mkdocs.yml

copyright: Copyright © 2023 - Sekoia.io
edit_uri: edit/main/docs/
extra:
  social:
  - icon: fontawesome/brands/twitter
    link: https://twitter.com/sekoia_io
extra_css:
- stylesheets/sekoiaio.css
- stylesheets/lightgallery.min.css
- stylesheets/poppins.min.css
- stylesheets/inter.min.css
extra_javascript:
- javascript/sekoiaio.js
- javascript/lightgallery.min.js
- javascript/hotjar.js
- javascript/posthog.js
markdown_extensions:
- admonition
- attr_list
- md_in_html
- codehilite
- pymdownx.details
- pymdownx.highlight:
    linenums: true
    linenums_style: pymdownx-inline
- pymdownx.superfences
- pymdownx.tabbed:
    alternate_style: true
- markdown_include.include
- pymdownx.snippets
- plugins.custom_lightgallery
nav:
- Getting started:
  - Overview: getting_started/index.md
  - Where to start: getting_started/concepts.md
  - Workspace setup:
    - Join workspace: getting_started/join_community.md
    - Create and manage communities: getting_started/create_community.md
  - Account setup:
    - Create account: getting_started/create_account.md
    - Setup account: getting_started/account_settings.md
  - Security and access:
    - Account security:
      - Two-Factor Authentication: getting_started/account_security.md
      - Security tokens: getting_started/securitytokens.md
    - Workspace security:
      - Session duration: getting_started/session_duration.md
      - Two-Factor Authentication: getting_started/twofactor_workspace.md
      - SSO with OpenID Connect: getting_started/sso/openid_connect.md
      - SSO with Microsoft Entra ID (Azure AD): getting_started/sso/azure.md
      - SSO with Okta: getting_started/sso/okta.md
  - Users and roles:
    - Invite users: getting_started/invite_users.md
    - Manage users: getting_started/manage_users.md
    - Deactivate inactive users: getting_started/inactive_users.md
    - Roles and permissions:
      - Built-in roles: getting_started/roles.md
      - Custom roles: getting_started/custom_roles.md
      - Intake Restricted roles: getting_started/intake_restricted_roles.md
  - Notifications:
    - Create and manage notifications: getting_started/notifications-Listing_Creation.md
    - Notification examples: getting_started/notifications-Examples.md
  - API Keys: getting_started/manage_api_keys.md
  - Usage: getting_started/usage.md
  - Sekoia regions: getting_started/regions.md
  - Best practices: getting_started/best_practices.md
  - Troubleshooting tips: getting_started/get_troubleshooting_tips.md
- Sekoia Defend (XDR):
  - Introduction: xdr/index.md
  - Quick start guide: xdr/xdr_quick_start.md
  - Features:
    - Collect:
      - Intakes: xdr/features/collect/intakes.md
      - Entities: xdr/features/collect/entities.md
      - Assets: xdr/features/collect/assets.md
    - Detect:
      - IOCs Detection: xdr/features/detect/iocdetection.md
      - Rules Catalog: xdr/features/detect/rules_catalog.md
      - Built-in Rules: xdr/features/detect/built_in_detection_rules.md
      - Sigma: xdr/features/detect/sigma.md
      - Anomaly Detection: xdr/features/detect/anomaly.md
      - IOCs Collections: xdr/features/detect/ioccollections.md
    - Investigate:
      - Alerts: xdr/features/investigate/alerts.md
      - Events: xdr/features/investigate/events.md
      - Cases: xdr/features/investigate/cases.md
      - Events Query Language: xdr/features/investigate/events_query_language.md
      - Querying Events: xdr/features/investigate/querying_events.md
      - Query Builder (beta): xdr/features/investigate/query_builder.md
    - Report:
      - Dashboards: xdr/features/report/dashboards.md
      - Threat Landscape: xdr/features/report/threat_landscape.md
    - Automate:
      - Playbooks: xdr/features/automate/index.md
      - Playbooks On-premises: xdr/features/automate/playbooks-on-premises.md
      - Manage accounts: xdr/features/automate/manage-accounts.md
      - Navigate playbooks: xdr/features/automate/navigate-playbooks.md
      - Build playbooks: xdr/features/automate/build-playbooks.md
      - Triggers: xdr/features/automate/triggers.md
      - Operators: xdr/features/automate/operators.md
      - Actions: xdr/features/automate/actions.md
      - Debug playbooks: xdr/features/automate/debug-playbooks.md
      - Playbooks JSON Schema: xdr/features/automate/playbooks_format_json_schema.md
    - External integrations:
      - FortiSOAR: xdr/features/integrations/fortisoar.md
      - Palo Alto Cortex XSOAR: xdr/features/integrations/interconnect_sekoia_with_xsoar.md
      - Swimlane Turbine: xdr/features/integrations/swimlane_turbine.md
  - Usecases:
    - Implement a blocklist in Sekoia.io: xdr/usecases/playbook/implement_blocklist.md
    - Synchronize Alerts with an external tool: xdr/usecases/playbook/synchronize_alerts.md
    - Send notifications to a Webhook using a playbook: xdr/usecases/playbook/notifications_using_playbooks.md
    - Use your own CTI in Sekoia.io: xdr/usecases/use_your_own_cti.md
  - FAQ:
    - General: xdr/FAQ.md
    - Alerts: xdr/FAQ/Alerts_qa.md
    - Events:
      - Events QA: xdr/FAQ/Events_qa.md
      - Facing issues with logs collection: xdr/FAQ/Log_collection_Troubleshoot.md
    - Detection: xdr/FAQ/Detection_qa.md
    - Assets: xdr/FAQ/Assets_qa.md
    - Sekoia.io Endpoint agent: xdr/FAQ/SEKOIA_Endpoint_Agent.md
    - Datetime representation: xdr/FAQ/datetime.md
  - Develop:
    - REST API:
      - Quickstart: xdr/develop/rest_api/quickstart.md
      - Authentication and Community: xdr/develop/rest_api/community.md
      - Dashboard: xdr/develop/rest_api/dashboard.md
      - Configuration: xdr/develop/rest_api/configuration.md
      - Parser: xdr/develop/rest_api/parser.md
      - Alert: xdr/develop/rest_api/alert.md
      - Assets: xdr/develop/rest_api/assets_v2.md
      - Playbooks: xdr/develop/rest_api/playbooks.md
      - Query Builder: xdr/develop/rest_api/query_builder.md
      - Telemetry: xdr/develop/rest_api/telemetry.md
- Sekoia Intelligence (CTI):
  - Introduction: cti/index.md
  - Features:
    - Data Models: cti/features/data_model.md
    - Consume:
      - Intelligence: cti/features/consume/intelligence.md
      - Observables: cti/features/consume/observables.md
      - Telemetry: cti/features/consume/telemetry.md
      - Outgoing Feeds: cti/features/consume/feeds.md
      - Graph Explorations: cti/features/consume/graph_explorations.md
      - Enrichers: cti/features/consume/enrichers.md
      - Export: cti/features/consume/export.md
      - IOCs Collections: cti/features/consume/ioccollections.md
    - Monitor:
      - Dashboards: cti/features/monitor/dashboard.md
      - Threat Landscape: cti/features/monitor/threat_landscape.md
    - External Integrations:
      - Overview: cti/features/integrations/index.md
      - API: cti/features/integrations/api.md
      - TAXII: cti/features/integrations/taxii.md
      - Cortex Analyzer: cti/features/integrations/thehive.md
      - MISP Feed: cti/features/integrations/misp.md
      - Microsoft Sentinel: cti/features/integrations/microsoft-sentinel.md
      - OpenCTI: cti/features/integrations/opencti.md
      - Splunk: cti/features/integrations/splunk.md
      - Splunk SOAR: cti/features/integrations/splunk_soar.md
      - Swimlane Turbine: cti/features/integrations/swimlane_turbine.md
      - Anomali ThreatStream: cti/features/integrations/anomali.md
      - PaloAlto Cortex XSOAR: cti/features/integrations/paloalto_xsoar.md
      - ThreatQuotient: cti/features/integrations/threatquotient.md
  - Develop:
    - REST API:
      - Quickstart: cti/develop/rest_api/quickstart.md
