[EDR Workflows][Artifacts Regrouping] Re-organize all artifacts to a single page with separate tabs

src/platform/packages/shared/deeplinks/security/deep_links.ts

@@ -12,6 +12,7 @@ export enum SecurityPageName {
   alerts = 'alerts',
   attacks = 'attacks',
   aiValue = 'ai_value',
+  artifacts = 'artifacts',
   assetInventory = 'asset_inventory',
   attackDiscovery = 'attack_discovery',
   blocklist = 'blocklist',

x-pack/platform/plugins/private/translations/translations/de-DE.json

@@ -32258,7 +32258,6 @@
     "xpack.securitySolution.appLinks.actionHistoryDescription": "Zeigen Sie den Verlauf der auf Hosts ausgeführten Reaktionsmaßnahmen an.",
     "xpack.securitySolution.appLinks.alerts": "Alerts",
     "xpack.securitySolution.appLinks.attackDiscovery": "Angriffserkennung",
-    "xpack.securitySolution.appLinks.blocklistDescription": "Schließen Sie unerwünschte Anwendungen von der Ausführung auf Ihren Hosts aus.",
     "xpack.securitySolution.appLinks.category.discover": "Discover",
     "xpack.securitySolution.appLinks.category.endpoints": "Endpoints",
     "xpack.securitySolution.appLinks.category.entityAnalytics": "Entity Analytics",
@@ -32275,12 +32274,10 @@
     "xpack.securitySolution.appLinks.ecsDataQualityDashboardDescription": "Überprüfen Sie die Index-Mappings und Werte auf Kompatibilität mit dem Elastic Common Schema (ECS).",
     "xpack.securitySolution.appLinks.endpointsDescription": "Hosts, auf denen Elastic Defend läuft.",
     "xpack.securitySolution.appLinks.entityAnalyticsDescription": "Entitätsanalysen, Anomalien und Bedrohungen, um den Monitoring-Bereich einzugrenzen.",
-    "xpack.securitySolution.appLinks.eventFiltersDescription": "Verhindern Sie, dass Ereignisse mit hohem Volumen oder unerwünschte Ereignisse in Elasticsearch geschrieben werden.",
     "xpack.securitySolution.appLinks.exceptions": "Ausnahmelisten",
     "xpack.securitySolution.appLinks.exceptionsDescription": "Erstellen und verwalten Sie gemeinsame Ausnahmelisten, um die Erstellung unerwünschter Alarme zu verhindern.",
     "xpack.securitySolution.appLinks.explore": "Erkunden",
     "xpack.securitySolution.appLinks.getStarted": "Erste Schritte",
-    "xpack.securitySolution.appLinks.hostIsolationDescription": "Erlauben Sie isolierten Hosts, mit bestimmten IP-Adressen zu kommunizieren.",
     "xpack.securitySolution.appLinks.hosts": "Hosts",
     "xpack.securitySolution.appLinks.hosts.allHosts": "Alle Hosts",
     "xpack.securitySolution.appLinks.hosts.anomalies": "Anomalien",
@@ -32305,7 +32302,6 @@
     "xpack.securitySolution.appLinks.rulesDescription": "Erstellen und verwalten Sie Erkennungsregeln für die Bedrohungserkennung und -Monitoring.",
     "xpack.securitySolution.appLinks.timeline.templates": "Vorlagen",
     "xpack.securitySolution.appLinks.timelines": "Zeitleisten",
-    "xpack.securitySolution.appLinks.trustedApplicationsDescription": "Verbessern Sie die Leistung oder mindern Sie Konflikte mit anderen Anwendungen, die auf Ihren Hosts ausgeführt werden.",
     "xpack.securitySolution.appLinks.users": "Nutzer",
     "xpack.securitySolution.appLinks.users.allUsers": "Alle Nutzer",
     "xpack.securitySolution.appLinks.users.anomalies": "Anomalien",

