awahab07
diff --git a/‎x-pack/solutions/security/plugins/security_solution/public/common/images/illustration_genai.svg‎
Lines changed: 33 additions & 0 deletions b/‎x-pack/solutions/security/plugins/security_solution/public/common/images/illustration_genai.svg‎
Lines changed: 33 additions & 0 deletions
diff --git a/‎x-pack/solutions/security/plugins/security_solution/public/entity_analytics/components/threat_hunting/top_threat_hunting_leads/index.test.tsx‎
Lines changed: 61 additions & 8 deletions b/‎x-pack/solutions/security/plugins/security_solution/public/entity_analytics/components/threat_hunting/top_threat_hunting_leads/index.test.tsx‎
Lines changed: 61 additions & 8 deletions
@@ -45,6 +45,8 @@ const defaultProps = {
   totalCount: 0,
   isLoading: false,
   isGenerating: false,
+  isScheduled: false,
+  onToggleSchedule: jest.fn(),
   onSeeAll: jest.fn(),
   onLeadClick: jest.fn(),
   onHuntInChat: jest.fn(),
@@ -92,7 +94,11 @@ describe('TopThreatHuntingLeads', () => {
 
     expect(screen.getByTestId('topThreatHuntingLeads')).toBeInTheDocument();
     expect(screen.getByTestId('leadsEmptyPrompt')).toBeInTheDocument();
-    expect(screen.getByText('No hunting leads yet')).toBeInTheDocument();
+    expect(
+      screen.getByText(
+        'Generate leads to surface proactive threat hunting opportunities from your entity data.'
+      )
+    ).toBeInTheDocument();
     expect(screen.queryByTestId('leadsLoadingSpinner')).not.toBeInTheDocument();
   });
 
@@ -124,20 +130,67 @@ describe('TopThreatHuntingLeads', () => {
     expect(onSeeAll).toHaveBeenCalledTimes(1);
   });
 
-  it('"Generate" button calls onGenerate with loading state when isGenerating', () => {
+  it('shows "Generate" button when no leads exist and calls onGenerate', () => {
     const onGenerate = jest.fn();
 
-    const { rerender } = render(
-      <TopThreatHuntingLeads {...defaultProps} onGenerate={onGenerate} />
+    render(<TopThreatHuntingLeads {...defaultProps} onGenerate={onGenerate} />);
+
+    const generateButton = screen.getByTestId('generateLeadsButton');
+    expect(generateButton).toBeInTheDocument();
+    expect(screen.queryByTestId('refreshLeadsButton')).not.toBeInTheDocument();
+
+    fireEvent.click(generateButton);
+    expect(onGenerate).toHaveBeenCalledTimes(1);
+  });
+
+  it('keeps "Generate" button when generation produced no leads', () => {
+    render(<TopThreatHuntingLeads {...defaultProps} hasGenerated />);
+
+    expect(screen.getByTestId('generateLeadsButton')).toBeInTheDocument();
+    expect(screen.queryByTestId('refreshLeadsButton')).not.toBeInTheDocument();
+  });
+
+  it('shows refresh button instead of "Generate" button when leads exist', () => {
+    const onGenerate = jest.fn();
+    const lead = createMockLead();
+
+    render(
+      <TopThreatHuntingLeads
+        {...defaultProps}
+        leads={[lead]}
+        totalCount={1}
+        hasGenerated
+        onGenerate={onGenerate}
+      />
     );
 
-    fireEvent.click(screen.getByTestId('generateLeadsButton'));
+    expect(screen.queryByTestId('generateLeadsButton')).not.toBeInTheDocument();
+    const refreshButton = screen.getByTestId('refreshLeadsButton');
+    expect(refreshButton).toBeInTheDocument();
+
+    fireEvent.click(refreshButton);
     expect(onGenerate).toHaveBeenCalledTimes(1);
+  });
 
-    rerender(<TopThreatHuntingLeads {...defaultProps} onGenerate={onGenerate} isGenerating />);
+  it('displays generated timestamp when leads exist and lastRunTimestamp is provided', () => {
+    const lead = createMockLead();
 
-    const generateButton = screen.getByTestId('generateLeadsButton');
-    expect(generateButton).toHaveTextContent('Generating...');
+    render(
+      <TopThreatHuntingLeads
+        {...defaultProps}
+        leads={[lead]}
+        totalCount={1}
+        lastRunTimestamp="2026-03-13T14:30:00.000Z"
+      />
+    );
+
+    expect(screen.getByTestId('leadsGeneratedTimestamp')).toBeInTheDocument();
+  });
+
+  it('does not display timestamp when no leads exist', () => {
+    render(<TopThreatHuntingLeads {...defaultProps} lastRunTimestamp="2026-03-13T14:30:00.000Z" />);
+
+    expect(screen.queryByTestId('leadsGeneratedTimestamp')).not.toBeInTheDocument();
   });
 
   it('lead card click calls onLeadClick', () => {