[{"id":"ci_bb1a0652b560c65b5b08b92ec13782a84ab83e5be575c402aade942535ab6a98","title":"Getting Started","path":"/user-docs/18.5/getting-started","children":[{"id":"ci_aefc014781c1c75b28eb1e51132ae63c8a20a08a2367eafbc5ee208b4c7fa706","title":"Legacy-to-New Navigation Map","path":"/user-docs/18.5/legacy-to-new-navigation-map","children":[]},{"id":"ci_7518e67a3ba3b31e8803852a3ad12fb327e0546988a53c7249ff054219c660f4","title":"Setting Up Multi-Tenancy","path":"/user-docs/18.5/setting-up-multi-tenancy","children":[]},{"id":"ci_af0a9b4ee49a5cf0917dc572a09f9761316f2804de054f0fd66e7557cff125ac","title":"Setting Up Access Controls","path":"/user-docs/18.5/setting-permissions","children":[{"id":"ci_f2dffb08030abf2fabf74f6cbbcfc2716adf2f5e0b2b7f12954437592a90b6e5","title":"Roles","path":"/user-docs/18.5/roles","children":[]},{"id":"ci_15ac98536882e7bf02657a0f87dcfd43a755446d6ff89edc17d7da91a12ef112","title":"Groups","path":"/user-docs/18.5/groups","children":[]}]},{"id":"ci_07d3e6656fc64417e9ab22cd8b4b3e65970c0538df84ef45935ee6846be6e01d","title":"Creating Users","path":"/user-docs/18.5/creating-users","children":[]},{"id":"ci_dfb4b41207fc787d4cc51c6c0aa5456e1622aab07f94a44a563319397ba75d5b","title":"Configuring an Integration","path":"/user-docs/18.5/configuring-an-integration","children":[{"id":"ci_b67067a950d70ba31c70b003e814558cdd78a74e40d2f2808cdc61fbab72bb5a","title":"Connection","path":"/user-docs/18.5/connection","children":[]},{"id":"ci_487bb49c3b59ac133058c7cf96bf3279ec484d8f1202ff3ba0258dd84ca0f623","title":"Commands","path":"/user-docs/18.5/commands","children":[]}]},{"id":"ci_3caefe29c19093a0f98f494bf18ba6c4908cb91da6a390e6264edea760997086","title":"My First Playbook","path":"/user-docs/18.5/building-your-first-playbook","children":[]},{"id":"ci_f15c033d35f061dca97fd48f37df6b6257f5b6b3a9f9b7a42cfe0a7f1a8c0c55","title":"My Second Playbook","path":"/user-docs/18.5/building-your-second-playbook","children":[]},{"id":"ci_ae19ca416f56854906ae5b50d856e05f5eb7e511bdc29cf95814f8463209a922","title":"Configuring Data Ingestion","path":"/user-docs/18.5/configuring-data-ingestion","children":[]},{"id":"ci_cd5d0af241b7dfa8467a98fe5de8aba77c0b261dd9f2df6b72669f4494bf9fb2","title":"D3 Glossary","path":"/user-docs/18.5/d3-glossary","children":[]}]},{"id":"ci_beb5c7a22737f31a15327b7533fa87fc696b56049e3c4ac006cf2792ea2724e1","title":"‎Automation","path":"/user-docs/18.5/automation","children":[{"id":"ci_ed36dcd43848b3e2c4a54ec8e4c52b7ef9e414acb9a02f7295a1d6f4dd915257","title":"Event-Incident Correlation","path":"/user-docs/18.5/event-incident-correlation","children":[]},{"id":"ci_b312b72e4fb50f61baa84ff782df7af5770e48737c4243e4e3ba6eb83e0c164a","title":"Introduction to Utility Commands","path":"/user-docs/18.5/utility-commands-1","children":[]},{"id":"ci_8210a58e083e905fd10d384b3297be9ba9633d6582b96be01baf43daff8800bf","title":"‎Customize with Python","path":"/user-docs/18.5/customize-with-python","children":[{"id":"ci_27a1a5567bf96094fd74a0f85186f8e3305efbb685995de6f8fe87a338bfe2e7","title":"My First Custom Integration Command","path":"/user-docs/18.5/my-first-custom-integration-command","children":[{"id":"ci_1fc6b8082439620275ebbc8e17340e90c5647f8682e3f8b1d69d61ed081471d0","title":"Custom Connection Parameters","path":"/user-docs/18.5/custom-connection-parameters","children":[]}]},{"id":"ci_8c9c33424a09504551fe0e50b369f1aa8984733556d512996812afe6777b153e","title":"My First Custom Utility Command","path":"/user-docs/18.5/my-first-custom-utility-command","children":[]}]},{"id":"ci_ff2465294e2314428aaa196a4e0d552ffcc7470eefe42e4110000d4f90605706","title":"Scheduling