[{"id":"ci_ec248cb7cad4eb61a48c21c69a8c7dc9bb83acdc6dae0bfbacb7f49dc543d74f","title":"LogRhythm NDR Release Notes","path":"/ndr/docs/logrhythm-ndr-release-notes","children":[{"id":"ci_a3e34e195d23b92017140489ecdd3a174d563ad68b53d6ac908d58b984ed10d8","title":"2024.05 Release Notes","path":"/ndr/docs/2024-05-release-notes","children":[]},{"id":"ci_90068d18d0e3e77a5e7f59c0709ecceb0451fe3f7989ca92a189d43d1b4c4b73","title":"2023.11 Release Notes","path":"/ndr/docs/2023-11-release-notes","children":[]},{"id":"ci_8e5545ef76163f81713d7693181c7079302201540b5dad6011f13e55686a64c0","title":"NDR 2023.10 Release Notes","path":"/ndr/docs/ndr-2023-10-release-notes","children":[]},{"id":"ci_5a21f3e7a19db5745ed8e73af483b1c6f8b9751825b768a0a906572016f14657","title":"2023.09 Release Notes","path":"/ndr/docs/2023-09-release-notes","children":[]},{"id":"ci_e26a6200664194563ee64245f45bd3600ffe76c339f8924b7ca2927dbb10f887","title":"2023.08 Release Notes","path":"/ndr/docs/2023-08-release-notes","children":[]},{"id":"ci_271d4f9c3fc1e2a0f07f3fc35789156aa51da3fc64dc13bd1e52f76d2c97fc7d","title":"NDR 2023.07 Release Notes","path":"/ndr/docs/ndr-2023-07-release-notes","children":[]},{"id":"ci_9b742e2053ff0009b8e441f86251490f0b32a554cc380dadb1be078bed37d750","title":"2023.05 Release Notes","path":"/ndr/docs/2023-05-release-notes","children":[]},{"id":"ci_f880940404bed8c4567e85f9f9ad22744a7ad0da28f69deb52a3905b3263ce06","title":"NDR 2023.04 Release Notes","path":"/ndr/docs/ndr-2023-04-release-notes","children":[]},{"id":"ci_ecf73300a340f8c2fc5a551802c19d44903266d42be642e4fae94bb5c85905db","title":"2023.03 Release Notes","path":"/ndr/docs/2023-03-release-notes","children":[]},{"id":"ci_59d32ea830853735a2b302b4363f80a242e241be92775d10266782d9a6f7fef4","title":"2023.02 Release Notes","path":"/ndr/docs/2023-02-release-notes","children":[]},{"id":"ci_40a89ee326a0c96fa4236f9e750e60c99ce9aed6fb5a1f2a366e554870b8d645","title":"2022.12 Release Notes","path":"/ndr/docs/2022-12-release-notes","children":[]},{"id":"ci_3d43e0b9e7d2c01d66118721b626921a98c65b075aa3d9725fa2cc2181fcf5c4","title":"2022.10 Release Notes","path":"/ndr/docs/2022-10-release-notes","children":[]},{"id":"ci_4d6e8076a77b687890e57fee5c8b3ebb93a43788c8f565cd8c05e62153eb4447","title":"2022.09 (Rev B) Release Notes","path":"/ndr/docs/2022-09-rev-b-release-notes","children":[]},{"id":"ci_9e8b70a00554b68f8321fc01e73ec25a82cb737b0ceff12f6b12b9bebb353e2e","title":"2022.07.2 Release Notes","path":"/ndr/docs/2022-07-2-release-notes","children":[]},{"id":"ci_bfcbbb03d71567d2673803c29bdd163ce85ac6d646842cf672b5ddc7e96e6731","title":"2022.07 Release Notes","path":"/ndr/docs/2022-07-release-notes","children":[]},{"id":"ci_25890d470c14967211e40757e5ad00d72e1c5a4101f998ddf6353ebe277ecf43","title":"2022.04 Release Notes","path":"/ndr/docs/2022-04-release-notes","children":[]},{"id":"ci_4ca2da1216e9b8331903fdf4b36f59203c3ae694dec7009f1efd80d1a2b93953","title":"2021.09 Release Notes","path":"/ndr/docs/2021-09-release-notes","children":[]},{"id":"ci_9db2d8d23ec8830094c360f4ebdfff02c02cbeabb1697284aa67581efefb66f2","title":"2021.07.1 Release