Skip to content

docs(console): Alert Explorer documentation - #1145

Merged
mobula9 merged 11 commits into
mainfrom
docs/alert-explorer
Sep 15, 2026
Merged

mobula9 merged 11 commits into
mainfrom
docs/alert-explorer

Conversation

@mobula9

@mobula9 mobula9 commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

Rewrite of the Console Alerts section around the new Alert Explorer, use-case driven.

  • Overview: the questions the Explorer answers, and the anatomy of the page
  • Investigate an attack wave: one walkthrough from a behavior trend to banning the attackers
  • Search and filter: from a clue (IP, CIDR, CVE) to the full picture, all filter dimensions
  • Custom views: save, pin (3 per org), share by URL
  • The WAF view: reading it, and what an empty state means
  • Contexts and Quotas updated for the new UI, Alerts analysis folded into Search and filter

Screenshots are [capture: ...] placeholders on purpose: they will be shot in one pass once the UI is frozen, with staged data matching the walkthrough.

Use-case driven rewrite: Overview opens on the questions the Explorer answers,
Investigate walks one attack wave end to end, Search and filter starts from a
clue, Custom views and The WAF view get their own pages. Alerts analysis is
folded into Search and filter, contexts and quotas updated for the new UI.
Screenshots are placeholders on purpose - captured once the GA ships.
@mobula9 mobula9 self-assigned this Sep 9, 2026
@aws-amplify-eu-west-1

Copy link
Copy Markdown

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-1145.d1to60jd2gb6y6.amplifyapp.com

@mobula9
mobula9 requested a review from rr404 September 9, 2026 12:14
12 themed pairs captured at 2x on staged data (an ssh-bruteforce wave ramping
over the last three days, a known-reputation http-exploit burst behind it),
sidebar collapsed. Two placeholders remain on purpose: the WAF empty state and
the context tag menu.
…surge/quotas on the Explorer

- WAF view captured populated (fresh AppSec fixtures) plus the real empty-state pitch
- context tag menu captured, context column reshot with realistic WAF tags
- background noise page rewritten around the v2 Noise canceling filter
- attack surge page: toggle/notification/drilldown captured in the Explorer, investigation checklist condensed
- quotas: Usage section reshot in both themes
@rr404

rr404 commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

P2: pour la side bar, en fait si tu as plein de sous section à Alert explorer, autan sortir Attack surge.
suivons le left menu de la console du coup:

  • Security Engines
  • Alert Explorer
  • Attack Surge
  • Decisions
  • Remediaiton Metrics
  • Remediation Sync
    // je me rend compte qu'on a aps de doc HUB, mais on attendra d'avoir un HUB mis à jour

@rr404 rr404 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM -* ok pour un merge, on fera d'autres mini ajustement plus tard si nécesaire

@mobula9
mobula9 merged commit 4074955 into main Sep 15, 2026
3 checks passed
@mobula9
mobula9 deleted the docs/alert-explorer branch September 15, 2026 10:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants