[{"id":"ci_6de3f179fa47639164fe89ca4fd0281ca3e1006366b3e9e3ce60943dad38ad4d","title":"Getting Started","path":"/user-docs/18.0v2/getting-started","children":[{"id":"ci_14524d7b318c365f8d32e841609fb50075f15428063bee0e6d253d5166a4598f","title":"Setting Up Multi-Tenancy","path":"/user-docs/18.0v2/setting-up-multi-tenancy","children":[]},{"id":"ci_95ad9e80bec14db1dcacaa7ed6a4abaa9e0df79dfe3715ce646d9ced1c5ea9f6","title":"Setting Up Access Controls","path":"/user-docs/18.0v2/setting-permissions","children":[{"id":"ci_83156c653b420318deb19fc34f03165216ee3279dea9a5f34eb8d969b44470d0","title":"Roles","path":"/user-docs/18.0v2/roles","children":[]},{"id":"ci_8c4a97e8f77e63c43879b74dbf373601947e83b4db876ff9d8d3002b12145a39","title":"Groups","path":"/user-docs/18.0v2/groups","children":[]}]},{"id":"ci_f46e246d34429babacebf0b4a349be600da360c0deecb6f3211286909f0bf274","title":"Creating Users","path":"/user-docs/18.0v2/creating-users","children":[]},{"id":"ci_dc43e0b747a6014e06b3ed1d2f39082427ff29408997deb127b5056a27518644","title":"Configuring an Integration","path":"/user-docs/18.0v2/configuring-an-integration","children":[{"id":"ci_47dfa35ebdd68879b016d4c6f51aa73fa59ccb55e3e8d70fcccf4fe58eaca88e","title":"Connection","path":"/user-docs/18.0v2/connection","children":[]},{"id":"ci_4b86fe7eb921d863d0ba4eb5fd166799e304a18c2b25b24695f95740833bd590","title":"Commands","path":"/user-docs/18.0v2/commands","children":[]}]},{"id":"ci_9fd58d68e349c02a3410d0dbae648eecb83ee4b6319898c3107f2f92262b6036","title":"My First Playbook","path":"/user-docs/18.0v2/building-your-first-playbook","children":[]},{"id":"ci_35b873654356c2e8aebd7a9858fc68a366990c2a18a3a9cb1051a63feb072788","title":"My Second Playbook","path":"/user-docs/18.0v2/building-your-second-playbook","children":[]},{"id":"ci_7327b876b3374d033df9df5c30891fc2b2ca92923737cc3dace8ceafb94405f2","title":"Configuring Data Ingestion","path":"/user-docs/18.0v2/configuring-data-ingestion","children":[]},{"id":"ci_7595d5d3db8e563657463dbdcf923ec65d92ba828cba1aa9dfe91ea4b0de716f","title":"D3 Glossary","path":"/user-docs/18.0v2/d3-glossary","children":[]}]},{"id":"ci_3c7b05d3f98bf4e8ed4893559a8bf0ecfc62cf3cb39cbbe7c404f20ef684c395","title":"‎Automation","path":"/user-docs/18.0v2/automation","children":[{"id":"ci_59be539c4a40e0e2b966e20f233cac97dec55ba4634941a25e6e027de5199f04","title":"Event-Incident Correlation","path":"/user-docs/18.0v2/event-incident-correlation","children":[]},{"id":"ci_83f5c5e0a343e97dbc7822ab3cd284f677a4d0c63fed5ed789655b0d56fa7ae5","title":"Introduction to Utility Commands","path":"/user-docs/18.0v2/utility-commands-1","children":[]},{"id":"ci_a19507a71a26d20d5b933ddbbe52b619f39459ac2529aeb1020763dd7d263b8a","title":"‎Customize with Python","path":"/user-docs/18.0v2/customize-with-python","children":[{"id":"ci_48d9218c62951ee70b6fd1ab861df18697bdedf59b0839df2d14c5677397307d","title":"My First Custom Integration Command","path":"/user-docs/18.0v2/my-first-custom-integration-command","children":[{"id":"ci_69fda625ddc2d88ad3eccbd03c3a73645de2a4bc3e74f2e3040ffb993f18be81","title":"Custom Connection Parameters","path":"/user-docs/18.0v2/custom-connection-parameters","children":[]}]},{"id":"ci_01060ebb3618a01f9c889703806b19504a4026b5f242de270cb8fa65f42bb320","title":"My First Custom Utility Command","path":"/user-docs/18.0v2/my-first-custom-utility-command","children":[]}]},{"id":"ci_b1c68ed5107208e90c5633fd694eb6afbea6a01ef4767e19e0d16f36272dc02c","title":"Scheduling Commands","path":"/user-docs/18.0v2/scheduling-commands","children":[]},{"id":"ci_56c9ca274159a7be8c23131fbec59419c025d145e9b34c77ab572c7bb5c16ca8","title":"Field