Notes","path":"/ndr/docs/2021-07-1-release-notes","children":[]}]},{"id":"ci_9ad516f5a4c9c9f74a1252487304c9cf9614b3545241f6b3c1061f7fd77efb41","title":"Standard Installations and Upgrades","path":"/ndr/docs/standard-installations-and-upgrades","children":[{"id":"ci_092aebf7ae8fb200c7b8d7e24bd0ba22b132046ea983104815bc0312f1589f3c","title":"LogRhythm NDR Prerequisites","path":"/ndr/docs/logrhythm-ndr-prerequisites","children":[]},{"id":"ci_22d096473fc5558512f11e894c897f6c5555835127ba057bd66fcce1676e744c","title":"Create an Active Directory Account","path":"/ndr/docs/create-an-active-directory-account","children":[]},{"id":"ci_70f680b71692f7684638250dde79fcb32996cc68fafc3571f860bdd2863d3a0e","title":"Install a New NDR Deployment","path":"/ndr/docs/install-a-new-ndr-deployment","children":[{"id":"ci_bad7ee85ca696c0d07ae41d9c4e70973c67f7b3f260402aaa3bd2de9e26194e4","title":"New NDR Deployment Requirements","path":"/ndr/docs/new-ndr-deployment-requirements","children":[]},{"id":"ci_1c0cd8e61e4add153318768631fe97b70a9d89a753e9e2f25d053567b2b86295","title":"Select a Method of Deploying NDR","path":"/ndr/docs/select-a-method-of-deploying-ndr","children":[]},{"id":"ci_7cf2f09f268a603a97fe76350a78c89197c7b9860395adc0ee2090ff4eedf329","title":"Install LogRhythm NDR","path":"/ndr/docs/install-logrhythm-ndr","children":[]},{"id":"ci_1036a76129c50e992f43b0cf01a5eb3026f5b1ada03c7d3ec9a38dd2ccfd7511","title":"Complete Additional NDR Installation Tasks","path":"/ndr/docs/complete-additional-ndr-installation-tasks","children":[]},{"id":"ci_8ae5146620c0f826f92e8ca02fec6f016795f5f9eda01c97467c304f762c6241","title":"Cable the Server","path":"/ndr/docs/cable-the-server","children":[]}]},{"id":"ci_5b2576aadfa6d8c35ad1a33f19914cd4ba7ad6aa5b04ea9586e36232718bfe37","title":"Upgrade an NDR Deployment","path":"/ndr/docs/upgrade-an-ndr-deployment","children":[]}]},{"id":"ci_5440e260917568f4dde5de9a5b8673eaeb80fe0f59953c1d461c4618c458b953","title":"Configure Integrations","path":"/ndr/docs/configure-integrations","children":[{"id":"ci_f57e69c35694650717d5b1aa1eb441ab5187ac93c158dc2d0ac16abd3d7e2a0f","title":"Configure Carbon Black","path":"/ndr/docs/configure-carbon-black","children":[]},{"id":"ci_173cd849db3f828a11c823bb314f2a9159a84f3fcac5a78f63530fb33c506ccc","title":"Configure Cisco AMP","path":"/ndr/docs/configure-cisco-amp","children":[]},{"id":"ci_75317da007f77bdb30651353d5e453704a09732183cb1f05f044b68a72928ba1","title":"Configure CrowdStrike","path":"/ndr/docs/configure-crowdstrike","children":[]},{"id":"ci_be204a39886804d0784d5b4426b6d721372fbbdf1ab81d85ad2ab07de649f648","title":"Configure Palo Alto Firewall","path":"/ndr/docs/configure-palo-alto-firewall","children":[]},{"id":"ci_687f5c4c6517813605cba6f454b46f9f2b5b27224647fa7a9049f133e10a75ac","title":"Configure SentinelOne","path":"/ndr/docs/configure-sentinelone","children":[]},{"id":"ci_76285746608221810405575804192a89ba916e2f2b57c910808cc93cda80c2a1","title":"Configure ServiceNow","path":"/ndr/docs/configure-servicenow","children":[]},{"id":"ci_9ab438b7a26c0ff48354ec345cb298f0ea7afc5c5222f790d09711aa54a4343c","title":"Cybereason, Sophos, and