{"version":1,"pages":[{"id":"HuwIPGZsWRtVwaL2Iu1A","title":"Expel Documentation","pathname":"/","siteSpaceId":"sitesp_xTgLY","description":"Connect your technologies, learn about Expel Workbench™ features, and more in our documentation.","breadcrumbs":[{"label":"Documentation"}]},{"id":"9LxpoM2VjQzin6MZLkCF","title":"Get Started","pathname":"/workbench-setup/get-started","siteSpaceId":"sitesp_xTgLY","description":"Welcome to Expel! The Customer Success team will reach out to you to assist, but the items below are what we plan to complete with you within 30 days of onboarding.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"}]},{"id":"Duzlpn2IYSiG7CNcjozW","title":"Activate Your Workbench Account","pathname":"/workbench-setup/get-started/activate-your-workbench-account","siteSpaceId":"sitesp_xTgLY","icon":"circle-1","description":"This topic covers how to set up your account and begin using Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Get Started"}]},{"id":"dy4O3SSuIQZC14EZWb03","title":"Add and Manage Users","pathname":"/workbench-setup/get-started/add-and-manage-users","siteSpaceId":"sitesp_xTgLY","icon":"circle-2","description":"This topic covers how to manage users in Expel Workbench, as well as how to resolve first-time login issues.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Get Started"}]},{"id":"1GrElz7tlmYjXItEMkem","title":"User Role Rights","pathname":"/workbench-setup/get-started/add-and-manage-users/user-role-rights","siteSpaceId":"sitesp_xTgLY","description":"Learn how Expel features relate to Workbench user roles.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Get Started"},{"label":"Add and Manage Users","icon":"circle-2"}]},{"id":"agQ0OXd7bg9uGyKcJGYs","title":"Manage Your Profile and User Account Settings","pathname":"/workbench-setup/get-started/manage-your-profile-and-user-account-settings","siteSpaceId":"sitesp_xTgLY","icon":"circle-3","description":"This section of Workbench allows you to manage aspects of your account.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Get Started"}]},{"id":"fNgl3fmQOy8skXKbba7a","title":"Configure Your SSO Provider with Workbench","pathname":"/workbench-setup/get-started/configure-your-sso-provider-with-workbench","siteSpaceId":"sitesp_xTgLY","icon":"circle-4","description":"Enable Workbench users in your organization to log in via SSO.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Get Started"}]},{"id":"0oR1DiqU6O0WV3dH4BFq","title":"Set Up Notifications","pathname":"/workbench-setup/get-started/set-up-notifications","siteSpaceId":"sitesp_xTgLY","icon":"circle-5","description":"You can use more than one type of notification to receive messages about your environment.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Get Started"}]},{"id":"KDVM6EyNyxig7Ebp7WVN","title":"Add and Manage Org Context","pathname":"/workbench-setup/get-started/add-and-manage-org-context","siteSpaceId":"sitesp_xTgLY","icon":"circle-6","description":"Org Context refers to stored reference information about your environment that you are able to manage.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Get Started"}]},{"id":"IqaLm5EdQdotrYK2bRqI","title":"Connect Your Technologies","pathname":"/workbench-setup/get-started/connect-your-technologies","siteSpaceId":"sitesp_xTgLY","icon":"circle-7","description":"Start integrating your tech with Expel Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Get Started"}]},{"id":"wR909jgxs76ytZgmGgEU","title":"Enable Auto Remediations","pathname":"/workbench-setup/get-started/enable-auto-remediations","siteSpaceId":"sitesp_xTgLY","icon":"circle-8","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Get Started"}]},{"id":"bKXkoSEakUCldAfisZUz","title":"Learn More About Workbench","pathname":"/workbench-setup/get-started/learn-more-about-workbench","siteSpaceId":"sitesp_xTgLY","icon":"circle-9","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Get Started"}]},{"id":"FXVODiA8Lbg7Z1suJvBg","title":"Notifications","pathname":"/workbench-setup/notifications","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"}]},{"id":"41KHMoGdz8bqnE8gA4xw","title":"About Notifications","pathname":"/workbench-setup/notifications/about-notifications","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Notifications"}]},{"id":"mrKcFrdj8miiwKGUWC70","title":"Platform Setup","pathname":"/workbench-setup/notifications/platform-setup","siteSpaceId":"sitesp_xTgLY","description":"You must set up your platform integration before you can begin receiving organization notifications.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Notifications"}]},{"id":"s6vP9IA3D0LIwOoaSUc3","title":"Ticketing System Setup for Organization Notifications","pathname":"/workbench-setup/notifications/platform-setup/ticketing-system-setup-for-organization-notifications","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Notifications"},{"label":"Platform Setup"}]},{"id":"tRol1no1MkELUAeEB8zk","title":"OpsGenie Setup for Organization Notifications","pathname":"/workbench-setup/notifications/platform-setup/opsgenie-setup-for-organization-notifications","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Notifications"},{"label":"Platform Setup"}]},{"id":"wJL1s4gf1vMzdKrEIn0o","title":"PagerDuty Setup for Organization Notifications","pathname":"/workbench-setup/notifications/platform-setup/pagerduty-setup-for-organization-notifications","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Notifications"},{"label":"Platform Setup"}]},{"id":"3lQZBysyXvfcHHgsRqBP","title":"ServiceNow Setup for Organization Notifications","pathname":"/workbench-setup/notifications/platform-setup/servicenow-setup-for-organization-notifications","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Notifications"},{"label":"Platform Setup"}]},{"id":"rT2fBTVYZ6HPm4yP53cy","title":"Manage Email Notifications","pathname":"/workbench-setup/notifications/manage-email-notifications","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Notifications"}]},{"id":"SsDSpCkSst2EEnEkTvgT","title":"Manage Organization Notifications","pathname":"/workbench-setup/notifications/manage-organization-notifications","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Notifications"}]},{"id":"E0wXhBNmuN4tgIEe0pTM","title":"Manage Threaded Notifications in Slack or Teams","pathname":"/workbench-setup/notifications/manage-threaded-notifications-in-slack-or-teams","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Notifications"}]},{"id":"0FOnEFZHWqVJVlh3ZhAo","title":"Auto Remediations","pathname":"/workbench-setup/auto-remediations","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"}]},{"id":"EyWah2jprFVmJXj442PU","title":"About Auto Remediations","pathname":"/workbench-setup/auto-remediations/about-auto-remediations","siteSpaceId":"sitesp_xTgLY","description":"This topic provides general information about auto remediations and which ones are available.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"}]},{"id":"tB6pypGdTQxm5zKD3IDQ","title":"Enable an Auto Remediation in Workbench","pathname":"/workbench-setup/auto-remediations/enable-an-auto-remediation-in-workbench","siteSpaceId":"sitesp_xTgLY","description":"Expel offers a variety of auto remediations for specific devices.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"}]},{"id":"v8tqTlSyXJm29IvqUQv8","title":"Auto Remediation Manual Fallback","pathname":"/workbench-setup/auto-remediations/auto-remediation-manual-fallback","siteSpaceId":"sitesp_xTgLY","description":"The manual fallback feature allows Expel to perform hands-on remediation if an automated action fails.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"}]},{"id":"97GoM5e1NkCjhrpESGir","title":"Block Bad Hashes","pathname":"/workbench-setup/auto-remediations/block-bad-hashes","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"}]},{"id":"7LnAKC5sJIfskRCHMUMZ","title":"Carbon Black Cloud: Block Bad Hashes","pathname":"/workbench-setup/auto-remediations/block-bad-hashes/carbon-black-cloud-block-bad-hashes","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Carbon Black Cloud device and grant necessary permissions so that you can enable the Block Bad Hashes auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Block Bad Hashes"}]},{"id":"9MxTz3ZWV3n5aCR1Qbd7","title":"CrowdStrike: Block Bad Hashes","pathname":"/workbench-setup/auto-remediations/block-bad-hashes/crowdstrike-block-bad-hashes","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your CrowdStrike device and grant necessary permissions so that you can enable the Block Bad Hashes auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Block Bad Hashes"}]},{"id":"IsCjzrlvlLDHMdwLtwlr","title":"Microsoft Defender for Endpoint: Block Bad Hashes","pathname":"/workbench-setup/auto-remediations/block-bad-hashes/microsoft-defender-for-endpoint-block-bad-hashes","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Microsoft Defender for Endpoint device and grant necessary permissions so that you can enable the Block Bad Hashes auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Block Bad Hashes"}]},{"id":"MPRI59pJCm7tnQfkccqb","title":"Palo Alto Networks Cortex XDR: Block Bad Hashes","pathname":"/workbench-setup/auto-remediations/block-bad-hashes/palo-alto-cortex-xdr-block-bad-hashes","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Palo Alto Networks (PAN) Cortex XDR device and grant necessary permissions so that you can enable the Block Bad Hashes auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Block Bad Hashes"}]},{"id":"7Qdn5MyQrYqxFb20dULL","title":"SentinelOne: Block Bad Hashes","pathname":"/workbench-setup/auto-remediations/block-bad-hashes/sentinelone-block-bad-hashes","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your SentinelOne device and grant necessary permissions so that you can enable the Block Bad Hashes auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Block Bad Hashes"}]},{"id":"GKN3KPMKpDm7KpOozp1U","title":"Contain Hosts","pathname":"/workbench-setup/auto-remediations/contain-hosts","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"}]},{"id":"UmbZADBATSgWQ2DhHV4a","title":"Broadcom Carbon Black Cloud: Contain Hosts","pathname":"/workbench-setup/auto-remediations/contain-hosts/broadcom-carbon-black-cloud-contain-hosts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Broadcom Carbon Black Cloud device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Contain Hosts"}]},{"id":"V3FLXSmXUgLAlzy89RC2","title":"Broadcom Carbon Black EDR: Contain Hosts","pathname":"/workbench-setup/auto-remediations/contain-hosts/broadcom-carbon-black-edr-contain-hosts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Broadcom Carbon Black EDR device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Contain Hosts"}]},{"id":"UK0HFo40yHO9lrgxxs49","title":"CrowdStrike: Contain Hosts","pathname":"/workbench-setup/auto-remediations/contain-hosts/crowdstrike-contain-hosts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your CrowdStrike device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Contain Hosts"}]},{"id":"KRCV0gTxXcG5k8btK9EX","title":"Cybereason: Contain Hosts","pathname":"/workbench-setup/auto-remediations/contain-hosts/cybereason-contain-hosts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Cybereason device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Contain Hosts"}]},{"id":"pw9guoqNWqHsYN1C0DZ1","title":"Microsoft Defender for Endpoint: Contain Hosts","pathname":"/workbench-setup/auto-remediations/contain-hosts/microsoft-defender-for-endpoint-contain-hosts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Microsoft Defender for Endpoint device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Contain Hosts"}]},{"id":"mv0Sm8dANxMvaGaHYsmj","title":"Palo Alto Networks Cortex XDR: Contain Hosts","pathname":"/workbench-setup/auto-remediations/contain-hosts/palo-alto-networks-cortex-xdr-contain-hosts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Palo Alto Networks (PAN) Cortex XDR Pro device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Contain Hosts"}]},{"id":"N1UI3csg3th1qcmyRQN2","title":"SentinelOne: Contain Hosts","pathname":"/workbench-setup/auto-remediations/contain-hosts/sentinelone-contain-hosts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your SentinelOne device and grant necessary permissions so that you can enable the Contain Hosts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Contain Hosts"}]},{"id":"3vdC4gdIFa6PvoKhpat6","title":"Deactivate Access Keys","pathname":"/workbench-setup/auto-remediations/deactivate-access-keys","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"}]},{"id":"wW8U4TRhvvh5dSEfBDbs","title":"AWS CloudTrail: Deactivate Access Keys","pathname":"/workbench-setup/auto-remediations/deactivate-access-keys/aws-cloudtrail-deactivate-access-keys","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your AWS CloudTrail device and grant necessary permissions so that you can enable the Deactivate Access Keys auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Deactivate Access Keys"}]},{"id":"wf6njfC4muBL9NeGB2zU","title":"AWS GuardDuty: Deactivate Access Keys","pathname":"/workbench-setup/auto-remediations/deactivate-access-keys/aws-guardduty-deactivate-access-keys","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your AWS GuardDuty device and grant necessary permissions so that you can enable the Deactivate Access Keys auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Deactivate Access Keys"}]},{"id":"pJryGiFSDhlvTUCgvwPg","title":"Delete Malicious