      - Authentication and Community: cti/develop/rest_api/community.md
      - Intelligence: cti/develop/rest_api/intelligence.md
      - Enrichment: cti/develop/rest_api/enrichments.md
      - Telemetry: cti/develop/rest_api/telemetry.md
      - Dashboard: cti/develop/rest_api/dashboard.md
      - Playbooks: cti/develop/rest_api/playbooks.md
      - External Dynamic List: cti/develop/rest_api/edl-gateway.md
- Sekoia.io TIP:
  - Introduction: tip/index.md
  - Features:
    - Data Models: tip/features/data_model.md
    - Consume:
      - Intelligence: tip/features/consume/intelligence.md
      - Observables: tip/features/consume/observables.md
      - Outgoing Feeds: tip/features/consume/feeds.md
      - Graph Explorations: tip/features/consume/graph_explorations.md
      - Enrichers: tip/features/consume/enrichers.md
      - Export: tip/features/consume/export.md
      - IOCs Collections: tip/features/consume/ioccollections.md
    - Produce and investigate:
      - Content Proposals: tip/features/produce/content_proposals.md
      - Incoming Feeds: tip/features/produce/incoming_feeds.md
      - Warning Rules: tip/features/produce/warning_rules.md
      - Expiration Rules: tip/features/produce/expiration_rules.md
    - Monitor:
      - Dashboards: tip/features/monitor/dashboard.md
      - Threat Landscape: tip/features/monitor/threat_landscape.md
    - External Integrations:
      - Overview: tip/features/integrations/index.md
      - API: tip/features/integrations/api.md
      - TAXII: tip/features/integrations/taxii.md
      - Cortex Analyzer: tip/features/integrations/thehive.md
      - MISP Feed: tip/features/integrations/misp.md
      - Microsoft Sentinel: tip/features/integrations/microsoft-sentinel.md
      - OpenCTI: tip/features/integrations/opencti.md
      - Splunk: tip/features/integrations/splunk.md
      - PaloAlto Cortex XSOAR: tip/features/integrations/paloalto_xsoar.md
    - Automate:
      - Playbooks: tip/features/automate/index.md
      - Manage accounts: tip/features/automate/manage-accounts.md
      - Navigate playbooks: tip/features/automate/navigate-playbooks.md
      - Build playbooks: tip/features/automate/build-playbooks.md
      - Triggers: tip/features/automate/triggers.md
      - Operators: tip/features/automate/operators.md
      - Actions: tip/features/automate/actions.md
      - Actions Library:
        - Overview: tip/features/automate/library/overview.md
        - Applicative:
          - Mandrill: tip/features/automate/library/mandrill.md
          - Mattermost: tip/features/automate/library/mattermost.md
          - Microsoft Windows Server: tip/features/automate/library/microsoft-windows-server.md
          - PagerDuty: tip/features/automate/library/pagerduty.md
        - Cloud Providers:
          - AWS: tip/features/automate/library/aws.md
          - Google: tip/features/automate/library/google.md
        - Collaboration Tools:
          - Atlassian JIRA: tip/features/automate/library/atlassian-jira.md
          - Git: tip/features/automate/library/git.md
          - ServiceNow: tip/features/automate/library/servicenow.md
          - The Hive: tip/features/automate/library/the-hive.md
          - The Hive V5: tip/features/automate/library/the-hive-v5.md
        - Endpoint:
          - CrowdStrike Falcon: tip/features/automate/library/crowdstrike-falcon.md
          - HarfangLab: tip/features/automate/library/harfanglab.md
          - MicrosoftDefender: tip/features/automate/library/microsoftdefender.md
          - Panda Security: tip/features/automate/library/panda-security.md
          - SentinelOne: tip/features/automate/library/sentinelone.md
          - Sophos: tip/features/automate/library/sophos.md
          - WithSecure: tip/features/automate/library/withsecure.md
        - Generic:
          - HTTP: tip/features/automate/library/http.md
          - OpenAI: tip/features/automate/library/openai.md
          - RSS: tip/features/automate/library/rss.md
          - Sekoia.io: tip/features/automate/library/sekoia-io.md
          - Utils: tip/features/automate/library/utils.md
        - IAM:
          - Microsoft Active Directory: tip/features/automate/library/microsoft-active-directory.md
          - Microsoft Entra ID: tip/features/automate/library/microsoft-entra-id.md
        - Network:
          - Fortigate Firewalls: tip/features/automate/library/fortigate-firewalls.md
          - Zscaler: tip/features/automate/library/zscaler.md
        - Threat Intelligence:
          - BinaryEdge's API: tip/features/automate/library/binaryedge-s-api.md
          - Censys: tip/features/automate/library/censys.md
          - Certificate Transparency: tip/features/automate/library/certificate-transparency.md
          - Detection Rules: tip/features/automate/library/detection-rules.md
          - Digital Shadows: tip/features/automate/library/digital-shadows.md
          - GLIMPS: tip/features/automate/library/glimps.md
          - IKnowWhatYouDownload: tip/features/automate/library/iknowwhatyoudownload.md
          - IPInfo: tip/features/automate/library/ipinfo.md
          - IPtoASN: tip/features/automate/library/iptoasn.md
          - MISP: tip/features/automate/library/misp.md
          - MWDB: tip/features/automate/library/mwdb.md
          - Nybble: tip/features/automate/library/nybble.md
          - OSINT: tip/features/automate/library/osint.md
          - Onyphe: tip/features/automate/library/onyphe.md
          - Public Suffix: tip/features/automate/library/public-suffix.md
          - RiskIQ: tip/features/automate/library/riskiq.md
          - Shodan: tip/features/automate/library/shodan.md
          - Tranco: tip/features/automate/library/tranco.md
          - Triage: tip/features/automate/library/triage.md
          - VirusTotal: tip/features/automate/library/virustotal.md
          - Whois: tip/features/automate/library/whois.md
  - Develop:
    - REST API:
      - Quickstart: tip/develop/rest_api/quickstart.md
      - Authentication and Community: tip/develop/rest_api/community.md
      - Intelligence: tip/develop/rest_api/intelligence.md
      - Enrichment: tip/develop/rest_api/enrichments.md
      - Dashboard: tip/develop/rest_api/dashboard.md
      - Playbooks: tip/develop/rest_api/playbooks.md
- Integrations:
  - Introduction: integration/index.md
  - Ingestion methods:
    - Overview: integration/ingestion_methods/index.md
    - Cloud & SaaS:
      - Overview: integration/ingestion_methods/cloud_saas/overview.md
      - AWS S3: integration/ingestion_methods/cloud_saas/aws.md
      - Azure Event Hub: integration/ingestion_methods/cloud_saas/azure.md
      - Google Pub/Sub: integration/ingestion_methods/cloud_saas/gcp.md
    - HTTPS:
      - Overview: integration/ingestion_methods/https/overview.md
      - Formatting options: integration/ingestion_methods/https/format.md
      - Forwarding logs using a third-party application: integration/ingestion_methods/https/third_part.md
      - Graylog: integration/ingestion_methods/https/graylog.md
      - Logstash: integration/ingestion_methods/https/logstash.md
    - Syslog:
      - Overview: integration/ingestion_methods/syslog/overview.md
      - Sekoia.io Forwarder: integration/ingestion_methods/syslog/sekoiaio_forwarder.md
      - Third-party syslog services: integration/ingestion_methods/syslog/syslog_service.md
      - Rsyslog: integration/ingestion_methods/syslog/rsyslog.md
      - Syslog NG: integration/ingestion_methods/syslog/syslog-ng.md
      - Secured forwarding: integration/ingestion_methods/syslog/secured_forwarding.md
  - List of Intakes:
    - Overview: integration/categories/overview.md
    - Applicative:
      - 1Password EPM: integration/categories/applicative/1password_epm.md
      - Apache HTTP Server: integration/categories/applicative/apache.md
      - Azure Files: integration/categories/applicative/azure_files.md
      - Azure MySQL: integration/categories/applicative/azure_mysql.md
      - Cloudflare Audit Logs: integration/categories/applicative/cloudflare-audit-logs.md
      - Fastly WAF Audit logs: integration/categories/applicative/fastly_audit_waf.md
      - Github Audit Logs: integration/categories/applicative/github_audit_logs.md
      - Google Reports: integration/categories/applicative/google_reports.md
      - Google Workspace and Google Cloud Audit Logs: integration/categories/applicative/google_cloud_audit.md
      - Microsoft IIS: integration/categories/applicative/microsoft_iis.md
      - Salesforce: integration/categories/applicative/salesforce.md
      - Sekoia.io activity logs: integration/categories/applicative/sekoiaio_activity_logs.md
      - Sekoia.io forwarder logs: integration/categories/applicative/sekoiaio_forwarder_logs.md
      - Systancia Cleanroom: integration/categories/applicative/systancia_cleanroom.md
      - Veeam Backup: integration/categories/applicative/veeam_backup.md
    - Email:
      - Cisco Email Security Appliance: integration/categories/email/cisco_esa.md
      - FortiMail: integration/categories/email/fortimail.md
      - Mimecast Email Security: integration/categories/email/mimecast_email_security.md
      - Office 365: integration/categories/email/o365.md
      - Office 365 Message Trace: integration/categories/email/message_trace.md
      - Postfix: integration/categories/email/postfix.md
      - Proofpoint On Demand: integration/categories/email/proofpoint_pod.md
      - Proofpoint Targeted Attack Protection: integration/categories/email/proofpoint_tap.md
      - Retarus Email Security: integration/categories/email/retarus_email_security.md
      - SpamAssassin: integration/categories/email/spamassassin.md
      - Trend Micro Email Security: integration/categories/email/trend_micro_email_security.md
      - Vade Cloud: integration/categories/email/vade_cloud.md
      - Vade M365: integration/categories/email/vade.md
    - Endpoint:
      - Azure Windows: integration/categories/endpoint/azure_windows.md
      - Bitdefender GravityZone: integration/categories/endpoint/bitdefender_gravityzone.md
      - Check Point Harmony Mobile: integration/categories/endpoint/checkpoint_harmony_mobile.md
      - CrowdStrike Falcon: integration/categories/endpoint/crowdstrike_falcon.md
      - CrowdStrike Falcon Telemetry: integration/categories/endpoint/crowdstrike_falcon_telemetry.md
      - Cybereason MalOp: integration/categories/endpoint/cybereason_malop.md
      - Cybereason MalOp activity: integration/categories/endpoint/cybereason_malop_activity.md
      - Eset Protect: integration/categories/endpoint/eset_protect.md
      - Google Kubernetes Engine (GKE): integration/categories/endpoint/google_kubernetes_engine.md
      - Harfanglab: integration/categories/endpoint/harfanglab.md
      - IBM AIX: integration/categories/endpoint/ibm_aix.md
      - IBM iSeries (AS/400): integration/categories/endpoint/ibm_i.md
      - Kaspersky Endpoint Security: integration/categories/endpoint/kaspersky_endpoint_security.md
      - Linux AuditBeat: integration/categories/endpoint/auditbeat_linux.md
      - Log Insight Windows: integration/categories/endpoint/log_insight_windows.md
      - Microsoft Defender XDR (Microsoft 365 Defender): integration/categories/endpoint/microsoft_365_defender.md
      - Microsoft Intune: integration/categories/endpoint/microsoft_intune.md
      - Palo Alto Cortex XDR (EDR): integration/categories/endpoint/paloalto_cortex_edr.md
      - Panda Security Aether: integration/categories/endpoint/panda_security_aether.md
      - Pradeo MTD: integration/categories/endpoint/pradeo_mtd.md
      - SentinelOne: integration/categories/endpoint/sentinelone.md
      - SentinelOne Cloud Funnel 2.0: integration/categories/endpoint/sentinelone_cloudfunnel2.0.md
      - Sekoia.io Endpoint Agent: integration/categories/endpoint/sekoiaio.md
      - Sophos EDR: integration/categories/endpoint/sophos_edr.md
      - Stormshield SES: integration/categories/endpoint/stormshield_ses.md
      - Symantec Endpoint Protection: integration/categories/endpoint/symantec_epp.md
      - TEHTRIS Endpoint Detection & Reponse: integration/categories/endpoint/tehtris_edr.md
      - Tanium: integration/categories/endpoint/tanium.md
      - Trellix EDR: integration/categories/endpoint/trellix_edr.md
      - Trend Micro Apex One: integration/categories/endpoint/trend_micro_apex_one.md
      - Trend Micro Vision One Workbench: integration/categories/endpoint/trend_micro_vision_one_workbench.md
      - VMWare ESXi: integration/categories/endpoint/vmware_esxi.md
      - VMWare VCenter: integration/categories/endpoint/vmware_vcenter.md
      - Windows: integration/categories/endpoint/windows.md
      - Winlogbeat: integration/categories/endpoint/winlogbeat.md
      - WithSecure Elements: integration/categories/endpoint/withsecure_elements.md
    - Generic:
      - CEF: integration/categories/generic/cef.md
      - Raw: integration/categories/generic/raw.md
      - OCSF: integration/categories/generic/ocsf.md
    - IAM:
      - Tenable Identity Exposure / Alsid: integration/categories/iam/alsid.md
      - Azure Key Vault: integration/categories/iam/azure_key_vault.md
      - Cisco Duo Security: integration/categories/iam/cisco_duo_security.md
      - FreeRADIUS: integration/categories/iam/freeradius.md
      - Jumpcloud Directory Insights: integration/categories/iam/jumpcloud_directory_insights.md
      - ManageEngine ADAudit Plus: integration/categories/iam/manageengine_adauditplus.md
      - Microsoft Entra ID (Azure AD): integration/categories/iam/entra_id.md
      - Okta System log: integration/categories/iam/okta_system_log.md
      - OpenLDAP: integration/categories/iam/openldap.md
      - RSA SecurID: integration/categories/iam/rsa_securid.md
      - Rubycat PROVE IT: integration/categories/iam/rubycat_prove_it.md
      - Wallix: integration/categories/iam/wallix.md
    - Network:
      - Amazon VPC Flow Logs: integration/categories/network/aws_flow_logs.md
      - Azure Application Gateway: integration/categories/network/azure_application_gateway.md
      - ArubaOS Switch: integration/categories/network/arubaos.md
      - BIND: integration/categories/network/bind.md
      - Cato SASE: integration/categories/network/cato_sase.md
      - Cisco IOS: integration/categories/network/cisco_ios.md
      - Cisco Meraki MX: integration/categories/network/cisco_meraki_mx.md
      - Cisco NX-OS: integration/categories/network/cisco_nx_os.md
      - Citrix NetScaler / ADC: integration/categories/network/citrix_netscaler_adc.md
      - Cloudflare Access Request: integration/categories/network/cloudflare-access-requests.md
      - Cloudflare DNS Gateway: integration/categories/network/cloudflare-gateway-dns.md
      - Cloudflare DNS logs: integration/categories/network/cloudflare-dns-logs.md
      - Cloudflare Gateway HTTP: integration/categories/network/cloudflare-gateway-http.md
      - Cloudflare Gateway Network: integration/categories/network/cloudflare-gateway-network.md
      - Cloudflare HTTP requests: integration/categories/network/cloudflare-http-requests.md
      - EfficientIP SOLIDServer DDI: integration/categories/network/efficientip_solidserver_ddi.md
