[SecuritySolution] Retrieve onboarding steps

x-pack/plugins/cases/public/components/all_cases/selector_modal/use_add_to_existing_case_modal_open.tsx

@@ -0,0 +1,15 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+import { useCasesContext } from '../../cases_context/use_cases_context';
+
+export const useAddToExistingCaseModalOpen = () => {
+  const { isSelectCaseModalOpen } = useCasesContext();
+  return isSelectCaseModalOpen;
+};
+
+export type UseAddToExistingCaseModalOpen = typeof useAddToExistingCaseModalOpen;

x-pack/plugins/cases/public/components/cases_context/index.tsx

@@ -44,6 +44,8 @@ export interface CasesContextValue {
   features: CasesFeaturesAllRequired;
   releasePhase: ReleasePhase;
   dispatch: CasesContextValueDispatch;
+  isCreateCaseFlyoutOpen: boolean;
+  isSelectCaseModalOpen: boolean;
 }
 
 export interface CasesContextProps
@@ -110,6 +112,8 @@ export const CasesProvider: FC<
       ),
       releasePhase,
       dispatch,
+      isCreateCaseFlyoutOpen: state.createCaseFlyout.isFlyoutOpen,
+      isSelectCaseModalOpen: state.selectCaseModal.isModalOpen,
     }),
     /**
      * We want to trigger a rerender only when the permissions will change.
@@ -126,6 +130,8 @@ export const CasesProvider: FC<
       permissions.read,
       permissions.settings,
       permissions.update,
+      state.createCaseFlyout.isFlyoutOpen,
+      state.selectCaseModal.isModalOpen,
     ]
   );
 

x-pack/plugins/cases/public/components/create/flyout/use_is_add_to_new_case_flyout_open.tsx

@@ -0,0 +1,15 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+import { useCasesContext } from '../../cases_context/use_cases_context';
+
+export const useIsAddToNewCaseFlyoutOpen = () => {
+  const { isCreateCaseFlyoutOpen } = useCasesContext();
+  return isCreateCaseFlyoutOpen;
+};
+
+export type UseIsAddToNewCaseFlyoutOpen = typeof useIsAddToNewCaseFlyoutOpen;

x-pack/plugins/cases/public/plugin.ts

@@ -37,6 +37,8 @@ import type {
   CasesPublicStartDependencies,
 } from './types';
 import { registerSystemActions } from './components/system_actions';
+import { useIsAddToNewCaseFlyoutOpen } from './components/create/flyout/use_is_add_to_new_case_flyout_open';
+import { useAddToExistingCaseModalOpen } from './components/all_cases/selector_modal/use_add_to_existing_case_modal_open';
 
 /**
  * @public
@@ -190,6 +192,8 @@ export class CasesUiPlugin
       hooks: {
         useCasesAddToNewCaseFlyout,
         useCasesAddToExistingCaseModal,
+        useIsAddToNewCaseFlyoutOpen,
+        useAddToExistingCaseModalOpen,
       },
       helpers: {
         canUseCases: canUseCases(core.application.capabilities),

x-pack/plugins/cases/public/types.ts

@@ -60,6 +60,8 @@ import type {
   ExternalReferenceNoSOAttachmentPayload,
   ExternalReferenceSOAttachmentPayload,
 } from '../common/types/domain';
+import type { UseIsAddToNewCaseFlyoutOpen } from './components/create/flyout/use_is_add_to_new_case_flyout_open';
+import type { UseAddToExistingCaseModalOpen } from './components/all_cases/selector_modal/use_add_to_existing_case_modal_open';
 
 export interface CasesPublicSetupDependencies {
   files: FilesSetup;
@@ -154,6 +156,8 @@ export interface CasesPublicStart {
   hooks: {
     useCasesAddToNewCaseFlyout: UseCasesAddToNewCaseFlyout;
     useCasesAddToExistingCaseModal: UseCasesAddToExistingCaseModal;
+    useIsAddToNewCaseFlyoutOpen: UseIsAddToNewCaseFlyoutOpen;
+    useAddToExistingCaseModalOpen: UseAddToExistingCaseModalOpen;
   };
   helpers: {
     /**

x-pack/plugins/security_solution/public/common/components/control_columns/row_action/index.tsx