Files","pathname":"/workbench-setup/auto-remediations/delete-malicious-files","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"}]},{"id":"dbanTbghpceeKVP4JReR","title":"CrowdStrike: Delete Malicious Files","pathname":"/workbench-setup/auto-remediations/delete-malicious-files/crowdstrike-delete-malicious-files","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your CrowdStrike device and grant necessary permissions so that you can enable the Delete Malicious Files auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Delete Malicious Files"}]},{"id":"o503KPqvBzPC9SjqBcSx","title":"Microsoft Defender for Endpoint: Delete Malicious Files","pathname":"/workbench-setup/auto-remediations/delete-malicious-files/microsoft-defender-for-endpoint-delete-malicious-files","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Microsoft Defender for Endpoint device and grant necessary permissions so that you can enable the Delete Malicious Files auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Delete Malicious Files"}]},{"id":"tk5kXzkttKBmk1qwavDO","title":"Delete Registry Key","pathname":"/workbench-setup/auto-remediations/delete-registry-key","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"}]},{"id":"0nKh3v0hoZs6VpQCYyMf","title":"CrowdStrike: Delete Registry Key","pathname":"/workbench-setup/auto-remediations/delete-registry-key/crowdstrike-delete-registry-key","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your CrowdStrike device and grant necessary permissions so that you can enable the Delete Registry Key auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Delete Registry Key"}]},{"id":"LYhxBEIv2Q64e9H5xBhT","title":"Disable Accounts","pathname":"/workbench-setup/auto-remediations/disable-accounts","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"}]},{"id":"ryL1Topl2tfXEaRY0byN","title":"Azure Cloud Direct: Disable Accounts","pathname":"/workbench-setup/auto-remediations/disable-accounts/azure-cloud-direct-disable-accounts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Azure Cloud Direct device and grant necessary permissions so that you can enable the Disable Accounts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Disable Accounts"}]},{"id":"qZI4O00avLcvlSH4u53Y","title":"Duo Cloud: Disable Accounts","pathname":"/workbench-setup/auto-remediations/disable-accounts/duo-cloud-disable-accounts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Duo Cloud device and grant necessary permissions so that you can enable the Disable Accounts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Disable Accounts"}]},{"id":"XF6Rxym7d1DvYH0Dkfuf","title":"GitHub: Disable Accounts","pathname":"/workbench-setup/auto-remediations/disable-accounts/github-disable-accounts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your GitHub device and grant necessary permissions so that you can enable the Disable Accounts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Disable Accounts"}]},{"id":"O8qdZfYokMI1cqeVcLBk","title":"Google Workspace: Disable Accounts","pathname":"/workbench-setup/auto-remediations/disable-accounts/google-workspace-disable-accounts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Google Workspace device and grant necessary permissions so that you can enable the Disable Accounts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Disable Accounts"}]},{"id":"wet0doxW4REMsrgbPDFR","title":"Microsoft 365: Disable Accounts","pathname":"/workbench-setup/auto-remediations/disable-accounts/microsoft-365-disable-accounts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Microsoft 365 device and grant necessary permissions so that you can enable the Disable Accounts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Disable Accounts"}]},{"id":"G9D3xY4uYrsAbKtVH07t","title":"Microsoft Defender for Endpoint: Disable Accounts","pathname":"/workbench-setup/auto-remediations/disable-accounts/microsoft-defender-for-endpoint-disable-accounts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Microsoft Defender for Endpoint device and grant necessary permissions so that you can enable the On-Prem/Hybrid Disable Accounts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Disable Accounts"}]},{"id":"7PGslfmxRFuyRZ4hmQlZ","title":"Microsoft Entra ID via Event Hub: Disable Accounts","pathname":"/workbench-setup/auto-remediations/disable-accounts/microsoft-entra-id-via-event-hub-disable-accounts","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Disable Accounts"}]},{"id":"uuznSkN0pHVH5WEPEK3d","title":"Okta: Disable Accounts","pathname":"/workbench-setup/auto-remediations/disable-accounts/okta-disable-accounts","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Okta device and grant necessary permissions so that you can enable the Disable Accounts auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Disable Accounts"}]},{"id":"jeSKSmXRt22QJsqO5tAS","title":"Kill Processes","pathname":"/workbench-setup/auto-remediations/kill-processes","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"}]},{"id":"jzU8IwcXVJHtwXSHaw4O","title":"Crowdstrike: Kill Processes","pathname":"/workbench-setup/auto-remediations/kill-processes/crowdstrike-kill-processes","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your CrowdStrike device and grant necessary permissions so that you can enable the Kill Processes auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Kill Processes"}]},{"id":"nAv0L9hC2dQVPYhuKZvg","title":"Microsoft Defender for Endpoint: Kill Processes","pathname":"/workbench-setup/auto-remediations/kill-processes/microsoft-defender-for-endpoint-kill-processes","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Microsoft Defender for Endpoint device and grant necessary permissions so that you can enable the Kill Processes auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Kill Processes"}]},{"id":"AMntg8OGCIHjiy03D0At","title":"Remove Malicious Email","pathname":"/workbench-setup/auto-remediations/remove-malicious-email","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"}]},{"id":"pVrtNqDsUjLRXxD8jyA0","title":"Google Workspace (Formerly G Suite): Remove Malicious Email","pathname":"/workbench-setup/auto-remediations/remove-malicious-email/google-workspace-formerly-g-suite-remove-malicious-email","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Google Workspace device and grant necessary permissions so that you can enable the Remove Malicious Email auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Remove Malicious Email"}]},{"id":"hFqAeARH5cJ6dzpzYyms","title":"Microsoft 365: Remove Malicious Email","pathname":"/workbench-setup/auto-remediations/remove-malicious-email/microsoft-365-remove-malicious-email","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Microsoft 365 device and grant necessary permissions so that you can enable the Remove Malicious Email auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Remove Malicious Email"}]},{"id":"OHjOnwp5kzTp5w0L7RfZ","title":"Microsoft Entra ID via Event Hub: Remove Malicious Email","pathname":"/workbench-setup/auto-remediations/remove-malicious-email/microsoft-entra-id-via-event-hub-remove-malicious-email","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Remove Malicious Email"}]},{"id":"t0t6rQyMezuoPLgDCcds","title":"Reset Credentials","pathname":"/workbench-setup/auto-remediations/reset-credentials","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"}]},{"id":"6j2lcOYKD0R1ob19i6Vq","title":"Microsoft 365: Reset Credentials","pathname":"/workbench-setup/auto-remediations/reset-credentials/microsoft-365-reset-credentials","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Microsoft 365 device and grant necessary permissions so that you can enable the Reset Credentials auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Reset Credentials"}]},{"id":"fPNOQGVtsfQtje0HTUM7","title":"Microsoft Entra ID via Event Hub: Reset Credentials","pathname":"/workbench-setup/auto-remediations/reset-credentials/microsoft-entra-id-via-event-hub-reset-credentials","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Reset Credentials"}]},{"id":"4iallbbMWTfVrKEO2FQy","title":"Okta: Reset Credentials","pathname":"/workbench-setup/auto-remediations/reset-credentials/okta-reset-credentials","siteSpaceId":"sitesp_xTgLY","description":"This guide helps you set up your Okta device and grant necessary permissions so that you can enable the Reset Credentials auto remediation in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"},{"label":"Auto Remediations"},{"label":"Reset Credentials"}]},{"id":"5ZipaSkQsZeaaJmo6cUB","title":"API Key Self-Service","pathname":"/workbench-setup/api-key-self-service","siteSpaceId":"sitesp_xTgLY","description":"Workbench allows you to create and manage your API keys via service accounts.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"}]},{"id":"yCfOYtrsOevLRWO6FP6f","title":"Configure an IP Allow List","pathname":"/workbench-setup/configure-an-ip-allow-list","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Setup"}]},{"id":"vcDxwJw376dXbDKuQRHR","title":"About Integrations","pathname":"/connect-your-technology/about-integrations","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"}]},{"id":"ZjeRfeBDZb2QIoakwsS1","title":"Expel Integrations","pathname":"/connect-your-technology/about-integrations/expel-integrations","siteSpaceId":"sitesp_xTgLY","description":"This page contains a full list of our supported integrations.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"About Integrations"}]},{"id":"tghsaYFBzhCAWJfN8GpG","title":"Why Expel Asks for Console Access","pathname":"/connect-your-technology/about-integrations/why-expel-asks-for-console-access","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"About Integrations"}]},{"id":"Rvm56kGvXFeuSNs4mGWk","title":"About SIEM Integrations and Connections","pathname":"/connect-your-technology/about-integrations/about-siem-integrations-and-connections","siteSpaceId":"sitesp_xTgLY","description":"This topic helps you understand the difference between SIEM integrations and SIEM connections, and how you can leverage each one.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"About Integrations"}]},{"id":"dsWf3XcRIoUR8Cdggdr7","title":"MDR SIEM Tiers","pathname":"/connect-your-technology/about-integrations/tiers-and-support","siteSpaceId":"sitesp_xTgLY","description":"Tiers specify what we can ingest for each integration, whether or not custom rules are leveraged, and which resulting Expel actions are supported.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"About Integrations"}]},{"id":"JHYjYMzSSPewF0vHXd7t","title":"About MDR for Email","pathname":"/connect-your-technology/about-integrations/about-mdr-for-email","siteSpaceId":"sitesp_xTgLY","description":"MDR for Email provides 24/7 SOC coverage of the alerts generated by your email security tools.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"About Integrations"}]},{"id":"MKHiwWM972L766S6kmfB","title":"Creating Test Alerts","pathname":"/connect-your-technology/about-integrations/creating-test-alerts","siteSpaceId":"sitesp_xTgLY","description":"After you successfully connect to a cloud environment, you can create a test alert to confirm it is working and learn more about how Expel responds to incidents.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"About Integrations"}]},{"id":"kaOWkThndUzwOw4kDd1E","title":"Webhooks Setup for Workbench","pathname":"/connect-your-technology/about-integrations/webhooks-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"About Integrations"}]},{"id":"J05zCiijHRVoGpSdM5QW","title":"Webhook Model Reference","pathname":"/connect-your-technology/about-integrations/webhook-model-reference","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"About Integrations"}]},{"id":"yCnsRaLRMUzIeipidYq8","title":"A-C Integrations","pathname":"/connect-your-technology/a-c-integrations","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"}]},{"id":"s4DsMb5oJohvwIA9Onrr","title":"Abnormal AI Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/abnormal-ai-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"OdKEyk1V85OIGdUahmqD","title":"Akamai Guardicore Segmentation (formerly Guardicore Centra) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/akamai-guardicore-segmentation-formerly-guardicore-centra-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"UUHrYVji4iWpnBYcLuI9","title":"Amazon/AWS","pathname":"/connect-your-technology/a-c-integrations/amazon-aws","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"uyYjwBFtVDXK2jD4asDg","title":"AWS CloudTrail","pathname":"/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Amazon/AWS"}]},{"id":"DtTWpJweKCz8W3zvuTyq","title":"Get Started with AWS CloudTrail Setup","pathname":"/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/get-started-with-aws-cloudtrail-setup","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Amazon/AWS"},{"label":"AWS CloudTrail"}]},{"id":"Iu3rtFacJXPZ9z8WaSyq","title":"AWS CloudTrail Manual Setup - New Trail","pathname":"/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/aws-cloudtrail-manual-setup-new-trail","siteSpaceId":"sitesp_xTgLY","description":"This manual setup guide is for those who do not have an existing trail available for use in their CloudTrail service.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Amazon/AWS"},{"label":"AWS CloudTrail"}]},{"id":"y8D3TcyUPOHw1awRBwG9","title":"AWS CloudTrail Manual Setup - Existing Trail","pathname":"/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/aws-cloudtrail-manual-setup-existing-trail","siteSpaceId":"sitesp_xTgLY","description":"This manual setup guide is for those who have an existing trail available for use in their CloudTrail service.