x-pack/platform/plugins/private/translations/translations/fr-FR.json

@@ -32601,7 +32601,6 @@
     "xpack.securitySolution.appLinks.actionHistoryDescription": "Affichez l'historique des actions de réponse effectuées sur les hôtes.",
     "xpack.securitySolution.appLinks.alerts": "Alertes",
     "xpack.securitySolution.appLinks.attackDiscovery": "Attack discovery",
-    "xpack.securitySolution.appLinks.blocklistDescription": "Excluez les applications non souhaitées de l'exécution sur vos hôtes.",
     "xpack.securitySolution.appLinks.category.cloudSecurity": "Sécurité du cloud",
     "xpack.securitySolution.appLinks.category.discover": "Discover",
     "xpack.securitySolution.appLinks.category.endpoints": "Points de terminaison",
@@ -32620,12 +32619,10 @@
     "xpack.securitySolution.appLinks.ecsDataQualityDashboardDescription": "Vérifiez la compatibilité des mappings et des valeurs d'index avec Elastic Common Schema (ECS)",
     "xpack.securitySolution.appLinks.endpointsDescription": "Hôtes exécutant Elastic Defend.",
     "xpack.securitySolution.appLinks.entityAnalyticsDescription": "Analyse d'entités, anomalies et menaces pour limiter la surface de monitoring.",
-    "xpack.securitySolution.appLinks.eventFiltersDescription": "Excluez les volumes importants ou les événements non souhaités de l'écriture dans Elasticsearch.",
     "xpack.securitySolution.appLinks.exceptions": "Listes d'exceptions",
     "xpack.securitySolution.appLinks.exceptionsDescription": "Créez et gérez des listes d'exceptions partagées pour empêcher la création d'alertes non souhaitées.",
     "xpack.securitySolution.appLinks.explore": "Explorer",
     "xpack.securitySolution.appLinks.getStarted": "Premiers pas",
-    "xpack.securitySolution.appLinks.hostIsolationDescription": "Autorisez les hôtes isolés à communiquer avec des IP spécifiques.",
     "xpack.securitySolution.appLinks.hosts": "Hôtes",
     "xpack.securitySolution.appLinks.hosts.allHosts": "Tous les hôtes",
     "xpack.securitySolution.appLinks.hosts.anomalies": "Anomalies",
@@ -32651,7 +32648,6 @@
     "xpack.securitySolution.appLinks.rulesDescription": "Créez et gérez les règles de détection pour la détection et le monitoring des menaces.",
     "xpack.securitySolution.appLinks.timeline.templates": "Modèles",
     "xpack.securitySolution.appLinks.timelines": "Chronologies",
-    "xpack.securitySolution.appLinks.trustedApplicationsDescription": "Améliorez les performances ou réduisez les conflits avec d'autres applications en cours d'exécution sur vos hôtes.",
     "xpack.securitySolution.appLinks.users": "Utilisateurs",
     "xpack.securitySolution.appLinks.users.allUsers": "Tous les utilisateurs",
     "xpack.securitySolution.appLinks.users.anomalies": "Anomalies",