      - Ekinops OneOS: integration/categories/network/ekinops_oneos.md
      - F5 BIG-IP: integration/categories/network/f5-big-ip.md
      - Forcepoint Secure Web Gateway: integration/categories/network/forcepoint_web_gateway.md
      - Google VPC Flow Logs: integration/categories/network/google_vpc_flow_logs.md
      - HAProxy: integration/categories/network/haproxy.md
      - ISC DHCP: integration/categories/network/dhcpd.md
      - Infoblox DDI: integration/categories/network/infoblox_ddi.md
      - Juniper Network Switches: integration/categories/network/juniper_switches.md
      - Microsoft Always On VPN: integration/categories/network/microsoft_always_on_vpn.md
      - NGINX: integration/categories/network/nginx.md
      - Netfilter: integration/categories/network/netfilter.md
      - OPNSense: integration/categories/network/opnsense.md
      - OpenSSH: integration/categories/network/openssh.md
      - OpenVPN: integration/categories/network/openvpn.md
      - Pulse Connect Secure: integration/categories/network/pulse.md
      - Squid: integration/categories/network/squid.md
      - Sesame it Jizo NDR: integration/categories/network/sesameit_jizo.md
      - Umbrella DNS Logs: integration/categories/network/umbrella_dns.md
      - Unbound: integration/categories/network/unbound.md
    - Network Security:
      - AWS CloudTrail: integration/categories/network_security/aws_cloudtrail.md
      - Amazon CloudFront Logs: integration/categories/network_security/aws_cloudfront.md
      - Amazon GuardDuty: integration/categories/network_security/aws_guardduty.md
      - Amazon WAF: integration/categories/network_security/aws_waf.md
      - Azure Front Door: integration/categories/network_security/azure_front_door.md
      - Azure Network Watcher (NSG flow logs): integration/categories/network_security/azure_network_watcher.md
      - Bitsight SPM: integration/categories/network_security/bitsight_spm.md
      - Broadcom Cloud Secure Web Gateway: integration/categories/network_security/broadcom_cloud_swg.md
      - Broadcom Edge Secure Web Gateway: integration/categories/network_security/broadcom_edge_swg.md
      - Check Point: integration/categories/network_security/checkpoint.md
      - Cisco Identity Services Engine (ISE): integration/categories/network_security/cisco_identity_services_engine_ise.md
      - Cisco Secure Firewall: integration/categories/network_security/cisco_asa.md
      - Cisco Web Security Appliance: integration/categories/network_security/cisco_wsa.md
      - Claroty xDome: integration/categories/network_security/claroty_xdome.md
      - Clavister Next-Gen Firewall: integration/categories/network_security/clavister_ng_fw.md
      - Cloudflare Firewall Events: integration/categories/network_security/cloudflare-firewall-events.md
      - Cyberwatch Detection: integration/categories/network_security/cyberwatch_detection.md
      - Darktrace Threat Visualizer: integration/categories/network_security/darktrace_threat_visualizer.md
      - Datadome Protection: integration/categories/network_security/datadome_protection.md
      - Daspren Parad: integration/categories/network_security/daspren_parad.md
      - Digital Shadows SearchLight: integration/categories/network_security/digital_shadows.md
      - ExtraHop Reveal(x) 360: integration/categories/network_security/extrahop_revealx_360.md
      - Fastly Next-Gen WAF: integration/categories/network_security/fastly_waf.md
      - Forcepoint Secure Web Gateway: integration/categories/network_security/forcepoint_web_gateway.md
      - FortiProxy: integration/categories/network_security/fortiproxy.md
      - FortiWeb: integration/categories/network_security/fortiweb.md
      - Fortigate: integration/categories/network_security/fortigate.md
      - Gatewatcher AionIQ: integration/categories/network_security/gatewatcher_aioniq.md
      - Google Cloud Load Balancing: integration/categories/network_security/google_cloud_load_balancing.md
      - Imperva Web Application Firewall: integration/categories/network_security/imperva_waf.md
      - Lacework Cloud Security: integration/categories/network_security/lacework_cloud_security.md
      - McAfee Web Gateway / Skyhigh Secure Web Gateway: integration/categories/network_security/skyhigh_secure_web_gateway.md
      - Netskope Events: integration/categories/network_security/netskope_events.md
      - Netskope Transaction Events: integration/categories/network_security/netskope_transaction.md
      - OGO Shield WAF: integration/categories/network_security/ogo_shield.md
      - Olfeo Secure Web Gateway: integration/categories/network_security/olfeo_secure_web_gateway.md
      - Palo Alto Next-Generation Firewall: integration/categories/network_security/paloalto.md
      - Palo Alto Prisma access: integration/categories/network_security/paloalto_prisma_access.md
      - Security Scorecard Vunerability Assessment Scanner: integration/categories/network_security/securityscorecard_vas.md
      - SonicWall Firewall: integration/categories/network_security/sonicwall_fw.md
      - SonicWall SMA: integration/categories/network_security/sonicwall_sma.md
      - Sophos Firewall: integration/categories/network_security/sophos_fw.md
      - Sophos Threat Analysis Center: integration/categories/network_security/sophos_threat_analysis_center.md
      - Stormshield Network Security: integration/categories/network_security/stormshield_network_security.md
      - Suricata: integration/categories/network_security/suricata.md
      - Thinkst Canary: integration/categories/network_security/thinkst_canary.md
      - Trellix Network Security: integration/categories/network_security/trellix_nx.md
      - Trellix ePO: integration/categories/network_security/trellix_epo.md
      - Trend Micro Deep Security / Workload Security: integration/categories/network_security/trend_micro_deep_security.md
      - Ubika Cloud Protector Alerts: integration/categories/network_security/ubika_cloud_protector_alerts.md
      - Ubika Cloud Protector Traffic: integration/categories/network_security/ubika_cloud_protector_traffic.md
      - Ubika WAAP Gateway: integration/categories/network_security/ubika_waap.md
      - Umbrella IP Logs: integration/categories/network_security/umbrella_ip.md
      - Umbrella Proxy Logs: integration/categories/network_security/umbrella_proxy.md
      - Varonis Data Security: integration/categories/network_security/varonis_data_security.md
      - Vectra Cognito Detect: integration/categories/network_security/vectra.md
      - WatchGuard Firebox: integration/categories/network_security/watchguard_firebox.md
      - Zscaler Internet Access: integration/categories/network_security/zscaler_zia.md
  - List of Playbooks Actions:
    - Overview: integration/action_library/overview.md
    - Applicative:
      - Mandrill: integration/action_library/mandrill.md
      - Mattermost: integration/action_library/mattermost.md
      - Microsoft Windows Server: integration/action_library/microsoft-windows-server.md
      - PagerDuty: integration/action_library/pagerduty.md
    - Cloud Providers:
      - AWS: integration/action_library/aws.md
      - Google: integration/action_library/google.md
    - Collaboration Tools:
      - Atlassian JIRA: integration/action_library/atlassian-jira.md
      - Git: integration/action_library/git.md
      - ServiceNow: integration/action_library/servicenow.md
      - The Hive: integration/action_library/the-hive.md
      - The Hive V5: integration/action_library/the-hive-v5.md
    - Endpoint:
      - CrowdStrike Falcon: integration/action_library/crowdstrike-falcon.md
