diff --git a/docs/advanced-entity-analytics/images/asset-criticality-impact.png b/docs/advanced-entity-analytics/images/asset-criticality-impact.png index d53957b832..23282c03cc 100644 Binary files a/docs/advanced-entity-analytics/images/asset-criticality-impact.png and b/docs/advanced-entity-analytics/images/asset-criticality-impact.png differ diff --git a/docs/getting-started/images/users/user-risk-inputs.png b/docs/getting-started/images/users/user-risk-inputs.png index e08923e285..f6ec9c0ce6 100644 Binary files a/docs/getting-started/images/users/user-risk-inputs.png and b/docs/getting-started/images/users/user-risk-inputs.png differ diff --git a/docs/getting-started/users-page.asciidoc b/docs/getting-started/users-page.asciidoc index 28f207b260..085e92ebdf 100644 --- a/docs/getting-started/users-page.asciidoc +++ b/docs/getting-started/users-page.asciidoc @@ -85,7 +85,12 @@ The risk summary visualization shows the user risk score and user risk level. Ho The risk summary table shows the category, score, and number of risk inputs that determine the user risk score. Hover over the table to display the **Inspect** button, which allows you to inspect the table's queries. -To expand the **User risk summary** section, click **View risk contributions**. The left panel displays additional details about the user's risk inputs. +To expand the **User risk summary** section, click **View risk contributions**. The left panel displays additional details about the user's risk inputs: + +* The asset criticality level and contribution score from the latest risk scoring calculation. +* The top 10 alerts that contributed to the latest risk scoring calculation, and each alert's contribution score. + +If more than 10 alerts contributed to the risk scoring calculation, the remaining alerts' aggregated contribution score is displayed below the **Alerts** table. [role="screenshot"] image::images/users/user-risk-inputs.png[User risk inputs] diff --git a/docs/management/hosts/hosts-overview.asciidoc b/docs/management/hosts/hosts-overview.asciidoc index 21338b110e..4c385fa82e 100644 --- a/docs/management/hosts/hosts-overview.asciidoc +++ b/docs/management/hosts/hosts-overview.asciidoc @@ -88,7 +88,12 @@ The risk summary visualization shows the host risk score and host risk level. Ho The risk summary table shows the category, score, and number of risk inputs that determine the host risk score. Hover over the table to display the **Inspect** button, which allows you to inspect the table's queries. -To expand the **Host risk summary** section, click **View risk contributions**. The left panel displays additional details about the host's risk inputs. +To expand the **Host risk summary** section, click **View risk contributions**. The left panel displays additional details about the host's risk inputs: + +* The asset criticality level and contribution score from the latest risk scoring calculation. +* The top 10 alerts that contributed to the latest risk scoring calculation, and each alert's contribution score. + +If more than 10 alerts contributed to the risk scoring calculation, the remaining alerts' aggregated contribution score is displayed below the **Alerts** table. [role="screenshot"] image::images/host-risk-inputs.png[Host risk inputs] diff --git a/docs/management/hosts/images/host-risk-inputs.png b/docs/management/hosts/images/host-risk-inputs.png index 1c0a58af10..483980f378 100644 Binary files a/docs/management/hosts/images/host-risk-inputs.png and b/docs/management/hosts/images/host-risk-inputs.png differ