x-pack/platform/plugins/private/translations/translations/ja-JP.json

@@ -32655,7 +32655,6 @@
     "xpack.securitySolution.appLinks.actionHistoryDescription": "ホストで実行された対応アクションの履歴を表示します。",
     "xpack.securitySolution.appLinks.alerts": "アラート",
     "xpack.securitySolution.appLinks.attackDiscovery": "Attack discovery",
-    "xpack.securitySolution.appLinks.blocklistDescription": "不要なアプリケーションがホストで実行されないようにします。",
     "xpack.securitySolution.appLinks.category.cloudSecurity": "クラウドセキュリティ",
     "xpack.securitySolution.appLinks.category.discover": "Discover",
     "xpack.securitySolution.appLinks.category.endpoints": "エンドポイント",
@@ -32674,12 +32673,10 @@
     "xpack.securitySolution.appLinks.ecsDataQualityDashboardDescription": "Elastic Common Schema（ECS）との互換性に関してインデックスマッピングと値を確認",
     "xpack.securitySolution.appLinks.endpointsDescription": "Elastic Defendを実行しているホスト。",
     "xpack.securitySolution.appLinks.entityAnalyticsDescription": "監視面の分野を絞り込むエンティティ分析、異常、脅威。",
-    "xpack.securitySolution.appLinks.eventFiltersDescription": "大量のイベントや不要なイベントがElasticsearchに書き込まれないようにします。",
     "xpack.securitySolution.appLinks.exceptions": "例外リスト",
     "xpack.securitySolution.appLinks.exceptionsDescription": "不要なアラートの生成を防止するために、共有例外リストを作成して管理します。",
     "xpack.securitySolution.appLinks.explore": "探索",
     "xpack.securitySolution.appLinks.getStarted": "はじめて使う",
-    "xpack.securitySolution.appLinks.hostIsolationDescription": "分離されたホストが特定のIPと通信することを許可します。",
     "xpack.securitySolution.appLinks.hosts": "ホスト",
     "xpack.securitySolution.appLinks.hosts.allHosts": "すべてのホスト",
     "xpack.securitySolution.appLinks.hosts.anomalies": "異常",
@@ -32705,7 +32702,6 @@
     "xpack.securitySolution.appLinks.rulesDescription": "脅威の検出と監視のための検出ルールの作成および管理します。",
     "xpack.securitySolution.appLinks.timeline.templates": "テンプレート",
     "xpack.securitySolution.appLinks.timelines": "タイムライン",
-    "xpack.securitySolution.appLinks.trustedApplicationsDescription": "パフォーマンスを改善したり、ホストで実行されている他のアプリケーションとの競合を解消したりします。",
     "xpack.securitySolution.appLinks.users": "ユーザー",
     "xpack.securitySolution.appLinks.users.allUsers": "すべてのユーザー",
     "xpack.securitySolution.appLinks.users.anomalies": "異常",

x-pack/platform/plugins/private/translations/translations/zh-CN.json

@@ -32638,7 +32638,6 @@
     "xpack.securitySolution.appLinks.actionHistoryDescription": "查看在主机上执行的响应操作的历史记录。",
     "xpack.securitySolution.appLinks.alerts": "告警",
     "xpack.securitySolution.appLinks.attackDiscovery": "Attack Discovery",
-    "xpack.securitySolution.appLinks.blocklistDescription": "阻止不需要的应用程序在您的主机上运行。",
     "xpack.securitySolution.appLinks.category.cloudSecurity": "云安全",
     "xpack.securitySolution.appLinks.category.discover": "发现",
     "xpack.securitySolution.appLinks.category.endpoints": "终端",
@@ -32657,12 +32656,10 @@
     "xpack.securitySolution.appLinks.ecsDataQualityDashboardDescription": "检查索引映射和值以了解与 Elastic Common Schema (ECS) 的兼容性",
     "xpack.securitySolution.appLinks.endpointsDescription": "运行 Elastic Defend 的主机。",
     "xpack.securitySolution.appLinks.entityAnalyticsDescription": "用于缩小监测表面积的实体分析、异常和威胁。",
-    "xpack.securitySolution.appLinks.eventFiltersDescription": "阻止将高数目或非预期事件写入到 Elasticsearch。",
     "xpack.securitySolution.appLinks.exceptions": "例外列表",
     "xpack.securitySolution.appLinks.exceptionsDescription": "创建并管理共享例外列表以避免创建非预期告警。",
     "xpack.securitySolution.appLinks.explore": "浏览",
     "xpack.securitySolution.appLinks.getStarted": "入门",
-    "xpack.securitySolution.appLinks.hostIsolationDescription": "允许隔离的主机与特定 IP 通信。",
     "xpack.securitySolution.appLinks.hosts": "主机",
     "xpack.securitySolution.appLinks.hosts.allHosts": "所有主机",
     "xpack.securitySolution.appLinks.hosts.anomalies": "异常",
@@ -32688,7 +32685,6 @@
     "xpack.securitySolution.appLinks.rulesDescription": "创建和管理检测规则以用于威胁检测和监测。",
     "xpack.securitySolution.appLinks.timeline.templates": "模板",
     "xpack.securitySolution.appLinks.timelines": "时间线",
-    "xpack.securitySolution.appLinks.trustedApplicationsDescription": "提高性能或缓解与主机上运行的其他应用程序的冲突。",
     "xpack.securitySolution.appLinks.users": "用户",
     "xpack.securitySolution.appLinks.users.allUsers": "所有用户",
     "xpack.securitySolution.appLinks.users.anomalies": "异常",