Shodan Integrations","path":"/ndr/docs/cybereason-sophos-and-shodan-integrations","children":[]},{"id":"ci_deaf0f6e25678be8ac1dfb66983320ffcd83571fb69223e9b1f585ae0cb963d8","title":"Microsoft Defender EDR Integration","path":"/ndr/docs/microsoft-defender-edr-integration","children":[]},{"id":"ci_6210f2f064e3f75e48196414e6045cbb46245008bb67bdc56f4359e3abf3f470","title":"Qualys Integration","path":"/ndr/docs/qualys-integration","children":[]},{"id":"ci_e73b2a7505eda1a326fb23ddb9f3c90d8e8e87ed9614789f8dc33a3ce73a255c","title":"Rapid7 InsightVM Integration","path":"/ndr/docs/rapid7-insightvm-integration","children":[]},{"id":"ci_580d2e678205eacd11be2fc83685570ca3795a68dc5bee8a5937f4a0e5a0fe36","title":"VirusTotal Integration","path":"/ndr/docs/virustotal-integration","children":[]}]},{"id":"ci_f0d2d94e91bdd20aaae501598b6f730c59d3d554104267c8956a906c7e184a84","title":"LogRhythm NDR User Guide","path":"/ndr/docs/logrhythm-ndr-user-guide","children":[{"id":"ci_03920239029b05717312c23718c62b3755b2d3188f3eb7818282916f5a99471b","title":"Bulk Delete for Threat Intel Rules","path":"/ndr/docs/bulk-delete-for-threat-intel-rules","children":[]},{"id":"ci_78d181dfced283c94385010c636c7b31d10a268b42a1e2de4050a87cc291149c","title":"Cases Page","path":"/ndr/docs/cases-page","children":[]},{"id":"ci_1ecb671ec3e784dda21915713d3a48d56f9789b4dd1e24a928dc8a7dff4c21d2","title":"Emailer","path":"/ndr/docs/emailer","children":[]},{"id":"ci_cee2f3b97ca22a387c3f801dd44f8f48fc8ad5ff9402350098fdbda7f4b9ee6c","title":"EULA Pop Up Message","path":"/ndr/docs/eula-pop-up-message","children":[]},{"id":"ci_b1f89533607a3007c912544c8f9e2c05f22d2bcd55c0be931fe414eb9f6af15e","title":"Feature Configuration Page","path":"/ndr/docs/feature-configuration-page","children":[]},{"id":"ci_b812be04334ee80a9c5da7c360d66926f9dc066eb4d2f265b8f2ede2dce7e157","title":"Hide Safelist Entries","path":"/ndr/docs/hide-safelist-entries","children":[]},{"id":"ci_34a9710338adfac7fcaee6ec58e6e7de32898982374800f683596a31330eaa36","title":"Hosts Page","path":"/ndr/docs/hosts-page","children":[]},{"id":"ci_bfc5473cffa13bcfd480a56b51fb96f99a3fc3ce3a848391a98ced942d719d66","title":"Hunt Activity","path":"/ndr/docs/hunt-activity","children":[]},{"id":"ci_6f09d4e5bae10721630672856f74d256a3e513e590011fc144b2fd8c7afc7a8d","title":"Hunt Geo Activity","path":"/ndr/docs/hunt-geo-activity","children":[]},{"id":"ci_bdd3faa64bb87928f2b72a5495fa2bc69ec694d32862ee46d67b46718f4f7cea","title":"Hunt Page - Search","path":"/ndr/docs/hunt-page-search","children":[]},{"id":"ci_1a9bfac2077481ce2eb0932f6ab90adb858f4bbb907eb3381bebd8d79a1d682e","title":"IDS Rules Page","path":"/ndr/docs/ids-rules-page","children":[]},{"id":"ci_6ce2f4c9be5b2cd275d27579b43bf40fb9b75bc94e7ea60119caa697168b275a","title":"Import Threat Intel Rules","path":"/ndr/docs/import-threat-intel-rules","children":[]},{"id":"ci_9ee589218b3660446d3cfbd98e99b068064d2430d42ddd826ff3e737fed04299","title":"Incidents Page","path":"/ndr/docs/incidents-page","children":[]},{"id":"ci_8283bf969ba197cccdd0adc11f8f32c215c842ad99603c2668fa855a57c34f89","title":"Incident