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Amazon/AWS"},{"label":"AWS CloudTrail"}]},{"id":"6zkH3vk8eTIgTRA6MxY6","title":"AWS GovCloud CloudTrail Manual Setup - New Trail","pathname":"/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/aws-govcloud-cloudtrail-manual-setup-new-trail","siteSpaceId":"sitesp_xTgLY","description":"This setup guide is for those who wish to use the GovCloud CloudTrail service for their CloudTrail integration. The AWS setup described here is Expel’s recommended best practice.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Amazon/AWS"},{"label":"AWS CloudTrail"}]},{"id":"NobAQBKrpCfGGQk1LXNv","title":"AWS CloudTrail with Control Tower - Existing Trail","pathname":"/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/aws-cloudtrail-with-control-tower-existing-trail","siteSpaceId":"sitesp_xTgLY","description":"This manual setup guide is for those who have an existing trail that includes Control Tower available for use in their CloudTrail service.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Amazon/AWS"},{"label":"AWS CloudTrail"}]},{"id":"GKp5Bc7U7pKIH7cZJkfl","title":"Troubleshoot AWS CloudTrail Errors","pathname":"/connect-your-technology/a-c-integrations/amazon-aws/aws-cloudtrail/troubleshoot-aws-cloudtrail-errors","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Amazon/AWS"},{"label":"AWS CloudTrail"}]},{"id":"EijjlUdXyyGUzHxPrnxu","title":"Amazon Elastic Kubernetes Service Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/amazon-aws/amazon-elastic-kubernetes-service-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Amazon/AWS"}]},{"id":"6qjFMO6Fn6Ak1gU0fkKK","title":"AWS GuardDuty Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/amazon-aws/aws-guardduty-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Amazon/AWS"}]},{"id":"Dv9iraD4EhMHOImpnbR8","title":"Arista NDR (via Webhook) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/arista-ndr-via-webhook-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"Su9VXKXBFAWOyt4iHOVp","title":"Aurora Endpoint Security (formerly Cylance PROTECT AV) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/aurora-endpoint-security-formerly-cylance-protect-av-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"98s8CHqtOzqSmfBxcH3d","title":"Box Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/box-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"TuPRijRjFEkar5bALtUQ","title":"Broadcom","pathname":"/connect-your-technology/a-c-integrations/broadcom","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"hsTqvw9FgJowVEAdnbR7","title":"Broadcom Carbon Black Cloud (formerly CB ThreatHunter and CB Defense) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/broadcom/broadcom-carbon-black-cloud-formerly-cb-threathunter-and-cb-defense-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Broadcom"}]},{"id":"E3rjCZkLsmobwDHnImnQ","title":"Broadcom Carbon Black EDR (formerly CB Response) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/broadcom/broadcom-carbon-black-edr-formerly-cb-response-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Broadcom"}]},{"id":"9e2qMXkAmddL3s29zeMq","title":"Broadcom Symantec Endpoint Protection (via SIEM) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/broadcom/broadcom-symantec-endpoint-protection-via-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Broadcom"}]},{"id":"Kth55uZ3pUtai2p3zmHy","title":"Check Point","pathname":"/connect-your-technology/a-c-integrations/check-point","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"Zxe1e2wgqebJ3cipwJ4P","title":"Check Point AV, Anti-Bot, and IPS (via SIEM) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/check-point/check-point-av-anti-bot-and-ips-via-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Check Point"}]},{"id":"rc7KfwcAAPH5V7vowggk","title":"Check Point Quantum Network Security Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/check-point/check-point-quantum-network-security-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Check Point"}]},{"id":"7zi6mFjyioxsFMkWiGPW","title":"Cisco","pathname":"/connect-your-technology/a-c-integrations/cisco","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"nyHKnK6apSTcsrRROZLz","title":"Cisco ASA (via SIEM) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cisco/cisco-asa-via-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Cisco"}]},{"id":"RND1peYOwPvhUv3nL8sH","title":"Cisco ASA (via Syslog) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cisco/cisco-asa-via-syslog-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"This guide enables onboarding via a direct API connection.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Cisco"}]},{"id":"eYtqUgmavhYGz68uFkfi","title":"Cisco Duo Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cisco/cisco-duo-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Cisco"}]},{"id":"Osd8HfUCAJc9UkrZOtHK","title":"Cisco FirePower (via SIEM) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cisco/cisco-firepower-via-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Cisco"}]},{"id":"7vunJazQnuGXp0aYsign","title":"Cisco Meraki Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cisco/cisco-meraki-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Cisco"}]},{"id":"cClM3sOHPN99dfaRJMZA","title":"Cisco Meraki (via SIEM) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cisco/cisco-meraki-via-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Cisco"}]},{"id":"rG5Y2MqZ6vOMZVleZfuH","title":"Cisco Secure Endpoint (Formerly AMP) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cisco/cisco-secure-endpoint-formerly-amp-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Cisco"}]},{"id":"mhtZg9VO5zhT5WOJO8mm","title":"Cisco Umbrella Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cisco/cisco-umbrella-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Cisco"}]},{"id":"Yf2sGrEWs0JFyUZ7VjVo","title":"Cloudflare","pathname":"/connect-your-technology/a-c-integrations/cloudflare","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"iiQbYNyPpT07rUPCq9aX","title":"Cloudflare WAF Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cloudflare/cloudflare-waf-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Cloudflare"}]},{"id":"TFplDmIZ62CDtqdX4p7g","title":"Cloudflare Zero Trust Network Access (via Webhook) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cloudflare/cloudflare-zero-trust-network-access-via-webhook-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Cloudflare"}]},{"id":"l1JEICIERflJEeOLkBgD","title":"Corelight Open NDR (via Collector) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/corelight-open-ndr-via-collector-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"QvLC81MakaMFrIVOJmDZ","title":"Cribl Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cribl-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"uCAmpm20PQKVYAxuF335","title":"Crowdstrike","pathname":"/connect-your-technology/a-c-integrations/crowdstrike","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"hDnpvxI6PKQMIvYROOYl","title":"CrowdStrike Falcon Insight XDR Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/crowdstrike/crowdstrike-falcon-insight-xdr-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"This guide supports Falcon, Falcon Complete, and Falcon Identity Protection integrations.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Crowdstrike"}]},{"id":"4Kh8OnsDQUS81E0m8CkB","title":"CrowdStrike Falcon Next-Gen SIEM Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/crowdstrike/crowdstrike-falcon-next-gen-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Crowdstrike"}]},{"id":"ml6e0DK1AB5i09OyBuhB","title":"CrowdStrike LogScale Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/crowdstrike/crowdstrike-logscale-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"Crowdstrike"}]},{"id":"lpzdbjDXX6soSKIJ8wCl","title":"CyberArk","pathname":"/connect-your-technology/a-c-integrations/cyberark","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"hKd3BwHjKP6IeipoE0Qn","title":"CyberArk Identity Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cyberark/cyberark-identity-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"CyberArk"}]},{"id":"CzvY3vi27lCFGI8P9S3T","title":"CyberArk Privileged Access Management (PAM) (via SIEM) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cyberark/cyberark-privileged-access-management-pam-via-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"},{"label":"CyberArk"}]},{"id":"CMpWUiBUNjmA3WHKvAei","title":"Cybereason Endpoint Detection and Response (EDR) Setup for Workbench","pathname":"/connect-your-technology/a-c-integrations/cybereason-endpoint-detection-and-response-edr-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"A-C Integrations"}]},{"id":"BAAzc07tSsRUae0sLPOo","title":"D-J Integrations","pathname":"/connect-your-technology/d-j-integrations","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"}]},{"id":"KEVh10pyngBU9xwV6EYR","title":"Darktrace Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/darktrace-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"KjLB2XipJxREulyLoHfR","title":"Datadog Observability & Analytics Platform Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/datadog-observability-and-analytics-platform-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"XDqvrU0BDEGUGNmDmZGl","title":"Devo Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/devo-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"This guide covers how to connect Devo to Expel Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"L0Yarew8K4jwi0XeDxIM","title":"Dropbox Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/dropbox-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"aRnYWgGMOr3zNVmFVEsQ","title":"Elastic Security (SIEM) Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/elastic-security-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"EI0JIqjaHmLGKK0UQwl1","title":"Exabeam","pathname":"/connect-your-technology/d-j-integrations/exabeam","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"kilyfQO7vsVlB6S9mIzs","title":"Exabeam Fusion New-Scale SIEM Collector Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/exabeam/exabeam-fusion-new-scale-siem-collector-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"Exabeam"}]},{"id":"PPqxM7eE8uZbuZ7P1eS9","title":"Exabeam Fusion XDR Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/exabeam/exabeam-fusion-xdr-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"Exabeam"}]},{"id":"UUA40xGyBjjXPOIIzGhj","title":"Exabeam Threat Center Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/exabeam/exabeam-threat-center-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"Exabeam"}]},{"id":"JqF3GLdwfTCcfduoHPVR","title":"ExtraHop","pathname":"/connect-your-technology/d-j-integrations/extrahop","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"uEUgVDVhpOB6Vf2zIBep","title":"ExtraHop Reveal(x) 360 Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/extrahop/extrahop-reveal-x-360-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"ExtraHop"}]},{"id":"rsUCyx5feLq6cPWOD378","title":"ExtraHop Reveal(x) Enterprise Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/extrahop/extrahop-reveal-x-enterprise-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"ExtraHop"}]},{"id":"nUpanL3BrwzPdidsF9B7","title":"Fastly Next-Gen WAF (Formerly Signal Sciences WAF) Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/fastly-next-gen-waf-formerly-signal-sciences-waf-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"e4euFj2WHxJWFIkPOiiF","title":"Forcepoint Web Filter (via SIEM) Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/forcepoint-web-filter-via-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"FgbZv19VHyzKv8CHwtLv","title":"Fortinet","pathname":"/connect-your-technology/d-j-integrations/fortinet","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"lvFmipKRBLOUXFLH0N4h","title":"Fortinet FortiAnalyzer Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/fortinet/fortinet-fortianalyzer-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"Fortinet"}]},{"id":"38XvrUrLaxnOyGmXbc1M","title":"Fortinet FortiCNAPP (formerly Lacework) Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/fortinet/fortinet-forticnapp-formerly-lacework-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"Fortinet"}]},{"id":"aGd9o7KMb5F8cFSHEa0U","title":"Fortinet FortiGate (via SIEM) Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/fortinet/fortinet-fortigate-via-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"Fortinet"}]},{"id":"1YsbXXGWWjLbESsvigW7","title":"GitHub","pathname":"/connect-your-technology/d-j-integrations/github","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"KD0mbTKTteSryWoVo7v5","title":"GitHub Cloud Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/github/github-cloud-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"GitHub"}]},{"id":"bkcovkhEZrXONDtF91nG","title":"GitHub Self-Hosted (On-Prem) Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/github/github-self-hosted-on-prem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"GitHub"}]},{"id":"RgCObwsGEXIWBcb0P8wU","title":"GitLab Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/gitlab-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"7UjftJA6BunJFV4Su7oe","title":"Google","pathname":"/connect-your-technology/d-j-integrations/google","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"FrArpF6Em9xckL5JlQxD","title":"Google Cloud Platform Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/google/google-cloud-platform-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"Google"}]},{"id":"mxJfkvYlzdsRN0IeJD2s","title":"Google Cloud Platform: Enable Data Access Log Support","pathname":"/connect-your-technology/d-j-integrations/google/google-cloud-platform-setup-for-workbench/google-cloud-platform-enable-data-access-log-support","siteSpaceId":"sitesp_xTgLY","description":"This guide explains how to enable Data Access log support in BigQuery.