Mappings","path":"/user-docs/18.0v2/field-mappings","children":[{"id":"ci_21b691c7ce793593f88c062ee869d686f24de342b37aee34a614f4513fd899fe","title":"Source Field: Supported JSONPath Expressions","path":"/user-docs/18.0v2/source-field-supported-jsonpath-expressions","children":[]},{"id":"ci_54a0197afa6d1d2d3177b30c7781fee8e01e8d3fa0680fe37752619f790f374c","title":"Data Model for Normalization","path":"/user-docs/18.0v2/data-model-for-normalization","children":[]},{"id":"ci_39c6cdc4a73237b22b8f3696df32456c541cc173af380432cd10f37d304175b8","title":"Artifact Instantiations","path":"/user-docs/18.0v2/artifact-instantiations","children":[]},{"id":"ci_4ae1496291b311647d4b74a9ae020e0aae14a30da0a84dfd4cbcce1b2b7028e2","title":"Artifact Relationships","path":"/user-docs/18.0v2/artifact-relationships","children":[]},{"id":"ci_0a28223d3f32dc5eb1a476a0d8af419389739f335a4264977a45e3152eb02dd2","title":"Related Events","path":"/user-docs/18.0v2/related-events","children":[]}]},{"id":"ci_d42ca1901c04643e6fdb29a08ccf8df9e9f2dbbf524f80b23dd0e342ba91e02a","title":"Playbooks","path":"/user-docs/18.0v2/playbooks","children":[{"id":"ci_b4a320d39cb578d8a2fb7b890276f93e5337f488e27d47d317aeede3ba0d3ae0","title":"Investigation Playbooks","path":"/user-docs/18.0v2/investigation-playbooks","children":[]},{"id":"ci_8c3a2613a0f17581a2c573a6464f40325d57d8cc04d8535506ac51c7e3945380","title":"Preprocessing Playbooks","path":"/user-docs/18.0v2/preprocessing-playbooks","children":[]},{"id":"ci_d6a50ef3d19363fc2136c4ebc82eda6ff85d111e8485458249e90bd7cbe391bd","title":"Playbook Triggers","path":"/user-docs/18.0v2/playbook-triggers","children":[{"id":"ci_a89c6fd7b576bf2a15c30fc61c9662e556e7b1749f8cfd163a707c0da4955b5a","title":"Investigation Playbook Triggers","path":"/user-docs/18.0v2/investigation-playbook-triggers","children":[]},{"id":"ci_bd3735f4da1fcd24c155fa85c2388a842e9756607892b568c7f219e14fb31aef","title":"Preprocessing Playbook Triggers","path":"/user-docs/18.0v2/preprocessing-playbook-triggers","children":[]}]},{"id":"ci_2a64d0211b922a3789e3a4f14acde8514451ab91e10d9e384b5e6684e3c2be68","title":"Playbook Tasks","path":"/user-docs/18.0v2/playbook-tasks","children":[{"id":"ci_316cc1ccc87f3432398adcdff3b91bef33b0d979bec15efb1a6f5f99bf962866","title":"Fundamentals‎","path":"/user-docs/18.0v2/fundamentals","children":[{"id":"ci_3464aeda8fd78a8e48600aa6abe8407cf284544cebdcbc532c6db5a90a490486","title":"Dynamically Selecting Data","path":"/user-docs/18.0v2/dynamically-selecting-data","children":[]},{"id":"ci_fe96df30ee1573185ad578986dfb87f7c6665742e9a594eb4ee77cd5c4fcdbdd","title":"Jinja Basics","path":"/user-docs/18.0v2/jinja-basics","children":[]},{"id":"ci_cfc8e4a8a57bd3a2f6cb2f6431f47126e182cab34f11a7dbc49c2d2196be18c0","title":"Jinja Filters","path":"/user-docs/18.0v2/jinja-filters","children":[{"id":"ci_2c2909c8167993deb906a143a7f64145a840b625a093a1e79313195968e0cc6e","title":"Array Filters","path":"/user-docs/18.0v2/array","children":[]},{"id":"ci_6e31450b0740e21efbafc29d2befbc544e029e373b94f4281e5654fbcd3803e1","title":"Boolean Filters","path":"/user-docs/18.0v2/boolean-filters","children":[]},{"id":"ci_772eb6730ce882b7c434ab8896617f717e956bb9ea5ed70d15dd73e4e2431ed7","title":"Datetime Filters","path":"/user-docs/18.0v2/datetime-filters","children":[]},{"id":"ci_1d56c7b13f364798f33084972b3051cf7f08f882c032a92783a4389b6ddf28f6","title":"JSON Object Filters","path":"/user-docs/18.0v2/json-object","children":[]},{"id":"ci_13126ec5c326ae202ac74f6d729cd5ff4950e9da39eab54b1e5899e4f518e696","title":"Text