Commands","path":"/user-docs/18.5/scheduling-commands","children":[]},{"id":"ci_f31a7c8fe7fdb1f0f96ac29d041337eab0322003017e0bb49fd1bb99a6c09303","title":"Field Mappings","path":"/user-docs/18.5/field-mappings","children":[{"id":"ci_a3905a363967b9633a792f38311cef94879fd7e7b7ad7bb33f59bdbbc3b932bf","title":"Source Field: Supported JSONPath Expressions","path":"/user-docs/18.5/source-field-supported-jsonpath-expressions","children":[]},{"id":"ci_98b8d7540d591d458f55b8fc3d235391fcd9b338e1d8f51447e812bc7cb25d73","title":"Data Model for Normalization","path":"/user-docs/18.5/data-model-for-normalization","children":[]},{"id":"ci_5a34da95c4bed9b44b26dff730a48c9089494e0496836d18f5942822ab6e847c","title":"Artifact Instantiations","path":"/user-docs/18.5/artifact-instantiations","children":[]},{"id":"ci_0d7ce2ecde6bb8da87a263664b3e7d1fddbea6d2b0753ead8dba42838eaa1ea2","title":"Artifact Relationships","path":"/user-docs/18.5/artifact-relationships","children":[]},{"id":"ci_6aa0398fca7730c8c0027a22717c6c5eefebdfdcf82a3496fe6d8055c4daf95b","title":"Related Events","path":"/user-docs/18.5/related-events","children":[]}]},{"id":"ci_76047bf02a1b2cd68415f38d2d5628efbee8c57100a8994565056031edf90f73","title":"Playbooks","path":"/user-docs/18.5/playbooks","children":[{"id":"ci_0d9e167333ba1df43c09e36946880fc5f828992aeed8923efa33a8f08ec932a7","title":"Investigation Playbooks","path":"/user-docs/18.5/investigation-playbooks","children":[]},{"id":"ci_a85fa8346a034bdaf11d55e219adc225f5c5c2014c3e03ea21d809f08b88d4bf","title":"Preprocessing Playbooks","path":"/user-docs/18.5/preprocessing-playbooks","children":[]},{"id":"ci_c4ab9a6e70e1bd2e8e02bcdf18d2fac280509ea7ef203a814a1bd4e67a4ab6aa","title":"Playbook Triggers","path":"/user-docs/18.5/playbook-triggers","children":[{"id":"ci_651a65f379bd8709483d878af517d16cc187e94d1b0912d91cafded861d60eef","title":"Investigation Playbook Triggers","path":"/user-docs/18.5/investigation-playbook-triggers","children":[]},{"id":"ci_d715cb326830b8c7f4b2841d13be02069690b503093c8e0103422cb2a66ec4e9","title":"Preprocessing Playbook Triggers","path":"/user-docs/18.5/preprocessing-playbook-triggers","children":[]}]},{"id":"ci_e39dd5a1b53716237d80881f3086f47df848973a4e4047676f66d5b9e42a6687","title":"Playbook Tasks","path":"/user-docs/18.5/playbook-tasks","children":[{"id":"ci_22d84a04ae3a1ffc0c985760c6da7b9d036a109c07331406bc22946046e6283b","title":"Fundamentals‎","path":"/user-docs/18.5/fundamentals","children":[{"id":"ci_ac410ac09bebd7b9056d2ce925851ab5e3c1b828a86b5818572108353f4ab1f2","title":"Dynamically Selecting Data","path":"/user-docs/18.5/dynamically-selecting-data","children":[]},{"id":"ci_35bacee473d9c4b072fdaff4b734498ab552afb7e57b030d3435965b1cdcc12d","title":"Jinja Basics","path":"/user-docs/18.5/jinja-basics","children":[]},{"id":"ci_7bc61224ebc55512ff7b784f1e59e72c72895a1387d0032157c0769bd9a758a7","title":"Jinja Filters","path":"/user-docs/18.5/jinja-filters","children":[{"id":"ci_e4e42775c9f645f3d86a234766e84a7f6280ae1e6d1dc0e1e135fa7f3f0f8bdc","title":"Array Filters","path":"/user-docs/18.5/array","children":[]},{"id":"ci_6801f23e464ce0e05b468fdfb1af20c909fa51363a550aa015830840f0fc7f2a","title":"Boolean Filters","path":"/user-docs/18.5/boolean-filters","children":[]},{"id":"ci_d300e07eb3b8b3097dde7df0369880630f7dd848c3caa9b61923f956c03b5d46","title":"Datetime Filters","path":"/user-docs/18.5/datetime-filters","children":[]},{"id":"ci_af5d2b4b89eacd72629a36ebc2b655970e405b8d7b6070f01fa93d12a0400ecf","title":"JSON Object