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"Google"},{"label":"Google Cloud Platform Setup for Workbench"}]},{"id":"8oT3LZULfXxlNgkSEQBi","title":"Google Kubernetes Engine Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/google/google-kubernetes-engine-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"Google"}]},{"id":"nvBlv3ZtgFXfoa9kOD4o","title":"Google Security Operations (SecOps) Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/google/google-security-operations-secops-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"Google"}]},{"id":"fzx7bxVdZhnVuGkpkHPC","title":"Google Workspace Alert Center Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/google/google-workspace-alert-center-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"Google"}]},{"id":"aqTXgLfr34cRxbjhetQW","title":"Google Workspace (Formerly G Suite) Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/google/google-workspace-formerly-g-suite-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"},{"label":"Google"}]},{"id":"SOFhCC3rD7AhBhsgVLSD","title":"JumpCloud Setup for Workbench","pathname":"/connect-your-technology/d-j-integrations/jumpcloud-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"D-J Integrations"}]},{"id":"yzhNpe7NblYuqZSCmV7M","title":"L-P Integrations","pathname":"/connect-your-technology/l-p-integrations","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"}]},{"id":"5ZzXeBwOHRaQ6Ca3MugA","title":"LastPass Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/lastpass-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"qt7hIKJ0lrZ5DmR0chGF","title":"Logz.io Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/logz.io-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"NLXTEU2mslTIgvlxjvQy","title":"Microsoft","pathname":"/connect-your-technology/l-p-integrations/microsoft","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"zR986faNQvGBCxqRXUru","title":"Microsoft 365 Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/microsoft/microsoft-365-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Microsoft"}]},{"id":"8UvqQxANNVt0IjwgknFx","title":"Microsoft Azure Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/microsoft/microsoft-azure-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Microsoft"}]},{"id":"bPjYN0nM7YpdvwzsLA2U","title":"Microsoft Azure Kubernetes Service Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/microsoft/microsoft-azure-kubernetes-service-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Microsoft"}]},{"id":"ZNos81QsM8N7kaTWjn75","title":"Microsoft Azure Log Analytics Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/microsoft/microsoft-azure-log-analytics-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Microsoft"}]},{"id":"bndurqYlFjgUtsQxXkNX","title":"Microsoft Defender for Cloud Apps Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/microsoft/microsoft-defender-for-cloud-apps-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Microsoft"}]},{"id":"hpvSrmHpPenMqJ8xeLRx","title":"Microsoft Defender for Endpoint Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/microsoft/microsoft-defender-for-endpoint-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Microsoft"}]},{"id":"VJCLdEL8FlZDsqkmTNEQ","title":"Microsoft Defender for Identity Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/microsoft/microsoft-defender-for-identity-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Microsoft"}]},{"id":"yuHeM0w095XdpsdEnitt","title":"Microsoft Defender XDR Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/microsoft/microsoft-defender-xdr-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Microsoft"}]},{"id":"IhTr1pNIZlt9mQTVYG3M","title":"Microsoft Entra ID via Event Hub Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/microsoft/microsoft-entra-id-via-event-hub-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Microsoft"}]},{"id":"nRTfnLuvoRxiTwRLJWLS","title":"Microsoft Entra ID Protection Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/microsoft/microsoft-entra-id-protection-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Microsoft"}]},{"id":"6hgn7CEDny6WLpivcdDi","title":"Microsoft Intune Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/microsoft/microsoft-intune-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Microsoft"}]},{"id":"uHHWpyI5NdAH85juOzII","title":"Microsoft Sentinel Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/microsoft/microsoft-sentinel-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Microsoft"}]},{"id":"Bla0F1Cs3GE8Z3ufyi2W","title":"Mimecast Advanced Email Security Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/mimecast-advanced-email-security-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"qJIltS71l11HKCexi5ku","title":"Netskope CASB and Next Gen SWG Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/netskope-casb-and-next-gen-swg-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"zZT8LOv0YE3p8w7XuDrk","title":"Okta Auth0 Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/okta-auth0-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"AMW9UjplB2moOKTOWCCD","title":"Okta Workforce Identity Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/okta-workforce-identity-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"lrairhP0XAJo4aYHMNI1","title":"OneLogin Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/onelogin-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"Gje4vRaXj7UGpODG3jrb","title":"1Password Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/1password-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"jXsCa5QbQ6ogZYpP1AIC","title":"Oracle Cloud Infrastructure","pathname":"/connect-your-technology/l-p-integrations/oracle-cloud-infrastructure","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"3GHAkPFjtUCpLtRfDP8i","title":"Get Started with Oracle Cloud Infrastructure Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/oracle-cloud-infrastructure/get-started-with-oracle-cloud-infrastructure-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Oracle Cloud Infrastructure"}]},{"id":"47I1p2qqE1cGCmI2Gcqn","title":"Oracle Cloud Infrastructure - Terraform Setup","pathname":"/connect-your-technology/l-p-integrations/oracle-cloud-infrastructure/oracle-cloud-infrastructure-terraform-setup","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Oracle Cloud Infrastructure"}]},{"id":"ZNlPxjXcWcsR2srLmIDs","title":"Oracle Cloud Infrastructure - Manual Setup (Small Environments)","pathname":"/connect-your-technology/l-p-integrations/oracle-cloud-infrastructure/oracle-cloud-infrastructure-manual-setup-small-environments","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Oracle Cloud Infrastructure"}]},{"id":"xVgCDvpPuuMUY1oBUzFe","title":"Oracle Cloud Setup - Manual (Large/Enterprise Environments)","pathname":"/connect-your-technology/l-p-integrations/oracle-cloud-infrastructure/oracle-cloud-setup-manual-large-enterprise-environments","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Oracle Cloud Infrastructure"}]},{"id":"ERS9IO4G1C07buGKn4jP","title":"Orca Security Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/orca-security-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"O7zdVKzFeWgWO5v9TIO6","title":"Palo Alto Networks","pathname":"/connect-your-technology/l-p-integrations/palo-alto-networks","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"PPv3jmcrP63Y9VLIh79j","title":"Palo Alto Networks Cortex XDR Pro Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/palo-alto-networks/palo-alto-networks-cortex-xdr-pro-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Palo Alto Networks"}]},{"id":"7Z9CDLBQnGfSn0kzBJyu","title":"Palo Alto Networks Cortex XSIAM Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/palo-alto-networks/palo-alto-networks-cortex-xsiam-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Palo Alto Networks"}]},{"id":"n6ekJHPEPvbDn5Q4hU27","title":"Palo Alto Networks Next-Gen Firewall Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/palo-alto-networks/palo-alto-networks-next-gen-firewall-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"This guide covers how to connect Palo Alto Networks (PAN) Next-Gen Firewall and PAN Panorama to Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Palo Alto Networks"}]},{"id":"ehfm0haTfBecGcubN8hM","title":"Palo Alto Networks Prisma Cloud Compute (formerly Twistlock) Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/palo-alto-networks/palo-alto-networks-prisma-cloud-compute-formerly-twistlock-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Palo Alto Networks"}]},{"id":"LXk5gohr13KpcRwOrkhS","title":"Palo Alto Networks SaaS Security (Formerly Prisma SaaS) Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/palo-alto-networks/palo-alto-networks-saas-security-formerly-prisma-saas-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Palo Alto Networks"}]},{"id":"qw5fiwXHDzMkWy8q5lKD","title":"Palo Alto Networks Strata Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/palo-alto-networks/palo-alto-networks-strata-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"This guide covers how to set up Palo Alto Networks (PAN) Strata Logging Service with Workbench via webhook.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Palo Alto Networks"}]},{"id":"qxgazJuisImbJZpwh65i","title":"Panther Cloud SIEM Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/panther-cloud-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"pX6EeGNj9FyTBg8hId8O","title":"PingOne Platform (via Collector) Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/pingone-platform-via-collector-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"LeQgnUT2fR4ILmM7kZGW","title":"Proofpoint","pathname":"/connect-your-technology/l-p-integrations/proofpoint","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"}]},{"id":"NBdi4llVSmaRSEBlnzb4","title":"Proofpoint Insider Threat Management (via SIEM) Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/proofpoint/proofpoint-insider-threat-management-via-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Proofpoint"}]},{"id":"0NPkr4vCXabOpFGs8BCi","title":"Proofpoint TAP for MDR Setup for Workbench","pathname":"/connect-your-technology/l-p-integrations/proofpoint/proofpoint-tap-for-mdr-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"L-P Integrations"},{"label":"Proofpoint"}]},{"id":"yzERE1xRbWKNHqHxf4WF","title":"Q-Z Integrations","pathname":"/connect-your-technology/q-z-integrations","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"}]},{"id":"D1mbVIZw78klbfI0cj8z","title":"QRadar Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/qradar-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"mu1t4Mrb1gTe1QQA5r53","title":"Salesforce Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/salesforce-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"qB6GR4Ndy60WVSvehoGg","title":"Securonix Next-Gen SIEM Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/securonix-next-gen-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"Pq04xxWlki6zbgzhmEnM","title":"SentinelOne","pathname":"/connect-your-technology/q-z-integrations/sentinelone","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"Ret4YEOlxY4PtPE4pOSB","title":"SentinelOne Singularity Data Lake Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/sentinelone/sentinelone-singularity-data-lake-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"SentinelOne"}]},{"id":"l6YeABJymbI6f4nnKpxQ","title":"SentinelOne Singularity Endpoint Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/sentinelone/sentinelone-singularity-endpoint-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"SentinelOne"}]},{"id":"5i0iqQIRqIJwL9diXQ7b","title":"SentinelOne Singularity Hologram (formerly Attivo) (via SIEM) Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/sentinelone/sentinelone-singularity-hologram-formerly-attivo-via-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"SentinelOne"}]},{"id":"P4sYVd2HbJei8AdYNm0n","title":"Slack Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/slack-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"4EODT7OcBdrxammavWA4","title":"Snowflake Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/snowflake-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"iYjx0674luFDQx1lwIUZ","title":"Splunk","pathname":"/connect-your-technology/q-z-integrations/splunk","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"ito1Q3FXgyX5Ia5vMEar","title":"Splunk Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/splunk/splunk-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Splunk"}]},{"id":"kv26j3UWDlPAbdnNE3Pg","title":"Splunk Collector Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/splunk/splunk-collector-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Splunk"}]},{"id":"tWTvhQqybpjtAfDgkdeK","title":"Splunk Core Alerts (via Collector) Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/splunk/splunk-core-alerts-via-collector-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Splunk"}]},{"id":"h0R3v8unrFtzWLK9RHCR","title":"Sublime Security Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/sublime-security-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"secPS6FYaPpElkBlf3OV","title":"Sumo Logic","pathname":"/connect-your-technology/q-z-integrations/sumo-logic","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"BiLEMg7JlN1qt27RGK5z","title":"About Sumo Logic Integrations","pathname":"/connect-your-technology/q-z-integrations/sumo-logic/about-sumo-logic-integrations","siteSpaceId":"sitesp_xTgLY","description":"This page helps you understand which Sumo Logic integration you need to connect to Expel Workbench and which help articles guide you through the process.