[{"id":"ci_5e7377304754c22d3bdaa2bee415ba0bc3267edb24fe9e8b334218252f399564","title":"Getting Started","path":"/user-docs/18.6/getting-started","children":[{"id":"ci_c178a3a225e40c69a3039240dac4572c680fbfcdc41e47d160eb85776274e6be","title":"Legacy-to-New Navigation Map","path":"/user-docs/18.6/legacy-to-new-navigation-map","children":[]},{"id":"ci_64c17f3a66b5c9d8e25d168e840fbb0f9d126b456b07eb293e10ae287c877b04","title":"Setting Up Multi-Tenancy","path":"/user-docs/18.6/setting-up-multi-tenancy","children":[]},{"id":"ci_e591f1feb922f3ac3ff2e0427458bacccf9776e10b9b43c3250a0772a4f02c23","title":"Setting Up Access Controls","path":"/user-docs/18.6/setting-permissions","children":[{"id":"ci_fd7b9e01b43b0de269bb14e1f95c20f487bb918e29dd540420a22a9499a7ff51","title":"Roles","path":"/user-docs/18.6/roles","children":[]},{"id":"ci_8e8c140eafed3a3cc5bd03a0e962d5883dce95bb1bbfc2cf89f0d9162e78f09c","title":"Groups","path":"/user-docs/18.6/groups","children":[]}]},{"id":"ci_8d797b86c98b1a635ce60e3f862a26f0cc9ff17e19a425b7ae6ef2dfc57deef0","title":"Creating Users","path":"/user-docs/18.6/creating-users","children":[]},{"id":"ci_464ca5c3d04136c2095691d3cc0813299d95eca320c13e527995b6cef1d530e7","title":"Configuring an Integration","path":"/user-docs/18.6/configuring-an-integration","children":[{"id":"ci_ea8d6fc68e9a09d472ef78cf4c7183accb2e2152470f6209dececf27dd72ea89","title":"Connection","path":"/user-docs/18.6/connection","children":[]},{"id":"ci_d19f12a1e26c45550ed82219a3f9b16771490eaf51096f1670f0afe19b8979b4","title":"Commands","path":"/user-docs/18.6/commands","children":[]}]},{"id":"ci_fac347cccff7ac83932186ee3dcdd8f72dd47cf1063b313b1ff7a200fb3e9e17","title":"My First Playbook","path":"/user-docs/18.6/building-your-first-playbook","children":[]},{"id":"ci_00ca103ab0c6c66a0567a4f91b85b3cafa95b418158955f8704fd3637363fd4c","title":"My Second Playbook","path":"/user-docs/18.6/building-your-second-playbook","children":[]},{"id":"ci_bb4e6e52cd655742f9dfd95ab8ca0448804d6b3439ea5cd3fd2fd213d31d3ab8","title":"Configuring Data Ingestion","path":"/user-docs/18.6/configuring-data-ingestion","children":[]},{"id":"ci_6cf9c0d29b945deec5d361f2fe693c0d5d525856d4ff011877b563fc585ded83","title":"D3 Glossary","path":"/user-docs/18.6/d3-glossary","children":[]}]},{"id":"ci_831a944a2c29f65732b1b688fd2b1d10f1ff51711f55c869648413b75ea48891","title":"Morpheus AI","path":"/user-docs/18.6/morpheus-ai","children":[{"id":"ci_669e542e7532ed7174bce02dc2626655a504a9b105679a45b4b358064b20384f","title":"Morpheus Adaptive Tasking","path":"/user-docs/18.6/morpheus-adaptive-tasking","children":[{"id":"ci_2e0b8ce274e39ec03c720dbef1794d98c181679b93778faf671e161a492cfda6","title":"Memory and Rules","path":"/user-docs/18.6/memory-and-rules","children":[]}]},{"id":"ci_6484607927ed5449f1c42801edf550ac0cd0061ef1ee4c809688aa1ec74f8d5a","title":"Morpheus AI Graph","path":"/user-docs/18.6/morpheus-ai-graph","children":[]},{"id":"ci_681f49ba19e3bc7896cdaef5fe664c45d3988d6a6b45ce130d90e11a588962e8","title":"Morpheus Forms","path":"/user-docs/18.6/morpheus-forms","children":[]},{"id":"ci_b1fa5bc2b69ff6decdb90262325d39735b465f63882375f2ac027f49f2dc049e","title":"App Playground","path":"/user-docs/18.6/app-playground","children":[]}]},{"id":"ci_d24ea82444a3017243902f687b822ba35050b621a417aa2cedc041d603e18402","title":"‎Automation","path":"/user-docs/18.6/automation","children":[{"id":"ci_d713ad95b83f38f736e5011bc6a33fe9a634b1c00e97e82de4f1ee0350f55a8d","title":"Playbooks","path":"/user-docs/18.6/playbooks","children":[{"id":"ci_d8333f9a879bc574bda53546e886bb217170dbe8cb7cb730289a8baa78d43c45","title":"Investigation Playbooks","path":"/user-docs/18.6/investigation-playbooks","children":[]},{"id":"ci_4a72f5c9673c178e13727f2d886220e48f8cf2fd6ff66b3186c2070cd91aa521","title":"Preprocessing Playbooks","path":"/user-docs/18.6/preprocessing-playbooks","children":[]},{"id":"ci_23c0205e5792a40e8858d560118fc29865141651ec8ea435c2af05fc42054259","title":"Playbook