[SecuritySolutions] Create Asset Criticality CSV upload page

packages/deeplinks/security/deep_links.ts

@@ -80,5 +80,6 @@ export enum SecurityPageName {
   usersRisk = 'users-risk',
   entityAnalytics = 'entity_analytics',
   entityAnalyticsManagement = 'entity_analytics-management',
+  entityAnalyticsAssetClassification = 'entity_analytics-asset-classification',
   coverageOverview = 'coverage-overview',
 }

packages/kbn-doc-links/src/get_doc_links.ts

@@ -483,6 +483,7 @@ export const getDocLinks = ({ kibanaBranch, buildFlavor }: GetDocLinkOptions): D
         hostRiskScore: `${SECURITY_SOLUTION_DOCS}host-risk-score.html`,
         userRiskScore: `${SECURITY_SOLUTION_DOCS}user-risk-score.html`,
         entityRiskScoring: `${SECURITY_SOLUTION_DOCS}entity-risk-scoring.html`,
+        assetCriticality: `${SECURITY_SOLUTION_DOCS}asset-criticality.html`,
       },
       detectionEngineOverview: `${SECURITY_SOLUTION_DOCS}detection-engine-overview.html`,
     },

packages/kbn-doc-links/src/types.ts

@@ -358,6 +358,7 @@ export interface DocLinks {
       readonly hostRiskScore: string;
       readonly userRiskScore: string;
       readonly entityRiskScoring: string;
+      readonly assetCriticality: string;
     };
     readonly detectionEngineOverview: string;
   };

x-pack/plugins/security_solution/common/constants.ts

@@ -115,6 +115,8 @@ export const BLOCKLIST_PATH = `${MANAGEMENT_PATH}/blocklist` as const;
 export const RESPONSE_ACTIONS_HISTORY_PATH = `${MANAGEMENT_PATH}/response_actions_history` as const;
 export const ENTITY_ANALYTICS_PATH = '/entity_analytics' as const;
 export const ENTITY_ANALYTICS_MANAGEMENT_PATH = `/entity_analytics_management` as const;
+export const ENTITY_ANALYTICS_ASSET_CRITICALITY_PATH =
+  `/entity_analytics_asset_criticality` as const;
 export const APP_OVERVIEW_PATH = `${APP_PATH}${OVERVIEW_PATH}` as const;
 export const APP_LANDING_PATH = `${APP_PATH}${LANDING_PATH}` as const;
 export const APP_DETECTION_RESPONSE_PATH = `${APP_PATH}${DETECTION_RESPONSE_PATH}` as const;

x-pack/plugins/security_solution/public/app/translations.ts

@@ -25,6 +25,13 @@ export const ENTITY_ANALYTICS_RISK_SCORE = i18n.translate(
   }
 );
 
+export const ASSET_CRITICALITY = i18n.translate(
+  'xpack.securitySolution.navigation.assetCriticality',
+  {
+    defaultMessage: 'Asset criticality',
+  }
+);
+
 export const DETECTION_RESPONSE = i18n.translate(
   'xpack.securitySolution.navigation.detectionResponse',
   {