Filters","path":"/user-docs/18.5/json-object","children":[]},{"id":"ci_37f709fa3ebd0028e869bc68288402a66d7297e5b5a33935a7b5309d47004b24","title":"Text Filters","path":"/user-docs/18.5/text-filters","children":[]},{"id":"ci_d9e2e430a72e3fe8eb780bfeca2562f3f24e557f96fb5439ee22cebf2c447d31","title":"Number Filters","path":"/user-docs/18.5/number-filters","children":[]}]},{"id":"ci_d45c4d8c1b0be39a1c11065deb3543f0e8c2ab207b63f85f61344a90fab9b7c8","title":"Regular Expressions","path":"/user-docs/18.5/regular-expressions","children":[{"id":"ci_16610a09fcbe35d28011e2bbc3b58363d4c5942d384b5b35e668045244ffc7e6","title":"Literal Matching","path":"/user-docs/18.5/literal-matching","children":[]},{"id":"ci_a212ca460f70ec1bb130fff1daabcd498f9ee2b44ff75092300d7b5b6f12bbd6","title":"Character Classes","path":"/user-docs/18.5/character-classes","children":[]},{"id":"ci_eb200a7ea92e9d0e8829b9de62031898229ce567d76b8e5d7c22ab19abf97ffb","title":"Anchors","path":"/user-docs/18.5/anchors","children":[]},{"id":"ci_32d319ce655c17affbeed82e092cf1ebacb688624f8db54b0e9f1b8cdaf757bb","title":"Quantifiers","path":"/user-docs/18.5/quantifiers","children":[]},{"id":"ci_1269639853d78545f68bd353df733308ec5eed90ed328d9f88f78924f7364d2a","title":"Grouping Constructs","path":"/user-docs/18.5/grouping-constructs","children":[]}]},{"id":"ci_c5043974b0fc5583c200580db57313781f5f315868cb79ccb388717b24743e67","title":"Run Modes","path":"/user-docs/18.5/run-modes","children":[]}]},{"id":"ci_4f82eb38b456a51eb72095c101f3e1ec04b12921ce1a329577e989260dd32224","title":"Task Types‎","path":"/user-docs/18.5/task-types","children":[{"id":"ci_0cca579104591f9d73f86c344c1341a483db5cf643b1ee42a04b3b055d90a52b","title":"AI Tasks","path":"/user-docs/18.5/ai-tasks","children":[]},{"id":"ci_c530d8c56c85f849e34e3c83eb887684276605495cdf8b96ac8e17e9af8ad344","title":"Command Tasks","path":"/user-docs/18.5/command-tasks","children":[{"id":"ci_a9202a0129952c37dde076f92c5dc879c3b1c456f55b89e0843430a984898d69","title":"Nested Playbooks","path":"/user-docs/18.5/nested-playbooks","children":[]}]},{"id":"ci_a221baa94e2670cf30128a510151b0fee1b5c45b0560feac2113a59e9c95683c","title":"Conditional Tasks","path":"/user-docs/18.5/conditional-tasks","children":[]},{"id":"ci_d3f45826b32b23680e2110d1b6aa80661c8ae7e74ed64dddf8389b6789e0125d","title":"Data Formatter Tasks","path":"/user-docs/18.5/data-formatter-tasks","children":[]},{"id":"ci_b5a626694c88c27deb83bc97e4bd918ebe0e29cc0616bae6bc3b61d5ff654b02","title":"Interaction Tasks","path":"/user-docs/18.5/interaction-tasks","children":[]},{"id":"ci_20513e1b4f5ff2f5080c6ae48dfb81fa1cfd1b8e7216f9e5fd35ca2eec1f559c","title":"Merge Tasks","path":"/user-docs/18.5/merge-tasks","children":[{"id":"ci_c3753c7293448eec179af3478447a48f62c93e238568306cf101d29678396b09","title":"Group by Path","path":"/user-docs/18.5/group-by-path","children":[]},{"id":"ci_db1c2062d4461ebe11f6a44ea1d8e74573560a793027a977dedf9fa89f7b16ed","title":"Group by Playbook Instance","path":"/user-docs/18.5/group-by-playbook-instance","children":[]},{"id":"ci_bfc1f551998c8cb25f28d653eeabcc7bc790f5641017dbe110dd0b9478958435","title":"Group by Task","path":"/user-docs/18.5/group-by-task","children":[]},{"id":"ci_e1c9f1b15a0a9405815feb18a274756acdf99de36edfdde73274bebc368ab722","title":"Group by Task Instance","path":"/user-docs/18.5/group-by-task-instance","children":[]}]},{"id":"ci_2551ee5098374845e390399543a82a035b3d01b65ed620ec8db4e1bf391c5749","title":"Stage Tasks","path":"/user-docs/18.5/stage-tasks","children":[]},{"id":"ci_b91fb65d793d9c1fda51f817de5cea5ecc4da4b31112476c7c16bf1f79c056dd","title":"Unwind