Filters","path":"/user-docs/18.0v2/text-filters","children":[]},{"id":"ci_51c002245201565582bbafc968ec7141c63d98ee24a9c47723b12588f4d99fa2","title":"Number Filters","path":"/user-docs/18.0v2/number-filters","children":[]}]},{"id":"ci_d4d7725d6509b017ad387d99663b52976551b94e59f66be160a54832455b4265","title":"Regular Expressions","path":"/user-docs/18.0v2/regular-expressions","children":[{"id":"ci_6e2ccf7d1a6009696d243bcce1dea3a9d4610acbcbc587713a815b7b6a3902cc","title":"Literal Matching","path":"/user-docs/18.0v2/literal-matching","children":[]},{"id":"ci_0b05373bbf18aaf888f5785382e0c98251916e9f64532a0d0a60b899f997e354","title":"Character Classes","path":"/user-docs/18.0v2/character-classes","children":[]},{"id":"ci_e90e86868ef9978c6575307e336d28409e2967c98c469761bb82057575feba12","title":"Anchors","path":"/user-docs/18.0v2/anchors","children":[]},{"id":"ci_a4b9a8db39d10314b0c7f71d8d1d918a59f52d68d0750a1821ae0b7a167d1c24","title":"Quantifiers","path":"/user-docs/18.0v2/quantifiers","children":[]},{"id":"ci_0a2c626d31dca1a9c4b34f8abd38cec579f83dff809c8eda270264dc6ba59458","title":"Grouping Constructs","path":"/user-docs/18.0v2/grouping-constructs","children":[]}]},{"id":"ci_7f128f98139ec451b75e7e909cefb49620dfbb5c4d322548d3449f7d19ef24b9","title":"Run Modes","path":"/user-docs/18.0v2/run-modes","children":[]}]},{"id":"ci_d246b7460cb59d504f0741f0dca27f3604962a37651152693971640c63335645","title":"Task Types‎","path":"/user-docs/18.0v2/task-types","children":[{"id":"ci_9c22b07ffeb70ee4fd2981765918fb1a8d24d596645827e851c66efe95303de7","title":"AI Tasks","path":"/user-docs/18.0v2/ai-tasks","children":[]},{"id":"ci_df69d3912ea3c292433dccaaf86376b0180cbf8c7e8ea30c0729d42956563379","title":"Command Tasks","path":"/user-docs/18.0v2/command-tasks","children":[{"id":"ci_503aaad10c466ff1645c4aa0c56d5e80f7c2e270c3c595c3ddd3ae4f1b278cb4","title":"Nested Playbooks","path":"/user-docs/18.0v2/nested-playbooks","children":[]}]},{"id":"ci_afb2ede88dfba6303ea4d4df721cc383d022fd9f2cb313039ce4cdc7b442eaae","title":"Conditional Tasks","path":"/user-docs/18.0v2/conditional-tasks","children":[]},{"id":"ci_083de30027720b6f64869e257d385ec6df06cad741ebc8f6dd7f27e5534b0c74","title":"Data Formatter Tasks","path":"/user-docs/18.0v2/data-formatter-tasks","children":[]},{"id":"ci_ece410b69e965928b1860803219610ce79717daecc5e55ee66db2b2b3dcb83b0","title":"Interaction Tasks","path":"/user-docs/18.0v2/interaction-tasks","children":[]},{"id":"ci_ef34b62b25f461127aadb246851fcc5a442c4d5268d5e99361c88b4c866b2439","title":"Merge Tasks","path":"/user-docs/18.0v2/merge-tasks","children":[{"id":"ci_0f6528340bbe654cb167b189da3bd252468a7b4792c807f1903463ab2ea48b13","title":"Group by Path","path":"/user-docs/18.0v2/group-by-path","children":[]},{"id":"ci_9da483020bc2a1def318bcf139507424cc170c0afd936e0fad3dd05dd1412e25","title":"Group by Playbook Instance","path":"/user-docs/18.0v2/group-by-playbook-instance","children":[]},{"id":"ci_19acf0b7a07fd0bd593b35a9c6525bd1231756606eb28d31c04be4b507655950","title":"Group by Task","path":"/user-docs/18.0v2/group-by-task","children":[]},{"id":"ci_ab755d3108e07589f0f8bdb9364a0c15ae40af7a95a4f50811c85b646e5a11ad","title":"Group by Task Instance","path":"/user-docs/18.0v2/group-by-task-instance","children":[]}]},{"id":"ci_7dc1670d5fe5f8a0cebbca024243b2bf0f36d270aba60c2ab3a0e987a6266a09","title":"Stage Tasks","path":"/user-docs/18.0v2/stage-tasks","children":[]},{"id":"ci_8f5fab9ffcf1bfe5314cff7c7a7ffce4669974e1d7e04cb0253c1e7cc4fd9285","title":"Unwind Tasks","path":"/user-docs/18.0v2/unwind-tasks","children":[]}]}]},{"id":"ci_796021f559c5f8df580c5c39adda24b737a0086d3c5ef1fab3051ca54c1c4cc9","title":"Playbook