[Security Solution] Expanded flyout Entities Overview

x-pack/plugins/security_solution/cypress/e2e/detection_alerts/expandable_flyout/alert_details_left_panel.cy.ts

@@ -8,7 +8,15 @@
 import {
   DOCUMENT_DETAILS_FLYOUT_HISTORY_TAB,
   DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB,
-  DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_CONTENT,
+  DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_BUTTON_GROUP,
+  DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_ENTITIES_BUTTON,
+  DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_THREAT_INTELLIGENCE_BUTTON,
+  DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_PREVALENCE_BUTTON,
+  DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_CORRELATIONS_BUTTON,
+  DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_ENTITIES_CONTENT,
+  DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_THREAT_INTELLIGENCE_CONTENT,
+  DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_PREVALENCE_CONTENT,
+  DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_CORRELATIONS_CONTENT,
   DOCUMENT_DETAILS_FLYOUT_INVESTIGATIONS_TAB_CONTENT,
   DOCUMENT_DETAILS_FLYOUT_INVESTIGATIONS_TAB,
   DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB,
@@ -28,6 +36,10 @@ import {
   openInvestigationsTab,
   openSessionView,
   openVisualizeTab,
+  openEntities,
+  openThreatIntelligence,
+  openPrevalence,
+  openCorrelations,
 } from '../../../tasks/document_expandable_flyout';
 import { cleanKibana } from '../../../tasks/common';
 import { login, visit } from '../../../tasks/login';
@@ -65,7 +77,7 @@ describe.skip('Alert details expandable flyout left panel', { testIsolation: fal
     cy.get(DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB_BUTTON_GROUP).should('be.visible');
 
     openInsightsTab();
-    cy.get(DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_CONTENT).should('be.visible');
+    cy.get(DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_BUTTON_GROUP).should('be.visible');
 
     openInvestigationsTab();
     cy.get(DOCUMENT_DETAILS_FLYOUT_INVESTIGATIONS_TAB_CONTENT).should('be.visible');
@@ -74,24 +86,67 @@ describe.skip('Alert details expandable flyout left panel', { testIsolation: fal
     cy.get(DOCUMENT_DETAILS_FLYOUT_HISTORY_TAB_CONTENT).should('be.visible');
   });
 
-  it('should display a button group with 2 button in the visualize tab', () => {
-    openVisualizeTab();
-    cy.get(DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB_SESSION_VIEW_BUTTON)
-      .should('be.visible')
-      .and('have.text', 'Session View');
-    cy.get(DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB_GRAPH_ANALYZER_BUTTON)
-      .should('be.visible')
-      .and('have.text', 'Analyzer Graph');
+  describe('visualiza tab', () => {
+    it('should display a button group with 2 button in the visualize tab', () => {
+      openVisualizeTab();
+      cy.get(DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB_SESSION_VIEW_BUTTON)
+        .should('be.visible')
+        .and('have.text', 'Session View');
+      cy.get(DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB_GRAPH_ANALYZER_BUTTON)
+        .should('be.visible')
+        .and('have.text', 'Analyzer Graph');
+    });
+
+    it('should display content when switching buttons', () => {
+      openVisualizeTab();
+      openSessionView();
+      cy.get(DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB_SESSION_VIEW_CONTENT)
+        .should('be.visible')
+        .and('have.text', 'Session view');
+
+      openGraphAnalyzer();
+      cy.get(DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB_GRAPH_ANALYZER_CONTENT).should('be.visible');
+    });
   });
 
-  it('should display content when switching buttons', () => {
-    openVisualizeTab();
-    openSessionView();
-    cy.get(DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB_SESSION_VIEW_CONTENT)
-      .should('be.visible')
-      .and('have.text', 'Session view');
+  describe('insights tab', () => {
+    it('should display a button group with 4 button in the insights tab', () => {
+      openInsightsTab();
+      cy.get(DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_ENTITIES_BUTTON)
+        .should('be.visible')
+        .and('have.text', 'Entities');
+      cy.get(DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_THREAT_INTELLIGENCE_BUTTON)
+        .should('be.visible')
+        .and('have.text', 'Threat Intelligence');
+      cy.get(DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_PREVALENCE_BUTTON)
+        .should('be.visible')
+        .and('have.text', 'Prevalence');
+      cy.get(DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_CORRELATIONS_BUTTON)
+        .should('be.visible')
+        .and('have.text', 'Correlations');
+    });
+
+    it('should display content when switching buttons', () => {
+      openInsightsTab();
+      openEntities();
+      cy.get(DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_ENTITIES_CONTENT)
+        .should('be.visible')
+        .and('have.text', 'Entities');
+
+      openThreatIntelligence();
+      cy.get(DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_THREAT_INTELLIGENCE_CONTENT)
+        .should('be.visible')
+        .and('have.text', 'Threat Intelligence');
+
+      openPrevalence();
+      cy.get(DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_PREVALENCE_CONTENT)
+        .should('be.visible')
+        .and('have.text', 'Prevalence');
 