Management - Case/Incident User Assignment","path":"/ndr/docs/incident-management-case-incident-user-assignment","children":[]},{"id":"ci_f1863588cabeabe3f22795adb8201e6fb79c38d17d8496be3c80ad2cf89f662d","title":"Information Tooltip Feature","path":"/ndr/docs/information-tooltip-feature","children":[]},{"id":"ci_f2b2c05850bebc81287fc8cb4357918bec14df18baa972e0487178b9ddf94f0f","title":"KeyCloak Enhancements in New UI","path":"/ndr/docs/keycloak-enhancements-in-new-ui","children":[]},{"id":"ci_824d12d5f413cfb78962cc6c36627411f5276a3cccdb4e7586ddb1f66f103503","title":"MistWatcher Page","path":"/ndr/docs/mistwatcher-page","children":[]},{"id":"ci_cccaba8c7fbc90c4abe3f49443510ea3ea79d6d21741c53168ca2fa98c0d7148","title":"Mitre","path":"/ndr/docs/mitre","children":[]},{"id":"ci_2a838f8aafb3e7c575e21a25e0850d0e4104f565dfd44b5927eaab5f2d397905","title":"NDR Dashboard","path":"/ndr/docs/ndr-dashboard","children":[]},{"id":"ci_5f76c8062cea78098a058883cd1487d7732fd5d4661cc200e30b4251abfec6d6","title":"Netflow","path":"/ndr/docs/netflow","children":[]},{"id":"ci_989cb4e8acc2b17709f6cec58ee6f4d6048b64b716f38ec473462fb4792d336a","title":"Networks Page","path":"/ndr/docs/networks-page","children":[]},{"id":"ci_b664a8c2a492bca51e114ac8a00ff3b35365395c36a0473265cd93e1ca57fa86","title":"PCAP Capture and Storage","path":"/ndr/docs/pcap-capture-and-storage","children":[]},{"id":"ci_0f1e775326a2dfa35ffb590694072f100993b3e62533df8c080fc793fd42a349","title":"PCAP Download","path":"/ndr/docs/pcap-download","children":[]},{"id":"ci_8512a720cadcede90ebe4ffac6a9c20319a62a864bf7ce990b087090087cfe66","title":"Policy Violations Page","path":"/ndr/docs/policy-violations-page","children":[]},{"id":"ci_3dbe635a948438c601d5fd22debe0141dd1eb73eb5cc28428029b801a245ad19","title":"Probe Node Notification","path":"/ndr/docs/probe-node-notification","children":[]},{"id":"ci_5e9419dc317c6dd1b8f41f98487f2bf3645195756836b3c51f1e8ff6aed4d2a9","title":"Probe Node Setup in AWS","path":"/ndr/docs/probe-node-setup-in-aws","children":[]},{"id":"ci_1fa4c1e9b7bc53f5333cbc8ea445c2006629b7b90e79dfd8dd5f704b44ba4728","title":"Report Page","path":"/ndr/docs/report-page","children":[]},{"id":"ci_92ae2921e935ba040eaa501a2337a726e1b403a93f825108787708f02476a356","title":"SSO Documentation","path":"/ndr/docs/sso-documentation","children":[]},{"id":"ci_c1d42fef28757e8d3029163261e2bfc93464be7dc3d294cf4ad7e937d635bf56","title":"Save a Filter as a View","path":"/ndr/docs/save-a-filter-as-a-view","children":[]},{"id":"ci_b936d38fc7b518369273920e0c9ce639125b7bc7903d659979f1381e2489057a","title":"Search Page","path":"/ndr/docs/search-page","children":[]},{"id":"ci_74d228db0f44f0a663bfb76d47552b79c6c3e84338a922f0af885822ac4fe75c","title":"Settings Page","path":"/ndr/docs/settings-page","children":[]},{"id":"ci_5775f53b843bd64e7aa8c43c464315e15a874076bcdb2b81e0211bf142b10c43","title":"System Page","path":"/ndr/docs/system-page","children":[]},{"id":"ci_e6caee3e1e14e4a2bcdbab4c9b7f85c05a9fe4d1596570c9334ac44d48d9bea4","title":"Use Cases for Search Activity in New