Tasks","path":"/user-docs/18.5/unwind-tasks","children":[]}]}]},{"id":"ci_93faaf5f371ab73515d2cf9392e0093f16f9c9f8a4808a7eab61c50575a9f3bb","title":"Playbook Control Flow","path":"/user-docs/18.5/playbook-control-flow","children":[{"id":"ci_792aab243138c697142fefa0355aa3294e4e035b78cf47507491675e2ff60c54","title":"Stop on Error","path":"/user-docs/18.5/stop-on-error","children":[]}]},{"id":"ci_f6f0f4431fdc0fb8a5d38ade056add3457d6ddb31284ccedcabae9d020696777","title":"Playbook Testing and Task Node Re-runs","path":"/user-docs/18.5/playbook-testing-and-task-re-runs","children":[]}]}]},{"id":"ci_6ec09e261b53d52a472e3a87bd784b6c0a6b6321eb3213a17c736a1189867903","title":"Incident Response","path":"/user-docs/18.5/incident-response","children":[{"id":"ci_029f81dd1bb16ab5c722638f4a8b48f4d857ce790b78585444f0726eb3dda76e","title":"Investigation Dashboard","path":"/user-docs/18.5/investigation-dashboard","children":[{"id":"ci_10ea817a4e6458822fd973f2cfe76eaedf3c0e5db56814ef46bcce1b67abf8f6","title":"My Dashboards","path":"/user-docs/18.5/my-dashboards","children":[]},{"id":"ci_548452a389432f79461b8dfd5ba284a9f93bd527fb09ca5a90b2c7431de1dc21","title":"Custom Views","path":"/user-docs/18.5/custom-views","children":[]},{"id":"ci_5eee30ce385a3bcfe6d00b87525211ac706dce24855e577111b8f596031447c9","title":"Setting Up a Custom View","path":"/user-docs/18.5/setting-up-a-custom-triage","children":[]}]},{"id":"ci_67f8598a2edb174a8a8608e06dd8b18a11e650836e39cdfff8193196476f0daf","title":"MITRE ATT&CK Monitor","path":"/user-docs/18.5/monitor","children":[]},{"id":"ci_ba103ffaaeb3546b49497ac15fcca6785f6f23ceb857eae7bf3f357f0f50e95c","title":"Incident Workspace","path":"/user-docs/18.5/incident-workspace","children":[{"id":"ci_ab26a5a54d4ed811b458bdd336e3f7d4ddd3f5f07444f2caf9116e27f920a8c0","title":"Morpheus Adaptive Tasking","path":"/user-docs/18.5/morpheus-adaptive-tasking","children":[{"id":"ci_881a6f2fc88ce25057dd53bc4a44b063cd631860e2fff28b6764d7da3452fe27","title":"Memory and Rules","path":"/user-docs/18.5/memory-and-rules","children":[]}]},{"id":"ci_d7ad7a545ec05654d973c7a79e49393663ecdefa2c5a9bdc2720f628eb8ab26b","title":"Linked Artifacts","path":"/user-docs/18.5/linked-artifacts","children":[]}]},{"id":"ci_83db9f9ff5f2db63956359453a4c1e33284e9e0e8d23d7f7254b5a408c29b7f2","title":"D3 Forms","path":"/user-docs/18.5/d3-forms","children":[]},{"id":"ci_51e5ce491836baa330c0f12404d7d8210e392ab3f75e8a6a8bfab17b524253cd","title":"Event Playbook Viewer","path":"/user-docs/18.5/event-playbook-viewer","children":[]},{"id":"ci_16504d1344afd807a68abae7507e6372e45d42fc78737d2f448c235b1cd7b830","title":"Reporting Dashboard","path":"/user-docs/18.5/reporting-dashboards","children":[{"id":"ci_429477cf1222fbfdd5af469dc2652d86288c171578698a6119023f41e5f220b8","title":"RD Widgets","path":"/user-docs/18.5/rd-widgets","children":[]},{"id":"ci_28a69fa71c4de15e02949565e5348fcb09af8bca885cd3c5430a95dd76b9bf52","title":"RD Dashboards","path":"/user-docs/18.5/rd-dashboards","children":[]},{"id":"ci_8dc26f8d62be947c00368f8ea2354c35af7f176d0168b01c768a9a2975ceb9ad","title":"SLA and ROI Widgets","path":"/user-docs/18.5/sla-and-roi-widgets","children":[]}]}]},{"id":"ci_3cc05e5d0a26778c8b29782519137a0300989da2983b0124349be213676d6557","title":"Configuration","path":"/user-docs/18.5/configuration","children":[{"id":"ci_0139505eb526a6688ba30c072c18d6adfebc121210c5b4ba39e70c9b94322e4d","title":"Home Dashboard","path":"/user-docs/18.5/configuration-home-dashboard","children":[]},{"id":"ci_50bf25807c7819a23232152c6c1df2e7f753e269b7547195873b134a12979e8f","title":"Event