Skip to main content
Affinity/Documentation
Español

Getting Started

  • What is Affinity
  • Sign In
  • Your First 15 Minutes
  • Navigation Map

Integrations (Admin)

  • Integration List
  • Create Integration
  • Start Ingestion
  • Secrets

Logs (Analyst)

  • Overview
  • SQL Queries
  • Search & Export
  • Analytics Mode
  • Share Queries
  • Create Rule from Logs

Alerts (Analyst)

  • List & Filters
  • Details & Management
  • Full View

Detection & Notifications (Admin)

  • Detection Rules
  • Notification Channels

Incident Response (Analyst)

  • Extract IOCs
  • Query IOCs in Logs
  • Export Results

Usage Analytics

  • Ingestion Metrics

Administration

  • User Management

Troubleshooting

  • Common Issues

Reference

  • Glossary
  • Integration Catalog
  • FAQ
  • Step-by-Step Guides

Full Alert View

Analyst10 min

Route: `/alerts-view/details?alert_id={id}` — Title: **Alert Details**

What it's for

Access full alert context with executive summary, MITRE ATT&CK, and raw data.

Steps

  1. From the side panel, click Open Full View.
  2. To return: Back to Alerts.

Expected result

  • Expanded view with full context for investigation or reporting.

Tips

  • Use full view to present context to stakeholders: `Executive Summary` covers the essentials.
  • Execute Query takes you directly to related logs.

Available sections

  • `Executive Summary`
  • `Alert Classification`
  • `Security Detection Summary`
  • `Alert Management`
  • `MITRE ATT&CK Mapping`
  • `Event Correlation & Query Context`
  • `Raw Alert Data`
Previous

Details & Management

Next

Detection Rules