UI","path":"/ndr/docs/use-cases-for-search-activity-in-new-ui","children":[]},{"id":"ci_7c91eeed066d0400192c3207607a26f20f404706540bf109dff5dc87fb1057b4","title":"Users Page","path":"/ndr/docs/users-page","children":[]},{"id":"ci_4ceb76747e9ecd916c4a97b1edabca30879ad30bdae9a08b761ce4fde5dced9e","title":"Whitelist Page","path":"/ndr/docs/whitelist-page","children":[]},{"id":"ci_a7a176b03e07de29c2f38f14383f2bde78d81b64ad8e5ca807f111b2f357ed80","title":"Whitelist X-forwarded Header Information from PCAP File","path":"/ndr/docs/whitelist-x-forwarded-header-information-from-pcap-file","children":[]}]},{"id":"ci_4942cddd13ea5ab0986ca59ab42c6c25671c072335cbc0d6f1e0dbcfb4739baa","title":"Legacy Documentation","path":"/ndr/docs/legacy-documentation","children":[{"id":"ci_3658f2cacc626d37fe6cc592a788352522aa278f84a296f7e0366d60f9ad55d4","title":"Legacy Analyst Guide","path":"/ndr/docs/legacy-analyst-guide","children":[{"id":"ci_1bcf1dcbb25ad7bdaf6c76be8458115e1b376746c8379dbcfbbbbecf4920fa81","title":"Dashboard","path":"/ndr/docs/dashboard","children":[{"id":"ci_2a29b1f87b8ed2e83ed762249f96951032a3a36fcdb50df2055cdaffce0d5852","title":"Main Dashboard","path":"/ndr/docs/main-dashboard","children":[]},{"id":"ci_7d880605cb269e099d7f936d9a8044ca2be0188f7439e7c5fa8286c3314eb801","title":"Top Policy Violations Notification Widget","path":"/ndr/docs/top-policy-violations-notification-widget","children":[]}]},{"id":"ci_977af9a8ddaed10b0f625bccec393074ef2f8d1734627e9e292f938d5c2e214c","title":"Incidents","path":"/ndr/docs/incidents","children":[{"id":"ci_fa2dcf0aa89d82e09cf3c59029139ae73e3e68b29df33266c897b0f4507c3336","title":"Close an Incident","path":"/ndr/docs/close-an-incident","children":[]},{"id":"ci_cc5df4439c00b26ffa07c11696c9b99f96bdd66ee505f4290db219e1b62d2dd2","title":"Close Multiple Incidents","path":"/ndr/docs/close-multiple-incidents","children":[]},{"id":"ci_727383d0bee320d5343e5469d7a76d46064c1c76af7d0843cb62bf53bf9becc0","title":"Investigate an incident","path":"/ndr/docs/investigate-an-incident","children":[{"id":"ci_f325780bc53b6456cf5f1e6b2813c436f29b6e8cac48c3ff85a3aa8dc39818c7","title":"Incident Category Descriptions and Sample Playbooks","path":"/ndr/docs/incident-category-descriptions-and-sample-playbooks","children":[]},{"id":"ci_5c92e42d559291d5c2d6d0aa6bd808618b2cad3d94fa2fe7a008293ed4e54631","title":"Incident Investigation Process","path":"/ndr/docs/incident-investigation-process","children":[]}]},{"id":"ci_37861199bfedbe63d49d10d026749e42cd6b7b6cbbcc4fad22421971b80a0c60","title":"Download Packet Capture (PCAP) Files","path":"/ndr/docs/download-packet-capture-pcap-files","children":[]}]},{"id":"ci_13e520b74d862e0cc2c0232764063fa72093886c55cbe44db9ab9bc0de7c649f","title":"Compliance","path":"/ndr/docs/compliance","children":[{"id":"ci_1194965b9a12b00fca120d2a26da028ce38c89cc2e232fcc46cb11955f1b53bf","title":"IDS Rules","path":"/ndr/docs/ids-rules","children":[]}]},{"id":"ci_77799c08433eb9254fffa0ae640204493efb36e9eded0cf8714afe2c6e070c66","title":"Hunt","path":"/ndr/docs/hunt","children":[{"id":"ci_6b475bdbde26e050e35bf6502c97bd1c7de98609d13ab683a72a9837833d475d","title":"Hunt Incident with