x-pack/solutions/security/packages/navigation/src/i18n_strings.ts

@@ -64,6 +64,11 @@ export const i18nStrings = {
         defaultMessage: 'Endpoints',
       }),
     },
+    artifacts: {
+      title: i18n.translate('securitySolutionPackages.navLinks.assets.artifacts', {
+        defaultMessage: 'Artifacts',
+      }),
+    },
     integrationsCallout: {
       title: i18n.translate('securitySolutionPackages.navLinks.assets.integrationsCallout.title', {
         defaultMessage: 'Integrations',

x-pack/solutions/security/packages/navigation/src/navigation_tree/assets_navigation_tree.ts

@@ -12,83 +12,81 @@ import { SecurityLinkGroup } from '../link_groups';
 import { securityLink } from '../links';
 import { i18nStrings } from '../i18n_strings';
 
-export const createAssetsNavigationTree = (core: CoreStart): NodeDefinition => ({
-  id: SecurityGroupName.assets,
-  icon: 'display',
-  title: SecurityLinkGroup[SecurityGroupName.assets].title,
-  renderAs: 'panelOpener',
-  children: [
-    {
-      link: 'fleet',
-      title: i18nStrings.assets.fleet.title,
-      children: [
-        {
-          link: 'fleet:agents',
-        },
-        {
-          link: 'fleet:policies',
-          title: i18nStrings.assets.fleet.policies,
-        },
-        {
-          link: 'fleet:enrollment_tokens',
-        },
-        {
-          link: 'fleet:uninstall_tokens',
-        },
-        {
-          link: 'fleet:data_streams',
-        },
-        {
-          link: 'fleet:settings',
-        },
-      ],
-    },
-    {
-      id: SecurityPageName.endpoints,
-      title: i18nStrings.assets.endpoints.title,
-      children: [
-        {
-          id: SecurityPageName.endpoints,
-          link: securityLink(SecurityPageName.endpoints),
-          breadcrumbStatus: 'hidden',
-        },
-        {
-          id: SecurityPageName.policies,
-          link: securityLink(SecurityPageName.policies),
-        },
-        {
-          id: SecurityPageName.trustedApps,
-          link: securityLink(SecurityPageName.trustedApps),
-        },
-        {
-          id: SecurityPageName.trustedDevices,
-          link: securityLink(SecurityPageName.trustedDevices),
-        },
-        {
-          id: SecurityPageName.eventFilters,
-          link: securityLink(SecurityPageName.eventFilters),
-        },
-        {
-          id: SecurityPageName.hostIsolationExceptions,
-          link: securityLink(SecurityPageName.hostIsolationExceptions),
-        },
-        {
-          id: SecurityPageName.blocklist,
-          link: securityLink(SecurityPageName.blocklist),
-        },
-        {
-          id: SecurityPageName.endpointExceptions,
-          link: securityLink(SecurityPageName.endpointExceptions),
-        },
-        {
-          id: SecurityPageName.responseActionsHistory,
-          link: securityLink(SecurityPageName.responseActionsHistory),
-        },
-        {
-          id: SecurityPageName.scriptLibrary,
-          link: securityLink(SecurityPageName.scriptLibrary),
-        },
-      ],
-    },
-  ],
-});
+// All artifact tab paths under the security management section.
+// Used to keep the Artifacts nav node active regardless of which tab is open,
+// since the deep link only points to the first allowed tab path.
+const SECURITY_MANAGEMENT_PATH = '/app/security/administration';
+const ARTIFACT_TAB_PATHS = [
+  `${SECURITY_MANAGEMENT_PATH}/trusted_apps`,
