# Expel Documentation

## Documentation

- [Expel Documentation](https://docs.expel.io/readme.md): Connect your technologies, learn about Expel Workbench™ features, and more in our documentation.
- [Get Started](https://docs.expel.io/workbench-setup/get-started.md): Welcome to Expel! The Customer Success team will reach out to you to assist, but the items below are what we plan to complete with you within 30 days of onboarding.
- [Activate Your Workbench Account](https://docs.expel.io/workbench-setup/get-started/activate-your-workbench-account.md): This topic covers how to set up your account and begin using Workbench.
- [Add and Manage Users](https://docs.expel.io/workbench-setup/get-started/add-and-manage-users.md): This topic covers how to manage users in Expel Workbench, as well as how to resolve first-time login issues.
- [User Role Rights](https://docs.expel.io/workbench-setup/get-started/add-and-manage-users/user-role-rights.md): Learn how Expel features relate to Workbench user roles.
- [Manage Your Profile and User Account Settings](https://docs.expel.io/workbench-setup/get-started/manage-your-profile-and-user-account-settings.md): This section of Workbench allows you to manage aspects of your account.
- [Configure Your SSO Provider with Workbench](https://docs.expel.io/workbench-setup/get-started/configure-your-sso-provider-with-workbench.md): Enable Workbench users in your organization to log in via SSO.
- [Set Up Notifications](https://docs.expel.io/workbench-setup/get-started/set-up-notifications.md): You can use more than one type of notification to receive messages about your environment.
- [Add and Manage Org Context](https://docs.expel.io/workbench-setup/get-started/add-and-manage-org-context.md): Org Context refers to stored reference information about your environment that you are able to manage.
- [Connect Your Technologies](https://docs.expel.io/workbench-setup/get-started/connect-your-technologies.md): Start integrating your tech with Expel Workbench.
- [Enable Auto Remediations](https://docs.expel.io/workbench-setup/get-started/enable-auto-remediations.md)
- [Learn More About Workbench](https://docs.expel.io/workbench-setup/get-started/learn-more-about-workbench.md)
- [Notifications](https://docs.expel.io/workbench-setup/notifications.md)
- [About Notifications](https://docs.expel.io/workbench-setup/notifications/about-notifications.md)
- [Platform Setup](https://docs.expel.io/workbench-setup/notifications/platform-setup.md): You must set up your platform integration before you can begin receiving organization notifications.
- [Ticketing System Setup for Organization Notifications](https://docs.expel.io/workbench-setup/notifications/platform-setup/ticketing-system-setup-for-organization-notifications.md)
- [OpsGenie Setup for Organization Notifications](https://docs.expel.io/workbench-setup/notifications/platform-setup/opsgenie-setup-for-organization-notifications.md)
- [PagerDuty Setup for Organization Notifications](https://docs.expel.io/workbench-setup/notifications/platform-setup/pagerduty-setup-for-organization-notifications.md)
- [ServiceNow Setup for Organization Notifications](https://docs.expel.io/workbench-setup/notifications/platform-setup/servicenow-setup-for-organization-notifications.md)
- [Manage Email Notifications](https://docs.expel.io/workbench-setup/notifications/manage-email-notifications.md)
- [Manage Organization Notifications](https://docs.expel.io/workbench-setup/notifications/manage-organization-notifications.md)
- [Manage Threaded Notifications in Slack or Teams](https://docs.expel.io/workbench-setup/notifications/manage-threaded-notifications-in-slack-or-teams.md)
- [Auto Remediations](https://docs.expel.io/workbench-setup/auto-remediations.md)
- [About Auto Remediations](https://docs.expel.io/workbench-setup/auto-remediations/about-auto-remediations.md): This topic provides general information about auto remediations and which ones are available.
- [Enable an Auto Remediation in Workbench](https://docs.expel.io/workbench-setup/auto-remediations/enable-an-auto-remediation-in-workbench.md): Expel offers a variety of auto remediations for specific devices.
- [Auto Remediation Manual Fallback](https://docs.expel.io/workbench-setup/auto-remediations/auto-remediation-manual-fallback.md): The manual fallback feature allows Expel to perform hands-on remediation if an automated action fails.
- [Block Bad Hashes](https://docs.expel.io/workbench-setup/auto-remediations/block-bad-hashes.md)
- [Carbon Black Cloud: Block Bad Hashes](https://docs.expel.io/workbench-setup/auto-remediations/block-bad-hashes/carbon-black-cloud-block-bad-hashes.md): This guide helps you set up your Carbon Black Cloud device and grant necessary permissions so that you can enable the Block Bad Hashes auto remediation in Workbench.
- [CrowdStrike: Block Bad Hashes](https://docs.expel.io/workbench-setup/auto-remediations/block-bad-hashes/crowdstrike-block-bad-hashes.md): This guide helps you set up your CrowdStrike device and grant necessary permissions so that you can enable the Block Bad Hashes auto remediation in Workbench.
- [Microsoft Defender for Endpoint: Block Bad Hashes](https://docs.expel.io/workbench-setup/auto-remediations/block-bad-hashes/microsoft-defender-for-endpoint-block-bad-hashes.md): This guide helps you set up your Microsoft Defender for Endpoint device and grant necessary permissions so that you can enable the Block Bad Hashes auto remediation in Workbench.
- [Palo Alto Networks Cortex XDR: Block Bad Hashes](https://docs.expel.io/workbench-setup/auto-remediations/block-bad-hashes/palo-alto-cortex-xdr-block-bad-hashes.md): This guide helps you set up your Palo Alto Networks (PAN) Cortex XDR device and grant necessary permissions so that you can enable the Block Bad Hashes auto remediation in Workbench.
- [SentinelOne: Block Bad Hashes](https://docs.expel.io/workbench-setup/auto-remediations/block-bad-hashes/sentinelone-block-bad-hashes.md): This guide helps you set up your SentinelOne device and grant necessary permissions so that you can enable the Block Bad Hashes auto remediation in Workbench.
- [Contain Hosts](https://docs.expel.io/workbench-setup/auto-remediations/contain-hosts.md)
- [Broadcom Carbon Black Cloud: Contain Hosts](https://docs.expel.io/workbench-setup/auto-remediations/contain-hosts/broadcom-carbon-black-cloud-contain-hosts.md): This guide helps you set up your Broadcom Carbon Black Cloud device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.
- [Broadcom Carbon Black EDR: Contain Hosts](https://docs.expel.io/workbench-setup/auto-remediations/contain-hosts/broadcom-carbon-black-edr-contain-hosts.md): This guide helps you set up your Broadcom Carbon Black EDR device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.
- [CrowdStrike: Contain Hosts](https://docs.expel.io/workbench-setup/auto-remediations/contain-hosts/crowdstrike-contain-hosts.md): This guide helps you set up your CrowdStrike device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.
- [Cybereason: Contain Hosts](https://docs.expel.io/workbench-setup/auto-remediations/contain-hosts/cybereason-contain-hosts.md): This guide helps you set up your Cybereason device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.
- [Microsoft Defender for Endpoint: Contain Hosts](https://docs.expel.io/workbench-setup/auto-remediations/contain-hosts/microsoft-defender-for-endpoint-contain-hosts.md): This guide helps you set up your Microsoft Defender for Endpoint device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.
- [Palo Alto Networks Cortex XDR: Contain Hosts](https://docs.expel.io/workbench-setup/auto-remediations/contain-hosts/palo-alto-networks-cortex-xdr-contain-hosts.md): This guide helps you set up your Palo Alto Networks (PAN) Cortex XDR Pro device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.
- [SentinelOne: Contain Hosts](https://docs.expel.io/workbench-setup/auto-remediations/contain-hosts/sentinelone-contain-hosts.md): This guide helps you set up your SentinelOne device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.