Playbooks","path":"/user-docs/18.5/event-playbooks","children":[]},{"id":"ci_d9338ff7ab960b058047b47d5ccfd0a0fde3604ac073e9dbb74d3fcc62981416","title":"Incident Playbooks","path":"/user-docs/18.5/incident-playbooks","children":[]},{"id":"ci_18d78c6e674d5d67af29a90438ae67de08eb4794166d09a595bf4c867b21b705","title":"Incident Type Manager","path":"/user-docs/18.5/incident-type-manager","children":[{"id":"ci_32ed5c814fcc5b198275dddb18eb87a36d3182c97320dfcf0a7fa7e8a2a4eb73","title":"Configuring an Incident Type: General Configuration","path":"/user-docs/18.5/configuring-an-incident-type-general-configuration","children":[]},{"id":"ci_f4cba64f32aa6273ee7536ed0da8e396b6e3f5ebfb33cbf50c9a856bc61b723f","title":"Configuring an Incident Type: Incident Workspace","path":"/user-docs/18.5/configuring-an-incident-type-incident-workspace","children":[{"id":"ci_c38f2eb50e0bb9239df1f9845e9919d00cc6069f6a6c6b4f6f98147c48e23602","title":"Incident Workspace Widgets","path":"/user-docs/18.5/incident-workspace-widgets","children":[]}]},{"id":"ci_d8d319d43ddf041fe1e71ce134e14566b7b77cd4445a08de77723a17893a4fa8","title":"Configuring an Incident Type: Incident Form Builder","path":"/user-docs/18.5/configuring-an-incident-type-incident-form-builder","children":[]}]},{"id":"ci_46f80eaa66f380d9de9c25e4df275e449bd9c6d7561d2e98d1c218681f2f8b58","title":"Integrations","path":"/user-docs/18.5/integrations","children":[]},{"id":"ci_3333308aa38ff8dc6e2f90549449a90b7009c5326c49c045d42100e0895161d8","title":"Utility Commands","path":"/user-docs/18.5/utility-commands","children":[]},{"id":"ci_d0703fbb4627fd7b741d1a26c5e788504c1b25e0635bf86bb6d0fe4bde382261","title":"Custom Command","path":"/user-docs/18.5/custom-command","children":[{"id":"ci_83bd494ca5e50a55b7b78fb6d030c933418d4968d3156f047f99cc6688e188fe","title":"Custom Command Overview","path":"/user-docs/18.5/custom-command-overview","children":[]},{"id":"ci_d1943a0c854e9b41c037161a31c14a8f309bd6a0018dbadc4aaeefcff0e690df","title":"Python Environment","path":"/user-docs/18.5/background","children":[]},{"id":"ci_1465cf13e991c78fe66d4fb6bd1df8797b755613323aa2bd36e4c1498409518b","title":"Building Custom Commands","path":"/user-docs/18.5/building-custom-commands","children":[{"id":"ci_f9ae8771e26bbcc869b795b749b47121f3e9ee147d61ba705712e3472d630de8","title":"Integration Custom Command","path":"/user-docs/18.5/integration-custom-command","children":[]},{"id":"ci_7cf55f46d105f656b2f4bc3aedb9c79b5bc9e79a77fcf9d3072c4cc489eb16d7","title":"Utility Custom Command","path":"/user-docs/18.5/utility-custom-command","children":[]}]},{"id":"ci_38d795a8dc4fb17b15844cd6ca634a89e94c8e41bab8db5bb80b5110a1c3a015","title":"Python Script","path":"/user-docs/18.5/python-script","children":[]}]},{"id":"ci_41acbd38fb0c4726158d4ac322de4abb56b35660d218c07a8d0f278914f77b2d","title":"D3 Data Model and Normalization","path":"/user-docs/18.5/d3-data-model-and-normalization","children":[]},{"id":"ci_f971f7f27d62fb2da64178fb13dc9d45f5be0b331ca2abc598c9d3c1deaead5e","title":"Data Ingestion","path":"/user-docs/18.5/data-ingestion","children":[{"id":"ci_3321bfb8e9271f055cc5a4944a30e8ea007812163ef8708026f22cb0ace9d346","title":"Global List Site Mapping","path":"/user-docs/18.5/global-list-site-mapping","children":[]}]},{"id":"ci_66275d1ab700a4230981383bb637c1d3dce99d995212d6958e4a6665e811f1a4","title":"Schedules","path":"/user-docs/18.5/schedules","children":[]},{"id":"ci_c1b47e395cc56215ac977f39d0318ea5ed41f1fc711d2e4906acf3d0a863bd41","title":"Codeless Playbooks for Webhook Data