x-pack/plugins/security_solution/public/common/icons/asset_criticality.tsx

@@ -0,0 +1,43 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+import type { SVGProps } from 'react';
+import React from 'react';
+export const IconAssetCriticality: React.FC<SVGProps<SVGSVGElement>> = ({ ...props }) => (
+  <svg
+    fill="none"
+    xmlns="http://www.w3.org/2000/svg"
+    width="16"
+    height="16"
+    viewBox="0 0 32 32"
+    {...props}
+  >
+    <path
+      fillRule="evenodd"
+      clipRule="evenodd"
+      d="M4 24C6.20928 24 8 22.2093 8 20C8 17.7907 6.20928 16 4 16C1.79072 16 0 17.7907 0 20C0 22.2093 1.79072 24 4 24ZM4 18C5.10472 18 6 18.8953 6 20C6 21.1047 5.10472 22 4 22C2.89528 22 2 21.1047 2 20C2 18.8953 2.89528 18 4 18Z"
+      fill="#535766"
+    />
+    <path d="M3 26H5V31H3V26Z" fill="#00BFB3" />
+    <path d="M3 1H5V17H3V1Z" fill="#535766" />
+    <path
+      fillRule="evenodd"
+      clipRule="evenodd"
+      d="M16 14C18.2093 14 20 12.2093 20 10C20 7.79072 18.2093 6 16 6C13.7907 6 12 7.79072 12 10C12 12.2093 13.7907 14 16 14ZM16 8C17.1047 8 18 8.89528 18 10C18 11.1047 17.1047 12 16 12C14.8953 12 14 11.1047 14 10C14 8.89528 14.8953 8 16 8Z"
+      fill="#535766"
+    />
+    <path d="M15 16H17V31H15V16Z" fill="#00BFB3" />
+    <path d="M15 1H17V7H15V1Z" fill="#535766" />
+    <path
+      fillRule="evenodd"
+      clipRule="evenodd"
+      d="M28 24C30.2093 24 32 22.2093 32 20C32 17.7907 30.2093 16 28 16C25.7907 16 24 17.7907 24 20C24 22.2093 25.7907 24 28 24ZM28 18C29.1047 18 30 18.8953 30 20C30 21.1047 29.1047 22 28 22C26.8953 22 26 21.1047 26 20C26 18.8953 26.8953 18 28 18Z"
+      fill="#535766"
+    />
+    <path d="M27 26H29V31H27V26Z" fill="#00BFB3" />
+    <path d="M27 1H29V17H27V1Z" fill="#535766" />
+  </svg>
+);

x-pack/plugins/security_solution/public/common/lib/telemetry/constants.ts

@@ -45,6 +45,9 @@ export enum TelemetryEventTypes {
   AssistantMessageSent = 'Assistant Message Sent',
   AssistantQuickPrompt = 'Assistant Quick Prompt',
   AssistantSettingToggled = 'Assistant Setting Toggled',
+  AssetCriticalityCsvPreviewGenerated = 'Asset Criticality Csv Preview Generated',
+  AssetCriticalityFileSelected = 'Asset Criticality File Selected',
+  AssetCriticalityCsvImported = 'Asset Criticality CSV Imported',
   EntityDetailsClicked = 'Entity Details Clicked',
   EntityAlertsClicked = 'Entity Alerts Clicked',
   EntityRiskFiltered = 'Entity Risk Filtered',

x-pack/plugins/security_solution/public/common/lib/telemetry/events/entity_analytics/index.ts

@@ -99,3 +99,118 @@ export const addRiskInputToTimelineClickedEvent: TelemetryEvent = {
     },
   },
 };
+
+export const assetCriticalityFileSelectedEvent: TelemetryEvent = {
+  eventType: TelemetryEventTypes.AssetCriticalityFileSelected,
+  schema: {
+    valid: {
+      type: 'boolean',
+      _meta: {
+        description: 'If the file is valid',
+        optional: false,
+      },
+    },
+    errorCode: {
+      type: 'keyword',
+      _meta: {
+        description: 'Error code if the file is invalid',
+        optional: true,
+      },
+    },
+    file: {
+      properties: {
+        size: {
+          type: 'long',
+          _meta: {
+            description: 'File size in bytes',
+            optional: false,
+          },
+        },
+      },
+    },
+  },
+};
+
+export const assetCriticalityCsvPreviewGeneratedEvent: TelemetryEvent = {
+  eventType: TelemetryEventTypes.AssetCriticalityCsvPreviewGenerated,
+  schema: {
+    file: {
+      properties: {
+        size: {
+          type: 'long',
+          _meta: {
+            description: 'File size in bytes',
+            optional: false,
+          },
+        },
+      },
+    },
+    processing: {
+      properties: {
+        startTime: {
+          type: 'date',
+          _meta: {
+            description: 'Processing start time',
+            optional: false,
+          },
+        },
+        endTime: {
+          type: 'date',
+          _meta: {
+            description: 'Processing end time',
+            optional: false,
+          },
+        },
+        tookMs: {
+          type: 'long',
+          _meta: {
+            description: 'Processing time in milliseconds',
+            optional: false,
+          },
+        },
+      },
+    },
+    stats: {
+      properties: {
+        validLines: {
+          type: 'long',
+          _meta: {
+            description: 'Number of valid lines',
+            optional: false,
+          },
+        },
+        invalidLines: {
+          type: 'long',
+          _meta: {
+            description: 'Number of invalid lines',
+            optional: false,
+          },
+        },
+        totalLines: {
+          type: 'long',
+          _meta: {
+            description: 'Total number of lines',
+            optional: false,
+          },
+        },
+      },
+    },
+  },
+};
+
+export const assetCriticalityCsvImportedEvent: TelemetryEvent = {
+  eventType: TelemetryEventTypes.AssetCriticalityCsvImported,
+  schema: {
+    file: {
+      properties: {
+        size: {
+          type: 'long',
+          _meta: {
+            description: 'File size in bytes',
+            optional: false,
+          },
+        },
+      },
+    },
+  },
+};

x-pack/plugins/security_solution/public/common/lib/telemetry/events/entity_analytics/types.ts