- [Deactivate Access Keys](https://docs.expel.io/workbench-setup/auto-remediations/deactivate-access-keys.md)
- [AWS CloudTrail: Deactivate Access Keys](https://docs.expel.io/workbench-setup/auto-remediations/deactivate-access-keys/aws-cloudtrail-deactivate-access-keys.md): This guide helps you set up your AWS CloudTrail device and grant necessary permissions so that you can enable the Deactivate Access Keys auto remediation in Workbench.
- [AWS GuardDuty: Deactivate Access Keys](https://docs.expel.io/workbench-setup/auto-remediations/deactivate-access-keys/aws-guardduty-deactivate-access-keys.md): This guide helps you set up your AWS GuardDuty device and grant necessary permissions so that you can enable the Deactivate Access Keys auto remediation in Workbench.
- [Delete Malicious Files](https://docs.expel.io/workbench-setup/auto-remediations/delete-malicious-files.md)
- [CrowdStrike: Delete Malicious Files](https://docs.expel.io/workbench-setup/auto-remediations/delete-malicious-files/crowdstrike-delete-malicious-files.md): This guide helps you set up your CrowdStrike device and grant necessary permissions so that you can enable the Delete Malicious Files auto remediation in Workbench.
- [Microsoft Defender for Endpoint: Delete Malicious Files](https://docs.expel.io/workbench-setup/auto-remediations/delete-malicious-files/microsoft-defender-for-endpoint-delete-malicious-files.md): This guide helps you set up your Microsoft Defender for Endpoint device and grant necessary permissions so that you can enable the Delete Malicious Files auto remediation in Workbench.
- [Delete Registry Key](https://docs.expel.io/workbench-setup/auto-remediations/delete-registry-key.md)
- [CrowdStrike: Delete Registry Key](https://docs.expel.io/workbench-setup/auto-remediations/delete-registry-key/crowdstrike-delete-registry-key.md): This guide helps you set up your CrowdStrike device and grant necessary permissions so that you can enable the Delete Registry Key auto remediation in Workbench.
- [Disable Accounts](https://docs.expel.io/workbench-setup/auto-remediations/disable-accounts.md)
- [Azure Cloud Direct: Disable Accounts](https://docs.expel.io/workbench-setup/auto-remediations/disable-accounts/azure-cloud-direct-disable-accounts.md): This guide helps you set up your Azure Cloud Direct device and grant necessary permissions so that you can enable the Disable Accounts auto remediation in Workbench.
- [Duo Cloud: Disable Accounts](https://docs.expel.io/workbench-setup/auto-remediations/disable-accounts/duo-cloud-disable-accounts.md): This guide helps you set up your Duo Cloud device and grant necessary permissions so that you can enable the Disable Accounts auto remediation in Workbench.
- [GitHub: Disable Accounts](https://docs.expel.io/workbench-setup/auto-remediations/disable-accounts/github-disable-accounts.md): This guide helps you set up your GitHub device and grant necessary permissions so that you can enable the Disable Accounts auto remediation in Workbench.
- [Google Workspace: Disable Accounts](https://docs.expel.io/workbench-setup/auto-remediations/disable-accounts/google-workspace-disable-accounts.md): This guide helps you set up your Google Workspace device and grant necessary permissions so that you can enable the Disable Accounts auto remediation in Workbench.
- [Microsoft 365: Disable Accounts](https://docs.expel.io/workbench-setup/auto-remediations/disable-accounts/microsoft-365-disable-accounts.md): This guide helps you set up your Microsoft 365 device and grant necessary permissions so that you can enable the Disable Accounts auto remediation in Workbench.
- [Microsoft Defender for Endpoint: Disable Accounts](https://docs.expel.io/workbench-setup/auto-remediations/disable-accounts/microsoft-defender-for-endpoint-disable-accounts.md): This guide helps you set up your Microsoft Defender for Endpoint device and grant necessary permissions so that you can enable the On-Prem/Hybrid Disable Accounts auto remediation in Workbench.
- [Microsoft Entra ID via Event Hub: Disable Accounts](https://docs.expel.io/workbench-setup/auto-remediations/disable-accounts/microsoft-entra-id-via-event-hub-disable-accounts.md)
- [Okta: Disable Accounts](https://docs.expel.io/workbench-setup/auto-remediations/disable-accounts/okta-disable-accounts.md): This guide helps you set up your Okta device and grant necessary permissions so that you can enable the Disable Accounts auto remediation in Workbench.
- [Kill Processes](https://docs.expel.io/workbench-setup/auto-remediations/kill-processes.md)
- [Crowdstrike: Kill Processes](https://docs.expel.io/workbench-setup/auto-remediations/kill-processes/crowdstrike-kill-processes.md): This guide helps you set up your CrowdStrike device and grant necessary permissions so that you can enable the Kill Processes auto remediation in Workbench.
- [Microsoft Defender for Endpoint: Kill Processes](https://docs.expel.io/workbench-setup/auto-remediations/kill-processes/microsoft-defender-for-endpoint-kill-processes.md): This guide helps you set up your Microsoft Defender for Endpoint device and grant necessary permissions so that you can enable the Kill Processes auto remediation in Workbench.
- [Remove Malicious Email](https://docs.expel.io/workbench-setup/auto-remediations/remove-malicious-email.md)
- [Google Workspace (Formerly G Suite): Remove Malicious Email](https://docs.expel.io/workbench-setup/auto-remediations/remove-malicious-email/google-workspace-formerly-g-suite-remove-malicious-email.md): This guide helps you set up your Google Workspace device and grant necessary permissions so that you can enable the Remove Malicious Email auto remediation in Workbench.
- [Microsoft 365: Remove Malicious Email](https://docs.expel.io/workbench-setup/auto-remediations/remove-malicious-email/microsoft-365-remove-malicious-email.md): This guide helps you set up your Microsoft 365 device and grant necessary permissions so that you can enable the Remove Malicious Email auto remediation in Workbench.
- [Microsoft Entra ID via Event Hub: Remove Malicious Email](https://docs.expel.io/workbench-setup/auto-remediations/remove-malicious-email/microsoft-entra-id-via-event-hub-remove-malicious-email.md)
- [Reset Credentials](https://docs.expel.io/workbench-setup/auto-remediations/reset-credentials.md)
- [Microsoft 365: Reset Credentials](https://docs.expel.io/workbench-setup/auto-remediations/reset-credentials/microsoft-365-reset-credentials.md): This guide helps you set up your Microsoft 365 device and grant necessary permissions so that you can enable the Reset Credentials auto remediation in Workbench.
- [Microsoft Entra ID via Event Hub: Reset Credentials](https://docs.expel.io/workbench-setup/auto-remediations/reset-credentials/microsoft-entra-id-via-event-hub-reset-credentials.md)
- [Okta: Reset Credentials](https://docs.expel.io/workbench-setup/auto-remediations/reset-credentials/okta-reset-credentials.md): This guide helps you set up your Okta device and grant necessary permissions so that you can enable the Reset Credentials auto remediation in Workbench.
- [API Key Self-Service](https://docs.expel.io/workbench-setup/api-key-self-service.md): Workbench allows you to create and manage your API keys via service accounts.
- [Configure an IP Allow List](https://docs.expel.io/workbench-setup/configure-an-ip-allow-list.md)
- [About Integrations](https://docs.expel.io/connect-your-technology/about-integrations.md)
- [Expel Integrations](https://docs.expel.io/connect-your-technology/about-integrations/expel-integrations.md): This page contains a full list of our supported integrations.
- [Why Expel Asks for Console Access](https://docs.expel.io/connect-your-technology/about-integrations/why-expel-asks-for-console-access.md)
- [About SIEM Integrations and Connections](https://docs.expel.io/connect-your-technology/about-integrations/about-siem-integrations-and-connections.md): This topic helps you understand the difference between SIEM integrations and SIEM connections, and how you can leverage each one.