Control Flow","path":"/user-docs/18.0v2/playbook-control-flow","children":[{"id":"ci_629660338b50fa60bcd096620a467838a6e170d00d3c97aab6d9ed44943b3862","title":"Stop on Error","path":"/user-docs/18.0v2/stop-on-error","children":[]}]},{"id":"ci_0b78e674cb0e28fb7e7da75f7370a8e0b01f4dc7a01ca4518d6f6a45eba66ea3","title":"Playbook Testing and Task Node Re-runs","path":"/user-docs/18.0v2/playbook-testing-and-task-re-runs","children":[]}]}]},{"id":"ci_0948e9c5c5b52473dd2b8d0736c9711e2b9a0480d631f419d500c092a86cacfc","title":"Incident Response","path":"/user-docs/18.0v2/incident-response","children":[{"id":"ci_8cf5927a5552a460e1a9297b8f8e4f842847710ea7122418251def37690df43f","title":"Investigation Dashboard","path":"/user-docs/18.0v2/investigation-dashboard","children":[{"id":"ci_95c6e2c834ff64471b954e0897d2c357a10aaf519829358cf39946a23cb85d52","title":"My Dashboards","path":"/user-docs/18.0v2/my-dashboards","children":[]},{"id":"ci_7bb6c59f1f02148532b1cd15dc95cea7b2db43f3af6e7ce84abbfc661909505d","title":"Custom Views","path":"/user-docs/18.0v2/custom-views","children":[]},{"id":"ci_a09c3301e409ff4e07e9c0d2de98b0a5100353e4c6766090534a8571eefcfb28","title":"Setting Up a Custom View","path":"/user-docs/18.0v2/setting-up-a-custom-triage","children":[]}]},{"id":"ci_59c6c3469bd3d9553f6f6c4fcad592ccadbbfa6394fbc8be04b56fd1b26d3e56","title":"MITRE ATT&CK Monitor","path":"/user-docs/18.0v2/monitor","children":[]},{"id":"ci_de206da8dce69a036b61394ec81f86f5aa2a7f58b2c79c4c338c5b68738b2539","title":"Incident Workspace","path":"/user-docs/18.0v2/incident-workspace","children":[{"id":"ci_6a6d1d2dbd5adb132ed10f5901f11630b86adbb8325f2091233e9eb4d4fc07e6","title":"Morpheus Adaptive Tasking","path":"/user-docs/18.0v2/morpheus-adaptive-tasking","children":[]},{"id":"ci_44611e2dddad4c9c93430a39dd882441044d98b98305a44328793162dba725b2","title":"Linked Artifacts","path":"/user-docs/18.0v2/linked-artifacts","children":[]}]},{"id":"ci_de8cec7b13a32de583e4d67f56f3773e9cc1269e95de9cc3958d51092af2d3b5","title":"D3 Forms","path":"/user-docs/18.0v2/d3-forms","children":[]},{"id":"ci_b1312092575022ee415998f2583de150b4be1b88a97db7890b78e8651accf4fe","title":"Event Playbook Viewer","path":"/user-docs/18.0v2/event-playbook-viewer","children":[]},{"id":"ci_9e7adc6133fb1c4ec51bd2052efc240ba7bb4bf24f6dad361fa9e743bf15a2ec","title":"Reporting Dashboard","path":"/user-docs/18.0v2/reporting-dashboards","children":[{"id":"ci_ffccde312abd3aa06569556852c6c05c7b69cd2c53cceefcfb75ac4fc97cb3d4","title":"RD Widgets","path":"/user-docs/18.0v2/rd-widgets","children":[]},{"id":"ci_9eb7dd1fcf49bde0dcde59545826e9034e87419f716fd5e3119131619f0e6baf","title":"RD Dashboards","path":"/user-docs/18.0v2/rd-dashboards","children":[]},{"id":"ci_c039471d010ceddb86fee5b3e2311d565cb4b8531a26fa58b125996a67f8a44f","title":"SLA and ROI Widgets","path":"/user-docs/18.0v2/sla-and-roi-widgets","children":[]}]}]},{"id":"ci_0a09c5dec4f02624ced8883f1777f63ea0afe54f0707996f494e91298d7e8159","title":"Configuration","path":"/user-docs/18.0v2/configuration","children":[{"id":"ci_ae4297403e64814199c8667f1170e45e3b32d61e62dd682bcb7c2db958015a1f","title":"Home Dashboard","path":"/user-docs/18.0v2/configuration-home-dashboard","children":[]},{"id":"ci_78ec3fe05330bba1369c0825afccb5824224688a0fbd53265b1db507c591d95a","title":"Event Playbooks","path":"/user-docs/18.0v2/event-playbooks","children":[]},{"id":"ci_0c85a8e84ea3649f8ea7a888e0425786ebe5ecdef86c9afacbc53f88b8676377","title":"Incident Playbooks","path":"/user-docs/18.0v2/incident-playbooks","children":[]},{"id":"ci_2dc842fd39256d3fb42d644480285724c1b7ae63ab6da2637148c8305c39b9f4","title":"Incident