Triggers","path":"/user-docs/18.6/playbook-triggers","children":[{"id":"ci_1bf41e0f6547df3b0a348b74b3488b97cb3fe700e6dd80207ec1a96c70c3ee2d","title":"Investigation Playbook Triggers","path":"/user-docs/18.6/investigation-playbook-triggers","children":[]},{"id":"ci_9bf548ae56e333ecb58a0c1d0f54821e035cf50d84daafe9b9a8a3e3f83500a4","title":"Preprocessing Playbook Triggers","path":"/user-docs/18.6/preprocessing-playbook-triggers","children":[]}]},{"id":"ci_91296d561dcbe016f715b54a7d6ff5520b04a46d0e30a44fe59dbe5fb4a7f32d","title":"Playbook Tasks","path":"/user-docs/18.6/playbook-tasks","children":[{"id":"ci_b7fa1a27f94e784fd392559f78bd4d2b6850cc23e0af3ae8e02d3b92dd530b45","title":"Fundamentals‎","path":"/user-docs/18.6/fundamentals","children":[{"id":"ci_c8c87bc4a500cbd676bc6f522d89b9c4e20041f0de1fd4ae52569da448bba826","title":"Dynamically Selecting Data","path":"/user-docs/18.6/dynamically-selecting-data","children":[]},{"id":"ci_a1b576f72cb39acdfd7c6e532d06cb1cfe051518b6506a136c0f05ea950067f3","title":"Jinja Basics","path":"/user-docs/18.6/jinja-basics","children":[]},{"id":"ci_39a404622efb1319fb1743c29c81f75edd4f30f1bb46d5576677edafd1ea97fa","title":"Jinja Filters","path":"/user-docs/18.6/jinja-filters","children":[{"id":"ci_e20bced3c5383d50c1d480225ad0f1dcf78b4627119597cda9354637549f5add","title":"Array Filters","path":"/user-docs/18.6/array","children":[]},{"id":"ci_c262974ddd00cbad3d1080f268f9df88ebc92a19719d990d004f2ef4cfaf18de","title":"Boolean Filters","path":"/user-docs/18.6/boolean-filters","children":[]},{"id":"ci_9ae0ff4e82d2c29b030f22e07d915f270b5692098937838aad4229d449fbaecb","title":"Datetime Filters","path":"/user-docs/18.6/datetime-filters","children":[]},{"id":"ci_623d28500b23dc9cdb5f1edff43464f64ce496a7314381c486f7ed9ebbdf3b4f","title":"JSON Object Filters","path":"/user-docs/18.6/json-object","children":[]},{"id":"ci_d405f463b7b35a35001298632f152d8010a1c4cb41d8c8b148f28f37b4b52a12","title":"Text Filters","path":"/user-docs/18.6/text-filters","children":[]},{"id":"ci_42122d4f55be0a3ff46f61e70c7b43962987f8f3304d2cd83535fae67c9e0574","title":"Number Filters","path":"/user-docs/18.6/number-filters","children":[]}]},{"id":"ci_50ff370b82ae4107f80563c7534b486be09b477aa929d204e9931ac2846879c9","title":"Regular Expressions","path":"/user-docs/18.6/regular-expressions","children":[{"id":"ci_3ee10b6fd4ff726b652a5f0deae877c945a4d59bbaa446e4553cce846794517f","title":"Literal Matching","path":"/user-docs/18.6/literal-matching","children":[]},{"id":"ci_3c019257f7ae05593987787344fdfca2b1162ef7ec46a80ac9131576220f5b34","title":"Character Classes","path":"/user-docs/18.6/character-classes","children":[]},{"id":"ci_ee8a54bfe02729d5bddc4f969b091bb55f0170782c6652808ff13d52fac49b9a","title":"Anchors","path":"/user-docs/18.6/anchors","children":[]},{"id":"ci_67f311e8f6b86fea80138e555406ea645979b90bb8af54f8027d27eb4886c9fe","title":"Quantifiers","path":"/user-docs/18.6/quantifiers","children":[]},{"id":"ci_66e31603a56f80cbe6fd1f2510da80fba45ae2b95dbb56cca85a9c6ee781b310","title":"Grouping Constructs","path":"/user-docs/18.6/grouping-constructs","children":[]}]},{"id":"ci_7d0999ab89bc4220e08ce9fc863ee7eda05e5f5f37f46e5be86af52ae2a586a3","title":"YAML Basics","path":"/user-docs/18.6/yaml-basics","children":[]},{"id":"ci_416e34d4e1892556f0ff4c970992d230e8db12f19a8bac0d31b2e4f6c1cfc18d","title":"Run Modes","path":"/user-docs/18.6/run-modes","children":[]}]},{"id":"ci_69909d9ab9642cb5e45e1f1c115947ddfd3a383d7f1f4416ec08fe930261475c","title":"Task Types‎","path":"/user-docs/18.6/task-types","children":[{"id":"ci_377125abadc304db2ce706e0b54685b13b9595085edfe1699e051c36727638ea","title":"AI Tasks","path":"/user-docs/18.6/ai-tasks","children":[]},{"id":"ci_f587d9d496f0fab0039ee7ff53c4d7a047d9d5bfc77dcc800035a86e1f210c6f","title":"Command Tasks","path":"/user-docs/18.6/command-tasks","children":[{"id":"ci_da3bbd2fd94b0c7ed7b8c664f6773f6e111fdafa3bf23a579ae44f264ecda2a1","title":"Nested