Skip to content

feat(threat-hunting): implement proactive threat hunting workspace #168

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
aliyuHabibu wants to merge 3 commits into
base: main
Choose a base branch
from
Open

feat(threat-hunting): implement proactive threat hunting workspace #168

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
fd1306a
feat(threat-hunting): implement proactive threat hunting workspace
aliyuHabibu Jun 17, 2026
2c6793c
fix: resolve CI test, lint, and Docker build failures
aliyuHabibu Jun 18, 2026
e5bdf72
fix: resolve Prettier, type and test failures in threat-hunting works…
aliyuHabibu Jun 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .eslintrc.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ module.exports = {
overrides: [
{
// Files outside all tsconfigs — lint without type-aware rules
files: ['observability/**/*.ts', 'prisma/**/*.ts', 'src/**/*.ts', 'env.d.ts'],
files: ['observability/**/*.ts', 'prisma/**/*.ts', 'src/**/*.ts', 'apps/web/**/*.ts', 'apps/web/**/*.tsx', 'env.d.ts'],
parserOptions: {
project: null,
},
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ COPY package*.json ./
COPY prisma ./prisma/

# Install production dependencies only
RUN npm ci --only=production && \
RUN npm ci --only=production --ignore-scripts && \
npm cache clean --force

# Copy built application from builder
Expand Down
300 changes: 300 additions & 0 deletions apps/web/app/threat-hunting/EventExplorer.css
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,300 @@
.ee-container {
display: flex;
flex-direction: column;
gap: 1.5rem;
}

.ee-header {
display: flex;
justify-content: space-between;
align-items: center;
flex-wrap: wrap;
gap: 1rem;
}

.ee-header-left {
display: flex;
flex-direction: column;
gap: 0.25rem;
}

.ee-section-title {
font-size: 1.25rem;
font-weight: 700;
color: #f1f5f9;
margin: 0;
}

.ee-section-desc {
font-size: 0.8125rem;
color: #64748b;
margin: 0;
}

.ee-stats-row {
display: flex;
gap: 0.75rem;
flex-wrap: wrap;
}

.ee-stat {
display: flex;
align-items: center;
gap: 0.375rem;
padding: 0.375rem 0.75rem;
background: #1e293b;
border: 1px solid #334155;
border-radius: 0.5rem;
font-size: 0.8125rem;
}

.ee-stat-dot {
width: 8px;
height: 8px;
border-radius: 50%;
}

.ee-stat-dot--critical { background: #ef4444; }
.ee-stat-dot--high { background: #f97316; }
.ee-stat-dot--medium { background: #f59e0b; }
.ee-stat-dot--low { background: #3b82f6; }

.ee-stat-count {
font-weight: 600;
color: #f1f5f9;
}

.ee-stat-label {
color: #94a3b8;
}

.ee-table-card {
background: #1e293b;
border: 1px solid #334155;
border-radius: 0.75rem;
overflow: hidden;
}

.ee-table {
width: 100%;
border-collapse: collapse;
text-align: left;
}

.ee-table th {
padding: 0.875rem 1.25rem;
font-size: 0.75rem;
text-transform: uppercase;
letter-spacing: 0.05em;
color: #94a3b8;
font-weight: 600;
border-bottom: 1px solid #334155;
background: rgba(0, 0, 0, 0.1);
}

.ee-table td {
padding: 0.875rem 1.25rem;
font-size: 0.875rem;
border-bottom: 1px solid rgba(51, 65, 85, 0.3);
vertical-align: middle;
}

.ee-table tbody tr {
transition: background 0.15s ease;
cursor: pointer;
}

.ee-table tbody tr:hover {
background: rgba(255, 255, 255, 0.03);
}

.ee-table tbody tr:last-child td {
border-bottom: none;
}

.ee-table tbody tr.ee-row--selected {
background: rgba(99, 102, 241, 0.1);
border-left: 3px solid #6366f1;
}