- [MDR SIEM Tiers](https://docs.expel.io/connect-your-technology/about-integrations/tiers-and-support.md): Tiers specify what we can ingest for each integration, whether or not custom rules are leveraged, and which resulting Expel actions are supported.
- [About MDR for Email](https://docs.expel.io/connect-your-technology/about-integrations/about-mdr-for-email.md): MDR for Email provides 24/7 SOC coverage of the alerts generated by your email security tools.
- [Creating Test Alerts](https://docs.expel.io/connect-your-technology/about-integrations/creating-test-alerts.md): After you successfully connect to a cloud environment, you can create a test alert to confirm it is working and learn more about how Expel responds to incidents.
- [Webhooks Setup for Workbench](https://docs.expel.io/connect-your-technology/about-integrations/webhooks-setup-for-workbench.md)
- [Webhook Model Reference](https://docs.expel.io/connect-your-technology/about-integrations/webhook-model-reference.md)
- [A-C Integrations](https://docs.expel.io/connect-your-technology/a-c-integrations.md)
- [Abnormal AI Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/abnormal-ai-setup-for-workbench.md)
- [Akamai Guardicore Segmentation (formerly Guardicore Centra) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/akamai-guardicore-segmentation-formerly-guardicore-centra-setup-for-workbench.md)
- [Amazon/AWS](https://docs.expel.io/connect-your-technology/a-c-integrations/amazon-aws.md)
- [AWS CloudTrail](https://docs.expel.io/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail.md)
- [Get Started with AWS CloudTrail Setup](https://docs.expel.io/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/get-started-with-aws-cloudtrail-setup.md)
- [AWS CloudTrail Manual Setup - New Trail](https://docs.expel.io/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/aws-cloudtrail-manual-setup-new-trail.md): This manual setup guide is for those who do not have an existing trail available for use in their CloudTrail service.
- [AWS CloudTrail Manual Setup - Existing Trail](https://docs.expel.io/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/aws-cloudtrail-manual-setup-existing-trail.md): This manual setup guide is for those who have an existing trail available for use in their CloudTrail service.
- [AWS GovCloud CloudTrail Manual Setup - New Trail](https://docs.expel.io/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/aws-govcloud-cloudtrail-manual-setup-new-trail.md): This setup guide is for those who wish to use the GovCloud CloudTrail service for their CloudTrail integration. The AWS setup described here is Expel’s recommended best practice.
- [AWS CloudTrail with Control Tower - Existing Trail](https://docs.expel.io/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/aws-cloudtrail-with-control-tower-existing-trail.md): This manual setup guide is for those who have an existing trail that includes Control Tower available for use in their CloudTrail service.
- [Troubleshoot AWS CloudTrail Errors](https://docs.expel.io/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/troubleshoot-aws-cloudtrail-errors.md)
- [Amazon Elastic Kubernetes Service Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/amazon-aws/amazon-elastic-kubernetes-service-setup-for-workbench.md)
- [AWS GuardDuty Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/amazon-aws/aws-guardduty-setup-for-workbench.md)
- [Arista NDR (via Webhook) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/arista-ndr-via-webhook-setup-for-workbench.md)
- [Aurora Endpoint Security (formerly Cylance PROTECT AV) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/aurora-endpoint-security-formerly-cylance-protect-av-setup-for-workbench.md)
- [Box Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/box-setup-for-workbench.md)
- [Broadcom](https://docs.expel.io/connect-your-technology/a-c-integrations/broadcom.md)
- [Broadcom Carbon Black Cloud (formerly CB ThreatHunter and CB Defense) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/broadcom/broadcom-carbon-black-cloud-formerly-cb-threathunter-and-cb-defense-setup-for-workbench.md)
- [Broadcom Carbon Black EDR (formerly CB Response) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/broadcom/broadcom-carbon-black-edr-formerly-cb-response-setup-for-workbench.md)
- [Broadcom Symantec Endpoint Protection (via SIEM) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/broadcom/broadcom-symantec-endpoint-protection-via-siem-setup-for-workbench.md)
- [Check Point](https://docs.expel.io/connect-your-technology/a-c-integrations/check-point.md)
- [Check Point AV, Anti-Bot, and IPS (via SIEM) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/check-point/check-point-av-anti-bot-and-ips-via-siem-setup-for-workbench.md)
- [Check Point Quantum Network Security Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/check-point/check-point-quantum-network-security-setup-for-workbench.md)
- [Cisco](https://docs.expel.io/connect-your-technology/a-c-integrations/cisco.md)
- [Cisco ASA (via SIEM) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cisco/cisco-asa-via-siem-setup-for-workbench.md)
- [Cisco ASA (via Syslog) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cisco/cisco-asa-via-syslog-setup-for-workbench.md): This guide enables onboarding via a direct API connection.
- [Cisco Duo Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cisco/cisco-duo-setup-for-workbench.md)
- [Cisco FirePower (via SIEM) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cisco/cisco-firepower-via-siem-setup-for-workbench.md)
- [Cisco Meraki Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cisco/cisco-meraki-setup-for-workbench.md)
- [Cisco Meraki (via SIEM) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cisco/cisco-meraki-via-siem-setup-for-workbench.md)
- [Cisco Secure Endpoint (Formerly AMP) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cisco/cisco-secure-endpoint-formerly-amp-setup-for-workbench.md)
- [Cisco Umbrella Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cisco/cisco-umbrella-setup-for-workbench.md)
- [Cloudflare](https://docs.expel.io/connect-your-technology/a-c-integrations/cloudflare.md)
- [Cloudflare WAF Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cloudflare/cloudflare-waf-setup-for-workbench.md)
- [Cloudflare Zero Trust Network Access (via Webhook) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cloudflare/cloudflare-zero-trust-network-access-via-webhook-setup-for-workbench.md)
- [Corelight Open NDR (via Collector) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/corelight-open-ndr-via-collector-setup-for-workbench.md)
- [Cribl Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cribl-setup-for-workbench.md)
- [Crowdstrike](https://docs.expel.io/connect-your-technology/a-c-integrations/crowdstrike.md)
- [CrowdStrike Falcon Insight XDR Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/crowdstrike/crowdstrike-falcon-insight-xdr-setup-for-workbench.md): This guide supports Falcon, Falcon Complete, and Falcon Identity Protection integrations.
- [CrowdStrike Falcon Next-Gen SIEM Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/crowdstrike/crowdstrike-falcon-next-gen-siem-setup-for-workbench.md)
- [CrowdStrike LogScale Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/crowdstrike/crowdstrike-logscale-setup-for-workbench.md)
- [CyberArk](https://docs.expel.io/connect-your-technology/a-c-integrations/cyberark.md)
- [CyberArk Identity Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cyberark/cyberark-identity-setup-for-workbench.md)
- [CyberArk Privileged Access Management (PAM) (via SIEM) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cyberark/cyberark-privileged-access-management-pam-via-siem-setup-for-workbench.md)
- [Cybereason Endpoint Detection and Response (EDR) Setup for Workbench](https://docs.expel.io/connect-your-technology/a-c-integrations/cybereason-endpoint-detection-and-response-edr-setup-for-workbench.md)
- [D-J Integrations](https://docs.expel.io/connect-your-technology/d-j-integrations.md)
- [Darktrace Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/darktrace-setup-for-workbench.md)
- [Datadog Observability & Analytics Platform Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/datadog-observability-and-analytics-platform-setup-for-workbench.md)
- [Devo Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/devo-setup-for-workbench.md): This guide covers how to connect Devo to Expel Workbench.