Formatting","path":"/user-docs/18.5/codeless-playbooks-for-webhook-data-formatting","children":[]},{"id":"ci_898df2ecdbf19e6232596cbe71218cbd617d6d26578ee82fade9f972da4bb019","title":"Connections","path":"/user-docs/18.5/connections","children":[]},{"id":"ci_661237d22866faa784f560c896af6c2e3fddb730b0c66f958efd6cc46da54ea6","title":"Agent Management","path":"/user-docs/18.5/agent-management","children":[{"id":"ci_239e70d30d7c73d809509ad1b365fdabd6ee5287dbc3e88052ad7dd4098f4e43","title":"‎Agent Installation on Linux‎","path":"/user-docs/18.5/agent-installation-on-linux","children":[{"id":"ci_5571173a67d57f890b844027a2ae7b78c6d9f6bb20458abcecf0b82278f4f2f4","title":"System Requirements and Network Configuration","path":"/user-docs/18.5/system-requirements-and-network-configuration","children":[]},{"id":"ci_84fbd17a94abddae9236d1ceb5b1ae8d1750f2e32d2d6ebd90b89899324c45ea","title":"Linux Environment Setup","path":"/user-docs/18.5/linux-environment-setup","children":[]},{"id":"ci_ca3a2c42351f52f3d19350af6913384be4d3f4b83d9e8802eab6d394a7ccc3f4","title":"GCR to ACR Container Migration","path":"/user-docs/18.5/gcr-to-acr-container-migration","children":[]},{"id":"ci_4a6979ebe412a2900c4c490add10e7dda64efd9c641fe2f4f1b8e9680d252b9e","title":"Updating Images Addresses to Use ACR","path":"/user-docs/18.5/updating-images-addresses-to-use-acr","children":[]},{"id":"ci_fb15fa73b4472b07354f9fead7bfe8cda55eecc9ebdebb3cade7d935d667f6c8","title":"Install Agent on Linux","path":"/user-docs/18.5/install-agent-on-linux","children":[]},{"id":"ci_1f04b979a271a00ae9052b19d7a2ae146d6f3e5eaeeb99d564e54b5c9779c5a1","title":"Performing a Manual Agent Update","path":"/user-docs/18.5/performing-a-manual-agent-update","children":[]},{"id":"ci_e531fa769452994ae3a6eb17ba52d43434656d6f2117510decf7533f51ca12d6","title":"Firewall Whitelisting and Web Proxy Setting","path":"/user-docs/18.5/firewall-whitelisting-and-web-proxy-setting","children":[]}]},{"id":"ci_6546807f932ea009b77dccd24e1d561657e298ed6ec6a4512b0ac03b58593199","title":"Agent Installation on Windows","path":"/user-docs/18.5/agent-installation-on-windows","children":[{"id":"ci_ae467f6ab672216107d3da0aeab5946020b752e5c34aea5d8b7862b76345db55","title":"Environment Requirements","path":"/user-docs/18.5/environment-requirements","children":[]},{"id":"ci_25222859783d44361988f96e47b49365b166fc09f239b6a925d7265dfde90a31","title":"Install Agent on Windows","path":"/user-docs/18.5/install-agent-on-windows","children":[]},{"id":"ci_45e501e8e658aba6b61d57357c860a92579bdddd0b130c9e433b4a0a2c34eab6","title":"Agent High Availability","path":"/user-docs/18.5/agent-high-availability","children":[]},{"id":"ci_b767934aa98a56d6491ba6f2714ddaf701480c8c312c35547d2c7ea3159bb6f3","title":"Windows Server Hardening for D3 Agent","path":"/user-docs/18.5/windows-server-hardening-for-d3-proxy-agent","children":[]}]},{"id":"ci_16d040ca903e2eb64937553a914a22b42f4ed436e4648596663d701d8286921b","title":"Uninstalling Windows and Linux Agents","path":"/user-docs/18.5/uninstalling-windows-and-linux-agents","children":[]},{"id":"ci_02f7edfbdbacbe26a036ac323dc55977fd990c694513eb43e77c23faa79df527","title":"Agent Upgrade","path":"/user-docs/18.5/agent-upgrade","children":[{"id":"ci_9159a9252c22f29858c953257b0c3b420cc66115dab234d4f636dad85159df71","title":"Linux Proxy Agent - Remote Upgrades","path":"/user-docs/18.5/linux-proxy-agent-remote-upgrades","children":[]},{"id":"ci_b63f3314b5028149fbadbf6bde00bc46bb72717f97012e510eac403938f83dbf","title":"Windows Proxy Agent - Automatic Agent Upgrade","path":"/user-docs/18.5/windows-proxy-agent-automatic-agent-upgrade","children":[]}]},{"id":"ci_c61ebab865507a1e9b17636d95bee73ef218ba529e6198c6480250b42dce6c28","title":"Agent