.ee-severity-badge {
display: inline-block;
padding: 0.2rem 0.5rem;
border-radius: 9999px;
font-size: 0.6875rem;
font-weight: 600;
text-transform: uppercase;
}

.ee-severity-badge--critical {
background: rgba(239, 68, 68, 0.15);
color: #fca5a5;
}

.ee-severity-badge--high {
background: rgba(249, 115, 22, 0.15);
color: #fdba74;
}

.ee-severity-badge--medium {
background: rgba(245, 158, 11, 0.15);
color: #fcd34d;
}

.ee-severity-badge--low {
background: rgba(59, 130, 246, 0.15);
color: #93c5fd;
}

.ee-status-badge {
display: inline-block;
padding: 0.2rem 0.5rem;
border-radius: 0.25rem;
font-size: 0.6875rem;
font-weight: 600;
text-transform: capitalize;
}

.ee-status-badge--open {
background: rgba(34, 197, 94, 0.15);
color: #86efac;
}

.ee-status-badge--investigating {
background: rgba(251, 191, 36, 0.15);
color: #fcd34d;
}

.ee-status-badge--resolved {
background: rgba(99, 102, 241, 0.15);
color: #a5b4fc;
}

.ee-status-badge--dismissed {
background: rgba(100, 116, 139, 0.15);
color: #94a3b8;
}

.ee-signature-cell {
font-family: 'SF Mono', 'Fira Code', monospace;
font-size: 0.8125rem;
color: #e2e8f0;
}

.ee-chain-badge {
display: inline-block;
padding: 0.2rem 0.5rem;
background: #0f172a;
border: 1px solid #334155;
border-radius: 0.25rem;
font-size: 0.75rem;
color: #94a3b8;
}

.ee-risk-bar {
display: flex;
align-items: center;
gap: 0.5rem;
}

.ee-risk-track {
width: 60px;
height: 6px;
background: #0f172a;
border-radius: 9999px;
overflow: hidden;
}

.ee-risk-fill {
height: 100%;
border-radius: 9999px;
transition: width 0.4s ease;
}

.ee-risk-fill--critical { background: #ef4444; }
.ee-risk-fill--high { background: #f97316; }
.ee-risk-fill--medium { background: #f59e0b; }
.ee-risk-fill--low { background: #3b82f6; }

.ee-risk-score {
font-size: 0.8125rem;
font-weight: 600;
color: #e2e8f0;
min-width: 2rem;
}

.ee-detail-panel {
background: #1e293b;
border: 1px solid #334155;
border-radius: 0.75rem;
padding: 1.5rem;
}

.ee-detail-header {
display: flex;
justify-content: space-between;
align-items: flex-start;
margin-bottom: 1rem;
}

.ee-detail-title {
font-size: 1rem;
font-weight: 600;
color: #f1f5f9;
margin: 0;
}

.ee-detail-investigate-btn {
padding: 0.5rem 1rem;
background: #6366f1;
color: #fff;
border: none;
border-radius: 0.5rem;
font-size: 0.8125rem;
font-weight: 600;
cursor: pointer;
transition: background 0.2s ease;
font-family: inherit;
}

.ee-detail-investigate-btn:hover {
background: #4f46e5;
}

.ee-detail-grid {
display: grid;
grid-template-columns: repeat(auto-fit, minmax(200px, 1fr));
gap: 1rem;
}

.ee-detail-field {
display: flex;
flex-direction: column;
gap: 0.25rem;
}

.ee-detail-field-label {
font-size: 0.75rem;
color: #64748b;
text-transform: uppercase;
letter-spacing: 0.04em;
font-weight: 500;
}

.ee-detail-field-value {
font-size: 0.875rem;
color: #e2e8f0;
font-family: 'SF Mono', 'Fira Code', monospace;
}

.ee-empty {
text-align: center;
padding: 4rem 1rem;
color: #64748b;
}

.ee-empty-icon {
font-size: 2.5rem;
margin-bottom: 0.75rem;
opacity: 0.4;
}
Loading