Skip to content

Redesign web interface for investigation - #2209

Open
AlyaGomaa wants to merge 1 commit into
sebas/feat/p2p_trust_catchupfrom
sebas/feat/web_investigation_redesign
Open

AlyaGomaa wants to merge 1 commit into
sebas/feat/p2p_trust_catchupfrom
sebas/feat/web_investigation_redesign

Conversation

@AlyaGomaa

@AlyaGomaa AlyaGomaa commented Nov 10, 2026 •

Copy link
Copy Markdown
Collaborator

Sub-PR of #2141: part 12 of 12. The parent PR stays open and unchanged; this PR carries one feature of it so it can be reviewed on its own.

What this PR adds

  • Workspaces: compact Overview, resizable Alerts, Evidence with inline investigation and grouping, Hosts and Device views, P2P dashboard with trust and reliability charts and a report delivery graph, configuration workspace.
  • History: live views default to the current network connection; network and interface scopes; retained runs and archives; --view reopens a saved run without analysis.
  • Review: durable alert triage, host review marks, labels and notes, reviewed flow export, whitelist rules managed from evidence.
  • Filters and tables: inclusive severity filters, sortable columns, persistent filters, light theme, clipboard buttons on JSON viewers.
  • Speed: indexed alert and host queries, bounded dashboard queries, fewer history scans on live pages.
  • Sessions: login survives Slips restarts and is separate per installation.

Where it sits in the split

Notes for review

  • SlipsWeb pointer moved to the companion commit.
  • Holds the tests that need two features at once (whitelist with TLS provider impersonation, ARP scan details in P2P reports, DNS with mDNS bindings, beaconing with service anomaly, web views of packet and SMB flows).
  • Detection history archives gain the ignored review column used by the Ignore FP/TP actions.
  • index.html: the parent's redesigned P2P header is kept; develop's only change there was a typo fix in the heading it replaces.
  • After this part the tree equals the parent PR at the head named above, merged with develop.

Tests

  • Unit suite on this branch (local, pytest tests/unit -n 3): 6404 passed, 198 skipped, 4 failed. Failing: test_group_queries_resolve_membership_once, test_native_restart_preserves_arguments_and_waits_for_worker. They fail the same way on the unsplit parent branch in the same local sandbox. Integration tests were not run locally.

Related issues

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

#2141 sub-PR Part of the split of PR #2141

Projects

Status: Todo

Development

Successfully merging this pull request may close these issues.

2 participants