Skip to main content
Affinity/Documentation
Español

Getting Started

  • What is Affinity
  • Sign In
  • Your First 15 Minutes
  • Navigation Map

Integrations (Admin)

  • Integration List
  • Create Integration
  • Start Ingestion
  • Secrets

Logs (Analyst)

  • Overview
  • SQL Queries (Presto)
  • Visual Query Builder
  • Use Cases
  • Search & Export
  • Share Queries
  • Create Rule from Logs

Alerts (Analyst)

  • List & Filters
  • Details & Management
  • Full View

Detection & Notifications (Admin)

  • Detection Rules
  • Notifications

Incident Response (Analyst)

  • Extract IOCs
  • Query IOCs in Logs
  • Export Results

Administration

  • User Management
  • Lookup Tables

Troubleshooting

  • Common Issues

Reference

  • Glossary
  • Integration Catalog
  • FAQ
  • Step-by-Step Guides

Full Alert View

RoleAnalystRead10 min

Screen

Alert Details

/alerts-view/details?alert_id={id}

What it's for

Access full alert context with executive summary, MITRE ATT&CK, and raw data.

Steps

  1. 1

    From the side panel, click Open Full View.

  2. 2

    To return: Back to Alerts.

Expected result

  • ✓Expanded view with full context for investigation or reporting.

Tips

  • Use full view to present context to stakeholders: Executive Summary covers the essentials.
  • Execute Query takes you directly to related logs.

Available sections

  • Executive Summary
  • Alert Classification
  • Security Detection Summary
  • Alert Management
  • MITRE ATT&CK Mapping
  • Event Correlation & Query Context
  • Raw Alert Data
Previous

Details & Management

Next

Detection Rules