+  `${SECURITY_MANAGEMENT_PATH}/trusted_devices`,
+  `${SECURITY_MANAGEMENT_PATH}/event_filters`,
+  `${SECURITY_MANAGEMENT_PATH}/host_isolation_exceptions`,
+  `${SECURITY_MANAGEMENT_PATH}/blocklist`,
+  `${SECURITY_MANAGEMENT_PATH}/endpoint_exceptions`,
+] as const;
+
+export const createAssetsNavigationTree = (_core: CoreStart): NodeDefinition => {
+  return {
+    id: SecurityGroupName.assets,
+    icon: 'display',
+    title: SecurityLinkGroup[SecurityGroupName.assets].title,
+    renderAs: 'panelOpener',
+    children: [
+      {
+        link: 'fleet',
+        title: i18nStrings.assets.fleet.title,
+        children: [
+          {
+            link: 'fleet:agents',
+          },
+          {
+            link: 'fleet:policies',
+            title: i18nStrings.assets.fleet.policies,
+          },
+          {
+            link: 'fleet:enrollment_tokens',
+          },
+          {
+            link: 'fleet:uninstall_tokens',
+          },
+          {
+            link: 'fleet:data_streams',
+          },
+          {
+            link: 'fleet:settings',
+          },
+        ],
+      },
+      {
+        id: SecurityPageName.endpoints,
+        title: i18nStrings.assets.endpoints.title,
+        children: [
+          {
+            id: SecurityPageName.endpoints,
+            link: securityLink(SecurityPageName.endpoints),
+            breadcrumbStatus: 'hidden',
+          },
+          {
+            id: SecurityPageName.policies,
+            link: securityLink(SecurityPageName.policies),
+          },
+          {
+            id: SecurityPageName.artifacts,
+            title: i18nStrings.assets.artifacts.title,
+            link: securityLink(SecurityPageName.artifacts),
+            getIsActive: ({ pathNameSerialized, prepend }) =>
+              ARTIFACT_TAB_PATHS.some((path) => pathNameSerialized.startsWith(prepend(path))),
+          },
+          {
+            id: SecurityPageName.responseActionsHistory,
+            link: securityLink(SecurityPageName.responseActionsHistory),
+          },
+          {
+            id: SecurityPageName.scriptLibrary,
+            link: securityLink(SecurityPageName.scriptLibrary),
+          },
+        ],
+      },
+    ],
+  };
+};

x-pack/solutions/security/plugins/security_solution/public/app/links/app_links.ts

@@ -26,6 +26,7 @@ import { links as managementLinks, getManagementFilteredLinks } from '../../mana
 import { exploreLinks } from '../../explore/links';
 import { onboardingLinks } from '../../onboarding/links';
 import { findingsLinks } from '../../cloud_security_posture/links';
+import type { ExperimentalFeatures } from '../../../common/experimental_features';
 import type { StartPlugins } from '../../types';
 import { dashboardsLinks } from '../../dashboards/links';
 import { entityAnalyticsLinks } from '../../entity_analytics/links';
@@ -53,9 +54,14 @@ export const appLinks: AppLinkItems = Object.freeze([
 
 export const getFilteredLinks = async (
   core: CoreStart,
-  plugins: StartPlugins
+  plugins: StartPlugins,
+  experimentalFeatures: ExperimentalFeatures
 ): Promise<AppLinkItems> => {
-  const managementFilteredLinks = await getManagementFilteredLinks(core, plugins);
+  const managementFilteredLinks = await getManagementFilteredLinks(
+    core,
+    plugins,
+    experimentalFeatures
+  );
 
   const chatExperience$ = core.uiSettings.get$<AIChatExperience>(
     AI_CHAT_EXPERIENCE_TYPE,