      - HarfangLab: integration/action_library/harfanglab.md
      - MicrosoftDefender: integration/action_library/microsoftdefender.md
      - Panda Security: integration/action_library/panda-security.md
      - SentinelOne: integration/action_library/sentinelone.md
      - Sophos: integration/action_library/sophos.md
      - WithSecure: integration/action_library/withsecure.md
    - Generic:
      - HTTP: integration/action_library/http.md
      - OpenAI: integration/action_library/openai.md
      - RSS: integration/action_library/rss.md
      - Sekoia.io: integration/action_library/sekoia-io.md
      - Utils: integration/action_library/utils.md
    - IAM:
      - Microsoft Active Directory: integration/action_library/microsoft-active-directory.md
      - Microsoft Entra ID: integration/action_library/microsoft-entra-id.md
    - Network:
      - Fortigate Firewalls: integration/action_library/fortigate-firewalls.md
      - Zscaler: integration/action_library/zscaler.md
    - Threat Intelligence:
      - BinaryEdge's API: integration/action_library/binaryedge-s-api.md
      - Censys: integration/action_library/censys.md
      - Certificate Transparency: integration/action_library/certificate-transparency.md
      - Detection Rules: integration/action_library/detection-rules.md
      - Digital Shadows: integration/action_library/digital-shadows.md
      - GLIMPS: integration/action_library/glimps.md
      - IKnowWhatYouDownload: integration/action_library/iknowwhatyoudownload.md
      - IPInfo: integration/action_library/ipinfo.md
      - IPtoASN: integration/action_library/iptoasn.md
      - MISP: integration/action_library/misp.md
      - MWDB: integration/action_library/mwdb.md
      - Nybble: integration/action_library/nybble.md
      - OSINT: integration/action_library/osint.md
      - Onyphe: integration/action_library/onyphe.md
      - Public Suffix: integration/action_library/public-suffix.md
      - RiskIQ: integration/action_library/riskiq.md
      - Shodan: integration/action_library/shodan.md
      - Tranco: integration/action_library/tranco.md
      - Triage: integration/action_library/triage.md
      - VirusTotal: integration/action_library/virustotal.md
      - Whois: integration/action_library/whois.md
  - How to develop a new Integration:
    - Overview: integration/develop_integration/overview.md
    - Automation:
      - Overview: integration/develop_integration/automation/overview.md
      - Action: integration/develop_integration/automation/action.md
      - Create a Module: integration/develop_integration/automation/create_a_module.md
      - Development Guidelines: integration/develop_integration/automation/development_guideline.md
      - Module: integration/develop_integration/automation/module.md
      - Trigger: integration/develop_integration/automation/trigger.md
    - Formats:
      - Overview: integration/develop_integration/formats/overview.md
      - Create a Format: integration/develop_integration/formats/create_a_format.md
      - Datasources: integration/develop_integration/formats/datasources.md
      - Definition of a structured event: integration/develop_integration/formats/structured_event.md
      - Definition of the taxonomy: integration/develop_integration/formats/taxonomy.md
      - How to write a parser: integration/develop_integration/formats/parser.md
      - How to write smart descriptions: integration/develop_integration/formats/smartdescriptions.md
      - Best Practices:
        - Overview: integration/develop_integration/formats/best_practices/overview.md
        - Authentications: integration/develop_integration/formats/best_practices/authentications.md
        - Networks: integration/develop_integration/formats/best_practices/networks.md
        - Endpoints: integration/develop_integration/formats/best_practices/endpoints.md
  - FAQ:
    - Overview: integration/faq/overview.md
    - General Questions:
      - Bug VS Improvement Requests: integration/faq/general_questions/bug_and_improvement_requests.md
plugins:
- search: null
- redirects:
    redirect_maps:
      'api/operation center: rules, entities, intakes, events.md': xdr/develop/rest_api/configuration.md
      cti/develop/rest_api/identity_and_authentication.md: cti/develop/rest_api/community.md
      develop/rest_api/community.md: xdr/develop/rest_api/community.md
      develop/rest_api/dashboard.md: xdr/develop/rest_api/community.md
      develop/rest_api/identity_and_authentication.md: xdr/develop/rest_api/community.md
      develop/rest_api/intelligence_center/enrichments.md: cti/develop/rest_api/enrichments.md
      develop/rest_api/intelligence_center/intelligence.md: cti/develop/rest_api/intelligence.md
      develop/rest_api/operation_center/alert.md: xdr/develop/rest_api/alert.md
      develop/rest_api/operation_center/assets.md: xdr/develop/rest_api/assets_v2.md
      develop/rest_api/operation_center/configuration.md: xdr/develop/rest_api/configuration.md
      develop/rest_api/operation_center/parser.md: xdr/develop/rest_api/parser.md
      develop/rest_api/playbooks.md: xdr/develop/rest_api/playbooks.md
      develop/rest_api/quickstart.md: xdr/develop/rest_api/quickstart.md
      getting_started/2fa.md: getting_started/account_security.md
      getting_started/apikey_creation.md: getting_started/manage_api_keys.md
      getting_started/first_steps.md: getting_started/index.md
      getting_started/inviting_users_to_join_your_community.md: getting_started/invite_users.md
      intelligence_center.md: cti/index.md
      intelligence_center/api.md: cti/develop/index.md
      intelligence_center/dashboard.md: cti/features/monitor/dashboard.md
      intelligence_center/data_export.md: cti/features/consume/export.md
      intelligence_center/data_model.md: cti/features/data_model.md
      intelligence_center/enricher.md: cti/features/consume/enrichers.md
      intelligence_center/graph_explorations.md: cti/features/consume/graph_explorations.md
      intelligence_center/integrations.md: cti/features/integrations/index.md
      intelligence_center/integrations/anomali.md: cti/features/integrations/anomali.md
      intelligence_center/integrations/microsoft-sentinel.md: cti/features/integrations/microsoft-sentinel.md
      intelligence_center/integrations/misp.md: cti/features/integrations/misp.md
      intelligence_center/integrations/opencti.md: cti/features/integrations/opencti.md
      intelligence_center/integrations/splunk.md: cti/features/integrations/splunk.md
      intelligence_center/integrations/thehive.md: cti/features/integrations/thehive.md
      intelligence_center/intelligence.md: cti/features/consume/intelligence.md
      intelligence_center/observables.md: cti/features/consume/observables.md
      operation_center.md: xdr/index.md
      operation_center/actions.md: xdr/features/automate/actions.md
      operation_center/alerts.md: xdr/features/investigate/alerts.md
      operation_center/assets.md: xdr/features/collect/assets.md
      operation_center/cases.md: xdr/features/investigate/cases.md
      operation_center/data_collection/ingestion_methods/sekoiaio.md: integration/categories/endpoint/sekoiaio.md
      operation_center/entities.md: xdr/features/collect/entities.md
      operation_center/events.md: xdr/features/investigate/events.md
      operation_center/faq.md: xdr/FAQ.md
      operation_center/intakes.md: xdr/features/collect/intakes.md
      operation_center/operators.md: xdr/features/automate/operators.md
      operation_center/playbook_overview.md: xdr/features/automate/index.md