- [Dropbox Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/dropbox-setup-for-workbench.md)
- [Elastic Security (SIEM) Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/elastic-security-siem-setup-for-workbench.md)
- [Exabeam](https://docs.expel.io/connect-your-technology/d-j-integrations/exabeam.md)
- [Exabeam Fusion New-Scale SIEM Collector Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/exabeam/exabeam-fusion-new-scale-siem-collector-setup-for-workbench.md)
- [Exabeam Fusion XDR Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/exabeam/exabeam-fusion-xdr-setup-for-workbench.md)
- [Exabeam Threat Center Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/exabeam/exabeam-threat-center-setup-for-workbench.md)
- [ExtraHop](https://docs.expel.io/connect-your-technology/d-j-integrations/extrahop.md)
- [ExtraHop Reveal(x) 360 Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/extrahop/extrahop-reveal-x-360-setup-for-workbench.md)
- [ExtraHop Reveal(x) Enterprise Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/extrahop/extrahop-reveal-x-enterprise-setup-for-workbench.md)
- [Fastly Next-Gen WAF (Formerly Signal Sciences WAF) Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/fastly-next-gen-waf-formerly-signal-sciences-waf-setup-for-workbench.md)
- [Forcepoint Web Filter (via SIEM) Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/forcepoint-web-filter-via-siem-setup-for-workbench.md)
- [Fortinet](https://docs.expel.io/connect-your-technology/d-j-integrations/fortinet.md)
- [Fortinet FortiAnalyzer Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/fortinet/fortinet-fortianalyzer-setup-for-workbench.md)
- [Fortinet FortiCNAPP (formerly Lacework) Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/fortinet/fortinet-forticnapp-formerly-lacework-setup-for-workbench.md)
- [Fortinet FortiGate (via SIEM) Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/fortinet/fortinet-fortigate-via-siem-setup-for-workbench.md)
- [GitHub](https://docs.expel.io/connect-your-technology/d-j-integrations/github.md)
- [GitHub Cloud Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/github/github-cloud-setup-for-workbench.md)
- [GitHub Self-Hosted (On-Prem) Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/github/github-self-hosted-on-prem-setup-for-workbench.md)
- [GitLab Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/gitlab-setup-for-workbench.md)
- [Google](https://docs.expel.io/connect-your-technology/d-j-integrations/google.md)
- [Google Cloud Platform Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/google/google-cloud-platform-setup-for-workbench.md)
- [Google Cloud Platform: Enable Data Access Log Support](https://docs.expel.io/connect-your-technology/d-j-integrations/google/google-cloud-platform-setup-for-workbench/google-cloud-platform-enable-data-access-log-support.md): This guide explains how to enable Data Access log support in BigQuery.
- [Google Kubernetes Engine Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/google/google-kubernetes-engine-setup-for-workbench.md)
- [Google Security Operations (SecOps) Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/google/google-security-operations-secops-setup-for-workbench.md)
- [Google Workspace Alert Center Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/google/google-workspace-alert-center-setup-for-workbench.md)
- [Google Workspace (Formerly G Suite) Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/google/google-workspace-formerly-g-suite-setup-for-workbench.md)
- [JumpCloud Setup for Workbench](https://docs.expel.io/connect-your-technology/d-j-integrations/jumpcloud-setup-for-workbench.md)
- [L-P Integrations](https://docs.expel.io/connect-your-technology/l-p-integrations.md)
- [LastPass Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/lastpass-setup-for-workbench.md)
- [Logz.io Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/logz.io-setup-for-workbench.md)
- [Microsoft](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft.md)
- [Microsoft 365 Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft/microsoft-365-setup-for-workbench.md)
- [Microsoft Azure Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft/microsoft-azure-setup-for-workbench.md)
- [Microsoft Azure Kubernetes Service Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft/microsoft-azure-kubernetes-service-setup-for-workbench.md)
- [Microsoft Azure Log Analytics Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft/microsoft-azure-log-analytics-setup-for-workbench.md)
- [Microsoft Defender for Cloud Apps Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft/microsoft-defender-for-cloud-apps-setup-for-workbench.md)
- [Microsoft Defender for Endpoint Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft/microsoft-defender-for-endpoint-setup-for-workbench.md)
- [Microsoft Defender for Identity Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft/microsoft-defender-for-identity-setup-for-workbench.md)
- [Microsoft Defender XDR Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft/microsoft-defender-xdr-setup-for-workbench.md)
- [Microsoft Entra ID via Event Hub Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft/microsoft-entra-id-via-event-hub-setup-for-workbench.md)
- [Microsoft Entra ID Protection Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft/microsoft-entra-id-protection-setup-for-workbench.md)
- [Microsoft Intune Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft/microsoft-intune-setup-for-workbench.md)
- [Microsoft Sentinel Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/microsoft/microsoft-sentinel-setup-for-workbench.md)
- [Mimecast Advanced Email Security Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/mimecast-advanced-email-security-setup-for-workbench.md)
- [Netskope CASB and Next Gen SWG Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/netskope-casb-and-next-gen-swg-setup-for-workbench.md)
- [Okta Auth0 Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/okta-auth0-setup-for-workbench.md)
- [Okta Workforce Identity Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/okta-workforce-identity-setup-for-workbench.md)
- [OneLogin Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/onelogin-setup-for-workbench.md)
- [1Password Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/1password-setup-for-workbench.md)
- [Oracle Cloud Infrastructure](https://docs.expel.io/connect-your-technology/l-p-integrations/oracle-cloud-infrastructure.md)
- [Get Started with Oracle Cloud Infrastructure Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/oracle-cloud-infrastructure/get-started-with-oracle-cloud-infrastructure-setup-for-workbench.md)
- [Oracle Cloud Infrastructure - Terraform Setup](https://docs.expel.io/connect-your-technology/l-p-integrations/oracle-cloud-infrastructure/oracle-cloud-infrastructure-terraform-setup.md)
- [Oracle Cloud Infrastructure - Manual Setup (Small Environments)](https://docs.expel.io/connect-your-technology/l-p-integrations/oracle-cloud-infrastructure/oracle-cloud-infrastructure-manual-setup-small-environments.md)
- [Oracle Cloud Setup - Manual (Large/Enterprise Environments)](https://docs.expel.io/connect-your-technology/l-p-integrations/oracle-cloud-infrastructure/oracle-cloud-setup-manual-large-enterprise-environments.md)
- [Orca Security Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/orca-security-setup-for-workbench.md)
- [Palo Alto Networks](https://docs.expel.io/connect-your-technology/l-p-integrations/palo-alto-networks.md)
- [Palo Alto Networks Cortex XDR Pro Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/palo-alto-networks/palo-alto-networks-cortex-xdr-pro-setup-for-workbench.md)
- [Palo Alto Networks Cortex XSIAM Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/palo-alto-networks/palo-alto-networks-cortex-xsiam-setup-for-workbench.md)
- [Palo Alto Networks Next-Gen Firewall Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/palo-alto-networks/palo-alto-networks-next-gen-firewall-setup-for-workbench.md): This guide covers how to connect Palo Alto Networks (PAN) Next-Gen Firewall and PAN Panorama to Workbench.
- [Palo Alto Networks Prisma Cloud Compute (formerly Twistlock) Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/palo-alto-networks/palo-alto-networks-prisma-cloud-compute-formerly-twistlock-setup-for-workbench.md)
- [Palo Alto Networks SaaS Security (Formerly Prisma SaaS) Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/palo-alto-networks/palo-alto-networks-saas-security-formerly-prisma-saas-setup-for-workbench.md)
- [Palo Alto Networks Strata Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/palo-alto-networks/palo-alto-networks-strata-setup-for-workbench.md): This guide covers how to set up Palo Alto Networks (PAN) Strata Logging Service with Workbench via webhook.