Playbooks","path":"/user-docs/18.6/nested-playbooks","children":[]}]},{"id":"ci_90a0773ee78c35a9d96a83b014d5edaa8e92e1e4dc3f1dfc4a9798a7d4d28fe8","title":"Conditional Tasks","path":"/user-docs/18.6/conditional-tasks","children":[]},{"id":"ci_2195d4dc504bf8795671cf6ca42075c992140161217a5baa49383770e5504754","title":"Data Formatter Tasks","path":"/user-docs/18.6/data-formatter-tasks","children":[]},{"id":"ci_4d5888b0f71f1a414640ea66c1dec4d2b405cdf0eed3e63acda6c2c7a0f28ce5","title":"Interaction Tasks","path":"/user-docs/18.6/interaction-tasks","children":[]},{"id":"ci_0f677bd32ed46e177eb7ffcd6337712670a749e923aa379019ad80c720239b1d","title":"Merge Tasks","path":"/user-docs/18.6/merge-tasks","children":[{"id":"ci_171cf05d7b16fb0781678102bee5be7502b962ce4bdfd75b6acd72bf73747277","title":"Group by Path","path":"/user-docs/18.6/group-by-path","children":[]},{"id":"ci_002d9378b5e6f92df2e661f1e4bab51678c477feb666a911d0f33139658faaf6","title":"Group by Playbook Instance","path":"/user-docs/18.6/group-by-playbook-instance","children":[]},{"id":"ci_91d0d0d002d10b6672024957af7384ecc94929c06055661f2c74db27575c4dd8","title":"Group by Task","path":"/user-docs/18.6/group-by-task","children":[]},{"id":"ci_9ef1ebbe1cbc98471f0f0ddecdc0ff1b72ac6a6862aeaa97d0594e59f5049d6f","title":"Group by Task Instance","path":"/user-docs/18.6/group-by-task-instance","children":[]}]},{"id":"ci_1d92114145e17f1c6bfb76f04d88b7ffecda852451815a68e8ba885cb8c19e90","title":"Stage Tasks","path":"/user-docs/18.6/stage-tasks","children":[]},{"id":"ci_d9c01b5a5b2d7a2faf809cd5d5b8c431a0ac1b179de9dd9a07fe4a7c70781122","title":"Unwind Tasks","path":"/user-docs/18.6/unwind-tasks","children":[]},{"id":"ci_1730bddf10525c32216325e8c428ca37b11bdc23dd9f9a060a232800517fdc38","title":"Mutex Lock and Unlock Tasks","path":"/user-docs/18.6/mutex-lock-and-unlock-tasks","children":[]}]}]},{"id":"ci_7828735758e4291a1cda78ac00d37cd773d7e28761ad7c2d4cc6a4c0a7de6550","title":"Playbook Control Flow","path":"/user-docs/18.6/playbook-control-flow","children":[{"id":"ci_69d44678b69a0e76f4e6128187c976c37ea9cdc3452f6dd898b78cc3952681d3","title":"Stop on Error","path":"/user-docs/18.6/stop-on-error","children":[]}]},{"id":"ci_2f1e418add33610da43b601da1ff95391d34d3e4338958f5c296aea84ce89937","title":"Playbook Testing and Task Node Re-runs","path":"/user-docs/18.6/playbook-testing-and-task-re-runs","children":[]},{"id":"ci_3e9c28632197a8f4cd93f5be62e88c73630a8f22a1b9e332086a6f753ec9e8c6","title":"Accessing and Using Incident Data in Playbook Execution","path":"/user-docs/18.6/accessing-and-using-incident-data-in-playbook-exec","children":[]},{"id":"ci_caa2540b690ffc4927c13f96e4ee2228ad0690cef7b406f1e993f37e46e9ac8d","title":"Configuring Integration Connections in Investigation Playbook Command Tasks","path":"/user-docs/18.6/configuring-integration-connections-in-incident-pl","children":[]}]},{"id":"ci_141cc6f62f87a81d9977af72150c5040a2f3a797e47f37df0953c5529b157d51","title":"Event-Incident Correlation","path":"/user-docs/18.6/event-incident-correlation","children":[]},{"id":"ci_790cc4af1f14851bf33f6feb1974983190b5c13f99644eedda30ece76c1ce4dc","title":"Introduction to Utility Commands","path":"/user-docs/18.6/utility-commands-1","children":[]},{"id":"ci_65844c8a8826cf748d6c66a9203d918937fb7e073a2bc8448b8764b46a270c61","title":"‎Customize with Python","path":"/user-docs/18.6/customize-with-python","children":[{"id":"ci_4d190309dc49768aedb1c99b75de2df6e94733057aed7956eff2cb76680482a8","title":"My First Custom Integration Command","path":"/user-docs/18.6/my-first-custom-integration-command","children":[]},{"id":"ci_9ef8d667423c994e2e3a9fcd96d676594baf489212e71cf0b5658992a1542774","title":"My First Custom Utility Command","path":"/user-docs/18.6/my-first-custom-utility-command","children":[]}]},{"id":"ci_4cd98eaaed64e7313bf1e20ace6579e95ca76ae9fbb8e0ee29330234ee0f9597","title":"Field Mappings","path":"/user-docs/18.6/field-mappings","children":[{"id":"ci_f945a647a6fc303f93ce598568d203b26a175260cd6cb40e5cef070a7073a863","title":"Source