      operation_center/rules.md: xdr/features/detect/rules_catalog.md
      operation_center/rules_catalog.md: xdr/features/detect/rules_catalog.md
      operation_center/templates.md: xdr/features/detect/rules_catalog.md
      operation_center/threat_exposition.md: xdr/features/report/dashboards.md
      operation_center/triggers.md: xdr/features/automate/triggers.md
      playbooks/actions.md: xdr/features/automate/actions.md
      playbooks/operators.md: xdr/features/automate/operators.md
      playbooks/overview.md: xdr/features/automate/index.md
      playbooks/triggers.md: xdr/features/automate/triggers.md
      searching/search_events.md: xdr/features/investigate/events.md
      tip/develop/rest_api/identity_and_authentication.md: tip/develop/rest_api/community.md
      user_center.md: getting_started/index.md
      user_center/apikeys.md: getting_started/manage_api_keys.md
      user_center/multi_factor_authentication.md: getting_started/account_security.md
      xdr/develop/rest_api/identity_and_authentication.md: xdr/develop/rest_api/community.md
      xdr/features/collect/ingestion_methods/https/format.md: integration/ingestion_methods/https/format.md
      xdr/features/collect/ingestion_methods/index.md: integration/ingestion_methods/index.md
      xdr/features/collect/ingestion_methods/sekoiaio_forwarder.md: integration/ingestion_methods/syslog/sekoiaio_forwarder.md
      xdr/features/collect/integrations/application/alsid.md: integration/categories/iam/alsid.md
      xdr/features/collect/integrations/application/apache.md: integration/categories/applicative/apache.md
      xdr/features/collect/integrations/application/bind.md: integration/categories/network/bind.md
      xdr/features/collect/integrations/application/cyberwatch_detection.md: integration/categories/network_security/cyberwatch_detection.md
      xdr/features/collect/integrations/application/dhcpd.md: integration/categories/network/dhcpd.md
      xdr/features/collect/integrations/application/freeradius.md: integration/categories/iam/freeradius.md
      xdr/features/collect/integrations/application/haproxy.md: integration/categories/network/haproxy.md
      xdr/features/collect/integrations/application/manageengine_adauditplus.md: integration/categories/iam/manageengine_adauditplus.md
      xdr/features/collect/integrations/application/microsoft_iis.md: integration/categories/applicative/microsoft_iis.md
      xdr/features/collect/integrations/application/nginx.md: integration/categories/network/nginx.md
      xdr/features/collect/integrations/application/openldap.md: integration/categories/iam/openldap.md
      xdr/features/collect/integrations/application/openssh.md: integration/categories/network/openssh.md
      xdr/features/collect/integrations/application/openvpn.md: integration/categories/network/openvpn.md
      xdr/features/collect/integrations/application/rsa_securid.md: integration/categories/iam/rsa_securid.md
      xdr/features/collect/integrations/application/sekoiaio_activity_logs.md: integration/categories/applicative/sekoiaio_activity_logs.md
      xdr/features/collect/integrations/application/sekoiaio_forwarder_logs.md: integration/categories/applicative/sekoiaio_forwarder_logs.md
      xdr/features/collect/integrations/application/systancia_cleanroom.md: integration/categories/applicative/systancia_cleanroom.md
      xdr/features/collect/integrations/application/unbound.md: integration/categories/network/unbound.md
      xdr/features/collect/integrations/application/veeam_backup.md: integration/categories/applicative/veeam_backup.md
      xdr/features/collect/integrations/cloud_and_saas/aws/aws_cloudfront.md: integration/categories/network_security/aws_cloudfront.md
      xdr/features/collect/integrations/cloud_and_saas/aws/aws_cloudtrail.md: integration/categories/network_security/aws_cloudtrail.md
      xdr/features/collect/integrations/cloud_and_saas/aws/aws_flow_logs.md: integration/categories/network/aws_flow_logs.md
      xdr/features/collect/integrations/cloud_and_saas/aws/aws_guardduty.md: integration/categories/network_security/aws_guardduty.md
      xdr/features/collect/integrations/cloud_and_saas/aws/aws_waf.md: integration/categories/network_security/aws_waf.md
      xdr/features/collect/integrations/cloud_and_saas/azure/azure_files.md: integration/categories/applicative/azure_files.md
      xdr/features/collect/integrations/cloud_and_saas/azure/azure_front_door.md: integration/categories/network_security/azure_front_door.md
      xdr/features/collect/integrations/cloud_and_saas/azure/azure_key_vault.md: integration/categories/iam/azure_key_vault.md
      xdr/features/collect/integrations/cloud_and_saas/azure/azure_mysql.md: integration/categories/applicative/azure_mysql.md
      xdr/features/collect/integrations/cloud_and_saas/azure/azure_network_watcher.md: integration/categories/network_security/azure_network_watcher.md
      xdr/features/collect/integrations/cloud_and_saas/azure/azure_windows.md: integration/categories/endpoint/azure_windows.md
      xdr/features/collect/integrations/cloud_and_saas/azure/entra_id.md: integration/categories/iam/entra_id.md
      xdr/features/collect/integrations/cloud_and_saas/bitsight_spm.md: integration/categories/network_security/bitsight_spm.md
      xdr/features/collect/integrations/cloud_and_saas/broadcom_cloud_swg.md: integration/categories/network_security/broadcom_cloud_swg.md
      xdr/features/collect/integrations/cloud_and_saas/cato_sase.md: integration/categories/network/cato_sase.md
      xdr/features/collect/integrations/cloud_and_saas/cisco_duo_security.md: integration/categories/iam/cisco_duo_security.md
      xdr/features/collect/integrations/cloud_and_saas/cisco_umbrella/umbrella_dns.md: integration/categories/network/umbrella_dns.md
      xdr/features/collect/integrations/cloud_and_saas/cisco_umbrella/umbrella_ip.md: integration/categories/network_security/umbrella_ip.md
      xdr/features/collect/integrations/cloud_and_saas/cisco_umbrella/umbrella_proxy.md: integration/categories/network_security/umbrella_proxy.md
      xdr/features/collect/integrations/cloud_and_saas/claroty_xdome.md: integration/categories/network_security/claroty_xdome.md
      xdr/features/collect/integrations/cloud_and_saas/cloudflare/cloudflare-access-requests.md: integration/categories/network/cloudflare-access-requests.md
      xdr/features/collect/integrations/cloud_and_saas/cloudflare/cloudflare-audit-logs.md: integration/categories/applicative/cloudflare-audit-logs.md
      xdr/features/collect/integrations/cloud_and_saas/cloudflare/cloudflare-dns-logs.md: integration/categories/network/cloudflare-dns-logs.md
      xdr/features/collect/integrations/cloud_and_saas/cloudflare/cloudflare-firewall-events.md: integration/categories/network_security/cloudflare-firewall-events.md
      xdr/features/collect/integrations/cloud_and_saas/cloudflare/cloudflare-gateway-dns.md: integration/categories/network/cloudflare-gateway-dns.md
      xdr/features/collect/integrations/cloud_and_saas/cloudflare/cloudflare-gateway-http.md: integration/categories/network/cloudflare-gateway-http.md
      xdr/features/collect/integrations/cloud_and_saas/cloudflare/cloudflare-gateway-network.md: integration/categories/network/cloudflare-gateway-network.md
      xdr/features/collect/integrations/cloud_and_saas/cloudflare/cloudflare-http-requests.md: integration/categories/network/cloudflare-http-requests.md
      xdr/features/collect/integrations/cloud_and_saas/datadome_protection.md: integration/categories/network_security/datadome_protection.md