Configuration Scenarios","path":"/user-docs/18.5/agent-configuration-scenarios","children":[]},{"id":"ci_d330c0f59adcf9df1b7cf251b98cef0d48fcd413117b2264f732171503236ed5","title":"Network Configuration for D3 Application in Restricted Client-Side Environments","path":"/user-docs/18.5/network-configuration-for-d3-application-in-restri","children":[]},{"id":"ci_b598d74258298fa3572a33d575bd010871243291ccfe9016fd43f6d4aad81d10","title":"Configuring Custom CA Certificate","path":"/user-docs/18.5/configuring-custom-ca-certificate","children":[]},{"id":"ci_f9c8777e70f94802ae763dd5df23c966e29e518dcaf5caadb0aea62c0ed86e98","title":"Upgrading to the .NET 8.0 D3 Agent","path":"/user-docs/18.5/upgrading-to-the-net-8-0-d3-agent","children":[]}]},{"id":"ci_fa01b3bff45be475bab618fa2354a749eb8be571f351dd3d2b370cf1b2edc72f","title":"Global List","path":"/user-docs/18.5/global-list","children":[]},{"id":"ci_a663e1a9466ad1847ebbd06bda14492ef9d3efe86a22bc64c984a505f343487f","title":"Event Automation Rules","path":"/user-docs/18.5/event-automation-rules","children":[]},{"id":"ci_71f1683c8d4e009c0e6a84f5758fe07a2110a8810e024ea45fe2a4a98c178c35","title":"Organization Management","path":"/user-docs/18.5/organization-management","children":[]},{"id":"ci_9996e663d41a224ee5478ca411f9b05ed775a33a91f7b0c317ad3566a3effe85","title":"Application Settings","path":"/user-docs/18.5/application-settings","children":[]},{"id":"ci_bf84d5361b8803b5f7fda11ae4a7df8b7d87d0a16c9bce692a867d321b57ced2","title":"Advanced Settings","path":"/user-docs/18.5/advanced-settings","children":[]},{"id":"ci_5fc8fa52552b28109c6f8e485678a72eb1646615457df271127e18893a50e0b9","title":"Multi-Tenancy","path":"/user-docs/18.5/multi-tenancy","children":[]}]},{"id":"ci_a2d7e3b1857e52b53e333aa07098d6421b5e226b13749bd58b77465b668e1f51","title":"Additional Docs","path":"/user-docs/18.5/additional-docs","children":[{"id":"ci_116c60c822bfdbc8e786e8a0613275fec6bc9fed2d2cb48cf0c485e0bdfe6840","title":"Accessing and Using Incident Data in Playbook Execution","path":"/user-docs/18.5/accessing-and-using-incident-data-in-playbook-exec","children":[]},{"id":"ci_a74716139043e61131fa24307c802bfeaaaefeb2123bb2ca01cc146cacc7204b","title":"Accessing Sample Output Data for Integration Commands","path":"/user-docs/18.5/accessing-sample-output-data-for-integration-comma","children":[]},{"id":"ci_100641ecfbe12f8be96fb30709aeb35a5dd094d13b4e523df52abb4ffb7a8131","title":"Configuring Integration Connections in Investigation Playbook Command Tasks","path":"/user-docs/18.5/configuring-integration-connections-in-incident-pl","children":[]},{"id":"ci_ba85fcef960e0e8fb76c626fc18934139c7223b5e788cb48ba413a0eecfde686","title":"Integration Deployment Options","path":"/user-docs/18.5/d3-soar-integration-deployment-options","children":[]},{"id":"ci_912174d3b2afcaf8874ae650cfbb75d4c443be3556aa898d73204a0b22ec7f1d","title":"Login Authentication Configuration Guide","path":"/user-docs/18.5/login-authentication-configuration-guide","children":[]},{"id":"ci_c2c046e154bc1a5c4f5dfba57d02b8ba78d52ff51e6e4f87398362ab3d0be48d","title":"Mutex Lock and Unlock Tasks","path":"/user-docs/18.5/mutex-lock-and-unlock-tasks","children":[]},{"id":"ci_475da240705970d22bd4ebc03431c4f1d6358c3a8cf9772340c81f637f93a0fc","title":"Populating the Investigation Tab using Utility Commands","path":"/user-docs/18.5/populating-the-investigation-tab-using-utility-com","children":[]},{"id":"ci_fd9e555cfcfe81f5f6a46bc0e6c6a4c015db12830cf33f783b84cf20dbc35997","title":"Purging SQL Server