Type Manager","path":"/user-docs/18.0v2/incident-type-manager","children":[{"id":"ci_7bbb4c2581ed377ed5d7ec4e1c2339ec17df4457497f8b61f7adf738d3af09d6","title":"Configuring an Incident Type: General Configuration","path":"/user-docs/18.0v2/configuring-an-incident-type-general-configuration","children":[]},{"id":"ci_9dc51180b8bd5d17ada9f676184bf8a7e9532f2ce95d908c5a8463b10a10c158","title":"Configuring an Incident Type: Incident Workspace","path":"/user-docs/18.0v2/configuring-an-incident-type-incident-workspace","children":[{"id":"ci_868b21c9996eeee99e3e08702987b4c86aeb86bebea02caccd3502959cc6ccdf","title":"Incident Workspace Widgets","path":"/user-docs/18.0v2/incident-workspace-widgets","children":[]}]},{"id":"ci_77d2918f1d082494a81a9991b9e8e849c5f549adcbd15a580aefd4204f79493a","title":"Configuring an Incident Type: Incident Form Builder","path":"/user-docs/18.0v2/configuring-an-incident-type-incident-form-builder","children":[]}]},{"id":"ci_d20225d9e01945ec5bdb559d263799c6a966005f08267960f9e5851d6a27d87e","title":"Integrations","path":"/user-docs/18.0v2/integrations","children":[]},{"id":"ci_6ae9ca9adf81791ac15ed8064adcdf8499594ab7dc58f99c6b3f97db36bb5ebc","title":"Utility Commands","path":"/user-docs/18.0v2/utility-commands","children":[]},{"id":"ci_cf86a79e10888fac018dba6fd13cbc6318da0c96096f980ff05bc79d6b76ee6d","title":"Custom Command","path":"/user-docs/18.0v2/custom-command","children":[{"id":"ci_49f90528b04a5b8833f5965bbf23a41b9f7a525ab9512ade45f0da0d5f4973c7","title":"Custom Command Overview","path":"/user-docs/18.0v2/custom-command-overview","children":[]},{"id":"ci_e9696ed3ac4b2aee62d0c669fe925f3cb4d7d943e1b8b1ad89c7aadd8fcbce35","title":"Python Environment","path":"/user-docs/18.0v2/background","children":[]},{"id":"ci_ed18d2b7ec86d52e0a1830864a1ca8a5c71dd3453737b1d795541b4bc0cb2f2c","title":"Building Custom Commands","path":"/user-docs/18.0v2/building-custom-commands","children":[{"id":"ci_8d0f701f7aba68fae70863298ec9c3457dfa76fc18a18deb2d0b2fc78524d24a","title":"Integration Custom Command","path":"/user-docs/18.0v2/integration-custom-command","children":[]},{"id":"ci_f5aa921ae1ebcae658aac1d42eea1481d2143b5a8fea347ec46a821376dc55a2","title":"Utility Custom Command","path":"/user-docs/18.0v2/utility-custom-command","children":[]}]},{"id":"ci_266c328175f9c3ac4e7dbb08e58b1423ade8e70986d4e96912e880a2a95f8ef6","title":"Python Script","path":"/user-docs/18.0v2/python-script","children":[]}]},{"id":"ci_90bb4e963a133c7891aabbe0a73e51adcbf94d29c9b8077e1bc1ce696f025387","title":"D3 Data Model and Normalization","path":"/user-docs/18.0v2/d3-data-model-and-normalization","children":[]},{"id":"ci_ee2450b5f302e6f1028f8cf3979c7bfb0d783ef17d8ab0799847de73f5257ed9","title":"Data Ingestion","path":"/user-docs/18.0v2/data-ingestion","children":[{"id":"ci_8eda79abd1c944b343059dbda5e389e25da454606632349be8f2a9c8279f913c","title":"Global List Site Mapping","path":"/user-docs/18.0v2/global-list-site-mapping","children":[]}]},{"id":"ci_7a1981469a9a46283ea5e3024842d133fd5abd20e68f75757a28f98eae30ce81","title":"Schedules","path":"/user-docs/18.0v2/schedules","children":[]},{"id":"ci_f153c9961f6a95c3a535663b9555d86e9b5e40b8f57d0173f906f22db1f6294d","title":"Codeless Playbooks for Webhook Data Formatting","path":"/user-docs/18.0v2/codeless-playbooks-for-webhook-data-formatting","children":[]},{"id":"ci_4c20deba193b17f839ceafd91f594366710af1cafd69271451fd77ee5721b38e","title":"Data Formatter Usage