
@yctercero
[Security Solution] - Update exceptions item UI (#135255)
0a0b0a1 
## Summary

Addresses #135254
@yctercero
Copy link
Contributor Author

Initial UI update PR merged 8.4 - #135255

@yctercero yctercero mentioned this issue Sep 26, 2022
Closed
13 tasks
@yctercero
Copy link
Contributor Author

Changes for entry item got merged 8.5. #138770

@yctercero yctercero mentioned this issue Oct 11, 2022
Merged
13 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@yctercero yctercero

Labels
Feature:Rule Exceptions Security Solution Detection Rule Exceptions area Team:Security Solution Platform Security Solution Platform Team Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. v8.4.0
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@yctercero @elasticmachine