Side-by-Side Viewing","path":"/ndr/docs/hunt-incident-with-side-by-side-viewing","children":[]},{"id":"ci_afd76b611dbb58990cffe1ceb2cb1abc0eb9add7bc5c5d21dc74b4e148a2fa44","title":"Hunt with Discover","path":"/ndr/docs/hunt-with-discover","children":[]},{"id":"ci_1a62cb24addd063c0ebc6ab86adc8f4fe355e056696a956ec90a554e3be92bba","title":"Hunt with Drop-down Icon","path":"/ndr/docs/hunt-with-drop-down-icon","children":[]},{"id":"ci_a883886ea3d2cb9b77cf8b3f9002dff65010987b3d71277f493e75034743392f","title":"Hunt with MITRE ATT&CK","path":"/ndr/docs/hunt-with-mitre-att-ck","children":[]},{"id":"ci_82f2dd07e809c2342aa9e4bcbb0795895451cf04b18626b0f6ad983f8aa10a98","title":"Hunt with Simple Queries","path":"/ndr/docs/hunt-with-simple-queries","children":[]},{"id":"ci_9b70b473ee0f53c5bed736d9161f0f5893fcc68e94a4cfa84cb4e13798b9d0f0","title":"Query Using Hunt Feature","path":"/ndr/docs/query-using-hunt-feature","children":[]},{"id":"ci_a401567da901b0377ef4a94fc7a7be4080ea97cf46d35f924d956322be14dfd7","title":"View Active Directory Attack Indicators and Servers","path":"/ndr/docs/view-active-directory-attack-indicators-and-servers","children":[]},{"id":"ci_a36c5fdbaba03fcce753166e447b67c2cf64d664f322b2b7e81b10c49f48708b","title":"View BitTorrent Events","path":"/ndr/docs/view-bittorrent-events","children":[]},{"id":"ci_cb28b6d6db293e282886bbbd75107a4c46d4b8118c4fdfd8c04d24d6783238d5","title":"View Clear Text Authentication over HTTP Events","path":"/ndr/docs/view-clear-text-authentication-over-http-events","children":[]},{"id":"ci_d93cb962060c3b62ca4c622f41bec47db035f6fd2265c2aba40b576eab8d7bbf","title":"View Expired Certificate Events","path":"/ndr/docs/view-expired-certificate-events","children":[]},{"id":"ci_f1693242cfa3cf047da3554db9d0149fd480abd3e3cb22d50265cb4f72bf6a35","title":"View IDS Signature Rule for an Alert Event","path":"/ndr/docs/view-ids-signature-rule-for-an-alert-event","children":[]},{"id":"ci_1a90c90441484bd2299633317b6124488ff17b52dbbf34d5ddae2c2111202651","title":"View JA3 Hash Information for an Event","path":"/ndr/docs/view-ja3-hash-information-for-an-event","children":[]},{"id":"ci_0523548b4712f95a1fe34c96d08c964e2dc8d9f2ae0b1d2fa63eccd42e4fc86c","title":"View Ransomware Events","path":"/ndr/docs/view-ransomware-events","children":[]},{"id":"ci_172df7fe17846c61fdb61d2d536113be136f62f04f1d29c0831283ed035c4ed1","title":"View Traffic Flow","path":"/ndr/docs/view-traffic-flow","children":[]},{"id":"ci_0bcc324d22b01199f1cacc556629a790e0c105d2612945180f530f64060dae6f","title":"View Weak Cipher Events","path":"/ndr/docs/view-weak-cipher-events","children":[]}]},{"id":"ci_b6084dfabbd6670ff35a410dbacb8e8ff9187737b0278ef9f7e35765d807a799","title":"Users","path":"/ndr/docs/users","children":[{"id":"ci_7da7fe240e85697dbf12977cdb64130ff7fac69a7fe2f17e8c2f01a4470aba7c","title":"Add and Remove a Tag for a User","path":"/ndr/docs/add-and-remove-a-tag-for-a-user","children":[]},{"id":"ci_0d5ea7ab5d06f9cb56fc0d66ab59eaedcf9fafe33b40afff7bdee413d6a80378","title":"Monitor Users","path":"/ndr/docs/monitor-users","children":[]},{"id":"ci_5c25b38923b177e7801fb58e85ef5bee23beb0ffdedb31e5fe74dd69d98e1a2d","title":"View