- [Panther Cloud SIEM Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/panther-cloud-siem-setup-for-workbench.md)
- [PingOne Platform (via Collector) Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/pingone-platform-via-collector-setup-for-workbench.md)
- [Proofpoint](https://docs.expel.io/connect-your-technology/l-p-integrations/proofpoint.md)
- [Proofpoint Insider Threat Management (via SIEM) Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/proofpoint/proofpoint-insider-threat-management-via-siem-setup-for-workbench.md)
- [Proofpoint TAP for MDR Setup for Workbench](https://docs.expel.io/connect-your-technology/l-p-integrations/proofpoint/proofpoint-tap-for-mdr-setup-for-workbench.md)
- [Q-Z Integrations](https://docs.expel.io/connect-your-technology/q-z-integrations.md)
- [QRadar Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/qradar-setup-for-workbench.md)
- [Salesforce Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/salesforce-setup-for-workbench.md)
- [Securonix Next-Gen SIEM Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/securonix-next-gen-siem-setup-for-workbench.md)
- [SentinelOne](https://docs.expel.io/connect-your-technology/q-z-integrations/sentinelone.md)
- [SentinelOne Singularity Data Lake Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/sentinelone/sentinelone-singularity-data-lake-setup-for-workbench.md)
- [SentinelOne Singularity Endpoint Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/sentinelone/sentinelone-singularity-endpoint-setup-for-workbench.md)
- [SentinelOne Singularity Hologram (formerly Attivo) (via SIEM) Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/sentinelone/sentinelone-singularity-hologram-formerly-attivo-via-siem-setup-for-workbench.md)
- [Slack Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/slack-setup-for-workbench.md)
- [Snowflake Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/snowflake-setup-for-workbench.md)
- [Splunk](https://docs.expel.io/connect-your-technology/q-z-integrations/splunk.md)
- [Splunk Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/splunk/splunk-setup-for-workbench.md)
- [Splunk Collector Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/splunk/splunk-collector-setup-for-workbench.md)
- [Splunk Core Alerts (via Collector) Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/splunk/splunk-core-alerts-via-collector-setup-for-workbench.md)
- [Sublime Security Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/sublime-security-setup-for-workbench.md)
- [Sumo Logic](https://docs.expel.io/connect-your-technology/q-z-integrations/sumo-logic.md)
- [About Sumo Logic Integrations](https://docs.expel.io/connect-your-technology/q-z-integrations/sumo-logic/about-sumo-logic-integrations.md): This page helps you understand which Sumo Logic integration you need to connect to Expel Workbench and which help articles guide you through the process.
- [Sumo Logic Cloud Infrastructure Security Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/sumo-logic/sumo-logic-cloud-infrastructure-security-setup-for-workbench.md)
- [Sumo Logic Cloud SIEM Enterprise Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/sumo-logic/sumo-logic-cloud-siem-enterprise-setup-for-workbench.md)
- [Sumo Logic SIEM/Data Lake](https://docs.expel.io/connect-your-technology/q-z-integrations/sumo-logic/sumo-logic-siem-data-lake.md)
- [Considerations for Sumo Logic Flex Pricing Customers](https://docs.expel.io/connect-your-technology/q-z-integrations/sumo-logic/considerations-for-sumo-logic-flex-pricing-customers.md)
- [Tanium](https://docs.expel.io/connect-your-technology/q-z-integrations/tanium.md)
- [Tanium XEM Core (On-Prem) Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/tanium/tanium-xem-core-on-prem-setup-for-workbench.md)
- [Tanium XEM Core (Cloud) Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/tanium/tanium-xem-core-cloud-setup-for-workbench.md)
- [Thales Imperva](https://docs.expel.io/connect-your-technology/q-z-integrations/thales-imperva.md)
- [Thales Imperva Cloud Web Application Firewall (formerly Imperva Cloud) Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/thales-imperva/thales-imperva-cloud-web-application-firewall-formerly-imperva-cloud-setup-for-workbench.md)
- [Thales Imperva Web Application Firewall (formerly Imperva SecureSphere) Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/thales-imperva/thales-imperva-web-application-firewall-formerly-imperva-securesphere-setup-for-workbench.md)
- [Trellix Endpoint Security (HX) (formerly FireEye HX) Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/trellix-endpoint-security-hx-formerly-fireeye-hx-setup-for-workbench.md)
- [Varonis DatAlert Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/varonis-datalert-setup-for-workbench.md)
- [Vectra AI (NDR) Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/vectra-ai-ndr-setup-for-workbench.md)
- [Verizon Network Detection and Response (formerly ProtectWise) Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/verizon-network-detection-and-response-formerly-protectwise-setup-for-workbench.md)
- [Wiz Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/wiz-setup-for-workbench.md): This guide supports both Wiz Cloud and Wiz Defend integrations — the instructions are largely the same, but differences are noted where applicable.
- [Workday Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/workday-setup-for-workbench.md)
- [Zscaler](https://docs.expel.io/connect-your-technology/q-z-integrations/zscaler.md)
- [Zscaler Internet Access (ZIA) (via SIEM) Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/zscaler/zscaler-internet-access-zia-via-siem-setup-for-workbench.md)
- [Zscaler Internet Access (via Webhook) Setup for Workbench](https://docs.expel.io/connect-your-technology/q-z-integrations/zscaler/zscaler-internet-access-via-webhook-setup-for-workbench.md)
- [Expel Assembler](https://docs.expel.io/connect-your-technology/expel-assembler.md)
- [About the Expel Assembler](https://docs.expel.io/connect-your-technology/expel-assembler/about-the-expel-assembler.md): This guide is for the V2 assembler; the V1 assembler is no longer supported as of June 30, 2024.
- [Add a New Assembler](https://docs.expel.io/connect-your-technology/expel-assembler/add-a-new-assembler.md): This guide is for the V2 assembler; the V1 assembler is no longer supported as of June 30, 2024.
- [Deploy the Virtual Machine](https://docs.expel.io/connect-your-technology/expel-assembler/deploy-the-virtual-machine.md)
- [Deploy the Assembler in AWS](https://docs.expel.io/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-aws.md): This guide is only for V2 assemblers being deployed with a virtual machine in AWS EC2. The V1 assembler is no longer supported as of June 30, 2024.
- [Deploy the Assembler in AWS (Terraform)](https://docs.expel.io/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-aws-terraform.md): This guide is only for V2 assemblers being deployed with a virtual machine in AWS EC2 by using Terraform. The V1 assembler is no longer supported as of June 30, 2024.
- [Deploy the Assembler in GCP](https://docs.expel.io/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-gcp.md): This guide is only for V2 assemblers being deployed with a virtual machine in the Google Cloud Platform. The V1 assembler is no longer supported as of June 30, 2024.
- [Deploy the Assembler in GCP (Terraform)](https://docs.expel.io/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-gcp-terraform.md): This guide is only for V2 assemblers being deployed with a virtual machine in the Google Cloud Platform by using Terraform. The V1 assembler is no longer supported as of June 30, 2024.
- [Deploy the Assembler in Hyper-V](https://docs.expel.io/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-hyper-v.md): This guide is only for V2 assemblers being deployed with a virtual machine in Hyper-V. The V1 assembler is no longer supported as of June 30, 2024.
- [Deploy the Assembler in Microsoft Azure](https://docs.expel.io/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-microsoft-azure.md): This guide is only for V2 assemblers being deployed with a virtual machine in Microsoft Azure. The V1 assembler is no longer supported as of June 30, 2024.
- [Deploy the Assembler in Microsoft Azure (Terraform)](https://docs.expel.io/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-microsoft-azure-terraform.md): This guide is only for V2 assemblers being deployed with a virtual machine in Microsoft Azure by using Terraform. The V1 assembler is no longer supported as of June 30, 2024.
- [Deploy the Assembler in Nutanix](https://docs.expel.io/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-nutanix.md): This guide is only for V2 assemblers being deployed with a virtual machine in Nutanix. The V1 assembler is no longer supported as of June 30, 2024.