Field: Supported JSONPath Expressions","path":"/user-docs/18.6/source-field-supported-jsonpath-expressions","children":[]},{"id":"ci_f68800cfc3d7ba4ba05279a7cf81263e6279c699242c93c74641e0d859d14095","title":"Data Model for Normalization","path":"/user-docs/18.6/data-model-for-normalization","children":[]},{"id":"ci_bf43a9814b631dee483543fa65bb5087ff7d1d1e83ede2fdbd62dce007f7ae87","title":"Artifact Instantiations","path":"/user-docs/18.6/artifact-instantiations","children":[]},{"id":"ci_cbb9fcfd80cb329c26d8c8df168041226697df20c4dd68468d45e1bb493bf393","title":"Artifact Relationships","path":"/user-docs/18.6/artifact-relationships","children":[]},{"id":"ci_27286711c957b34e625ab5874781cd80debd61a29d4d42a9075dad2b5e1c9f1c","title":"Related Events","path":"/user-docs/18.6/related-events","children":[]}]}]},{"id":"ci_3d0d6946d53aa933efa2891a86725e81369ae3e0aed01ee29f94ec9e9a06ed60","title":"Incident Response","path":"/user-docs/18.6/incident-response","children":[{"id":"ci_35fb685b4aa0b60746f2a4e27f9a1746817fece926079affbedb4b1968f0f67e","title":"Investigation Dashboard","path":"/user-docs/18.6/investigation-dashboard","children":[{"id":"ci_27d371289c3f536133b2d9580f30e4328b55aa4da294612da3e557e6372bc43e","title":"My Dashboards","path":"/user-docs/18.6/my-dashboards","children":[]},{"id":"ci_3db55c93d5be99ca26f351cec2ade1b0ee862e2d6fa8c70a414a6ad3b6fa03ae","title":"Custom Views","path":"/user-docs/18.6/custom-views","children":[]},{"id":"ci_409720febe5d0c04fb9929d3afa4b0e59bff7e778d70341ff6022ca319614ccf","title":"Setting Up a Custom View","path":"/user-docs/18.6/setting-up-a-custom-triage","children":[]},{"id":"ci_20fa65eebae8b3739870b4ff950c5c34289f1aa81b312322f3f6128ede31a84f","title":"Running Commands from the Dashboard","path":"/user-docs/18.6/running-commands-from-the-dashboard","children":[]}]},{"id":"ci_779fbb57db31f171731aaa4bd318802fe3a37f212bf185462929fb4d57d2800a","title":"MITRE ATT&CK Monitor","path":"/user-docs/18.6/monitor","children":[]},{"id":"ci_adb4b88ec8dbcaf95b389926c7f1823a2036e097d30519056aa383e7decd114e","title":"Incident Workspace","path":"/user-docs/18.6/incident-workspace","children":[{"id":"ci_c6460fda879bfe367e4ea61a9242daa680296dc36d67f2c4f778c80d997c2657","title":"Linked Artifacts","path":"/user-docs/18.6/linked-artifacts","children":[]},{"id":"ci_7d618d4615a9d6dea92632dfcf899895ff60752575a0f21f8db303527c3f730c","title":"Using Quick Actions","path":"/user-docs/18.6/using-quick-actions","children":[]},{"id":"ci_0b3b37b1d62cbcb9b659abacdd979f508ccae1cdc2d2f5f618a9363a93627eae","title":"Customizing the Incident Workspace","path":"/user-docs/18.6/customizing-the-incident-workspace","children":[]},{"id":"ci_bc4fb739201c4550d9a3c58379a682ce34afeb1eca61fa7b5b85609bc9a82574","title":"Email and SLA Widgets","path":"/user-docs/18.6/email-and-sla-widgets","children":[]},{"id":"ci_2b147387a284a6286f1b92a35d7ce50e37ffc5bc900fc4e1a25806c2ed7f390e","title":"AI Summary and APD Widgets","path":"/user-docs/18.6/ai-summary-and-apd-widgets","children":[]},{"id":"ci_3e577283aa1e567bbf753ac66e8c400e8aafd4611411e0bd9ec184ced6489e87","title":"Syncing Incidents with External Tools","path":"/user-docs/18.6/syncing-incidents-with-external-tools","children":[]},{"id":"ci_343160f51c72739a87dc2ff846ba8e5b20212008ca5a3d8ef34b70a100bb8f17","title":"Exporting Incidents","path":"/user-docs/18.6/exporting-incidents","children":[]},{"id":"ci_fed630a7f4d52e04578a657ec3248a0ba303b44a21c0583083700820d883c848","title":"Mentioning Teammates in Notes","path":"/user-docs/18.6/mentioning-teammates-in-notes","children":[]}]},{"id":"ci_fb3af0b3e7b04af3d0ab8a58db9139cb0708c71cd012dff9ddbd7803d6d2586b","title":"Preprocessing Playbook Viewer","path":"/user-docs/18.6/event-playbook-viewer","children":[]},{"id":"ci_81e0c5a71ec17825bb4f8cc64400d3d20f9f4f9d3946df525b3bc8f624cdae49","title":"Reporting Dashboard","path":"/user-docs/18.6/reporting-dashboards","children":[{"id":"ci_613a4abff4f939dd682a2cf8736a4300600839a1e5b06c3f4cd0b7f0eeb034f2","title":"RD