Audit User Activity","path":"/ndr/docs/view-audit-user-activity","children":[]}]},{"id":"ci_762aea379d884da344ac0c213a543e9a11f062e8b3dcdf2391d0f7cfbb52c2c2","title":"Hosts Menu","path":"/ndr/docs/hosts-menu","children":[{"id":"ci_532539323344f32242fa13ea68ca4c0bed5ba8737fd69b2edf1216b5b6312528","title":"Add and Remove a Tag for a Host","path":"/ndr/docs/add-and-remove-a-tag-for-a-host","children":[]},{"id":"ci_ca07461e7ccc26234f138a0533a15a8c7c85de54db7f6e74f86ab0e7a6058afd","title":"Monitor Hosts","path":"/ndr/docs/monitor-hosts","children":[]}]},{"id":"ci_1cc674f9909a96a7af9da79fe0140ffca1000bd1fc3112a80018dabdbb09464c","title":"Networks","path":"/ndr/docs/networks","children":[{"id":"ci_32ad1c87c91e47b9ce7e3e65bcf8f11c45b84d8b2e422e6b25e005bfc3180d75","title":"Add and Upload Networks","path":"/ndr/docs/add-and-upload-networks","children":[]},{"id":"ci_da7d38324cadc5d7f25b29cb33498b79e3506af1c328f34e23b76465091ab1e4","title":"Delete Network Entries and Remove Networks","path":"/ndr/docs/delete-network-entries-and-remove-networks","children":[]}]},{"id":"ci_952ead93a479e2bbbf6b48cc94aac5f0a7006f1e634ba1a3de0829a1789ec6a9","title":"System","path":"/ndr/docs/system","children":[{"id":"ci_5ba2be5651332e351f41433e5e84f2341d1460f8ddc59930678f60e2c193d63e","title":"Check Status of Probe Nodes","path":"/ndr/docs/check-status-of-probe-nodes","children":[]},{"id":"ci_36b8a0859eb43be4bb8cfa81877d95ab72efb97bf925bb286add0ea8db362089","title":"Close a Case","path":"/ndr/docs/close-a-case","children":[]},{"id":"ci_bbf30883a04ebcc8c1eca18dbe74a656ba29ee602106efa7a75f383784401278","title":"System Health Check","path":"/ndr/docs/system-health-check","children":[]},{"id":"ci_76f8e701e7559cf0e7c4786eb4a9a3c6d60cb295ef175c19c4f4e739df71effb","title":"View if Scored Events Are Getting Generated","path":"/ndr/docs/view-if-scored-events-are-getting-generated","children":[]},{"id":"ci_dfcab02902f59908b80dfd5246cb4765deb360d3b6e80dfca788dfd314260f57","title":"View if Indicators of Attack (IOAs) Are Getting Generated","path":"/ndr/docs/view-if-indicators-of-attack-ioas-are-getting-generated","children":[]},{"id":"ci_ce40a26edc8501d11ec0bc87fa6358c70887d46668c916f1a0575c39ee34d4a2","title":"View Test Incident Generation in Health Alerts","path":"/ndr/docs/view-test-incident-generation-in-health-alerts","children":[]}]},{"id":"ci_c1c91011baf1e3c8db1c53cb20b3e0f8462ffc154e85e13eb2e1e88485ee4de1","title":"Search Quick Reference","path":"/ndr/docs/search-quick-reference","children":[]}]},{"id":"ci_c2e45cf49a13dc1e5984d6c0bcd6a66fe433c4d3582e7ab1befb68f9bd3f218b","title":"Legacy Administrator Guide","path":"/ndr/docs/legacy-administrator-guide","children":[{"id":"ci_226271e81cb5d245e48331434fae7d432e27bcab233413044bd16a8bde27b9b0","title":"Log in to LogRhythm NDR","path":"/ndr/docs/log-in-to-logrhythm-ndr","children":[]},{"id":"ci_f17649c800f1a925ca3b096d2eca9300ffc9fc069fd8c601bb9064b750136c52","title":"Create an Operator","path":"/ndr/docs/create-an-operator","children":[{"id":"ci_164adae2b12c976a6ebbfe2e9d1495d8e05973bc9e4d723c75b70c48a0f2fd61","title":"Generate