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Sumo Logic"}]},{"id":"cKsg3R5z7dvusDEjltN9","title":"Sumo Logic Cloud Infrastructure Security Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/sumo-logic/sumo-logic-cloud-infrastructure-security-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Sumo Logic"}]},{"id":"odltBhHSVcsAko0FydUy","title":"Sumo Logic Cloud SIEM Enterprise Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/sumo-logic/sumo-logic-cloud-siem-enterprise-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Sumo Logic"}]},{"id":"8INLmzg79JvWaMRQhJGC","title":"Sumo Logic SIEM/Data Lake","pathname":"/connect-your-technology/q-z-integrations/sumo-logic/sumo-logic-siem-data-lake","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Sumo Logic"}]},{"id":"hBWiANaoHlusVBDuXXrK","title":"Considerations for Sumo Logic Flex Pricing Customers","pathname":"/connect-your-technology/q-z-integrations/sumo-logic/considerations-for-sumo-logic-flex-pricing-customers","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Sumo Logic"}]},{"id":"kvzkzFC2DrUk4fBxBPHb","title":"Tanium","pathname":"/connect-your-technology/q-z-integrations/tanium","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"6ehqgCZhEl1rEkMNg64w","title":"Tanium XEM Core (On-Prem) Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/tanium/tanium-xem-core-on-prem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Tanium"}]},{"id":"1UULYAvbN6nybRwMUVlr","title":"Tanium XEM Core (Cloud) Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/tanium/tanium-xem-core-cloud-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Tanium"}]},{"id":"EhcWWXpOBtmSKEUcTzta","title":"Thales Imperva","pathname":"/connect-your-technology/q-z-integrations/thales-imperva","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"0DIkwPnwGjxQnwOGdrDc","title":"Thales Imperva Cloud Web Application Firewall (formerly Imperva Cloud) Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/thales-imperva/thales-imperva-cloud-web-application-firewall-formerly-imperva-cloud-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Thales Imperva"}]},{"id":"Rb0CAb3jjkuZZiwiaPds","title":"Thales Imperva Web Application Firewall (formerly Imperva SecureSphere) Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/thales-imperva/thales-imperva-web-application-firewall-formerly-imperva-securesphere-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Thales Imperva"}]},{"id":"jzGJ6iCaWesEbubQM9d2","title":"Trellix Endpoint Security (HX) (formerly FireEye HX) Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/trellix-endpoint-security-hx-formerly-fireeye-hx-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"DtDm50BqXfJytvTBuk8B","title":"Varonis DatAlert Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/varonis-datalert-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"SXiJpn9QdIAnD8STfrTi","title":"Vectra AI (NDR) Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/vectra-ai-ndr-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"MCebMr8WemaQUY7zQhWs","title":"Verizon Network Detection and Response (formerly ProtectWise) Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/verizon-network-detection-and-response-formerly-protectwise-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"e50lzZZDLl7YBqlrvlcC","title":"Wiz Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/wiz-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"This guide supports both Wiz Cloud and Wiz Defend integrations — the instructions are largely the same, but differences are noted where applicable.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"WNcFaiTp9cMB8O4x7gcO","title":"Workday Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/workday-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"Y1xBiLnM1lJBloau4KTb","title":"Zscaler","pathname":"/connect-your-technology/q-z-integrations/zscaler","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"}]},{"id":"wKwQnUvMBe61i2JtX70D","title":"Zscaler Internet Access (ZIA) (via SIEM) Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/zscaler/zscaler-internet-access-zia-via-siem-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Zscaler"}]},{"id":"X0PhZq1nhPnFs4jjg6Aw","title":"Zscaler Internet Access (via Webhook) Setup for Workbench","pathname":"/connect-your-technology/q-z-integrations/zscaler/zscaler-internet-access-via-webhook-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Q-Z Integrations"},{"label":"Zscaler"}]},{"id":"eqmimsija0YOPj2TQqYb","title":"Expel Assembler","pathname":"/connect-your-technology/expel-assembler","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"}]},{"id":"ZCX8TyT6svKXrPc0bt7R","title":"About the Expel Assembler","pathname":"/connect-your-technology/expel-assembler/about-the-expel-assembler","siteSpaceId":"sitesp_xTgLY","description":"This guide is for the V2 assembler; the V1 assembler is no longer supported as of June 30, 2024.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"}]},{"id":"Ex7GwaLMG9xNq3SXV3TZ","title":"Add a New Assembler","pathname":"/connect-your-technology/expel-assembler/add-a-new-assembler","siteSpaceId":"sitesp_xTgLY","description":"This guide is for the V2 assembler; the V1 assembler is no longer supported as of June 30, 2024.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"}]},{"id":"e8ovc0hiSTMg0VCBOFcJ","title":"Deploy the Virtual Machine","pathname":"/connect-your-technology/expel-assembler/deploy-the-virtual-machine","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"}]},{"id":"sLEJfT85EzbjRctyrU4V","title":"Deploy the Assembler in AWS","pathname":"/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-aws","siteSpaceId":"sitesp_xTgLY","description":"This guide is only for V2 assemblers being deployed with a virtual machine in AWS EC2. The V1 assembler is no longer supported as of June 30, 2024.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"},{"label":"Deploy the Virtual Machine"}]},{"id":"242ngcsEw6kEmjcrVzxI","title":"Deploy the Assembler in AWS (Terraform)","pathname":"/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-aws-terraform","siteSpaceId":"sitesp_xTgLY","description":"This guide is only for V2 assemblers being deployed with a virtual machine in AWS EC2 by using Terraform. The V1 assembler is no longer supported as of June 30, 2024.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"},{"label":"Deploy the Virtual Machine"}]},{"id":"ONRXfpZhwaE4HCUrqfhh","title":"Deploy the Assembler in GCP","pathname":"/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-gcp","siteSpaceId":"sitesp_xTgLY","description":"This guide is only for V2 assemblers being deployed with a virtual machine in the Google Cloud Platform. The V1 assembler is no longer supported as of June 30, 2024.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"},{"label":"Deploy the Virtual Machine"}]},{"id":"7HbowlfcBFJgWx2ygc3q","title":"Deploy the Assembler in GCP (Terraform)","pathname":"/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-gcp-terraform","siteSpaceId":"sitesp_xTgLY","description":"This guide is only for V2 assemblers being deployed with a virtual machine in the Google Cloud Platform by using Terraform. The V1 assembler is no longer supported as of June 30, 2024.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"},{"label":"Deploy the Virtual Machine"}]},{"id":"A8iLGBp0uwYtzSqpXkDI","title":"Deploy the Assembler in Hyper-V","pathname":"/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-hyper-v","siteSpaceId":"sitesp_xTgLY","description":"This guide is only for V2 assemblers being deployed with a virtual machine in Hyper-V. The V1 assembler is no longer supported as of June 30, 2024.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"},{"label":"Deploy the Virtual Machine"}]},{"id":"CqpJFeVsS4wm1x03WZlL","title":"Deploy the Assembler in Microsoft Azure","pathname":"/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-microsoft-azure","siteSpaceId":"sitesp_xTgLY","description":"This guide is only for V2 assemblers being deployed with a virtual machine in Microsoft Azure. The V1 assembler is no longer supported as of June 30, 2024.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"},{"label":"Deploy the Virtual Machine"}]},{"id":"Qim705R1Xy1qv5UNZBMI","title":"Deploy the Assembler in Microsoft Azure (Terraform)","pathname":"/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-microsoft-azure-terraform","siteSpaceId":"sitesp_xTgLY","description":"This guide is only for V2 assemblers being deployed with a virtual machine in Microsoft Azure by using Terraform. The V1 assembler is no longer supported as of June 30, 2024.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"},{"label":"Deploy the Virtual Machine"}]},{"id":"eiYWUK9MR0aR9ezyIBD7","title":"Deploy the Assembler in Nutanix","pathname":"/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-nutanix","siteSpaceId":"sitesp_xTgLY","description":"This guide is only for V2 assemblers being deployed with a virtual machine in Nutanix. The V1 assembler is no longer supported as of June 30, 2024.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"},{"label":"Deploy the Virtual Machine"}]},{"id":"hbfoNWCXQGeJ1XRpwibL","title":"Deploy the Assembler in VMware","pathname":"/connect-your-technology/expel-assembler/deploy-the-virtual-machine/deploy-the-assembler-in-vmware","siteSpaceId":"sitesp_xTgLY","description":"This guide is only for V2 assemblers being deployed with a virtual machine in VMware. The V1 assembler is no longer supported as of June 30, 2024.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"},{"label":"Deploy the Virtual Machine"}]},{"id":"KyxWT4AjCeLhc12SZv1f","title":"Assembler Migrations and Network Changes","pathname":"/connect-your-technology/expel-assembler/assembler-migrations-and-network-changes","siteSpaceId":"sitesp_xTgLY","description":"You can migrate your existing assembler to a new static IP or make other network changes at any time.","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Expel Assembler"}]},{"id":"wA3DPNwLIlnXZRVEa77n","title":"Security Devices","pathname":"/connect-your-technology/security-devices","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"}]},{"id":"yVrI2EJ0ezE94fTKOCfn","title":"Manage Security Devices","pathname":"/connect-your-technology/security-devices/manage-security-devices","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Security Devices"}]},{"id":"eY6R3w6BqfTdG3S3APxn","title":"Security Device Health","pathname":"/connect-your-technology/security-devices/security-device-health","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Connect Your Technology"},{"label":"Security Devices"}]},{"id":"SqvsHFEI421bRjyDs092","title":"Expel Terminology","pathname":"/workbench-reference/expel-terminology","siteSpaceId":"sitesp_xTgLY","description":"A list of common Expel terms, what they mean, and where to find them in Workbench.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"}]},{"id":"hKinicoVbM7sUTXL27A6","title":"Dashboards","pathname":"/workbench-reference/dashboards","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"}]},{"id":"kGwTJaVNvx2Bu29NJkbA","title":"Situation Report Dashboard","pathname":"/workbench-reference/dashboards/situation-report-dashboard","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Dashboards"}]},{"id":"vsS8uAIoYJXuexYTHTbs","title":"Alert Analysis Dashboard","pathname":"/workbench-reference/dashboards/alert-analysis-dashboard","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Dashboards"}]},{"id":"wDIzSAv85uuOerOAykib","title":"Phishing Dashboard","pathname":"/workbench-reference/dashboards/phishing-dashboard","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Dashboards"}]},{"id":"kd0fIuKOaFZNbhukqt5i","title":"Service Review Dashboard","pathname":"/workbench-reference/dashboards/service-review-dashboard","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Dashboards"}]},{"id":"R2RpjZnywkYUwujgb17m","title":"Activity Pages","pathname":"/workbench-reference/activity-pages","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"}]},{"id":"8RpILYhdpZADVF1aZ57z","title":"Actions","pathname":"/workbench-reference/activity-pages/actions","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Activity Pages"}]},{"id":"yhbhgZpzkYIWAiye1Ynl","title":"Vulnerabilities","pathname":"/workbench-reference/activity-pages/vulnerabilities","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Activity Pages"}]},{"id":"PXa2EZEtte9iGMeey6rE","title":"Tools","pathname":"/workbench-reference/tools","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"}]},{"id":"QRrC20wr3AHBEFAZH0FJ","title":"Resilience","pathname":"/workbench-reference/tools/resilience","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Tools"}]},{"id":"hvOCz6fESs8uw4wZDva7","title":"Threats","pathname":"/workbench-reference/tools/threats","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Tools"}]},{"id":"HRzizoq69bDPqSvscRsF","title":"Threat Bulletins","pathname":"/workbench-reference/tools/threats/threat-bulletins","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Tools"},{"label":"Threats"}]},{"id":"tng7HU03dmg3veo7d3wC","title":"Emerging Threat Hunts","pathname":"/workbench-reference/tools/threats/emerging-threat-hunts","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Tools"},{"label":"Threats"}]},{"id":"8rlOUNfFjcSwR7NX1P20","title":"Organization Settings Pages","pathname":"/workbench-reference/organization-settings-pages","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"}]},{"id":"j88ULX8Cu9vtw3MfFIku","title":"Your Organization","pathname":"/workbench-reference/organization-settings-pages/your-organization","siteSpaceId":"sitesp_xTgLY","description":"The Your Organization page shows your organization name, GUID, available services, and more. If you have more than one organization, they will all be listed.