      xdr/features/collect/integrations/cloud_and_saas/digital_shadows.md: integration/categories/network_security/digital_shadows.md
      xdr/features/collect/integrations/cloud_and_saas/extrahop_revealx_360.md: integration/categories/network_security/extrahop_revealx_360.md
      xdr/features/collect/integrations/cloud_and_saas/fastly/fastly_audit_waf.md: integration/categories/applicative/fastly_audit_waf.md
      xdr/features/collect/integrations/cloud_and_saas/fastly/fastly_waf.md: integration/categories/network_security/fastly_waf.md
      xdr/features/collect/integrations/cloud_and_saas/github_audit_logs.md: integration/categories/applicative/github_audit_logs.md
      xdr/features/collect/integrations/cloud_and_saas/google/google_cloud_audit.md: integration/categories/applicative/google_cloud_audit.md
      xdr/features/collect/integrations/cloud_and_saas/google/google_kubernetes_engine.md: integration/categories/endpoint/google_kubernetes_engine.md
      xdr/features/collect/integrations/cloud_and_saas/google/google_reports.md: integration/categories/applicative/google_reports.md
      xdr/features/collect/integrations/cloud_and_saas/google/google_vpc_flow_logs.md: integration/categories/network/google_vpc_flow_logs.md
      xdr/features/collect/integrations/cloud_and_saas/imperva_waf.md: integration/categories/network_security/imperva_waf.md
      xdr/features/collect/integrations/cloud_and_saas/jumpcloud_directory_insights.md: integration/categories/iam/jumpcloud_directory_insights.md
      xdr/features/collect/integrations/cloud_and_saas/lacework_cloud_security.md: integration/categories/network_security/lacework_cloud_security.md
      xdr/features/collect/integrations/cloud_and_saas/netskope/netskope_events.md: integration/categories/network_security/netskope_events.md
      xdr/features/collect/integrations/cloud_and_saas/netskope/netskope_transaction.md: integration/categories/network_security/netskope_transaction.md
      xdr/features/collect/integrations/cloud_and_saas/office365/message_trace.md: integration/categories/email/message_trace.md
      xdr/features/collect/integrations/cloud_and_saas/office365/microsoft_365_defender.md: integration/categories/endpoint/microsoft_365_defender.md
      xdr/features/collect/integrations/cloud_and_saas/office365/o365.md: integration/categories/email/o365.md
      xdr/features/collect/integrations/cloud_and_saas/ogo_shield.md: integration/categories/network_security/ogo_shield.md
      xdr/features/collect/integrations/cloud_and_saas/okta_system_log.md: integration/categories/iam/okta_system_log.md
      xdr/features/collect/integrations/cloud_and_saas/salesforce.md: integration/categories/applicative/salesforce.md
      xdr/features/collect/integrations/cloud_and_saas/securityscorecard_vas.md: integration/categories/network_security/securityscorecard_vas.md
      xdr/features/collect/integrations/cloud_and_saas/sophos_threat_analysis_center.md: integration/categories/network_security/sophos_threat_analysis_center.md
      xdr/features/collect/integrations/cloud_and_saas/ubika_cloud_protector_alerts.md: integration/categories/network_security/ubika_cloud_protector_alerts.md
      xdr/features/collect/integrations/cloud_and_saas/ubika_cloud_protector_traffic.md: integration/categories/network_security/ubika_cloud_protector_traffic.md
      xdr/features/collect/integrations/cloud_and_saas/ubika_waap.md: integration/categories/network_security/ubika_waap.md
      xdr/features/collect/integrations/cloud_and_saas/zscaler_zia.md: integration/categories/network_security/zscaler_zia.md
      xdr/features/collect/integrations/email/cisco_esa.md: integration/categories/email/cisco_esa.md
      xdr/features/collect/integrations/email/fortimail.md: integration/categories/email/fortimail.md
      xdr/features/collect/integrations/email/mimecast_email_security.md: integration/categories/email/mimecast_email_security.md
      xdr/features/collect/integrations/email/postfix.md: integration/categories/email/postfix.md
      xdr/features/collect/integrations/email/proofpoint_pod.md: integration/categories/email/proofpoint_pod.md
      xdr/features/collect/integrations/email/proofpoint_tap.md: integration/categories/email/proofpoint_tap.md
      xdr/features/collect/integrations/email/retarus_email_security.md: integration/categories/email/retarus_email_security.md
      xdr/features/collect/integrations/email/spamassassin.md: integration/categories/email/spamassassin.md
      xdr/features/collect/integrations/email/trend_micro_email_security.md: integration/categories/email/trend_micro_email_security.md
      xdr/features/collect/integrations/email/vade.md: integration/categories/email/vade.md
      xdr/features/collect/integrations/email/vade_cloud.md: integration/categories/email/vade_cloud.md
      xdr/features/collect/integrations/endpoint/auditbeat_linux.md: integration/categories/endpoint/auditbeat_linux.md
      xdr/features/collect/integrations/endpoint/bitdefender_gravityzone.md: integration/categories/endpoint/bitdefender_gravityzone.md
      xdr/features/collect/integrations/endpoint/checkpoint_harmony_mobile.md: integration/categories/endpoint/checkpoint_harmony_mobile.md
      xdr/features/collect/integrations/endpoint/crowdstrike_falcon.md: integration/categories/endpoint/crowdstrike_falcon.md
      xdr/features/collect/integrations/endpoint/crowdstrike_falcon_telemetry.md: integration/categories/endpoint/crowdstrike_falcon_telemetry.md
      xdr/features/collect/integrations/endpoint/cybereason_malop.md: integration/categories/endpoint/cybereason_malop.md
      xdr/features/collect/integrations/endpoint/cybereason_malop_activity.md: integration/categories/endpoint/cybereason_malop_activity.md
      xdr/features/collect/integrations/endpoint/darktrace_threat_visualizer.md: integration/categories/network_security/darktrace_threat_visualizer.md
      xdr/features/collect/integrations/endpoint/daspren_parad.md: integration/categories/network_security/daspren_parad.md
      xdr/features/collect/integrations/endpoint/eset_protect.md: integration/categories/endpoint/eset_protect.md
      xdr/features/collect/integrations/endpoint/harfanglab.md: integration/categories/endpoint/harfanglab.md
      xdr/features/collect/integrations/endpoint/ibm_aix.md: integration/categories/endpoint/ibm_aix.md
      xdr/features/collect/integrations/endpoint/ibm_i.md: integration/categories/endpoint/ibm_i.md
      xdr/features/collect/integrations/endpoint/kaspersky_endpoint_security.md: integration/categories/endpoint/kaspersky_endpoint_security.md
      xdr/features/collect/integrations/endpoint/linux.md: integration/categories/endpoint/linux.md
      xdr/features/collect/integrations/endpoint/log_insight_windows.md: integration/categories/endpoint/log_insight_windows.md
      xdr/features/collect/integrations/endpoint/microsoft_intune.md: integration/categories/endpoint/microsoft_intune.md
      xdr/features/collect/integrations/endpoint/paloalto_cortex_edr.md: integration/categories/endpoint/paloalto_cortex_edr.md
      xdr/features/collect/integrations/endpoint/panda_security_aether.md: integration/categories/endpoint/panda_security_aether.md
      xdr/features/collect/integrations/endpoint/sekoiaio.md: integration/categories/endpoint/sekoiaio.md
      xdr/features/collect/integrations/endpoint/sekoiaio/sekoiaio.md: integration/categories/endpoint/sekoiaio.md
      xdr/features/collect/integrations/endpoint/sentinelone.md: integration/categories/endpoint/sentinelone.md