- [Deploy the Assembler in VMware](https://docs.expel.io/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-vmware.md): This guide is only for V2 assemblers being deployed with a virtual machine in VMware. The V1 assembler is no longer supported as of June 30, 2024.
- [Assembler Migrations and Network Changes](https://docs.expel.io/connect-your-technology/expel-assembler/assembler-migrations-and-network-changes.md): You can migrate your existing assembler to a new static IP or make other network changes at any time.
- [Security Devices](https://docs.expel.io/connect-your-technology/security-devices.md)
- [Manage Security Devices](https://docs.expel.io/connect-your-technology/security-devices/manage-security-devices.md)
- [Security Device Health](https://docs.expel.io/connect-your-technology/security-devices/security-device-health.md)
- [Expel Terminology](https://docs.expel.io/workbench-reference/expel-terminology.md): A list of common Expel terms, what they mean, and where to find them in Workbench.
- [Dashboards](https://docs.expel.io/workbench-reference/dashboards.md)
- [Situation Report Dashboard](https://docs.expel.io/workbench-reference/dashboards/situation-report-dashboard.md)
- [Alert Analysis Dashboard](https://docs.expel.io/workbench-reference/dashboards/alert-analysis-dashboard.md)
- [Phishing Dashboard](https://docs.expel.io/workbench-reference/dashboards/phishing-dashboard.md)
- [Service Review Dashboard](https://docs.expel.io/workbench-reference/dashboards/service-review-dashboard.md)
- [Activity Pages](https://docs.expel.io/workbench-reference/activity-pages.md)
- [Actions](https://docs.expel.io/workbench-reference/activity-pages/actions.md)
- [Vulnerabilities](https://docs.expel.io/workbench-reference/activity-pages/vulnerabilities.md)
- [Tools](https://docs.expel.io/workbench-reference/tools.md)
- [Resilience](https://docs.expel.io/workbench-reference/tools/resilience.md)
- [Threats](https://docs.expel.io/workbench-reference/tools/threats.md)
- [Threat Bulletins](https://docs.expel.io/workbench-reference/tools/threats/threat-bulletins.md)
- [Emerging Threat Hunts](https://docs.expel.io/workbench-reference/tools/threats/emerging-threat-hunts.md)
- [Organization Settings Pages](https://docs.expel.io/workbench-reference/organization-settings-pages.md)
- [Your Organization](https://docs.expel.io/workbench-reference/organization-settings-pages/your-organization.md): The Your Organization page shows your organization name, GUID, available services, and more. If you have more than one organization, they will all be listed.
- [Event Search](https://docs.expel.io/workbench-reference/search-for-an-event.md): Event Search enables you to check that Expel has seen an event from an enabled technology.
- [Find an Event](https://docs.expel.io/workbench-reference/search-for-an-event/find-an-event.md)
- [About Event Details](https://docs.expel.io/workbench-reference/search-for-an-event/about-event-details.md): The Event Details screen has two tabs.
- [Manage Investigations and Incidents](https://docs.expel.io/workbench-reference/investigations-and-incidents.md)
- [Understanding Investigations](https://docs.expel.io/workbench-reference/investigations-and-incidents/understanding-investigations.md)
- [Understanding Incidents](https://docs.expel.io/workbench-reference/investigations-and-incidents/understanding-incidents.md)
- [View an Investigation](https://docs.expel.io/workbench-reference/investigations-and-incidents/view-an-investigation.md)
- [View an Incident](https://docs.expel.io/workbench-reference/investigations-and-incidents/view-an-incident.md)
- [View Open Remediation Actions or Investigative Actions](https://docs.expel.io/workbench-reference/investigations-and-incidents/view-open-remediation-actions-or-investigative-actions.md)
- [Add to an Investigation or Incident](https://docs.expel.io/workbench-reference/investigations-and-incidents/add-to-an-investigation-or-incident.md)
- [Close an Investigation or Incident](https://docs.expel.io/workbench-reference/investigations-and-incidents/close-an-investigation-or-incident.md)
- [Reopen an Investigation](https://docs.expel.io/workbench-reference/investigations-and-incidents/reopen-an-investigation.md)
- [Create an On-Demand Investigation](https://docs.expel.io/workbench-reference/investigations-and-incidents/create-an-on-demand-investigation.md)
- [Alerts](https://docs.expel.io/workbench-reference/alerts.md)
- [How Expel Alerts Work](https://docs.expel.io/workbench-reference/alerts/how-expel-alerts-work.md)
- [View Your Expel Alerts](https://docs.expel.io/workbench-reference/alerts/view-your-expel-alerts.md)
- [Identity Alerts](https://docs.expel.io/workbench-reference/alerts/identity-alerts.md)
- [About Identity Classification](https://docs.expel.io/workbench-reference/alerts/identity-alerts/about-identity-classification.md)
- [View Your Auto-Closed Identity Alerts](https://docs.expel.io/workbench-reference/alerts/identity-alerts/view-your-auto-closed-identity-alerts.md)
- [Detections](https://docs.expel.io/workbench-reference/detections.md)
- [About Detection Strategy](https://docs.expel.io/workbench-reference/detections/about-detection-strategy.md)
- [View Detections](https://docs.expel.io/workbench-reference/detections/view-detections.md)
- [Filter or Sort Detections](https://docs.expel.io/workbench-reference/detections/filter-or-sort-detections.md)
- [Suppression Rules](https://docs.expel.io/workbench-reference/detections/suppression-rules.md)
- [Lookout Rules](https://docs.expel.io/workbench-reference/detections/lookout-rules.md)
- [Suspicious Countries](https://docs.expel.io/workbench-reference/detections/suspicious-countries.md)
- [Licensing and Usage](https://docs.expel.io/workbench-reference/organization-settings.md)
- [Expel Licensing and Usage Overview](https://docs.expel.io/workbench-reference/organization-settings/expel-licensing-and-usage-overview.md)
- [View Usage Metrics](https://docs.expel.io/workbench-reference/organization-settings/view-usage-metrics.md)
- [A-C](https://docs.expel.io/detection-strategy-guides/a-c.md)
- [Abnormal AI Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/abnormal-ai-detection-strategy.md)
- [Akamai Guardicore Segmentation (formerly Guardicore Centra) Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/akamai-guardicore-segmentation-formerly-guardicore-centra-detection-strategy.md)
- [Amazon/AWS](https://docs.expel.io/detection-strategy-guides/a-c/amazon-aws.md)
- [AWS CloudTrail Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/amazon-aws/aws-cloudtrail-detection-strategy.md)
- [Amazon Elastic Kubernetes Service Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/amazon-aws/amazon-elastic-kubernetes-service-detection-strategy.md)
- [AWS GuardDuty Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/amazon-aws/aws-guardduty-detection-strategy.md)
- [Arista NDR Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/arista-ndr-detection-strategy.md)
- [Aurora Endpoint Security (formerly Cylance PROTECT AV) Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/aurora-endpoint-security-formerly-cylance-protect-av-detection-strategy.md)
- [Box Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/box-detection-strategy.md)
- [Broadcom](https://docs.expel.io/detection-strategy-guides/a-c/broadcom.md)
- [Broadcom Carbon Black Cloud Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/broadcom/broadcom-carbon-black-cloud-detection-strategy.md)
- [Broadcom Carbon Black EDR Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/broadcom/broadcom-carbon-black-edr-detection-strategy.md)
- [Broadcom Symantec Endpoint Protection (via SIEM) Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/broadcom/broadcom-symantec-endpoint-protection-via-siem-detection-strategy.md)
- [Check Point](https://docs.expel.io/detection-strategy-guides/a-c/check-point.md)
- [Check Point AV, Anti-Bot, and IPS (via Collector) Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/check-point/check-point-av-anti-bot-and-ips-via-collector-detection-strategy.md)
- [Check Point AV, Anti-Bot, and IPS (via SIEM) Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/check-point/check-point-av-anti-bot-and-ips-via-siem-detection-strategy.md)
- [Cisco](https://docs.expel.io/detection-strategy-guides/a-c/cisco.md)
- [Cisco ASA Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/cisco/cisco-asa-detection-strategy.md)
- [Cisco ASA (via SIEM) Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/cisco/cisco-asa-via-siem-detection-strategy.md)
- [Cisco Duo Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/cisco/cisco-duo-detection-strategy.md)
- [Cisco FirePower (via SIEM) Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/cisco/cisco-firepower-via-siem-detection-strategy.md)
- [Cisco Meraki Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/cisco/cisco-meraki-detection-strategy.md)
- [Cisco Meraki (via SIEM) Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/cisco/cisco-meraki-via-siem-detection-strategy.md)
- [Cisco Secure Endpoint Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/cisco/cisco-secure-endpoint-detection-strategy.md)
- [Cisco Umbrella Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/cisco/cisco-umbrella-detection-strategy.md)
