elastic · benskelker · Feb 5, 2020 · Feb 5, 2020 · Feb 5, 2020
diff --git a/docs/siem/images/detections-ui.png b/docs/siem/images/detections-ui.png
diff --git a/docs/siem/images/hosts-ui.png b/docs/siem/images/hosts-ui.png
diff --git a/docs/siem/images/network-ui.png b/docs/siem/images/network-ui.png
diff --git a/docs/siem/images/overview-ui.png b/docs/siem/images/overview-ui.png
diff --git a/docs/siem/siem-ui.asciidoc b/docs/siem/siem-ui.asciidoc
@@ -33,6 +33,23 @@ investigation.
 [role="screenshot"]
 image::siem/images/network-ui.png[]
 
+[float]
+[[detections-ui]]
+=== Detections
+
+The Detections feature automatically searches for threats and creates 
+signals when they are detected. Signal detection rules define the conditions 
+for creating signals. The SIEM app comes with prebuilt rules that search for 
+suspicious activity on your network and hosts. Additionally, you can
+create your own rules.
+
+See {siem-guide}/detection-engine-overview.html[Detections] in the SIEM 
+Guide for information on managing detection rules and signals via the UI 
+or the Detections API.
+
+[role="screenshot"]
+image::siem/images/detections-ui.png[]
+
 [float]
 [[timelines-ui]]
 === Timeline