elastic / elastic/roadmap

New Detection Overview Dashboard

Open
#204 0 comments 0 reactions 1 assignee Claimed by @cthulhusec View on GitHub
product-area:security
Dominant language
No language data
Stars
6
Forks
1
PR merge metrics
No merged PRs in 30d

Description

## New Detection Overview Dashboard

### Value proposition

As experiences evolve to improve the triage of attacks and alerts, users require a clear detections overview dashboard within the Security Solution. This dashboard will summarize critical detections and provide users with key performance indicators (KPIs) related to all alert and attack data.

Key features may include:
* **Alert and Attack Metrics**: Summaries of critical alerts, including team assignment breakdowns, alert severity, and response times.
* **False Positive Analysis**: Utilization of the new alert close reason feature to incorporate metrics on why detections are being closed, such as tracking false positive rates and their improvement over time.
* **Comparative Analytics**: Core functionality focused on time-based comparisons, enabling teams to understand if they are experiencing a higher impact from alerts today than previously.
* **AI-Powered Guidance**: Integration of generative AI to provide summarized context and actionable guidance on the next steps for users.

### Expected outcome

Create a single, central dashboard for Security Operations Center (SOC) leads and teams to monitor and understand their alert and attack response performance. This should provide a summarized view for a quick, high-level summary of response effectiveness. There should be the presence of standard metrics to track and display critical performance indicators such as Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR). Trend analysis should show performance trends over time to facilitate continuous improvement and content needs to be actionable so users can pivot from the dashboard to relevant, detailed content for deeper investigation.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.