Guidelines","path":"/user-docs/18.0v2/data-formatter-usage-guidelines","children":[]},{"id":"ci_24f4dd5deb901309720839584719f0bc22676e384371541ed1ab1b6b76af9566","title":"Connections","path":"/user-docs/18.0v2/connections","children":[]},{"id":"ci_800cea940e53ae9defdc251a9df58536d8ad51f39697f28b4eb57c2f66f6ce18","title":"Agent Management","path":"/user-docs/18.0v2/agent-management","children":[{"id":"ci_f8ecc85f997f261c0da7b30b2e6f3ec3169b26e33a34c9658211734eb4e2eb41","title":"‎Agent Installation on Linux‎","path":"/user-docs/18.0v2/agent-installation-on-linux","children":[{"id":"ci_974697f2cdb99073f23c5ef55475396dfc54c93620e5b8598ea3b6f09649194b","title":"System Requirements and Network Configuration","path":"/user-docs/18.0v2/system-requirements-and-network-configuration","children":[]},{"id":"ci_32fa21302eef8e5c37c10b4e1f4b96a225c9945b3ff0d7c542f43384592b4dad","title":"Linux Environment Setup","path":"/user-docs/18.0v2/linux-environment-setup","children":[]},{"id":"ci_9eff6c2899c48ffb2d816f9e8b8491cbef92902a4e8897b08fe9926433e01ab5","title":"GCR to ACR Container Migration","path":"/user-docs/18.0v2/gcr-to-acr-container-migration","children":[]},{"id":"ci_228b37410d5d9c70db0bd5aa5405dfcd3eca671e8745cedd76613f434ca19fbe","title":"Updating Images Addresses to Use ACR","path":"/user-docs/18.0v2/updating-images-addresses-to-use-acr","children":[]},{"id":"ci_9e7af81e957e3d1119b8285739bd3991cf8057d3460c447f59c945458e519167","title":"Install Agent on Linux","path":"/user-docs/18.0v2/install-agent-on-linux","children":[]},{"id":"ci_8f788632cbbb462b72c289fec0020d851f5a169193bbbfbcb8ded6f8ee8691cd","title":"Performing a Manual Agent Update","path":"/user-docs/18.0v2/performing-a-manual-agent-update","children":[]},{"id":"ci_7e8771cdbb25e543c5c905664b92c9bce926a58a3ea6c5e95e2bc6ea0ed028c3","title":"Firewall Whitelisting and Web Proxy Setting","path":"/user-docs/18.0v2/firewall-whitelisting-and-web-proxy-setting","children":[]}]},{"id":"ci_0a31c6c65341cc3e949292034bc79b518a1eeac2616afa60930494c1d9ff768f","title":"Agent Installation on Windows","path":"/user-docs/18.0v2/agent-installation-on-windows","children":[{"id":"ci_f6c6ef46f297fe9b967f0fee24f29e9ed91bf20f3ddff5b568f2bf1ca52dc641","title":"Environment Requirements","path":"/user-docs/18.0v2/environment-requirements","children":[]},{"id":"ci_44e46ae201fd3090c41159604d79490bbc203ab33403bcd6d4876aeca74baae1","title":"Install Agent on Windows","path":"/user-docs/18.0v2/install-agent-on-windows","children":[]},{"id":"ci_cd4eac6183a22c30167096e228042006ab391f63c9217dd31df29e0b49f91584","title":"Agent High Availability","path":"/user-docs/18.0v2/agent-high-availability","children":[]},{"id":"ci_a4d5acb880739b39d8bc443ef39cbbbfd9db8728657a1421603194e152d12e6e","title":"Windows Server Hardening for D3 Agent","path":"/user-docs/18.0v2/windows-server-hardening-for-d3-proxy-agent","children":[]}]},{"id":"ci_e77e883cfbfc63c67c9d33f822c2a7c1524f032d8959e5cb8603d1916b377ce4","title":"Uninstalling Windows and Linux Agents","path":"/user-docs/18.0v2/uninstalling-windows-and-linux-agents","children":[]},{"id":"ci_e6f28254157b0598cce6dc95912f9b4f31ec65d28390f08ca9757bd31859961f","title":"Agent Upgrade","path":"/user-docs/18.0v2/agent-upgrade","children":[{"id":"ci_a8e0345f3d4c6d2f29e6b33946c921747b76883c24ed1fed0de30897cf837b1c","title":"Linux Proxy Agent - Remote Upgrades","path":"/user-docs/18.0v2/linux-proxy-agent-remote-upgrades","children":[]},{"id":"ci_81df9414375dcf0ff70258991476f8e6a314fec5d84bfdfb6ed905a815c9d5f5","title":"Windows Proxy Agent - Automatic Agent Upgrade","path":"/user-docs/18.0v2/windows-proxy-agent-automatic-agent-upgrade","children":[]}]},{"id":"ci_cef6ebdde2f9c1a0a88a095853a5e4bab25f17c90a71ba214f29e8600bbb4a4a","title":"Agent