      xdr/features/collect/integrations/endpoint/sophos_edr.md: integration/categories/endpoint/sophos_edr.md
      xdr/features/collect/integrations/endpoint/stormshield_endpoint.md: integration/categories/endpoint/stormshield_ses.md
      xdr/features/collect/integrations/endpoint/symantec_epp.md: integration/categories/endpoint/symantec_epp.md
      xdr/features/collect/integrations/endpoint/tanium.md: integration/categories/endpoint/tanium.md
      xdr/features/collect/integrations/endpoint/tehtris_edr.md: integration/categories/endpoint/tehtris_edr.md
      xdr/features/collect/integrations/endpoint/trellix_edr.md: integration/categories/endpoint/trellix_edr.md
      xdr/features/collect/integrations/endpoint/trellix_epo.md: integration/categories/network_security/trellix_epo.md
      xdr/features/collect/integrations/endpoint/trend_micro/trend_micro_apex_one.md: integration/categories/endpoint/trend_micro_apex_one.md
      xdr/features/collect/integrations/endpoint/trend_micro/trend_micro_deep_security.md: integration/categories/network_security/trend_micro_deep_security.md
      xdr/features/collect/integrations/endpoint/vmware/vmware_esxi.md: integration/categories/endpoint/vmware_esxi.md
      xdr/features/collect/integrations/endpoint/vmware/vmware_vcenter.md: integration/categories/endpoint/vmware_vcenter.md
      xdr/features/collect/integrations/endpoint/windows.md: integration/categories/endpoint/windows.md
      xdr/features/collect/integrations/endpoint/winlogbeat.md: integration/categories/endpoint/winlogbeat.md
      xdr/features/collect/integrations/endpoint/withsecure_elements.md: integration/categories/endpoint/withsecure_elements.md
      xdr/features/collect/integrations/generic/cef.md: integration/categories/generic/cef.md
      xdr/features/collect/integrations/generic/raw.md: integration/categories/generic/raw.md
      xdr/features/collect/integrations/index.md: integration/categories/index.md
      xdr/features/collect/integrations/network/arubaos.md: integration/categories/network/arubaos.md
      xdr/features/collect/integrations/network/broadcom_edge_swg.md: integration/categories/network_security/broadcom_edge_swg.md
      xdr/features/collect/integrations/network/checkpoint.md: integration/categories/network_security/checkpoint.md
      xdr/features/collect/integrations/network/cisco/cisco_asa.md: integration/categories/network_security/cisco_asa.md
      xdr/features/collect/integrations/network/cisco/cisco_identity_services_engine_ise.md: integration/categories/network_security/cisco_identity_services_engine_ise.md
      xdr/features/collect/integrations/network/cisco/cisco_ios.md: integration/categories/network/cisco_ios.md
      xdr/features/collect/integrations/network/cisco/cisco_meraki_mx.md: integration/categories/network/cisco_meraki_mx.md
      xdr/features/collect/integrations/network/cisco/cisco_nx_os.md: integration/categories/network/cisco_nx_os.md
      xdr/features/collect/integrations/network/cisco/cisco_wsa.md: integration/categories/network_security/cisco_wsa.md
      xdr/features/collect/integrations/network/citrix_netscaler_adc.md: integration/categories/network/citrix_netscaler_adc.md
      xdr/features/collect/integrations/network/clavister_ng_fw.md: integration/categories/network_security/clavister_ng_fw.md
      xdr/features/collect/integrations/network/efficientip_solidserver_ddi.md: integration/categories/network/efficientip_solidserver_ddi.md
      xdr/features/collect/integrations/network/ekinops_oneos.md: integration/categories/network/ekinops_oneos.md
      xdr/features/collect/integrations/network/f5-big-ip.md: integration/categories/network/f5-big-ip.md
      xdr/features/collect/integrations/network/forcepoint_web_gateway.md: integration/categories/network/forcepoint_web_gateway.md
      xdr/features/collect/integrations/network/fortigate.md: integration/categories/network_security/fortigate.md
      xdr/features/collect/integrations/network/fortiproxy.md: integration/categories/network_security/fortiproxy.md
      xdr/features/collect/integrations/network/fortiweb.md: integration/categories/network_security/fortiweb.md
      xdr/features/collect/integrations/network/gatewatcher_aioniq.md: integration/categories/network_security/gatewatcher_aioniq.md
      xdr/features/collect/integrations/network/infoblox_ddi.md: integration/categories/network/infoblox_ddi.md
      xdr/features/collect/integrations/network/juniper_switches.md: integration/categories/network/juniper_switches.md
      xdr/features/collect/integrations/network/microsoft_always_on_vpn.md: integration/categories/network/microsoft_always_on_vpn.md
      xdr/features/collect/integrations/network/netfilter.md: integration/categories/network/netfilter.md
      xdr/features/collect/integrations/network/olfeo_secure_web_gateway.md: integration/categories/network_security/olfeo_secure_web_gateway.md
      xdr/features/collect/integrations/network/opnsense.md: integration/categories/network/opnsense.md
      xdr/features/collect/integrations/network/paloalto.md: integration/categories/network_security/paloalto.md
      xdr/features/collect/integrations/network/pulse.md: integration/categories/network/pulse.md
      xdr/features/collect/integrations/network/rubycat_prove_it.md: integration/categories/iam/rubycat_prove_it.md
      xdr/features/collect/integrations/network/sesameit_jizo.md: integration/categories/network/sesameit_jizo.md
      xdr/features/collect/integrations/network/skyhigh_secure_web_gateway.md: integration/categories/network_security/skyhigh_secure_web_gateway.md
      xdr/features/collect/integrations/network/sonicwall_fw.md: integration/categories/network_security/sonicwall_fw.md
      xdr/features/collect/integrations/network/sonicwall_sma.md: integration/categories/network_security/sonicwall_sma.md
      xdr/features/collect/integrations/network/sophos_fw.md: integration/categories/network_security/sophos_fw.md
      xdr/features/collect/integrations/network/squid.md: integration/categories/network/squid.md
      xdr/features/collect/integrations/network/stormshield_network_security.md: integration/categories/network_security/stormshield_network_security.md
      xdr/features/collect/integrations/network/suricata.md: integration/categories/network_security/suricata.md
      xdr/features/collect/integrations/network/trellix_nx.md: integration/categories/network_security/trellix_nx.md
      xdr/features/collect/integrations/network/varonis_data_security.md: integration/categories/network_security/varonis_data_security.md
      xdr/features/collect/integrations/network/vectra.md: integration/categories/network_security/vectra.md
      xdr/features/collect/integrations/network/wallix.md: integration/categories/iam/wallix.md
      xdr/features/collect/integrations/network/watchguard_firebox.md: integration/categories/network_security/watchguard_firebox.md
      xdr/features/investigate/dork_language.md: xdr/features/investigate/events_query_language.md
- redoc
- integration_by_uuid
repo_url: https://github.com/SEKOIA-IO/documentation
site_name: Sekoia.io Documentation
site_url: https://docs.sekoia.io
theme:
  custom_dir: theme
  favicon: assets/favicon.png
  features:
  - navigation.tabs
  - navigation.top
  - navigation.footer
  - content.code.annotate
  - content.action.edit
  - content.code.copy
  font: false
  include_search_page: true
  lang: en
  logo: assets/sekoiaio.svg
  name: material
  search_index_only: false
validation:
  links:
    absolute_links: relative_to_docs
  omitted_files: ignore