Widgets","path":"/user-docs/18.6/rd-widgets","children":[]},{"id":"ci_c57f64df73fc32d749e308b0c117923d51b2c099f77ed0ea3bf9ff45311d5341","title":"RD Dashboards","path":"/user-docs/18.6/rd-dashboards","children":[]},{"id":"ci_ed7c7a94ccc5ef313f6e64139b341c9388b3afc77d9d9f9fb2dc883495b73a22","title":"SLA and ROI Widgets","path":"/user-docs/18.6/sla-and-roi-widgets","children":[]}]}]},{"id":"ci_ed2395a94e9dbf75f77a76936af65aae47f7d3161c19ff8f262ffbb88e3f551f","title":"Configuration","path":"/user-docs/18.6/configuration","children":[{"id":"ci_2b61759f0cdb65512031988ec944886410fbab25c6f5600c3a06cfffc76571c8","title":"Home Dashboard","path":"/user-docs/18.6/configuration-home-dashboard","children":[]},{"id":"ci_15d26661ae6632a3f37abf8390e423ee301e9eb59c77eb4588b880385446d706","title":"Utility Commands","path":"/user-docs/18.6/utility-commands","children":[{"id":"ci_0829bccc5c748cd38f6f709d5b0a22a4adf61aa304792cb399c966cc59d2a089","title":"Populating the Investigation Tab using Utility Commands","path":"/user-docs/18.6/populating-the-investigation-tab-using-utility-com","children":[]},{"id":"ci_2f004ed824d8e6f0eece811ef91e05a99c80a10c0a6c619b5bafddf5a37f9928","title":"Utility Command API: Get Events | Get Incidents","path":"/user-docs/18.6/d3-command-api-get-events-get-incidents","children":[]}]},{"id":"ci_8f362033457a55af91f6bc1fda2b3cdd1986ce7bd7eff76e951c68a52931bfcf","title":"Incident Type Manager","path":"/user-docs/18.6/incident-type-manager","children":[{"id":"ci_61b93a8001701ba475c38bda830f5e574c7b79f8b205948315b0b71ad7eb0ff9","title":"Configuring an Incident Type: General Configuration","path":"/user-docs/18.6/configuring-an-incident-type-general-configuration","children":[]},{"id":"ci_3c1569256cc6d639487ef886b5144eb6b90f519ddd849cb387d1d40b780ff50a","title":"Configuring an Incident Type: Incident Workspace","path":"/user-docs/18.6/configuring-an-incident-type-incident-workspace","children":[{"id":"ci_6249bbb548b126d7cd9863972aa7a6d216ce7e32c90f2b2fdae426991ecd064b","title":"Incident Workspace Widgets","path":"/user-docs/18.6/incident-workspace-widgets","children":[]}]},{"id":"ci_f884602e0e4bc032f4beb86b60f1e373ed6bcefedb478e4539380fb21c8d4432","title":"Configuring an Incident Type: Incident Form Builder","path":"/user-docs/18.6/configuring-an-incident-type-incident-form-builder","children":[]},{"id":"ci_39cbcd571cce31620ec796d9fd87066eb63170ec19d167979f7da147dae67e16","title":"Incident Workspace Widget Visibility","path":"/user-docs/18.6/incident-workspace-widget-visibility","children":[]},{"id":"ci_94022d8e8dd61d346c43a9111005a6c7b805a1eba633afc11d8a619ad7f0231e","title":"Incident Quick View Layouts","path":"/user-docs/18.6/incident-quick-view-layouts","children":[]}]},{"id":"ci_5fc10efa6c73bed353c4dffb6955e33627a827ac48f9df0a877bfcc34f26ff0c","title":"Integrations","path":"/user-docs/18.6/integrations","children":[{"id":"ci_0acb8fe6b0c86100410f6b128d8b67949b37f1287a6b269c08b8a46bef867dad","title":"Accessing Sample Output Data for Integration Commands","path":"/user-docs/18.6/accessing-sample-output-data-for-integration-comma","children":[]},{"id":"ci_21eb529d1b451303b7a7d328f22fdbfb45c4b7253f07760b2c41938c4ee62d78","title":"Integration Deployment Options","path":"/user-docs/18.6/d3-soar-integration-deployment-options","children":[]},{"id":"ci_302aaf228a221139a81e63fee8b6b575185e73cc0da7f328a5429f2cc83c570a","title":"Command Logs","path":"/user-docs/18.6/command-logs","children":[]}]},{"id":"ci_7fd57ae68912c36e2ead43352abef40b744b7153156fed49cb46e712d0d53ce0","title":"Custom Command","path":"/user-docs/18.6/custom-command","children":[{"id":"ci_65f9bb4cd68baa4ebc467759eca6ef91e933b54265ca430fda6e6b6b7fb292ba","title":"Custom Command Overview","path":"/user-docs/18.6/custom-command-overview","children":[]},{"id":"ci_f4b6ee5e31ba9fb89446ffabbe000e9eef47b33f7a383b8dee440579146b1d2c","title":"Python