-    openGraphAnalyzer();
-    cy.get(DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB_GRAPH_ANALYZER_CONTENT).should('be.visible');
+      openCorrelations();
+      cy.get(DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_CORRELATIONS_CONTENT)
+        .should('be.visible')
+        .and('have.text', 'Correlations');
+    });
   });
 });

x-pack/plugins/security_solution/cypress/e2e/detection_alerts/expandable_flyout/alert_details_right_panel_overview_tab.cy.ts

@@ -22,12 +22,19 @@ import {
   DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_DESCRIPTION_DETAILS,
   DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_DESCRIPTION_EXPAND_BUTTON,
   DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_REASON_DETAILS,
+  DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_ENTITIES_HEADER,
+  DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_ENTITIES_CONTENT,
+  DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_ENTITY_PANEL_HEADER,
+  DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_ENTITY_PANEL_CONTENT,
+  DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_VIEW_ALL_ENTITIES_BUTTON,
+  DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_ENTITIES_CONTENT,
 } from '../../../screens/document_expandable_flyout';
 import {
   expandFirstAlertExpandableFlyout,
   openOverviewTab,
   toggleOverviewTabDescriptionSection,
   toggleOverviewTabInvestigationSection,
+  toggleOverviewTabInsightsSection,
 } from '../../../tasks/document_expandable_flyout';
 import { cleanKibana } from '../../../tasks/common';
 import { login, visit } from '../../../tasks/login';
@@ -144,5 +151,33 @@ describe.skip(
         openOverviewTab();
       });
     });
+
+    describe('insights section', () => {
+      before(() => {
+        toggleOverviewTabDescriptionSection();
+        toggleOverviewTabInsightsSection();
+      });
+
+      it('should display entities section', () => {
+        cy.get(DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_ENTITIES_HEADER)
+          .scrollIntoView()
+          .should('be.visible')
+          .and('have.text', 'Entities');
+        cy.get(DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_ENTITIES_CONTENT).should('be.visible');
+        cy.get(DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_ENTITY_PANEL_HEADER).should(
+          'be.visible'
+        );
+        cy.get(DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_ENTITY_PANEL_CONTENT).should(
+          'be.visible'
+        );
+      });
+
+      it('should navigate to left panel, entities tab when view all entities is clicked', () => {
+        cy.get(DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_VIEW_ALL_ENTITIES_BUTTON)
+          .should('be.visible')
+          .click();
+        cy.get(DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_ENTITIES_CONTENT).should('be.visible');
+      });
+    });
   }
 );

x-pack/plugins/security_solution/cypress/screens/document_expandable_flyout.ts

@@ -8,11 +8,19 @@
 import {
   ANALYZER_GRAPH_TEST_ID,
   SESSION_VIEW_TEST_ID,
+  ENTITIES_DETAILS_TEST_ID,
+  THREAT_INTELLIGENCE_DETAILS_TEST_ID,
+  PREVALENCE_DETAILS_TEST_ID,
+  CORRELATIONS_DETAILS_TEST_ID,
 } from '../../public/flyout/left/components/test_ids';
 import {
   HISTORY_TAB_CONTENT_TEST_ID,
-  INSIGHTS_TAB_CONTENT_TEST_ID,
   INVESTIGATIONS_TAB_CONTENT_TEST_ID,
+  INSIGHTS_TAB_BUTTON_GROUP_TEST_ID,
+  INSIGHTS_TAB_ENTITIES_BUTTON_TEST_ID,
+  INSIGHTS_TAB_THREAT_INTELLIGENCE_BUTTON_TEST_ID,
+  INSIGHTS_TAB_PREVALENCE_BUTTON_TEST_ID,
+  INSIGHTS_TAB_CORRELATIONS_BUTTON_TEST_ID,
   VISUALIZE_TAB_BUTTON_GROUP_TEST_ID,
   VISUALIZE_TAB_GRAPH_ANALYZER_BUTTON_TEST_ID,
   VISUALIZE_TAB_SESSION_VIEW_BUTTON_TEST_ID,
@@ -57,6 +65,12 @@ import {
   MITRE_ATTACK_TITLE_TEST_ID,
   REASON_DETAILS_TEST_ID,
   REASON_TITLE_TEST_ID,
+  INSIGHTS_HEADER_TEST_ID,
+  ENTITIES_HEADER_TEST_ID,
+  ENTITIES_CONTENT_TEST_ID,
+  ENTITY_PANEL_HEADER_TEST_ID,
+  ENTITY_PANEL_CONTENT_TEST_ID,
+  ENTITIES_VIEW_ALL_BUTTON_TEST_ID,
 } from '../../public/flyout/right/components/test_ids';
 import { getClassSelector, getDataTestSubjectSelector } from '../helpers/common';
 