@@ -29,13 +29,46 @@ export interface ReportAddRiskInputToTimelineClickedParams {
   quantity: number;
 }
 
+export interface ReportAssetCriticalityFileSelectedParams {
+  valid: boolean;
+  errorCode?: string;
+  file: {
+    size: number;
+  };
+}
+
+export interface ReportAssetCriticalityCsvPreviewGeneratedParams {
+  file: {
+    size: number;
+  };
+  processing: {
+    startTime: string;
+    endTime: string;
+    tookMs: number;
+  };
+  stats: {
+    validLines: number;
+    invalidLines: number;
+    totalLines: number;
+  };
+}
+
+export interface ReportAssetCriticalityCsvImportedParams {
+  file: {
+    size: number;
+  };
+}
+
 export type ReportEntityAnalyticsTelemetryEventParams =
   | ReportEntityDetailsClickedParams
   | ReportEntityAlertsClickedParams
   | ReportEntityRiskFilteredParams
   | ReportToggleRiskSummaryClickedParams
   | ReportRiskInputsExpandedFlyoutOpenedParams
-  | ReportAddRiskInputToTimelineClickedParams;
+  | ReportAddRiskInputToTimelineClickedParams
+  | ReportAssetCriticalityCsvPreviewGeneratedParams
+  | ReportAssetCriticalityFileSelectedParams
+  | ReportAssetCriticalityCsvImportedParams;
 
 export type EntityAnalyticsTelemetryEvent =
   | {
@@ -61,4 +94,16 @@ export type EntityAnalyticsTelemetryEvent =
   | {
       eventType: TelemetryEventTypes.RiskInputsExpandedFlyoutOpened;
       schema: RootSchema<ReportRiskInputsExpandedFlyoutOpenedParams>;
+    }
+  | {
+      eventType: TelemetryEventTypes.AssetCriticalityCsvPreviewGenerated;
+      schema: RootSchema<ReportAssetCriticalityCsvPreviewGeneratedParams>;
+    }
+  | {
+      eventType: TelemetryEventTypes.AssetCriticalityFileSelected;
+      schema: RootSchema<ReportAssetCriticalityFileSelectedParams>;
+    }
+  | {
+      eventType: TelemetryEventTypes.AssetCriticalityCsvImported;
+      schema: RootSchema<ReportAssetCriticalityCsvImportedParams>;
     };

x-pack/plugins/security_solution/public/common/lib/telemetry/events/telemetry_events.ts

@@ -18,6 +18,9 @@ import {
   addRiskInputToTimelineClickedEvent,
   RiskInputsExpandedFlyoutOpenedEvent,
   toggleRiskSummaryClickedEvent,
+  assetCriticalityCsvPreviewGeneratedEvent,
+  assetCriticalityFileSelectedEvent,
+  assetCriticalityCsvImportedEvent,
 } from './entity_analytics';
 import {
   assistantInvokedEvent,
@@ -150,6 +153,9 @@ export const telemetryEvents = [
   entityClickedEvent,
   entityAlertsClickedEvent,
   entityRiskFilteredEvent,
+  assetCriticalityCsvPreviewGeneratedEvent,
+  assetCriticalityFileSelectedEvent,
+  assetCriticalityCsvImportedEvent,
   toggleRiskSummaryClickedEvent,
   RiskInputsExpandedFlyoutOpenedEvent,
   addRiskInputToTimelineClickedEvent,

x-pack/plugins/security_solution/public/common/lib/telemetry/telemetry_client.mock.ts