Data","path":"/user-docs/18.5/purging-sql-server-data","children":[]},{"id":"ci_bf50c45dd53070b9347d3e0810814fda9e6ea6f340930b08a5c1647e43cc6de7","title":"SAML Configurations","path":"/user-docs/18.5/saml-configurations","children":[{"id":"ci_0a93443bc2965e51b43df21e2dd5b49c4ee00d754edc69c3f3e8d34022d5e0a9","title":"SAMLEmailIDType: Controlling Username Format for SSO Authentication","path":"/user-docs/18.5/samlemailidtype-controlling-username-format-for-ss","children":[]},{"id":"ci_99fdf702000b932022b830bea94bf3e0b64873886967971d315c8592ab9c36d3","title":"Google Admin","path":"/user-docs/18.5/saml-configuration-for-google-admin","children":[]},{"id":"ci_6aee8ec2651cdea12544c40cc09026308b69166419a149ef765264aaf8f9e768","title":"Keycloak","path":"/user-docs/18.5/keycloak","children":[]},{"id":"ci_b9777728ea8c395367e61d4446ca76bd0e959083c21b7fc343a5c3545275a154","title":"Microsoft AD FS","path":"/user-docs/18.5/saml-configuration-for-microsoft-ad-fs","children":[]},{"id":"ci_3f28604fc7c4619be02bae2f6cad3a74bd2d94be35123cea7b7b033523ea41cd","title":"Microsoft Entra ID (Azure AD)","path":"/user-docs/18.5/saml-configuration-for-microsoft-entra-id","children":[]},{"id":"ci_c2bc1e741e9021902e934793b961b5f4f5529aaf03cec0cd869d8e19f8600773","title":"Microsoft Entra ID (SAML2.0)","path":"/user-docs/18.5/microsoft-entra-id-saml20","children":[]},{"id":"ci_a5b975cfb79faf71d0e2cd65c5d1345c97f1ca1371e54b233ff379c0a69fe4ec","title":"Okta","path":"/user-docs/18.5/saml-configuration-for-okta","children":[]},{"id":"ci_b6966a5b48e4723fee89702a54d2cc9b577a2e37c6f00493d6e4d7ff9ead39b5","title":"Ping Identity","path":"/user-docs/18.5/saml-configuration-for-ping-identity","children":[]}]},{"id":"ci_e59a02822410ac4dae8950d91deb45962949e4a4f8918c097b3a61b6e5f23583","title":"SSO Break Glass Procedure","path":"/user-docs/18.5/sso-break-glass-procedure","children":[]},{"id":"ci_a1846d605db6931908aadb81caebfb87804163062dde8b800b887a185d8b43bb","title":"Tenant Management","path":"/user-docs/18.5/tenant-management","children":[{"id":"ci_20a35dc33354a29bc0f33e1af7f2a41a370e8f7100d2a65a039493b6c8ef17f1","title":"Shared Content","path":"/user-docs/18.5/shared-content","children":[{"id":"ci_435073869be195a10f3a8c2676696bd7dad0514c7dc1bceb0b6dc840bc44bbc9","title":"Users / Groups / Roles","path":"/user-docs/18.5/users-groups-roles","children":[]}]}]},{"id":"ci_aa8c0b121e5b7e3adf67e45abffab5e283aa9e2cc828ca4f6347f172cdb38657","title":"Using Quick Actions","path":"/user-docs/18.5/using-quick-actions","children":[]},{"id":"ci_4c59e6858e42afee90b2e0e53d2872584f970becfbba3066327a0ccb3dfce958","title":"Utility Command API: Get Events | Get Incidents","path":"/user-docs/18.5/d3-command-api-get-events-get-incidents","children":[]},{"id":"ci_ba3b62a04425c9b7bd84e79d6595a2e6b90ca9cafa50cda4741607645dbe6123","title":"Webhook Configuration Guide","path":"/user-docs/18.5/webhook-configuration-guide","children":[{"id":"ci_36ee262d52d0cc5b5cf02cf5324045e4605895adc7c5fc0ddf095252e5caa319","title":"API Key Authentication","path":"/user-docs/18.5/api-key-authentication","children":[]},{"id":"ci_15599dad1c276760911352f132082feda7340e2c92935358c16c56da55aae84c","title":"JSON Web Token Authentication","path":"/user-docs/18.5/json-web-token-authentication","children":[]}]},{"id":"ci_cf1029cca908f2bb7d21925fe442891427b92d498d14fb13c1e73412e08c85ab","title":"Webhook Data Formatter","path":"/user-docs/18.5/webhook-data-formatter","children":[]},{"id":"ci_64fae2ccb50b1d3f71bc4bffc81ebf3e04b3f91bc5204438f3688ed699f2114e","title":"YAML Basics","path":"/user-docs/18.5/yaml-basics","children":[]}]}]