@@ -14,7 +14,10 @@ import { useUiSetting$ } from '@kbn/kibana-react-plugin/public';
 import { useKibana } from '../../../lib/kibana';
 import { timelineActions } from '../../../../timelines/store';
 import { ENABLE_EXPANDABLE_FLYOUT_SETTING } from '../../../../../common/constants';
-import { DocumentDetailsRightPanelKey } from '../../../../flyout/document_details/shared/constants/panel_keys';
+import {
+  DocumentDetailsLeftPanelKey,
+  DocumentDetailsRightPanelKey,
+} from '../../../../flyout/document_details/shared/constants/panel_keys';
 import type {
   SetEventsDeleted,
   SetEventsLoading,
@@ -26,6 +29,10 @@ import type { TimelineItem, TimelineNonEcsData } from '../../../../../common/sea
 import type { ColumnHeaderOptions, OnRowSelected } from '../../../../../common/types/timeline';
 import { TimelineId } from '../../../../../common/types';
 import { useIsExperimentalFeatureEnabled } from '../../../hooks/use_experimental_features';
+import { useTourContext } from '../../guided_onboarding_tour';
+import { SecurityStepId } from '../../guided_onboarding_tour/tour_config';
+import { LeftPanelInsightsTab } from '../../../../flyout/document_details/left';
+import { CORRELATIONS_TAB_ID } from '../../../../flyout/document_details/left/components/correlations_details';
 
 type Props = EuiDataGridCellValueElementProps & {
   columnHeaders: ColumnHeaderOptions[];
@@ -78,6 +85,7 @@ const RowActionComponent = ({
   const isExpandableFlyoutInCreateRuleEnabled = useIsExperimentalFeatureEnabled(
     'expandableFlyoutInCreateRuleEnabled'
   );
+  const { isTourShown: isGuidedOnboardingTourShown } = useTourContext();
 
   const columnValues = useMemo(
     () =>
@@ -111,20 +119,51 @@ const RowActionComponent = ({
     };
 
     if (showExpandableFlyout) {
-      openFlyout({
-        right: {
-          id: DocumentDetailsRightPanelKey,
-          params: {
-            id: eventId,
-            indexName,
-            scopeId: tableId,
+      // If Guided onboarding is enabled, open the flyout with the left panel strght away
+      // As we want to show the case links in the correlation tab
+      if (isGuidedOnboardingTourShown(SecurityStepId.alertsCases)) {
+        openFlyout({
+          right: {
+            id: DocumentDetailsRightPanelKey,
+            params: {
+              id: eventId,
+              indexName,
+              scopeId: tableId,
+            },
           },
-        },
-      });
-      telemetry.reportDetailsFlyoutOpened({
-        location: tableId,
-        panel: 'right',
-      });
+          left: {
+            id: DocumentDetailsLeftPanelKey,
+            path: {
+              tab: LeftPanelInsightsTab,
+              subTab: CORRELATIONS_TAB_ID,
+            },
+            params: {
+              id: eventId,
+              indexName,
+              scopeId: tableId,
+            },
+          },
+        });
+        telemetry.reportDetailsFlyoutOpened({
+          location: tableId,
+          panel: 'left',
+        });
+      } else {
+        openFlyout({
+          right: {
+            id: DocumentDetailsRightPanelKey,
+            params: {
+              id: eventId,
+              indexName,
+              scopeId: tableId,
+            },
+          },
+        });
+        telemetry.reportDetailsFlyoutOpened({
+          location: tableId,
+          panel: 'right',
+        });
+      }
     }
     // TODO remove when https://github.com/elastic/security-team/issues/7462 is merged
     // support of old flyout in cases page
@@ -147,7 +186,17 @@ const RowActionComponent = ({
         })
       );
     }
-  }, [dispatch, eventId, indexName, openFlyout, tabType, tableId, showExpandableFlyout, telemetry]);
+  }, [
+    eventId,
+    indexName,
+    showExpandableFlyout,
+    tableId,
+    isGuidedOnboardingTourShown,
+    openFlyout,
+    telemetry,
+    dispatch,
+    tabType,
+  ]);
 
   const Action = controlColumn.rowCellRender;