- [Cloudflare Zero Trust Network Access Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/cloudflare-zero-trust-network-access-detection-strategy.md)
- [Corelight Open NDR (via Collector) Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/corelight-open-ndr-via-collector-detection-strategy.md)
- [CrowdStrike](https://docs.expel.io/detection-strategy-guides/a-c/crowdstrike.md)
- [CrowdStrike Falcon Identity Protection Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/crowdstrike/crowdstrike-falcon-identity-protection-detection-strategy.md)
- [CrowdStrike Falcon Insight XDR Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/crowdstrike/crowdstrike-falcon-insight-xdr-detection-strategy.md)
- [CrowdStrike Logscale Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/crowdstrike/crowdstrike-logscale-detection-strategy.md)
- [CyberArk](https://docs.expel.io/detection-strategy-guides/a-c/cyberark.md)
- [CyberArk Identity Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/cyberark/cyberark-identity-detection-strategy.md)
- [CyberArk Privileged Access Management (PAM) Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/cyberark/cyberark-privileged-access-management-pam-detection-strategy.md)
- [Cybereason Endpoint Detection and Response (EDR) Detection Strategy](https://docs.expel.io/detection-strategy-guides/a-c/cybereason-endpoint-detection-and-response-edr-detection-strategy.md)
- [D-M](https://docs.expel.io/detection-strategy-guides/d-m.md)
- [Darktrace Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/darktrace-detection-strategy.md)
- [Datadog Observability & Analytics Platform Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/datadog-observability-and-analytics-platform-detection-strategy.md)
- [Devo Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/devo-detection-strategy.md)
- [Dropbox Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/dropbox-detection-strategy.md)
- [Elastic Security Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/elastic-security-detection-strategy.md)
- [Exabeam](https://docs.expel.io/detection-strategy-guides/d-m/exabeam.md)
- [Exabeam Fusion SIEM Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/exabeam/exabeam-fusion-siem-detection-strategy.md)
- [Exabeam Fusion XDR Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/exabeam/exabeam-fusion-xdr-detection-strategy.md)
- [ExtraHop](https://docs.expel.io/detection-strategy-guides/d-m/extrahop.md)
- [ExtraHop Reveal(x) 360 Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/extrahop/extrahop-reveal-x-360-detection-strategy.md)
- [ExtraHop Reveal(x) Enterprise Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/extrahop/extrahop-reveal-x-enterprise-detection-strategy.md)
- [Fastly Next-Gen WAF (formerly Signal Sciences WAF) Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/fastly-next-gen-waf-formerly-signal-sciences-waf-detection-strategy.md)
- [Fortinet](https://docs.expel.io/detection-strategy-guides/d-m/fortinet.md)
- [Fortinet FortiAnalyzer Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/fortinet/fortinet-fortianalyzer-detection-strategy.md)
- [Fortinet FortiCNAPP (formerly Lacework) Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/fortinet/fortinet-forticnapp-formerly-lacework-detection-strategy.md)
- [Fortinet FortiGate (via SIEM) Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/fortinet/fortinet-fortigate-via-siem-detection-strategy.md)
- [GitHub Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/github-detection-strategy.md)
- [GitLab Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/gitlab-detection-strategy.md)
- [Google](https://docs.expel.io/detection-strategy-guides/d-m/google.md)
- [Google Cloud Platform Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/google/google-cloud-platform-detection-strategy.md)
- [Google Kubernetes Engine Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/google/google-kubernetes-engine-detection-strategy.md)
- [Google Security Operations (SecOps) Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/google/google-security-operations-secops-detection-strategy.md)
- [Google Workspace Alert Center Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/google/google-workspace-alert-center-detection-strategy.md)
- [Jumpcloud Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/jumpcloud-detection-strategy.md)
- [LastPass Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/lastpass-detection-strategy.md)
- [Logz.io Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/logz.io-detection-strategy.md)
- [Microsoft](https://docs.expel.io/detection-strategy-guides/d-m/microsoft.md)
- [Microsoft 365 Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/microsoft/microsoft-365-detection-strategy.md)
- [Microsoft Azure Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/microsoft/microsoft-azure-detection-strategy.md)
- [Microsoft Azure Kubernetes Service Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/microsoft/microsoft-azure-kubernetes-service-detection-strategy.md)
- [Microsoft Azure Monitor (formerly Azure Activity logs) Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/microsoft/microsoft-azure-monitor-formerly-azure-activity-logs-detection-strategy.md)
- [Microsoft Defender for Cloud Apps Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/microsoft/microsoft-defender-for-cloud-apps-detection-strategy.md)
- [Microsoft Defender for Endpoint Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/microsoft/microsoft-defender-for-endpoint-detection-strategy.md)
- [Microsoft Defender for Identity Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/microsoft/microsoft-defender-for-identity-detection-strategy.md)
- [Microsoft Defender XDR Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/microsoft/microsoft-defender-xdr-detection-strategy.md)
- [Microsoft Entra ID Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/microsoft/microsoft-entra-id-detection-strategy.md)
- [Microsoft Entra ID Protection Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/microsoft/microsoft-entra-id-protection-detection-strategy.md)
- [Microsoft Intune Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/microsoft/microsoft-intune-detection-strategy.md)
- [Microsoft Sentinel Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/microsoft/microsoft-sentinel-detection-strategy.md)
- [Mimecast Detection Strategy](https://docs.expel.io/detection-strategy-guides/d-m/mimecast-detection-strategy.md)
- [N-R](https://docs.expel.io/detection-strategy-guides/n-q.md)
- [Netskope CASB and Next Gen SWG Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/netskope-casb-and-next-gen-swg-detection-strategy.md)
- [Okta](https://docs.expel.io/detection-strategy-guides/n-q/okta.md)
- [Okta Auth0 Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/okta/okta-auth0-detection-strategy.md)
- [Okta Workforce Identity Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/okta/okta-workforce-identity-detection-strategy.md)
- [OneLogin Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/onelogin-detection-strategy.md)
- [1Password Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/1password-detection-strategy.md)
- [Oracle Cloud Infrastructure Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/oracle-cloud-infrastructure-detection-strategy.md)
- [Orca Security Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/orca-security-detection-strategy.md)
- [Palo Alto Networks](https://docs.expel.io/detection-strategy-guides/n-q/palo-alto-networks.md)
- [Palo Alto Networks Cortex XDR Pro Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/palo-alto-networks/palo-alto-networks-cortex-xdr-pro-detection-strategy.md)
- [Palo Alto Networks Next Gen Firewall Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/palo-alto-networks/palo-alto-networks-next-gen-firewall-detection-strategy.md)
- [Palo Alto Networks SaaS Security (formerly Prisma SaaS) Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/palo-alto-networks/palo-alto-networks-saas-security-formerly-prisma-saas-detection-strategy.md)
- [Palo Alto Networks Strata Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/palo-alto-networks/palo-alto-networks-strata-detection-strategy.md)
- [Palo Alto Prisma Cloud Compute (formerly Twistlock) Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/palo-alto-networks/palo-alto-prisma-cloud-compute-formerly-twistlock-detection-strategy.md)
- [Panther Cloud SIEM Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/panther-cloud-siem-detection-strategy.md)
- [PingOne Platform Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/pingone-platform-detection-strategy.md)
- [Proofpoint](https://docs.expel.io/detection-strategy-guides/n-q/proofpoint.md)
- [Proofpoint Insider Threat Management (via SIEM) Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/proofpoint/proofpoint-insider-threat-management-via-siem-detection-strategy.md)
- [Proofpoint TAP Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/proofpoint/proofpoint-tap-detection-strategy.md)
- [QRadar Detection Strategy](https://docs.expel.io/detection-strategy-guides/n-q/qradar-detection-strategy.md)
- [Qualys VMDR Setup for Workbench](https://docs.expel.io/detection-strategy-guides/n-q/qualys-vmdr-setup-for-workbench.md): This guide covers Qualys VMDR setup for MDR customers.