Environment","path":"/user-docs/18.6/background","children":[]},{"id":"ci_8de59f2e16b9f96e2977b0bfd26150e29a235129c05465f0989677c5ea916eed","title":"Building Custom Commands","path":"/user-docs/18.6/building-custom-commands","children":[{"id":"ci_e46b507967e23ef250c4e6bd98232df301921eb8a57f5c6b27fc65dde5fb9540","title":"Integration Custom Command","path":"/user-docs/18.6/integration-custom-command","children":[{"id":"ci_96d35f2bc466e26214ffde03e5c561a053297d18152b9c387feb6830e2c1be6f","title":"Custom Connection Parameters","path":"/user-docs/18.6/custom-connection-parameters","children":[]}]},{"id":"ci_28477d3dc1c8819bb665240dc81851769c781b94b2efb9d75d1a185d27c83095","title":"Utility Custom Command","path":"/user-docs/18.6/utility-custom-command","children":[]}]},{"id":"ci_afb8fffa5ac1c485efaf79c37c52d6823166526c316c5e57fc2cfdaa34994a0d","title":"Python Script","path":"/user-docs/18.6/python-script","children":[]}]},{"id":"ci_dcbba48b2fd0754c1904c65e1e256cf3587fefe3b0576175c944b715648b32f6","title":"D3 Data Model and Normalization","path":"/user-docs/18.6/d3-data-model-and-normalization","children":[]},{"id":"ci_b728bacae20c6d4d56bb2f18650659d76ff3505b3e3eca7b53a995acc0dc7246","title":"Data Ingestion","path":"/user-docs/18.6/data-ingestion","children":[{"id":"ci_0e6ad8859551d9b37d260ca5cbca962e8c703a06cc0d70976f89aaf6527bfc1f","title":"Global List Site Mapping","path":"/user-docs/18.6/global-list-site-mapping","children":[]},{"id":"ci_d76933130031e706fca06315587b7e950ccf7b4283f61a4dd398de1f741d971b","title":"Multi-Site Data Ingestion Schedules","path":"/user-docs/18.6/multi-site-data-ingestion-schedules","children":[]},{"id":"ci_43665e63825c9168f80845eaa3af48f8f682ecd5bf73517ccdcd5aca5f26d3dc","title":"Webhook Configuration Guide","path":"/user-docs/18.6/webhook-configuration-guide","children":[{"id":"ci_b8932fb9e4029c4188ce89d87023ba92a467a8278bfdfaf3c16788e36ea64b02","title":"API Key Authentication","path":"/user-docs/18.6/api-key-authentication","children":[]},{"id":"ci_e1baea374e5e4929cf221511997d3748cfedc42dab38abbbc8c034a4894aa793","title":"JSON Web Token Authentication","path":"/user-docs/18.6/json-web-token-authentication","children":[]}]},{"id":"ci_dbf4ad9e6ca6267f3d8885933449275aec6b334bf5a2710c506471cd0f68a41f","title":"Webhook Data Formatter","path":"/user-docs/18.6/webhook-data-formatter","children":[]}]},{"id":"ci_bb9a5f83f0deaa5e6677c7b269ecb864243e00601cad7da202f296cae51f244a","title":"Schedules","path":"/user-docs/18.6/schedules","children":[]},{"id":"ci_782a6ca98e4c2d7266f567c4f39977c898114d5d8c60156f99ccce4e4462ba67","title":"Codeless Playbooks for Webhook Data Formatting","path":"/user-docs/18.6/codeless-playbooks-for-webhook-data-formatting","children":[]},{"id":"ci_54e9b14e60204f822c4df1f40456811c0bc623fa064ffac9e11c18ec4d5ba04f","title":"Connections","path":"/user-docs/18.6/connections","children":[]},{"id":"ci_afe253fc3768190dfc99a056214339112f6cd31c019018794563fb544089d551","title":"Agent Management","path":"/user-docs/18.6/agent-management","children":[{"id":"ci_68076811ace180ff53a2c6f8529d415b8f858d564e43c36ae509c5be44498b67","title":"‎Agent Installation on Linux‎","path":"/user-docs/18.6/agent-installation-on-linux","children":[{"id":"ci_a3b13324ae54a576339b1da61d82af708cc56711aa1a806adecafb081a2a8810","title":"System Requirements and Network Configuration","path":"/user-docs/18.6/system-requirements-and-network-configuration","children":[]},{"id":"ci_0c3bc6bd82fb39107663bdee2b389484cb34b0e958b69e7d09ab054ad55b92cc","title":"Linux Environment Setup","path":"/user-docs/18.6/linux-environment-setup","children":[]},{"id":"ci_5d2ef26b3c59f2f150069b049601b542f07ddcd014f44a6291f3daf915103e93","title":"GCR to ACR Container Migration","path":"/user-docs/18.6/gcr-to-acr-container-migration","children":[]},{"id":"ci_0edc2e7eb5064207b8ae497da14fef7e93ab82698ff4b1812187df2541dc1978","title":"Updating Images Addresses to Use ACR","path":"/user-docs/18.6/updating-images-addresses-to-use-acr","children":[]},{"id":"ci_84a0a5de9da7a35c5e64a7ac613abb64b2779e05cbc55402598b1369e39c797b","title":"Install