[DOCS] Changes to Alert details flyout and new Insights section

[nastasha-solomon]

Addresses #2265.

Previews:

• Overview tab
• Insights on alerts

[janmonschke]

🎉

[michaelolo24]

Awesome sauce! Thanks for updating this 😄

[benironside]

LGTM, just left one minor suggestion

[ghost]

Hi @nastasha-solomon

we have validated the docs preview and all the required changes are present and correct. ✔️

Snap-Shoot

Hence we are adding "QA:Validated" tag to it.

thanks !!

[jmikell821]

Just a comment. LGTM otherwise! 👍

[nastasha-solomon]

@jmikell821 qq: are you saying it's ok to omit for/on in this sentence?

This section only displays for alerts with intelligence data.

I do think it needs "for/on" because the sentence saying that the "Enriched data" section only displays when the alert being viewed has threat intel data. To use a general example, if a threat indicator match alert was generated, it should have threat intel data. Now, because it has threat intel data, the "Enriched data" section will show up on the Overview tab when you open the alert's details. If you removed "for/on" in the sentence, it would say the following, which is not correct:

This section only displays alerts with threat intel.

Does this revision help clarify things at all?

This section only displays when viewing alerts with intelligence data.

[jmikell821]

@nastasha-solomon yes I'm OK with the revision.

@jmikell821 qq: are you saying it's ok to omit for/on in this sentence?

This section only displays for alerts with intelligence data.

I do think it needs "for/on" because the sentence saying that the "Enriched data" section only displays when the alert being viewed has threat intel data. To use a general example, if a threat indicator match alert was generated, it should have threat intel data. Now, because it has threat intel data, the "Enriched data" section will show up on the Overview tab when you open the alert's details. If you removed "for/on" in the sentence, it would say the following, which is not correct:

This section only displays alerts with threat intel.

Does this revision help clarify things at all?

This section only displays when viewing alerts with intelligence data.