@@ -91,6 +105,14 @@ export const DOCUMENT_DETAILS_FLYOUT_INVESTIGATIONS_TAB = getDataTestSubjectSele
   INVESTIGATIONS_TAB_TEST_ID
 );
 export const DOCUMENT_DETAILS_FLYOUT_HISTORY_TAB = getDataTestSubjectSelector(HISTORY_TAB_TEST_ID);
+export const DOCUMENT_DETAILS_FLYOUT_INVESTIGATIONS_TAB_CONTENT = getDataTestSubjectSelector(
+  INVESTIGATIONS_TAB_CONTENT_TEST_ID
+);
+export const DOCUMENT_DETAILS_FLYOUT_HISTORY_TAB_CONTENT = getDataTestSubjectSelector(
+  HISTORY_TAB_CONTENT_TEST_ID
+);
+
+/* Left Section - Visualize tab */
 export const DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB_BUTTON_GROUP = getDataTestSubjectSelector(
   VISUALIZE_TAB_BUTTON_GROUP_TEST_ID
 );
@@ -103,14 +125,31 @@ export const DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB_GRAPH_ANALYZER_BUTTON =
   getDataTestSubjectSelector(VISUALIZE_TAB_GRAPH_ANALYZER_BUTTON_TEST_ID);
 export const DOCUMENT_DETAILS_FLYOUT_VISUALIZE_TAB_GRAPH_ANALYZER_CONTENT =
   getDataTestSubjectSelector(ANALYZER_GRAPH_TEST_ID);
-export const DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_CONTENT = getDataTestSubjectSelector(
-  INSIGHTS_TAB_CONTENT_TEST_ID
+
+/* Left Section - Insights tab */
+export const DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_BUTTON_GROUP = getDataTestSubjectSelector(
+  INSIGHTS_TAB_BUTTON_GROUP_TEST_ID
 );
-export const DOCUMENT_DETAILS_FLYOUT_INVESTIGATIONS_TAB_CONTENT = getDataTestSubjectSelector(
-  INVESTIGATIONS_TAB_CONTENT_TEST_ID
+export const DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_ENTITIES_BUTTON = getDataTestSubjectSelector(
+  INSIGHTS_TAB_ENTITIES_BUTTON_TEST_ID
 );
-export const DOCUMENT_DETAILS_FLYOUT_HISTORY_TAB_CONTENT = getDataTestSubjectSelector(
-  HISTORY_TAB_CONTENT_TEST_ID
+export const DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_ENTITIES_CONTENT =
+  getDataTestSubjectSelector(ENTITIES_DETAILS_TEST_ID);
+export const DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_THREAT_INTELLIGENCE_BUTTON =
+  getDataTestSubjectSelector(INSIGHTS_TAB_THREAT_INTELLIGENCE_BUTTON_TEST_ID);
+export const DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_THREAT_INTELLIGENCE_CONTENT =
+  getDataTestSubjectSelector(THREAT_INTELLIGENCE_DETAILS_TEST_ID);
+export const DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_PREVALENCE_BUTTON = getDataTestSubjectSelector(
+  INSIGHTS_TAB_PREVALENCE_BUTTON_TEST_ID
+);
+export const DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_PREVALENCE_CONTENT = getDataTestSubjectSelector(
+  PREVALENCE_DETAILS_TEST_ID
+);
+export const DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_CORRELATIONS_BUTTON = getDataTestSubjectSelector(
+  INSIGHTS_TAB_CORRELATIONS_BUTTON_TEST_ID
+);
+export const DOCUMENT_DETAILS_FLYOUT_INSIGHTS_TAB_CORRELATIONS_CONTENT = getDataTestSubjectSelector(
+  CORRELATIONS_DETAILS_TEST_ID
 );
 
 /* Overview tab */
@@ -168,6 +207,19 @@ export const DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_HIGHLIGHTED_FIELDS_DETAILS =
 export const DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_HIGHLIGHTED_FIELDS_GO_TO_TABLE_LINK =
   getDataTestSubjectSelector(HIGHLIGHTED_FIELDS_GO_TO_TABLE_LINK);
 
+export const DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_SECTION_HEADER =
+  getDataTestSubjectSelector(INSIGHTS_HEADER_TEST_ID);
+export const DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_ENTITIES_HEADER =
+  getDataTestSubjectSelector(ENTITIES_HEADER_TEST_ID);
+export const DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_ENTITIES_CONTENT =
+  getDataTestSubjectSelector(ENTITIES_CONTENT_TEST_ID);
+export const DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_VIEW_ALL_ENTITIES_BUTTON =
+  getDataTestSubjectSelector(ENTITIES_VIEW_ALL_BUTTON_TEST_ID);
+export const DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_ENTITY_PANEL_HEADER =
+  getDataTestSubjectSelector(ENTITY_PANEL_HEADER_TEST_ID);
+export const DOCUMENT_DETAILS_FLYOUT_OVERVIEW_TAB_INSIGHTS_ENTITY_PANEL_CONTENT =
+  getDataTestSubjectSelector(ENTITY_PANEL_CONTENT_TEST_ID);
+
 /* Table tab */
 
 export const DOCUMENT_DETAILS_FLYOUT_TABLE_TAB_FILTER = getClassSelector('euiFieldSearch');