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Organization Settings Pages"}]},{"id":"Tlzsah1fKMwjWDMYMxD9","title":"Event Search","pathname":"/workbench-reference/search-for-an-event","siteSpaceId":"sitesp_xTgLY","description":"Event Search enables you to check that Expel has seen an event from an enabled technology.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"}]},{"id":"S9IrO7FZUFGFr26Oiodz","title":"Find an Event","pathname":"/workbench-reference/search-for-an-event/find-an-event","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Event Search"}]},{"id":"UouCZLfXgWuVDQPb6hkR","title":"About Event Details","pathname":"/workbench-reference/search-for-an-event/about-event-details","siteSpaceId":"sitesp_xTgLY","description":"The Event Details screen has two tabs.","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Event Search"}]},{"id":"OCTmsBwGeZU9bs0FKJuO","title":"Manage Investigations and Incidents","pathname":"/workbench-reference/investigations-and-incidents","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"}]},{"id":"J5YWqZMVjGGKABmNnXZi","title":"Understanding Investigations","pathname":"/workbench-reference/investigations-and-incidents/understanding-investigations","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Manage Investigations and Incidents"}]},{"id":"uhsyoBAovqCtsDu0ROjI","title":"Understanding Incidents","pathname":"/workbench-reference/investigations-and-incidents/understanding-incidents","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Manage Investigations and Incidents"}]},{"id":"uRpDlIyPJzc8XsY4SXdK","title":"View an Investigation","pathname":"/workbench-reference/investigations-and-incidents/view-an-investigation","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Manage Investigations and Incidents"}]},{"id":"syyWTXeBUATlE1IZ4xU5","title":"View an Incident","pathname":"/workbench-reference/investigations-and-incidents/view-an-incident","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Manage Investigations and Incidents"}]},{"id":"jwv82YZpFr7ySm6mVNpi","title":"View Open Remediation Actions or Investigative Actions","pathname":"/workbench-reference/investigations-and-incidents/view-open-remediation-actions-or-investigative-actions","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Manage Investigations and Incidents"}]},{"id":"kWxnPJYvDSeeq0RsG7Yj","title":"Add to an Investigation or Incident","pathname":"/workbench-reference/investigations-and-incidents/add-to-an-investigation-or-incident","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Manage Investigations and Incidents"}]},{"id":"SmPN3ei25QoJftVvXa8H","title":"Close an Investigation or Incident","pathname":"/workbench-reference/investigations-and-incidents/close-an-investigation-or-incident","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Manage Investigations and Incidents"}]},{"id":"k01jWVDDfWVALeJdolCy","title":"Reopen an Investigation","pathname":"/workbench-reference/investigations-and-incidents/reopen-an-investigation","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Manage Investigations and Incidents"}]},{"id":"FOtL3EItLT9NvaR8oqCo","title":"Create an On-Demand Investigation","pathname":"/workbench-reference/investigations-and-incidents/create-an-on-demand-investigation","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Manage Investigations and Incidents"}]},{"id":"8bLc0nSTYrO5LVyxy9b3","title":"Alerts","pathname":"/workbench-reference/alerts","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"}]},{"id":"uiwLDrnkYzpInTxn4IY3","title":"How Expel Alerts Work","pathname":"/workbench-reference/alerts/how-expel-alerts-work","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Alerts"}]},{"id":"G6Oy2ptpDl0QQlTGJn3n","title":"View Your Expel Alerts","pathname":"/workbench-reference/alerts/view-your-expel-alerts","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Alerts"}]},{"id":"MWxInXH6TNJBkaOPiRFp","title":"Identity Alerts","pathname":"/workbench-reference/alerts/identity-alerts","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Alerts"}]},{"id":"9Xv7OIN3M9OMs8IA2gfA","title":"About Identity Classification","pathname":"/workbench-reference/alerts/identity-alerts/about-identity-classification","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Alerts"},{"label":"Identity Alerts"}]},{"id":"pdcWoDvqE9MLO2bsyKYZ","title":"View Your Auto-Closed Identity Alerts","pathname":"/workbench-reference/alerts/identity-alerts/view-your-auto-closed-identity-alerts","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Alerts"},{"label":"Identity Alerts"}]},{"id":"slts4kSjWjmxQSSHXDbO","title":"Detections","pathname":"/workbench-reference/detections","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"}]},{"id":"jv9wpZbEczb7FEEFDoLm","title":"About Detection Strategy","pathname":"/workbench-reference/detections/about-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Detections"}]},{"id":"YRMwgMn7oTH4xlrWywyX","title":"View Detections","pathname":"/workbench-reference/detections/view-detections","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Detections"}]},{"id":"kocqFl4SZ59b6wza1EHe","title":"Filter or Sort Detections","pathname":"/workbench-reference/detections/filter-or-sort-detections","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Detections"}]},{"id":"SHtk9t0bDYvXn21jsbB4","title":"Suppression Rules","pathname":"/workbench-reference/detections/suppression-rules","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Detections"}]},{"id":"PE6wpQlQox6Mdi8mwT46","title":"Lookout Rules","pathname":"/workbench-reference/detections/lookout-rules","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Detections"}]},{"id":"D0SywU1XPlwFINEyZaDR","title":"Suspicious Countries","pathname":"/workbench-reference/detections/suspicious-countries","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Detections"}]},{"id":"jSdMFj4LqlfU7WSGHl5P","title":"Licensing and Usage","pathname":"/workbench-reference/organization-settings","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"}]},{"id":"us8K89yMp65vBjNHy0GT","title":"Expel Licensing and Usage Overview","pathname":"/workbench-reference/organization-settings/expel-licensing-and-usage-overview","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Licensing and Usage"}]},{"id":"CyPWBv1vfNAs4KRmvIzA","title":"View Usage Metrics","pathname":"/workbench-reference/organization-settings/view-usage-metrics","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Workbench Reference"},{"label":"Licensing and Usage"}]},{"id":"MKchd7iR0yr2Sn0dxL2O","title":"A-C","pathname":"/detection-strategy-guides/a-c","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"}]},{"id":"ghjVpzsOvQUDCspaQ89b","title":"Abnormal AI Detection Strategy","pathname":"/detection-strategy-guides/a-c/abnormal-ai-detection-strategy","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"VDVLxSoxtbEAPTUBNjn0","title":"Akamai Guardicore Segmentation (formerly Guardicore Centra) Detection Strategy","pathname":"/detection-strategy-guides/a-c/akamai-guardicore-segmentation-formerly-guardicore-centra-detection-strategy","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"asGwyJDrNnM0FusTRyKz","title":"Amazon/AWS","pathname":"/detection-strategy-guides/a-c/amazon-aws","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"jcrUSDpURopFMJtSsAsn","title":"AWS CloudTrail Detection Strategy","pathname":"/detection-strategy-guides/a-c/amazon-aws/aws-cloudtrail-detection-strategy","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Amazon/AWS"}]},{"id":"YOAXACqALFZOiuaOVcyR","title":"Amazon Elastic Kubernetes Service Detection Strategy","pathname":"/detection-strategy-guides/a-c/amazon-aws/amazon-elastic-kubernetes-service-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Amazon/AWS"}]},{"id":"3KNTxswmwlJ5VXu6CYbj","title":"AWS GuardDuty Detection Strategy","pathname":"/detection-strategy-guides/a-c/amazon-aws/aws-guardduty-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Amazon/AWS"}]},{"id":"hcyRyVLWQr8sQqAJDkK3","title":"Arista NDR Detection Strategy","pathname":"/detection-strategy-guides/a-c/arista-ndr-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"kSfPPJDWmNHPd3GpFtto","title":"Aurora Endpoint Security (formerly Cylance PROTECT AV) Detection Strategy","pathname":"/detection-strategy-guides/a-c/aurora-endpoint-security-formerly-cylance-protect-av-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"nwadiN2yJXVGnCkxyGL4","title":"Box Detection Strategy","pathname":"/detection-strategy-guides/a-c/box-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"QVU5LNJkhv5CJvEZ9XN3","title":"Broadcom","pathname":"/detection-strategy-guides/a-c/broadcom","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"4Bdsq1rT0CNxzzdXGbtj","title":"Broadcom Carbon Black Cloud Detection Strategy","pathname":"/detection-strategy-guides/a-c/broadcom/broadcom-carbon-black-cloud-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Broadcom"}]},{"id":"fKsIpl9l1UjuQSyfy13i","title":"Broadcom Carbon Black EDR Detection Strategy","pathname":"/detection-strategy-guides/a-c/broadcom/broadcom-carbon-black-edr-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Broadcom"}]},{"id":"vRAuNpwoK5iMXiDT2cZu","title":"Broadcom Symantec Endpoint Protection (via SIEM) Detection Strategy","pathname":"/detection-strategy-guides/a-c/broadcom/broadcom-symantec-endpoint-protection-via-siem-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Broadcom"}]},{"id":"YsO6qyUlAqNpz8PiNSCS","title":"Check Point","pathname":"/detection-strategy-guides/a-c/check-point","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"qUbnOzKVSmbngO3RCUgi","title":"Check Point AV, Anti-Bot, and IPS (via Collector) Detection Strategy","pathname":"/detection-strategy-guides/a-c/check-point/check-point-av-anti-bot-and-ips-via-collector-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Check Point"}]},{"id":"2rDd9bgIhuW3hK2oitwP","title":"Check Point AV, Anti-Bot, and IPS (via SIEM) Detection Strategy","pathname":"/detection-strategy-guides/a-c/check-point/check-point-av-anti-bot-and-ips-via-siem-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Check Point"}]},{"id":"nyyQsb2c2HMLVK7Nsvfq","title":"Cisco","pathname":"/detection-strategy-guides/a-c/cisco","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"KHkmrjdG1qCXUQan4DOr","title":"Cisco ASA Detection Strategy","pathname":"/detection-strategy-guides/a-c/cisco/cisco-asa-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Cisco"}]},{"id":"6XAj1JMFm819ns8VuhL8","title":"Cisco ASA (via SIEM) Detection Strategy","pathname":"/detection-strategy-guides/a-c/cisco/cisco-asa-via-siem-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Cisco"}]},{"id":"DsboxS9LcpHqFPIbr8Fb","title":"Cisco Duo Detection Strategy","pathname":"/detection-strategy-guides/a-c/cisco/cisco-duo-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Cisco"}]},{"id":"SftUiR26e9UXKqVZuK4E","title":"Cisco FirePower (via SIEM) Detection Strategy","pathname":"/detection-strategy-guides/a-c/cisco/cisco-firepower-via-siem-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Cisco"}]},{"id":"zExmng2EUpUK1C9xd9eY","title":"Cisco Meraki Detection Strategy","pathname":"/detection-strategy-guides/a-c/cisco/cisco-meraki-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Cisco"}]},{"id":"rRejlwOHNLnlN6u9gING","title":"Cisco Meraki (via SIEM) Detection Strategy","pathname":"/detection-strategy-guides/a-c/cisco/cisco-meraki-via-siem-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Cisco"}]},{"id":"SC6Iorr8r61hT7YuR5or","title":"Cisco Secure Endpoint Detection Strategy","pathname":"/detection-strategy-guides/a-c/cisco/cisco-secure-endpoint-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Cisco"}]},{"id":"wPHl8iMOavwd1rb5RA7R","title":"Cisco Umbrella Detection Strategy","pathname":"/detection-strategy-guides/a-c/cisco/cisco-umbrella-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"Cisco"}]},{"id":"roNVqHBgI9MgWZLTKvAb","title":"Cloudflare Zero Trust Network Access Detection Strategy","pathname":"/detection-strategy-guides/a-c/cloudflare-zero-trust-network-access-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"eCGdu9qNQng3H4z4YUBy","title":"Corelight Open NDR (via Collector) Detection Strategy","pathname":"/detection-strategy-guides/a-c/corelight-open-ndr-via-collector-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"Dhw6iis26rJRDHs0sCNu","title":"CrowdStrike","pathname":"/detection-strategy-guides/a-c/crowdstrike","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"2L3UdnMVK9IOa3eLzqwQ","title":"CrowdStrike Falcon Identity Protection Detection