Agent on Linux","path":"/user-docs/18.6/install-agent-on-linux","children":[]},{"id":"ci_5e4632cf73252957ff1361858edb91ac11e1c7a5a46a7957b6361392f64cc11d","title":"Performing a Manual Agent Update","path":"/user-docs/18.6/performing-a-manual-agent-update","children":[]},{"id":"ci_2e1b41987444cde2feab0409edc7edee1139f4e5e74af1f8f806a18694105ce4","title":"Firewall Whitelisting and Web Proxy Setting","path":"/user-docs/18.6/firewall-whitelisting-and-web-proxy-setting","children":[]}]},{"id":"ci_450613366149198f2e175ebdb81803996fef604706ed6d7c83b8ae48b459e59e","title":"Agent Installation on Windows","path":"/user-docs/18.6/agent-installation-on-windows","children":[{"id":"ci_801e3b0a89a51ffba51b6b75dcb144b253801881e5c87517186c4e72283ce024","title":"Environment Requirements","path":"/user-docs/18.6/environment-requirements","children":[]},{"id":"ci_2376abf21f4f5723034bbd9f8bae986eba79f5b1019ca21234d0f2a6f7a4e032","title":"Install Agent on Windows","path":"/user-docs/18.6/install-agent-on-windows","children":[]},{"id":"ci_40f29b41cf2482c1047ff954afa8eee634c9e20af0aa34df578c75ef827976cc","title":"Agent High Availability","path":"/user-docs/18.6/agent-high-availability","children":[]},{"id":"ci_e5010399606a8fda5dcce252ded6b856be2fefa52c653eb45c356bad5f986025","title":"Windows Server Hardening for D3 Agent","path":"/user-docs/18.6/windows-server-hardening-for-d3-proxy-agent","children":[]}]},{"id":"ci_82f8bd86da5899daa33eb65bb0ae1887ffbf3d0a1f03318a963105f715d98b9e","title":"Uninstalling Windows and Linux Agents","path":"/user-docs/18.6/uninstalling-windows-and-linux-agents","children":[]},{"id":"ci_cb8a9981f13744e061c17a8559d37c413d91464bd98009e0550f22e16737d056","title":"Agent Upgrade","path":"/user-docs/18.6/agent-upgrade","children":[{"id":"ci_0eafa2183acaad89acb4c7fbf63b615c7594deb6a82d09fdc9e9e3ad4bc87da4","title":"Linux Proxy Agent - Remote Upgrades","path":"/user-docs/18.6/linux-proxy-agent-remote-upgrades","children":[]},{"id":"ci_42e10d8ebc0ccecdb841f7410edaa161552e8b4d4ef9d2ed8dec383d43f1199c","title":"Windows Proxy Agent - Automatic Agent Upgrade","path":"/user-docs/18.6/windows-proxy-agent-automatic-agent-upgrade","children":[]}]},{"id":"ci_0ea5a07ec9bc59467b4eddc1106b7faf0f2a8f32a17a5d04707546eed2c673a7","title":"Agent Configuration Scenarios","path":"/user-docs/18.6/agent-configuration-scenarios","children":[]},{"id":"ci_068deb3ee4a9712c47472396e37dbd2ac45a1cdec1b2469690255dfc59963548","title":"Network Configuration for D3 Application in Restricted Client-Side Environments","path":"/user-docs/18.6/network-configuration-for-d3-application-in-restri","children":[]},{"id":"ci_861ccf95bee4ed31d35933ca209e0e2db1887df6de35010aee5b5c60b8610dd0","title":"Configuring Custom CA Certificate","path":"/user-docs/18.6/configuring-custom-ca-certificate","children":[]},{"id":"ci_115cdb0c8f6e112ff95d43c26aaf52590ed80efdf53a6c0567f6d9af346800d4","title":"Upgrading to the .NET 8.0 D3 Agent","path":"/user-docs/18.6/upgrading-to-the-net-8-0-d3-agent","children":[]}]},{"id":"ci_fbc1d531376c531e949e588ac73cd0609746e4a42f9804979628db205da62c50","title":"Global List","path":"/user-docs/18.6/global-list","children":[]},{"id":"ci_dad406ca51d9f82d4a1872baac01252791b8eb455f5fb04d5cad35e78d3c841e","title":"SLA Rule Pause Conditions","path":"/user-docs/18.6/sla-rule-pause-conditions","children":[]},{"id":"ci_3ffd885cae273b681fda9616c680540f67e12e306299ab2e449189ae052ff02d","title":"Reporting Dashboards and Widgets","path":"/user-docs/18.6/reporting-dashboards-and-widgets","children":[]},{"id":"ci_07b513e7f16f64a71aa9620e9245b04e4479802f3b6deddb3c2a648c74820928","title":"Event Automation Rules","path":"/user-docs/18.6/event-automation-rules","children":[]},{"id":"ci_1beb3acfa93318a99542a81df7a76cb59f1eddbd3b4718661de050276c9f1322","title":"Reporting Queries","path":"/user-docs/18.6/reporting-queries","children":[]},{"id":"ci_dec3193b6923d748ea75a3042b0a385bccbd5cedac4005a40031e9ed4812bb15","title":"Queue