- [Rapid7 InsightVM Setup for Workbench](https://docs.expel.io/detection-strategy-guides/n-q/rapid7-insightvm-setup-for-workbench.md)
- [S-Z](https://docs.expel.io/detection-strategy-guides/s-z.md)
- [Salesforce Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/salesforce-detection-strategy.md)
- [Securonix Next-Gen SIEM Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/securonix-next-gen-siem-detection-strategy.md)
- [SentinelOne](https://docs.expel.io/detection-strategy-guides/s-z/sentinelone.md)
- [SentinelOne Singularity Data Lake Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/sentinelone/sentinelone-singularity-data-lake-detection-strategy.md)
- [SentinelOne Singularity Endpoint Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/sentinelone/sentinelone-singularity-endpoint-detection-strategy.md)
- [SentinelOne Singularity Hologram (formerly Attivo) Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/sentinelone/sentinelone-singularity-hologram-formerly-attivo-detection-strategy.md)
- [Slack Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/slack-detection-strategy.md)
- [Snowflake Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/snowflake-detection-strategy.md)
- [Splunk Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/splunk-detection-strategy.md)
- [Sublime Security Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/sublime-security-detection-strategy.md)
- [Sumo Logic](https://docs.expel.io/detection-strategy-guides/s-z/sumo-logic.md)
- [Sumo Logic Cloud Infrastructure Security Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/sumo-logic/sumo-logic-cloud-infrastructure-security-detection-strategy.md)
- [Sumo Logic Cloud SIEM Enterprise Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/sumo-logic/sumo-logic-cloud-siem-enterprise-detection-strategy.md)
- [Tanium XEM Core Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/tanium-xem-core-detection-strategy.md)
- [Tenable Vulnerability Management Setup for Workbench](https://docs.expel.io/detection-strategy-guides/s-z/tenable-vulnerability-management-setup-for-workbench.md)
- [Trellix Endpoint Security (HX) (formerly FireEye HX) Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/trellix-endpoint-security-hx-formerly-fireeye-hx-detection-strategy.md)
- [Vectra AI (NDR) Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/vectra-ai-ndr-detection-strategy.md)
- [Wiz](https://docs.expel.io/detection-strategy-guides/s-z/wiz.md)
- [Wiz Cloud Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/wiz/wiz-cloud-detection-strategy.md)
- [Wiz Defend Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/wiz/wiz-defend-detection-strategy.md)
- [Workday Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/workday-detection-strategy.md)
- [Zscaler Internet Access (ZIA) Detection Strategy](https://docs.expel.io/detection-strategy-guides/s-z/zscaler-internet-access-zia-detection-strategy.md)
- [Expel Managed Phishing](https://docs.expel.io/more-features/expel-managed-phishing.md)
- [About Expel Managed Phishing](https://docs.expel.io/more-features/expel-managed-phishing/about-expel-managed-phishing.md)
- [Customer Questionnaire](https://docs.expel.io/more-features/expel-managed-phishing/customer-questionnaire.md)
- [Setup Guides](https://docs.expel.io/more-features/expel-managed-phishing/setup-guides.md)
- [Expel Managed Phishing Setup](https://docs.expel.io/more-features/expel-managed-phishing/setup-guides/expel-managed-phishing-setup.md)
- [Phishing Submission Button Setup](https://docs.expel.io/more-features/expel-managed-phishing/setup-guides/phishing-submission-button-setup.md)
- [Enable Gmail Logs in BigQuery](https://docs.expel.io/more-features/expel-managed-phishing/setup-guides/enable-gmail-logs-in-bigquery.md)
- [Microsoft 365 Message Trace Setup](https://docs.expel.io/more-features/expel-managed-phishing/setup-guides/microsoft-365-message-trace-setup.md)
- [Expel Managed Phishing Extension for Chrome](https://docs.expel.io/more-features/expel-managed-phishing/setup-guides/expel-managed-phishing-extension-for-chrome.md)
- [Expel Auto-Close Marketing Email](https://docs.expel.io/more-features/expel-managed-phishing/expel-auto-close-marketing-email.md)
- [Expel Threat Hunting](https://docs.expel.io/more-features/expel-threat-hunting.md)
- [About Expel Threat Hunting](https://docs.expel.io/more-features/expel-threat-hunting/expel-hunting.md)
- [Expel Threat Intelligence](https://docs.expel.io/more-features/expel-threat-intelligence.md): An overview of Threat Bulletins and Emerging Threat Hunts
- [Video Library](https://docs.expel.io/resources/video-library.md)
- [Introduction to Workbench](https://docs.expel.io/resources/video-library/video-introduction-to-workbench.md)
- [Initial Workbench Access and Setup](https://docs.expel.io/resources/video-library/video-initial-workbench-access-and-setup.md)
- [Auto Remediations](https://docs.expel.io/resources/video-library/auto-remediations.md): This page is a repository for our available videos related to auto remediations.
- [Navigating Alerts in Workbench](https://docs.expel.io/resources/video-library/navigating-alerts-in-workbench.md)
- [Navigating Incidents in Workbench](https://docs.expel.io/resources/video-library/navigating-incidents-in-workbench.md)
- [Navigating Investigations in Workbench](https://docs.expel.io/resources/video-library/navigating-investigations-in-workbench.md)
- [Understanding Workbench Notifications](https://docs.expel.io/resources/video-library/understanding-workbench-notifications.md)
- [Workbench Dashboards](https://docs.expel.io/resources/video-library/workbench-dashboards.md)

## API Reference

- [Workbench API (v2)](https://docs.expel.io/api/readme.md)

## Support

- [How to Reach Us](https://docs.expel.io/support/how-to-reach-us.md): There are a number of ways to reach us if you need help, want to ask a question, want to report a phishing attempt, or need to begin an investigative process.
- [Technical Support](https://docs.expel.io/support/how-to-reach-us/technical-support.md)
- [Questions](https://docs.expel.io/support/how-to-reach-us/questions.md)
- [Managed Phishing](https://docs.expel.io/support/how-to-reach-us/managed-phishing.md)

## Release Notes

- [Expel Release Notes](https://docs.expel.io/release-notes/readme.md): Stay up to date on our latest releases and product changes.
- [2025](https://docs.expel.io/release-notes/2025.md)
- [2024](https://docs.expel.io/release-notes/2024.md)

## Notices

- [Notices](https://docs.expel.io/notices/notices.md): Check here for resiliency recommendations and more messaging from Expel.
- [Sep 4, 2026: Microsoft Teams Cross-Tenant Phishing Resilience & Remediation](https://docs.expel.io/notices/notices/sep-4-2026-microsoft-teams-cross-tenant-phishing-resilience-and-remediation.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on a page URL with the `ask` query parameter:
```
GET https://docs.expel.io/readme.md?ask=<question>
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.