Strategy","pathname":"/detection-strategy-guides/a-c/crowdstrike/crowdstrike-falcon-identity-protection-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"CrowdStrike"}]},{"id":"VvccmhvE3N2LlB0jUE8G","title":"CrowdStrike Falcon Insight XDR Detection Strategy","pathname":"/detection-strategy-guides/a-c/crowdstrike/crowdstrike-falcon-insight-xdr-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"CrowdStrike"}]},{"id":"93NfZo4NxaOtVnKomtoJ","title":"CrowdStrike Logscale Detection Strategy","pathname":"/detection-strategy-guides/a-c/crowdstrike/crowdstrike-logscale-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"CrowdStrike"}]},{"id":"olyI77CbgqlaJRvleQwf","title":"CyberArk","pathname":"/detection-strategy-guides/a-c/cyberark","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"XdMk9CqpWdTjhSnNfNig","title":"CyberArk Identity Detection Strategy","pathname":"/detection-strategy-guides/a-c/cyberark/cyberark-identity-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"CyberArk"}]},{"id":"TEjK2EGdv2lICx74lzJ4","title":"CyberArk Privileged Access Management (PAM) Detection Strategy","pathname":"/detection-strategy-guides/a-c/cyberark/cyberark-privileged-access-management-pam-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"},{"label":"CyberArk"}]},{"id":"4DUfDUBEh1Wo6hn9cTJP","title":"Cybereason Endpoint Detection and Response (EDR) Detection Strategy","pathname":"/detection-strategy-guides/a-c/cybereason-endpoint-detection-and-response-edr-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"A-C"}]},{"id":"9Pm1Vy5Aq03PU20hZ47d","title":"D-M","pathname":"/detection-strategy-guides/d-m","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"}]},{"id":"59zmy36wsLAlKlCImABP","title":"Darktrace Detection Strategy","pathname":"/detection-strategy-guides/d-m/darktrace-detection-strategy","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"PvScvwC56TGJrg96YHe0","title":"Datadog Observability & Analytics Platform Detection Strategy","pathname":"/detection-strategy-guides/d-m/datadog-observability-and-analytics-platform-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"1iW7NFonlQUu0phmI8vp","title":"Devo Detection Strategy","pathname":"/detection-strategy-guides/d-m/devo-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"3Lv39kytJoN4xzbqZ9rJ","title":"Dropbox Detection Strategy","pathname":"/detection-strategy-guides/d-m/dropbox-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"CbfNLRBAD4MrwB8ikaxc","title":"Elastic Security Detection Strategy","pathname":"/detection-strategy-guides/d-m/elastic-security-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"k7VkuIVA8dlpOvdk2cx4","title":"Exabeam","pathname":"/detection-strategy-guides/d-m/exabeam","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"E5Nsr2NAsm9iTf4ehz8Q","title":"Exabeam Fusion SIEM Detection Strategy","pathname":"/detection-strategy-guides/d-m/exabeam/exabeam-fusion-siem-detection-strategy","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Exabeam"}]},{"id":"tUVDOU0mPeo8XdRlbteo","title":"Exabeam Fusion XDR Detection Strategy","pathname":"/detection-strategy-guides/d-m/exabeam/exabeam-fusion-xdr-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Exabeam"}]},{"id":"rKrJIRnN1erdOT6dKDUF","title":"ExtraHop","pathname":"/detection-strategy-guides/d-m/extrahop","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"kVQzIBqWza7xCV37Wwlu","title":"ExtraHop Reveal(x) 360 Detection Strategy","pathname":"/detection-strategy-guides/d-m/extrahop/extrahop-reveal-x-360-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"ExtraHop"}]},{"id":"SObcIr4y6Lj5auwT8jtK","title":"ExtraHop Reveal(x) Enterprise Detection Strategy","pathname":"/detection-strategy-guides/d-m/extrahop/extrahop-reveal-x-enterprise-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"ExtraHop"}]},{"id":"bG2IjS25cjGRAsWQkHA5","title":"Fastly Next-Gen WAF (formerly Signal Sciences WAF) Detection Strategy","pathname":"/detection-strategy-guides/d-m/fastly-next-gen-waf-formerly-signal-sciences-waf-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"ffhVaKFOZ966HoMR6Sil","title":"Fortinet","pathname":"/detection-strategy-guides/d-m/fortinet","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"mBkOohPyoGGNRrbwxCMm","title":"Fortinet FortiAnalyzer Detection Strategy","pathname":"/detection-strategy-guides/d-m/fortinet/fortinet-fortianalyzer-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Fortinet"}]},{"id":"dMfZ38VvB1nGBk5G7fxK","title":"Fortinet FortiCNAPP (formerly Lacework) Detection Strategy","pathname":"/detection-strategy-guides/d-m/fortinet/fortinet-forticnapp-formerly-lacework-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Fortinet"}]},{"id":"MbbacCjpEjG6WgHJ6CSg","title":"Fortinet FortiGate (via SIEM) Detection Strategy","pathname":"/detection-strategy-guides/d-m/fortinet/fortinet-fortigate-via-siem-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Fortinet"}]},{"id":"0tNg24JmxhNTCXkL0VTY","title":"GitHub Detection Strategy","pathname":"/detection-strategy-guides/d-m/github-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"hEWjpTO8Cg43AIoXBHW2","title":"GitLab Detection Strategy","pathname":"/detection-strategy-guides/d-m/gitlab-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"cI8D6gDdw3NulHzARvOf","title":"Google","pathname":"/detection-strategy-guides/d-m/google","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"quGSghOsZEoNyZvw0Z3X","title":"Google Cloud Platform Detection Strategy","pathname":"/detection-strategy-guides/d-m/google/google-cloud-platform-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Google"}]},{"id":"Px8IW7ywanbJlDKfrtqf","title":"Google Kubernetes Engine Detection Strategy","pathname":"/detection-strategy-guides/d-m/google/google-kubernetes-engine-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Google"}]},{"id":"mpJ6qwgrIEI3o5toDK6V","title":"Google Security Operations (SecOps) Detection Strategy","pathname":"/detection-strategy-guides/d-m/google/google-security-operations-secops-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Google"}]},{"id":"Nn5AQxl598RVjfuWMbNo","title":"Google Workspace Alert Center Detection Strategy","pathname":"/detection-strategy-guides/d-m/google/google-workspace-alert-center-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Google"}]},{"id":"s24tQtYdwUF4StvaZr4V","title":"Jumpcloud Detection Strategy","pathname":"/detection-strategy-guides/d-m/jumpcloud-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"sBjRYEJcdSvJegZuAJM7","title":"LastPass Detection Strategy","pathname":"/detection-strategy-guides/d-m/lastpass-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"YLCE3ci365rcxEPnsgLD","title":"Logz.io Detection Strategy","pathname":"/detection-strategy-guides/d-m/logz.io-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"R84gMCa0O4eQDcLcGOOd","title":"Microsoft","pathname":"/detection-strategy-guides/d-m/microsoft","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"JKy8PEDu21SUyxbUL5aZ","title":"Microsoft 365 Detection Strategy","pathname":"/detection-strategy-guides/d-m/microsoft/microsoft-365-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Microsoft"}]},{"id":"lj4neckIXFuCFNBHeHqP","title":"Microsoft Azure Detection Strategy","pathname":"/detection-strategy-guides/d-m/microsoft/microsoft-azure-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Microsoft"}]},{"id":"LJJHUGXnObO2Lkeq3OWG","title":"Microsoft Azure Kubernetes Service Detection Strategy","pathname":"/detection-strategy-guides/d-m/microsoft/microsoft-azure-kubernetes-service-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Microsoft"}]},{"id":"h1CsC9BN7YmwLoNJCQZ3","title":"Microsoft Azure Monitor (formerly Azure Activity logs) Detection Strategy","pathname":"/detection-strategy-guides/d-m/microsoft/microsoft-azure-monitor-formerly-azure-activity-logs-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Microsoft"}]},{"id":"d6PdlDicPpSXUkTENLB9","title":"Microsoft Defender for Cloud Apps Detection Strategy","pathname":"/detection-strategy-guides/d-m/microsoft/microsoft-defender-for-cloud-apps-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Microsoft"}]},{"id":"kUKFQ0urTqPzxIot9jeh","title":"Microsoft Defender for Endpoint Detection Strategy","pathname":"/detection-strategy-guides/d-m/microsoft/microsoft-defender-for-endpoint-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Microsoft"}]},{"id":"QI63epFytjqzWHKtPgAy","title":"Microsoft Defender for Identity Detection Strategy","pathname":"/detection-strategy-guides/d-m/microsoft/microsoft-defender-for-identity-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Microsoft"}]},{"id":"DxPSLhHnDPlkj12WseXL","title":"Microsoft Defender XDR Detection Strategy","pathname":"/detection-strategy-guides/d-m/microsoft/microsoft-defender-xdr-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Microsoft"}]},{"id":"1hWxWxtd9qwBIfBVfUm8","title":"Microsoft Entra ID Detection Strategy","pathname":"/detection-strategy-guides/d-m/microsoft/microsoft-entra-id-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Microsoft"}]},{"id":"5FNHVqrBVGq7ljm0idaW","title":"Microsoft Entra ID Protection Detection Strategy","pathname":"/detection-strategy-guides/d-m/microsoft/microsoft-entra-id-protection-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Microsoft"}]},{"id":"zgkTW5EMoSvDDto9l10M","title":"Microsoft Intune Detection Strategy","pathname":"/detection-strategy-guides/d-m/microsoft/microsoft-intune-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Microsoft"}]},{"id":"bLSThZk2xbUqz9ji0oJ5","title":"Microsoft Sentinel Detection Strategy","pathname":"/detection-strategy-guides/d-m/microsoft/microsoft-sentinel-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"},{"label":"Microsoft"}]},{"id":"xa2oWiuf8nZPruC6TNTH","title":"Mimecast Detection Strategy","pathname":"/detection-strategy-guides/d-m/mimecast-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"D-M"}]},{"id":"bLJjquAl3XiCX0fRaZHE","title":"N-R","pathname":"/detection-strategy-guides/n-q","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"}]},{"id":"lbJ3CnkbYkP0K5dkCkqy","title":"Netskope CASB and Next Gen SWG Detection Strategy","pathname":"/detection-strategy-guides/n-q/netskope-casb-and-next-gen-swg-detection-strategy","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"lCZjfD9MiSeDGB4GuJZA","title":"Okta","pathname":"/detection-strategy-guides/n-q/okta","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"nactEhUOcaq4FY36rRJk","title":"Okta Auth0 Detection Strategy","pathname":"/detection-strategy-guides/n-q/okta/okta-auth0-detection-strategy","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"},{"label":"Okta"}]},{"id":"qFGVfPkjejuUF6mlWkfg","title":"Okta Workforce Identity Detection Strategy","pathname":"/detection-strategy-guides/n-q/okta/okta-workforce-identity-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"},{"label":"Okta"}]},{"id":"Tfy2ralTY4jlEAhg7F9M","title":"OneLogin Detection Strategy","pathname":"/detection-strategy-guides/n-q/onelogin-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"ryziUY6A6qu7BBdheEis","title":"1Password Detection Strategy","pathname":"/detection-strategy-guides/n-q/1password-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"F7LfqH7wjxIiOCprT1fF","title":"Oracle Cloud Infrastructure Detection Strategy","pathname":"/detection-strategy-guides/n-q/oracle-cloud-infrastructure-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"8x0na9rfV5w4bbWM7MzQ","title":"Orca Security Detection Strategy","pathname":"/detection-strategy-guides/n-q/orca-security-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"9x23pAisCkQwZhv83BhU","title":"Palo Alto Networks","pathname":"/detection-strategy-guides/n-q/palo-alto-networks","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"GMt26bxew5Ob8qWULV6j","title":"Palo Alto Networks Cortex XDR Pro Detection Strategy","pathname":"/detection-strategy-guides/n-q/palo-alto-networks/palo-alto-networks-cortex-xdr-pro-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"},{"label":"Palo Alto Networks"}]},{"id":"SFT3Eg5gI1kHbIK93kwZ","title":"Palo Alto Networks Next Gen Firewall Detection Strategy","pathname":"/detection-strategy-guides/n-q/palo-alto-networks/palo-alto-networks-next-gen-firewall-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"},{"label":"Palo Alto Networks"}]},{"id":"1fUJsABLjzz211aDUB7B","title":"Palo Alto Networks SaaS Security (formerly Prisma SaaS) Detection Strategy","pathname":"/detection-strategy-guides/n-q/palo-alto-networks/palo-alto-networks-saas-security-formerly-prisma-saas-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"},{"label":"Palo Alto Networks"}]},{"id":"4W1DLxLYLcRlDCaGegOW","title":"Palo Alto Networks Strata Detection Strategy","pathname":"/detection-strategy-guides/n-q/palo-alto-networks/palo-alto-networks-strata-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"},{"label":"Palo Alto Networks"}]},{"id":"9z6NxEq8EYNrgYznhE2f","title":"Palo Alto Prisma Cloud Compute (formerly Twistlock) Detection Strategy","pathname":"/detection-strategy-guides/n-q/palo-alto-networks/palo-alto-prisma-cloud-compute-formerly-twistlock-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"},{"label":"Palo Alto Networks"}]},{"id":"ae3EyGMBPfLKQqFeXly8","title":"Panther Cloud SIEM Detection Strategy","pathname":"/detection-strategy-guides/n-q/panther-cloud-siem-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"T0Z0JDH3REPra8cJosQK","title":"PingOne Platform Detection Strategy","pathname":"/detection-strategy-guides/n-q/pingone-platform-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"SkdCqQ3pcmKfPUTCYzQ2","title":"Proofpoint","pathname":"/detection-strategy-guides/n-q/proofpoint","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"6tXH7cb7hvrrArCNxmZW","title":"Proofpoint