Alerts","path":"/user-docs/18.6/queue-alerts","children":[]},{"id":"ci_813204e78da811852e20f74cad949ab53da0ba1d2b65496964fca85cf226ee4a","title":"Notifications","path":"/user-docs/18.6/notifications","children":[]},{"id":"ci_d266dc0ab190d16b9b8aa5463af2262917afe2ab2480419f28171af1eb6b129e","title":"Organization Management","path":"/user-docs/18.6/organization-management","children":[{"id":"ci_59a2f384db4081c16c4130c863a8d1058db32aeae8cc3ea2b2ff4858a9cd2004","title":"Assignment Groups","path":"/user-docs/18.6/assignment-groups","children":[]}]},{"id":"ci_8e4a1106f7c07c02efe27a04238fd9617e88dbb73b756ef0905278b4d725f48c","title":"Application Settings","path":"/user-docs/18.6/application-settings","children":[{"id":"ci_5f62914efb8660e15d3d11c4456bf34bf1d10e80eb511c22e6385504df6d9509","title":"Self-Service Account Recovery","path":"/user-docs/18.6/self-service-account-recovery","children":[]}]},{"id":"ci_988a0d1f5bdf0a89dff92cd0b77b9183e473ba6e565ed52a610084ca38044c6b","title":"Authentication and SSO","path":"/user-docs/18.6/authentication-and-sso","children":[{"id":"ci_1b9f5e601df7dd1b7c077106a57aac40dc03640b35548d14a39cddf75ba1a980","title":"Login Authentication Configuration Guide","path":"/user-docs/18.6/login-authentication-configuration-guide","children":[]},{"id":"ci_11285327e6eadaa2e7c48245ec729ce685da3931b2037305d9d63d34f8a1f760","title":"SAML Configurations","path":"/user-docs/18.6/saml-configurations","children":[{"id":"ci_263c7d650e8afef5e47b531717edae34d09164bfc2e7df8bbd055fed2bbb81fa","title":"SAMLEmailIDType: Controlling Username Format for SSO Authentication","path":"/user-docs/18.6/samlemailidtype-controlling-username-format-for-ss","children":[]},{"id":"ci_ed1591ba1d2905db478662760d111b33bd79f68080f5d76db4c8bf6ea66e7ae9","title":"Google Admin","path":"/user-docs/18.6/saml-configuration-for-google-admin","children":[]},{"id":"ci_e423202a209cbcdc788c9adb46a19f05e91829ad113217811499e7b0d1dd434c","title":"Keycloak","path":"/user-docs/18.6/keycloak","children":[]},{"id":"ci_540fe315e46227b18adc2405710e267fb880b7d88b9db64ecb0f5afaf45747b9","title":"Microsoft AD FS","path":"/user-docs/18.6/saml-configuration-for-microsoft-ad-fs","children":[]},{"id":"ci_0eb1c496f42313a3f04dffbb24c0b289e1f7fe4d0e9fcd8bc3b5fe509a42a622","title":"Microsoft Entra ID (Azure AD)","path":"/user-docs/18.6/saml-configuration-for-microsoft-entra-id","children":[]},{"id":"ci_63b9d355cd2264f65abb80c51c691e6156caece5dbb66af4bd07ce47c9ee3dca","title":"Microsoft Entra ID (SAML2.0)","path":"/user-docs/18.6/microsoft-entra-id-saml20","children":[]},{"id":"ci_270cd3880eac68a4a32a7c3568a8d0b78046616d7aba9db50586ecde00e871f3","title":"Okta","path":"/user-docs/18.6/saml-configuration-for-okta","children":[]},{"id":"ci_0aee45a96725496a6917fddac7b48f65ad4f05d0e04f4a3824150f1c41e65216","title":"Ping Identity","path":"/user-docs/18.6/saml-configuration-for-ping-identity","children":[]}]},{"id":"ci_e5b0fdac75c81f277757e36a7ccd29dd05a3db1bfb5b0eb64665a8e89c60b762","title":"SSO Break Glass Procedure","path":"/user-docs/18.6/sso-break-glass-procedure","children":[]}]},{"id":"ci_1ba05de7ff3393226b3f3634ddf6682340c122ae4177ded054d7f0c801be6e23","title":"Multi-Tenancy","path":"/user-docs/18.6/multi-tenancy","children":[{"id":"ci_692faa41cab6cf1f3ff558a0155c0857761ffd484c9b530715112f6e9b62d5c1","title":"Tenant Management","path":"/user-docs/18.6/tenant-management","children":[{"id":"ci_c4c9b4a6c5919a8d9816aa8af39d201ad1c44e39a95b5d243120e623a8a884b5","title":"Shared Content","path":"/user-docs/18.6/shared-content","children":[{"id":"ci_3e498c3a33d2ef29c1364cad930007d480be0675475c2324ea5f71e8998d8ae1","title":"Users / Groups / Roles","path":"/user-docs/18.6/users-groups-roles","children":[]}]}]}]},{"id":"ci_4cd96d9e2fc95cdb013583b0031a851e3bb6bda5043531b6e7ed6d3581039fb0","title":"Purging SQL Server Data","path":"/user-docs/18.6/purging-sql-server-data","children":[]}]}]