Configuration Scenarios","path":"/user-docs/18.0v2/agent-configuration-scenarios","children":[]},{"id":"ci_18e1b614bf3a853c98e503da106b05fde4155f5d3984b20342b5cbdbe2343f2d","title":"Network Configuration for D3 Application in Restricted Client-Side Environments","path":"/user-docs/18.0v2/network-configuration-for-d3-application-in-restri","children":[]},{"id":"ci_4be76c3e919617abca4d4961907a38dd6129b90bda286001ea4a675bfa8007c3","title":"Configuring Custom CA Certificate","path":"/user-docs/18.0v2/configuring-custom-ca-certificate","children":[]},{"id":"ci_90ed0f261d9b2dbf9d929f23bf01ec33af6a0de6c8f22c39e2516aaceaa295f8","title":"Upgrading to the .NET 8.0 D3 Agent","path":"/user-docs/18.0v2/upgrading-to-the-net-8-0-d3-agent","children":[]}]},{"id":"ci_450b6179c689fe9bbbbab5f01196b669b130f0063b9d00f9da5f8c3f3c15f65d","title":"Global List","path":"/user-docs/18.0v2/global-list","children":[]},{"id":"ci_5ddad8bfced89c9e3fa0879dea98f12a70c4c4fcb85d72ad2ae4e800c840ddf2","title":"Event Automation Rules","path":"/user-docs/18.0v2/event-automation-rules","children":[]},{"id":"ci_e9101538e6a478e8126cd09bddb4421a1d08d139331bfb320462744f9350cfb3","title":"Organization Management","path":"/user-docs/18.0v2/organization-management","children":[]},{"id":"ci_b61b9dd3966ce930bd68f181dddfc15f307d6b82ce3073748da8ca8243431784","title":"Application Settings","path":"/user-docs/18.0v2/application-settings","children":[]},{"id":"ci_8121551b1ecccd3bae9970fd34adbb2988bbdc42bed7fec904227f43c8e30ec2","title":"Advanced Settings","path":"/user-docs/18.0v2/advanced-settings","children":[]},{"id":"ci_1d2b591cb65b4f60530c7f5115e0764777e18d843fdc253bfb23c233c44fae2c","title":"Multi-Tenancy","path":"/user-docs/18.0v2/multi-tenancy","children":[]}]},{"id":"ci_c181f8f9abf73337ac468134b6f46f7e40c1d23d0579832231a49f3532d3d58d","title":"Additional Docs","path":"/user-docs/18.0v2/additional-docs","children":[{"id":"ci_f8b684756a064bd046aeaabef29aa33b822272b5719f03149db95992d1e24fb1","title":"Accessing and Using Incident Data in Playbook Execution","path":"/user-docs/18.0v2/accessing-and-using-incident-data-in-playbook-exec","children":[]},{"id":"ci_18150b63bf86e3ae6c340b133458c294359728eb6c0daea060d6c985a0b7e52e","title":"Accessing Sample Output Data for Integration Commands","path":"/user-docs/18.0v2/accessing-sample-output-data-for-integration-comma","children":[]},{"id":"ci_f8cd66309344be97d70b216029f99545f2a5fd9ceb61c03f41a72c9405219374","title":"Configuring Integration Connections in Incident Playbook Command Tasks","path":"/user-docs/18.0v2/configuring-integration-connections-in-incident-pl","children":[]},{"id":"ci_8913d7cfe2bd76dbe4e42ef6d1421c21e8b41617008b7badcddf73aa8f1398c6","title":"Integration Deployment Options","path":"/user-docs/18.0v2/d3-soar-integration-deployment-options","children":[]},{"id":"ci_6d7631c618413c81eb0d8f74a6241dc86913f547e729c5cba56a24d1e25c7412","title":"Login Authentication Configuration Guide","path":"/user-docs/18.0v2/login-authentication-configuration-guide","children":[]},{"id":"ci_4ca2b02652ce9ddaebab7722b0aa251ed4f692fbaa04e0af799b8724b78b1ddc","title":"Mutex Lock and Unlock Tasks","path":"/user-docs/18.0v2/mutex-lock-and-unlock-tasks","children":[]},{"id":"ci_324684d0e93d378623ca83099d0cc42b36f5630415b9aaa4c16d5a83bcf1d58c","title":"Populating the Investigation Tab using Utility Commands","path":"/user-docs/18.0v2/populating-the-investigation-tab-using-utility-com","children":[]},{"id":"ci_40844ac68658aabffed13bd37816b9885a57c01ec6665cbde0f987b7c9bce404","title":"Purging SQL Server