and Download an SSL Certificate for an Operator","path":"/ndr/docs/generate-and-download-an-ssl-certificate-for-an-operator","children":[]}]},{"id":"ci_f7be800e9d22492a558fcbb5418defcebdea2b898fb80aabd664385f81cf4e85","title":"Enable Netflow Ingest","path":"/ndr/docs/enable-netflow-ingest","children":[]},{"id":"ci_b3f640aaaa67222ea7dba8d3a655c5e736df613916d06fa52c153afdea622dde","title":"Enable Packet Capture (PCAP)","path":"/ndr/docs/enable-packet-capture-pcap","children":[]},{"id":"ci_8a52aa72e7967e83eb751ca9f1045a02e5c63f910fefa48873926de5f5fc366a","title":"Hide Data Using NDR Data Masking","path":"/ndr/docs/hide-data-using-ndr-data-masking","children":[]},{"id":"ci_23af0fbfea7c1dc72c36b668889374bbd77e3755028fd622882ce3196e7f4e3b","title":"Manage Users","path":"/ndr/docs/manage-users","children":[]},{"id":"ci_e71908f5404bd8ecd1bba13cccd9fd672978f8e1292bd7bd6de03f929255cb29","title":"Proxy Support","path":"/ndr/docs/proxy-support","children":[]},{"id":"ci_033350f70f11e448f5482ffd6325281d33b8d5723ac3a73126fb8cdf3172f845","title":"Query with Mistwatcher","path":"/ndr/docs/query-with-mistwatcher","children":[]},{"id":"ci_651eb08e4356681ce18d5dec030ad67f6a5674829a3149b3f2250683ac2e549c","title":"Threat Intelligence Provider","path":"/ndr/docs/threat-intelligence-provider","children":[]},{"id":"ci_0475cfb23feadb4d9e86b0a52f585aa402245de56614f595dc6458888e5688d9","title":"Validate a User for the LDAP Server","path":"/ndr/docs/validate-a-user-for-the-ldap-server","children":[]},{"id":"ci_8bfbee26b2161540bb5d62a3f627daacf38c5165db6094728698c5ad01b03f22","title":"Whitelist Management","path":"/ndr/docs/whitelist-management","children":[{"id":"ci_3ae2203087bc8b6835151b1e37bb22d7a4c94c86162ce0739c54c6ffa93925d6","title":"Whitelist a Case","path":"/ndr/docs/whitelist-a-case","children":[]},{"id":"ci_aa8fa98788bfbaf0aced6cd8d46cffdf78cde3c1fe01a4e962961a991327d3dc","title":"Whitelist an Incident","path":"/ndr/docs/whitelist-an-incident","children":[]},{"id":"ci_02b8ccc25bdf39b0933f1aca571a0dc8eb914201b2808fa9ef72e2ba07fef74e","title":"Proactively Create and Allow Whitelist","path":"/ndr/docs/proactively-create-and-allow-whitelist","children":[]},{"id":"ci_42e175611173235c32410e16b07447e7daf706b2528d2eb903225385a3c466ee","title":"Bulk Whitelists","path":"/ndr/docs/bulk-whitelists","children":[]},{"id":"ci_70b04c08f480761f83a4f215b76400b50759b6a7e4a93b78377bcb4e024779cd","title":"Track Whitelist Activity Using Audit Trail","path":"/ndr/docs/track-whitelist-activity-using-audit-trail","children":[]}]}]}]},{"id":"ci_7a1024fbe191c7ffe0ae0b11113d6d8bf37e2074a0011ac74be671b5bd3f24d0","title":"Find More Information","path":"/ndr/docs/find-more-information","children":[{"id":"ci_a283423d01e7e6a207af8cd8d305b3caf1334416e094cbee43da9390c631664b","title":"End of Life Policies for NDR Software and Hardware","path":"/ndr/docs/end-of-life-policies-for-ndr-software-and-hardware","children":[]}]},{"id":"ci_d59797969513c7cb4af8145387a5a8ae51a98fbba714b0ebf46eff8adb333eee","title":"Download PDFs","path":"/ndr/docs/download-pdfs","children":[]}]