Insider Threat Management (via SIEM) Detection Strategy","pathname":"/detection-strategy-guides/n-q/proofpoint/proofpoint-insider-threat-management-via-siem-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"},{"label":"Proofpoint"}]},{"id":"NphhqcC5h9FTRUqb3NwN","title":"Proofpoint TAP Detection Strategy","pathname":"/detection-strategy-guides/n-q/proofpoint/proofpoint-tap-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"},{"label":"Proofpoint"}]},{"id":"7ZKJD8iadQkZEro5QZ6C","title":"QRadar Detection Strategy","pathname":"/detection-strategy-guides/n-q/qradar-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"ll6KNW1Rkr12Y0gFh1LR","title":"Qualys VMDR Setup for Workbench","pathname":"/detection-strategy-guides/n-q/qualys-vmdr-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","description":"This guide covers Qualys VMDR setup for MDR customers.","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"pnq50FZTtzWSbvyiMBK8","title":"Rapid7 InsightVM Setup for Workbench","pathname":"/detection-strategy-guides/n-q/rapid7-insightvm-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"N-R"}]},{"id":"vLry5LeqwZ71qkW0FGRz","title":"S-Z","pathname":"/detection-strategy-guides/s-z","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"}]},{"id":"1pnksZMHtSaPN7LixbLa","title":"Salesforce Detection Strategy","pathname":"/detection-strategy-guides/s-z/salesforce-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"5dZJxA4QbmAz5EPbOmpu","title":"Securonix Next-Gen SIEM Detection Strategy","pathname":"/detection-strategy-guides/s-z/securonix-next-gen-siem-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"LTmctWWZ7I4giDn70R35","title":"SentinelOne","pathname":"/detection-strategy-guides/s-z/sentinelone","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"ESws0jW9Wp54xi52v8lX","title":"SentinelOne Singularity Data Lake Detection Strategy","pathname":"/detection-strategy-guides/s-z/sentinelone/sentinelone-singularity-data-lake-detection-strategy","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"},{"label":"SentinelOne"}]},{"id":"rKqlxsbGw6uPmN7CyBva","title":"SentinelOne Singularity Endpoint Detection Strategy","pathname":"/detection-strategy-guides/s-z/sentinelone/sentinelone-singularity-endpoint-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"},{"label":"SentinelOne"}]},{"id":"WfNRk2zDa6NSt2bJeBXO","title":"SentinelOne Singularity Hologram (formerly Attivo) Detection Strategy","pathname":"/detection-strategy-guides/s-z/sentinelone/sentinelone-singularity-hologram-formerly-attivo-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"},{"label":"SentinelOne"}]},{"id":"jl3VgMI9FDBgKuOEEh7T","title":"Slack Detection Strategy","pathname":"/detection-strategy-guides/s-z/slack-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"tXFUrblwNH1Et0XnkjBo","title":"Snowflake Detection Strategy","pathname":"/detection-strategy-guides/s-z/snowflake-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"HTZeG18yrDbPfjAwArDr","title":"Splunk Detection Strategy","pathname":"/detection-strategy-guides/s-z/splunk-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"T0TO9eyGPc1GeR46jl2D","title":"Sublime Security Detection Strategy","pathname":"/detection-strategy-guides/s-z/sublime-security-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"Hs1mMWXa7OSIYawu6bGb","title":"Sumo Logic","pathname":"/detection-strategy-guides/s-z/sumo-logic","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"pRYKDQssWcxfvgerFYBf","title":"Sumo Logic Cloud Infrastructure Security Detection Strategy","pathname":"/detection-strategy-guides/s-z/sumo-logic/sumo-logic-cloud-infrastructure-security-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"},{"label":"Sumo Logic"}]},{"id":"xrs2y7MSPJxrWz5TGsdm","title":"Sumo Logic Cloud SIEM Enterprise Detection Strategy","pathname":"/detection-strategy-guides/s-z/sumo-logic/sumo-logic-cloud-siem-enterprise-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"},{"label":"Sumo Logic"}]},{"id":"wwvo0bo8IXtDIscS5eSQ","title":"Tanium XEM Core Detection Strategy","pathname":"/detection-strategy-guides/s-z/tanium-xem-core-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"ibFDQCHoJzTn83a97Dzk","title":"Tenable Vulnerability Management Setup for Workbench","pathname":"/detection-strategy-guides/s-z/tenable-vulnerability-management-setup-for-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"gB1zFUUXeAUHW1MSPAWz","title":"Trellix Endpoint Security (HX) (formerly FireEye HX) Detection Strategy","pathname":"/detection-strategy-guides/s-z/trellix-endpoint-security-hx-formerly-fireeye-hx-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"an0mmneQwpeHoIRGum6m","title":"Vectra AI (NDR) Detection Strategy","pathname":"/detection-strategy-guides/s-z/vectra-ai-ndr-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"WYB3VKB6vUTeeLlSToPM","title":"Wiz","pathname":"/detection-strategy-guides/s-z/wiz","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"G3jesJx0nvwgFhq1EO96","title":"Wiz Cloud Detection Strategy","pathname":"/detection-strategy-guides/s-z/wiz/wiz-cloud-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"},{"label":"Wiz"}]},{"id":"mfenFZGHl8aC7ILMG68p","title":"Wiz Defend Detection Strategy","pathname":"/detection-strategy-guides/s-z/wiz/wiz-defend-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"},{"label":"Wiz"}]},{"id":"1ciEJUPfi9ZWKMGTDfX2","title":"Workday Detection Strategy","pathname":"/detection-strategy-guides/s-z/workday-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"hcMMM4PrZJwXmBrZzcdp","title":"Zscaler Internet Access (ZIA) Detection Strategy","pathname":"/detection-strategy-guides/s-z/zscaler-internet-access-zia-detection-strategy","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Detection Strategy Guides"},{"label":"S-Z"}]},{"id":"yyiU10XpBwyqhL46lgwz","title":"Expel Managed Phishing","pathname":"/more-features/expel-managed-phishing","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"}]},{"id":"TwVvvxB9UdhIFyaHJKBz","title":"About Expel Managed Phishing","pathname":"/more-features/expel-managed-phishing/about-expel-managed-phishing","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"},{"label":"Expel Managed Phishing"}]},{"id":"teXFzBRY2gob0PV9qGSP","title":"Customer Questionnaire","pathname":"/more-features/expel-managed-phishing/customer-questionnaire","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"},{"label":"Expel Managed Phishing"}]},{"id":"swCIf8yJyN0DNVH9JaTN","title":"Setup Guides","pathname":"/more-features/expel-managed-phishing/setup-guides","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"},{"label":"Expel Managed Phishing"}]},{"id":"vtmOKJ2TkjxKRlTGTsVF","title":"Expel Managed Phishing Setup","pathname":"/more-features/expel-managed-phishing/setup-guides/expel-managed-phishing-setup","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"},{"label":"Expel Managed Phishing"},{"label":"Setup Guides"}]},{"id":"aVgUVLYxXSxPMSPeN1Dl","title":"Phishing Submission Button Setup","pathname":"/more-features/expel-managed-phishing/setup-guides/phishing-submission-button-setup","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"},{"label":"Expel Managed Phishing"},{"label":"Setup Guides"}]},{"id":"rvRnEXTSVyVU6o6Rmh5e","title":"Enable Gmail Logs in BigQuery","pathname":"/more-features/expel-managed-phishing/setup-guides/enable-gmail-logs-in-bigquery","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"},{"label":"Expel Managed Phishing"},{"label":"Setup Guides"}]},{"id":"stu6YYPUjBmBwuSmjHa1","title":"Microsoft 365 Message Trace Setup","pathname":"/more-features/expel-managed-phishing/setup-guides/microsoft-365-message-trace-setup","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"},{"label":"Expel Managed Phishing"},{"label":"Setup Guides"}]},{"id":"43c8st6EB2cBQxnPhtFY","title":"Expel Managed Phishing Extension for Chrome","pathname":"/more-features/expel-managed-phishing/setup-guides/expel-managed-phishing-extension-for-chrome","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"},{"label":"Expel Managed Phishing"},{"label":"Setup Guides"}]},{"id":"DV4Vv1ddmxIUl0qAmosp","title":"Expel Auto-Close Marketing Email","pathname":"/more-features/expel-managed-phishing/expel-auto-close-marketing-email","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"},{"label":"Expel Managed Phishing"}]},{"id":"ZUD78TvpTjMpPxa9n4Ed","title":"Expel Threat Hunting","pathname":"/more-features/expel-threat-hunting","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"}]},{"id":"ykZWCmzgxEZCJgmMIhOu","title":"About Expel Threat Hunting","pathname":"/more-features/expel-threat-hunting/expel-hunting","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"},{"label":"Expel Threat Hunting"}]},{"id":"OKs7i2Nb4zQAm3lYJEvv","title":"Expel Threat Intelligence","pathname":"/more-features/expel-threat-intelligence","siteSpaceId":"sitesp_xTgLY","description":"An overview of Threat Bulletins and Emerging Threat Hunts","breadcrumbs":[{"label":"Documentation"},{"label":"More Features"}]},{"id":"GmKfqpfQ6hkmXwwVo8Tk","title":"Video Library","pathname":"/resources/video-library","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Resources"}]},{"id":"AdGU7n7WT739P8wkr2eP","title":"Introduction to Workbench","pathname":"/resources/video-library/video-introduction-to-workbench","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Resources"},{"label":"Video Library"}]},{"id":"WptW3M9ZAKJzsDzD5NMa","title":"Initial Workbench Access and Setup","pathname":"/resources/video-library/video-initial-workbench-access-and-setup","siteSpaceId":"sitesp_xTgLY","description":"","breadcrumbs":[{"label":"Documentation"},{"label":"Resources"},{"label":"Video Library"}]},{"id":"ZtwTHIgwtNXmgTPQnPvk","title":"Auto Remediations","pathname":"/resources/video-library/auto-remediations","siteSpaceId":"sitesp_xTgLY","description":"This page is a repository for our available videos related to auto remediations.","breadcrumbs":[{"label":"Documentation"},{"label":"Resources"},{"label":"Video Library"}]},{"id":"sHYBvOo7TMKiVQacxCvv","title":"Navigating Alerts in Workbench","pathname":"/resources/video-library/navigating-alerts-in-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Resources"},{"label":"Video Library"}]},{"id":"YGazfNAomadtKYTBkzMH","title":"Navigating Incidents in Workbench","pathname":"/resources/video-library/navigating-incidents-in-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Resources"},{"label":"Video Library"}]},{"id":"0ScZu28eg3RSNV8CdxTT","title":"Navigating Investigations in Workbench","pathname":"/resources/video-library/navigating-investigations-in-workbench","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Resources"},{"label":"Video Library"}]},{"id":"fX5fCuG7v2qIuaJ7lAls","title":"Understanding Workbench Notifications","pathname":"/resources/video-library/understanding-workbench-notifications","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Resources"},{"label":"Video Library"}]},{"id":"jsVtA72jORzQQZsRlRhX","title":"Workbench Dashboards","pathname":"/resources/video-library/workbench-dashboards","siteSpaceId":"sitesp_xTgLY","breadcrumbs":[{"label":"Documentation"},{"label":"Resources"},{"label":"Video Library"}]},{"id":"uU923i4sWJWiTQQ2GehK","title":"Workbench API (v2)","pathname":"/api","siteSpaceId":"sitesp_oMrd0","description":"","breadcrumbs":[{"label":"API Reference"}]},{"id":"LThc2RqOxBKU56Qt3TMy","title":"How to Reach Us","pathname":"/support","siteSpaceId":"sitesp_F1Gyq","description":"There are a number of ways to reach us if you need help, want to ask a question, want to report a phishing attempt, or need to begin an investigative process.","breadcrumbs":[{"label":"Support"}]},{"id":"GcfzWSDrlv2GIq95Op8q","title":"Technical Support","pathname":"/support/how-to-reach-us/technical-support","siteSpaceId":"sitesp_F1Gyq","breadcrumbs":[{"label":"Support"},{"label":"How to Reach Us"}]},{"id":"rUZZUBkJ2uet6GufG1ro","title":"Questions","pathname":"/support/how-to-reach-us/questions","siteSpaceId":"sitesp_F1Gyq","breadcrumbs":[{"label":"Support"},{"label":"How to Reach Us"}]},{"id":"p9F2Ta3ayY8b9Ox7egVF","title":"Managed Phishing","pathname":"/support/how-to-reach-us/managed-phishing","siteSpaceId":"sitesp_F1Gyq","breadcrumbs":[{"label":"Support"},{"label":"How to Reach Us"}]},{"id":"frVXJxvVQBF6KcnN58Yn","title":"Expel Release Notes","pathname":"/release-notes","siteSpaceId":"sitesp_2v3EF","icon":"memo-circle-info","description":"Stay up to date on our latest releases and product changes.","breadcrumbs":[{"label":"Release Notes"}]},{"id":"2zxLKQg9Ky1fYRqjvx7l","title":"2025","pathname":"/release-notes/2025","siteSpaceId":"sitesp_2v3EF","description":"","breadcrumbs":[{"label":"Release Notes"}]},{"id":"mjXEw7JXN10v82dtTS2U","title":"2024","pathname":"/release-notes/2024","siteSpaceId":"sitesp_2v3EF","breadcrumbs":[{"label":"Release Notes"}]},{"id":"c115c685925ecf5ef4d655a99b6fe8d334979cfd","title":"Notices","pathname":"/notices","siteSpaceId":"sitesp_sv6s1","icon":"bullhorn","description":"Check here for resiliency recommendations and more messaging from Expel.","breadcrumbs":[{"label":"Notices"}]},{"id":"eUmAkm8UYvmRZkiHqv2t","title":"Sep 4, 2026: Microsoft Teams Cross-Tenant Phishing Resilience & Remediation","pathname":"/notices/notices/sep-4-2026-microsoft-teams-cross-tenant-phishing-resilience-and-remediation","siteSpaceId":"sitesp_sv6s1","breadcrumbs":[{"label":"Notices"},{"label":"Notices","icon":"bullhorn"}]}]}