Data","path":"/user-docs/18.0v2/purging-sql-server-data","children":[]},{"id":"ci_19acd3e3a3c70f194121378cbdce2999f870b5f5b023712bfdd3527dc6e968c5","title":"SAML Configurations","path":"/user-docs/18.0v2/saml-configurations","children":[{"id":"ci_a0814b8d6e5c4984bf9b66f750519f84f44a56e19e9641a3c9fe99eb28f4ef27","title":"SAMLEmailIDType: Controlling Username Format for SSO Authentication","path":"/user-docs/18.0v2/samlemailidtype-controlling-username-format-for-ss","children":[]},{"id":"ci_65d032f19ac45930429ecea49f0950387826375fd01db760fc43ad9cb0607752","title":"Google Admin","path":"/user-docs/18.0v2/saml-configuration-for-google-admin","children":[]},{"id":"ci_0b332a5cccee64af65ec4a1b8d63dbf47209337f9cb71adbc758207378b4af13","title":"Keycloak","path":"/user-docs/18.0v2/keycloak","children":[]},{"id":"ci_0e79544575216b8a3b19bf878b8dbc1982ee37f671b7e4a9e5d76765d30d63bb","title":"Microsoft AD FS","path":"/user-docs/18.0v2/saml-configuration-for-microsoft-ad-fs","children":[]},{"id":"ci_3af58bb559c076d236f2c3a9ecddad1939f0fb1ef551ae60cda7f11439158b58","title":"Microsoft Entra ID (Azure AD)","path":"/user-docs/18.0v2/saml-configuration-for-microsoft-entra-id","children":[]},{"id":"ci_90c28394ff1e65549444ef8c5e306d95f6225fb5f6cc6606e4590a98e6273421","title":"Microsoft Entra ID (SAML2.0)","path":"/user-docs/18.0v2/microsoft-entra-id-saml20","children":[]},{"id":"ci_61cf3042f4dd9b26304733be77db0363771fff1c2f5857de0d6e73ad12504d3c","title":"Okta","path":"/user-docs/18.0v2/saml-configuration-for-okta","children":[]},{"id":"ci_a9cf5c37a652e3adad757ea4ee16f686d452227e0995629d4024ab4cdea814c2","title":"Ping Identity","path":"/user-docs/18.0v2/saml-configuration-for-ping-identity","children":[]}]},{"id":"ci_eb654b8c9d83ad3c275987a6469cb50caf60e66e87a51cccf1ba8a60877ee1a4","title":"SSO Break Glass Procedure","path":"/user-docs/18.0v2/sso-break-glass-procedure","children":[]},{"id":"ci_859061eb6e0695d99e563b3defde02f937313970a0a0e7a78b1d1ad7ebccb13f","title":"Tenant Management","path":"/user-docs/18.0v2/tenant-management","children":[{"id":"ci_1e7e6021b6f37d4cfbd95a88d45b5fa297a134f1953b9ba55d56e1e29d1154c8","title":"Shared Content","path":"/user-docs/18.0v2/shared-content","children":[{"id":"ci_46245937568ccf8fbc276227c4067e721f95c25849bc3270a61f2eaf7f5b22bb","title":"Users / Groups / Roles","path":"/user-docs/18.0v2/users-groups-roles","children":[]}]}]},{"id":"ci_f6a46b8925d5986d610f9a2bfe6d5a5d55cc357f2a320bbbde3d957923ed6574","title":"Using Quick Actions","path":"/user-docs/18.0v2/using-quick-actions","children":[]},{"id":"ci_1e26a68580bbb234fa017c4cdc0c592d7135252b8ffa35b87a30abe1148ddf91","title":"Utility Command API: Get Events | Get Incidents","path":"/user-docs/18.0v2/d3-command-api-get-events-get-incidents","children":[]},{"id":"ci_a301e51363aef7be3ec188b24bb62b1df2477499bfeecfa455c8c98ee4d12932","title":"Webhook Configuration Guide","path":"/user-docs/18.0v2/webhook-configuration-guide","children":[{"id":"ci_14384ea2b8ea17ead81cf5152655cf56793f3c26ce6ed7cd917b201122ac055c","title":"API Key Authentication","path":"/user-docs/18.0v2/api-key-authentication","children":[]},{"id":"ci_cbfc7f676c1a67cf699077b3a5c2cf61a9eef03bba480a00d0d7779686649e98","title":"JSON Web Token Authentication","path":"/user-docs/18.0v2/json-web-token-authentication","children":[]}]},{"id":"ci_0869fbe7c021768ea99722995dd248e12a1822b52618c3514241f6f16078cd99","title":"Webhook Data Formatter","path":"/user-docs/18.0v2/webhook-data-formatter","children":[]},{"id":"ci_44f4ed98bbe698a7f1920d50643efbe2ea9657e91a2f716fae6f9d79e490489f","title":"YAML Basics","path":"/user-docs/18.0v2/yaml-basics","children":[]}]}]