@@ -29,4 +29,7 @@ export const createTelemetryClientMock = (): jest.Mocked<TelemetryClientStart> =
   reportAddRiskInputToTimelineClicked: jest.fn(),
   reportDetailsFlyoutOpened: jest.fn(),
   reportDetailsFlyoutTabClicked: jest.fn(),
+  reportAssetCriticalityCsvPreviewGenerated: jest.fn(),
+  reportAssetCriticalityFileSelected: jest.fn(),
+  reportAssetCriticalityCsvImported: jest.fn(),
 });

x-pack/plugins/security_solution/public/common/lib/telemetry/telemetry_client.ts

@@ -28,9 +28,12 @@ import type {
   ReportToggleRiskSummaryClickedParams,
   ReportDetailsFlyoutOpenedParams,
   ReportDetailsFlyoutTabClickedParams,
+  ReportAssetCriticalityCsvPreviewGeneratedParams,
+  ReportAssetCriticalityFileSelectedParams,
+  ReportAssetCriticalityCsvImportedParams,
+  ReportAddRiskInputToTimelineClickedParams,
 } from './types';
 import { TelemetryEventTypes } from './constants';
-import type { ReportAddRiskInputToTimelineClickedParams } from './events/entity_analytics/types';
 
 /**
  * Client which aggregate all the available telemetry tracking functions
@@ -108,6 +111,22 @@ export class TelemetryClient implements TelemetryClientStart {
     });
   };
 
+  public reportAssetCriticalityCsvPreviewGenerated = (
+    params: ReportAssetCriticalityCsvPreviewGeneratedParams
+  ) => {
+    this.analytics.reportEvent(TelemetryEventTypes.AssetCriticalityCsvPreviewGenerated, params);
+  };
+
+  public reportAssetCriticalityFileSelected = (
+    params: ReportAssetCriticalityFileSelectedParams
+  ) => {
+    this.analytics.reportEvent(TelemetryEventTypes.AssetCriticalityFileSelected, params);
+  };
+
+  public reportAssetCriticalityCsvImported = (params: ReportAssetCriticalityCsvImportedParams) => {
+    this.analytics.reportEvent(TelemetryEventTypes.AssetCriticalityCsvImported, params);
+  };
+
   public reportMLJobUpdate = (params: ReportMLJobUpdateParams) => {
     this.analytics.reportEvent(TelemetryEventTypes.MLJobUpdate, params);
   };

x-pack/plugins/security_solution/public/common/lib/telemetry/types.ts

@@ -30,6 +30,9 @@ import type {
   ReportEntityRiskFilteredParams,
   ReportRiskInputsExpandedFlyoutOpenedParams,
   ReportToggleRiskSummaryClickedParams,
+  ReportAssetCriticalityCsvPreviewGeneratedParams,
+  ReportAssetCriticalityFileSelectedParams,
+  ReportAssetCriticalityCsvImportedParams,
 } from './events/entity_analytics/types';
 import type {
   AssistantTelemetryEvent,
@@ -56,6 +59,9 @@ export type {
   ReportRiskInputsExpandedFlyoutOpenedParams,
   ReportToggleRiskSummaryClickedParams,
   ReportAddRiskInputToTimelineClickedParams,
+  ReportAssetCriticalityCsvPreviewGeneratedParams,
+  ReportAssetCriticalityFileSelectedParams,
+  ReportAssetCriticalityCsvImportedParams,
 } from './events/entity_analytics/types';
 export * from './events/document_details/types';
 
@@ -118,7 +124,12 @@ export interface TelemetryClientStart {
   reportToggleRiskSummaryClicked(params: ReportToggleRiskSummaryClickedParams): void;
   reportRiskInputsExpandedFlyoutOpened(params: ReportRiskInputsExpandedFlyoutOpenedParams): void;
   reportAddRiskInputToTimelineClicked(params: ReportAddRiskInputToTimelineClickedParams): void;
-
+  // Entity Analytics Asset Criticality
+  reportAssetCriticalityFileSelected(params: ReportAssetCriticalityFileSelectedParams): void;
+  reportAssetCriticalityCsvPreviewGenerated(
+    params: ReportAssetCriticalityCsvPreviewGeneratedParams
+  ): void;
+  reportAssetCriticalityCsvImported(params: ReportAssetCriticalityCsvImportedParams): void;
   reportCellActionClicked(params: ReportCellActionClickedParams): void;
 
   reportAnomaliesCountClicked(params: ReportAnomaliesCountClickedParams): void;

x-pack/plugins/security_solution/public/common/mock/storybook_providers.tsx

@@ -62,6 +62,7 @@ const coreMock = {
   settings: {
     client: {
       get: () => {},
+      get$: () => new Subject(),
       set: () => {},
     },
   },