Specifies the visibility of the item. This semantic is only valid when there exists a relationship between a USM Central deployment and a USM Anywhere deployment. When set to true, only the users within the same deployment, USM Central or USM Anywhere, can see the item; the users from the other deployment cannot.
Specifies the visibility of the item. This semantic is only valid when there exists a relationship between a USM Central deployment and a USM Anywhere deployment. When set to true, only the users within the same deployment, USM Central or USM Anywhere, can see the item; the users from the other deployment cannot.
Specifies when the latest modification was made and by whom.
Show child attributes
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Level Blue","colors":{"primary":"#001AFF","light":"#32A7FF","dark":"#001AFF"},"logo":{"light":"https://mintcdn.com/levelblue-5324744e/cXQBEU4dvbfLKeHt/logo/light.svg?fit=max\u0026auto=format\u0026n=cXQBEU4dvbfLKeHt\u0026q=85\u0026s=cecf2679f1120d056509c620754393e0","dark":"https://mintcdn.com/levelblue-5324744e/cXQBEU4dvbfLKeHt/logo/dark.svg?fit=max\u0026auto=format\u0026n=cXQBEU4dvbfLKeHt\u0026q=85\u0026s=cd961026441a7b77ee87384083d92299"},"favicon":"https://mintcdn.com/levelblue-5324744e/2cF8Ko4JxA9IKq0G/favicon.png?fit=max\u0026auto=format\u0026n=2cF8Ko4JxA9IKq0G\u0026q=85\u0026s=4f762b294db3cd923549b3e1de655aeb","appearance":{"default":"light"},"navbar":{"links":[{"href":"https://levelblue.com/support","label":"Support"}],"primary":{"type":"button","label":"Dashboard","href":"https://dashboard.mintlify.com"}},"footer":{"socials":{"x":"https://twitter.com/LevelBlueCyber","facebook":"https://www.facebook.com/LevelBlueCyber","linkedin":"https://www.linkedin.com/company/levelbluecyber","youtube":"https://www.youtube.com/@levelbluecyber"}},"fonts":{"family":"DM Sans","source":"https://fonts.gstatic.com/s/dmsans/v15/rP2Hp2ywxg089UriCZOIHQ.woff2","format":"woff2"},"integrations":{"ga4":{"measurementId":"G-MJPB91N058"}},"styling":{"latex":true},"navigation":{"global":{"anchors":[{"anchor":"Blog","icon":"newspaper","href":"https://levelblue.com/blogs"},{"anchor":"Events","icon":"calendar-days","href":"https://levelblue.com/newsroom/events"},{"anchor":"Contact Us","icon":"headset","href":"https://levelblue.com/contact"}]},"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"levelblue-5324744e","hasAudioNarration":false,"actualSubdomain":"levelblue-5324744e","customDomains":["docs.levelblue.com"],"gitSource":{"type":"github","owner":"alienvault-web","repo":"levelblue-docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6aea720ef33c390e8d03d973","collectionId":"d22aef00-2bd6-4302-a350-f3377349c931","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6aea720ef33c390e8d03d973"},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"REMOVE_BRANDING":{"status":"ENABLED"},"CONTEXTUAL_FEEDBACK":{"status":"ENABLED"},"CODE_SNIPPET_FEEDBACK":{"status":"ENABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6aea720ef33c390e8d03d973","clientVersion":"0.0.4054","searchFilterCounts":[{"language":"default","tag":"Documentation","count":828},{"language":"default","tag":"USM Anywhere™","count":725},{"language":"default","tag":"USM Anywhere User Guides","count":407},{"language":"default","tag":"USM Anywhere BlueApps Guide","count":193},{"language":"default","tag":"Advanced BlueApps","count":179},{"language":"default","tag":"USM Anywhere Deployment Guide","count":100},{"language":"default","tag":"USM Anywhere Reports","count":67},{"language":"default","tag":"USM Anywhere Compliance Templates","count":63},{"language":"default","tag":"USM Central™","count":57},{"language":"default","tag":"Asset Management","count":53}]},"assistantConfig":{},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"api-reference/attachments/modify-an-attachment","slug":"/api-reference/attachments/modify-an-attachment","pageMetadata":{"title":"Modify an Attachment","description":"Modifies the properties of an attachment.","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml put /investigations/{investigationId}/attachments/{attachmentId}","href":"/api-reference/attachments/modify-an-attachment","autogeneratedByOpenApi":true},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Modifies the properties of an attachment.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Modify an Attachment","description":"Modifies the properties of an attachment.","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml put /investigations/{investigationId}/attachments/{attachmentId}","href":"/api-reference/attachments/modify-an-attachment","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":["/_mintlify/custom/levelblue-5324744e/a57b703762a10c87/vidyard.js"],"openApiReferenceData":{"operation":{"summary":"Modify an Attachment","operationId":"put-investigations-investigationId-attachments-attachmentId","description":"Modifies the properties of an attachment.","responses":{"200":"fe41b117-3d00-4b16-8235-d556b2c56b92","400":"b4176d61-4c63-4a26-abbe-a024bdecfb66","401":"bfd8c42d-a76e-4b69-bd1e-0208a45041ac","403":"2ab58e70-2259-41bc-99ea-9cdeb5acb42a","404":"40ce6de3-2c4d-4e78-9b60-145bb0eecf0e","406":"15c523f1-6825-4229-bc74-efcb9d08f4d5","411":"cfc00dbd-91dd-4e93-8287-09337836d9c9","415":"57c1f6ba-1f97-416c-8c1e-77cb6a4f1bcd","429":"534ca455-fed6-4415-a03c-48455bd79868","431":"53b30acf-eddf-4a2c-bc1e-1a5fbae82ef2","500":"cb5e3a89-0195-4216-a27a-ad72b2ac9101","503":"97f0c781-0223-48f6-b3f8-1337f82d69c6"},"requestBody":"433162df-8659-4641-9bc2-6f511744d9dc","tags":["Attachments"],"method":"put","type":"path","servers":["373610eb-f27a-492d-b6d3-27fc9792cc05"],"security":["4a32e218-978f-4f17-b2d8-4f430cde063b"],"path":"/investigations/{investigationId}/attachments/{attachmentId}","baseUrlOptions":["http://investigations.{region}.alienvault.cloud/investigations/v3"],"title":"Modify an Attachment","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"aa9e5844-87a7-441d-be83-ad7998fcee2a":{"name":"investigationId","description":"The unique identifier of an investigation.","in":"path","schema":{"type":"string","format":"uuid","isRequired":true,"description":"The unique identifier of an investigation.","uniqueKey":"","typeLabel":"string\u003cuuid>"},"required":true},"9185f1eb-c104-44a7-b015-39e8e0b866b9":{"name":"attachmentId","description":"The unique identifier of an attachment.","in":"path","schema":{"type":"string","format":"uuid","isRequired":true,"description":"The unique identifier of an attachment.","uniqueKey":"","typeLabel":"string\u003cuuid>"},"required":true}},"requestBody":{"content":{"application/json":{"schema":{"type":"object","properties":{"private":{"type":"boolean","description":"Specifies the visibility of the item. This semantic is only valid when there exists a relationship between a USM Central deployment and a USM Anywhere deployment. When set to true, only the users within the same deployment, USM Central or USM Anywhere, can see the item; the users from the other deployment cannot. ","uniqueKey":"private","typeLabel":"boolean"},"filename":{"title":"fileName","type":"string","description":"Name of the file.","uniqueKey":"filename","typeLabel":"string"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"private":true,"filename":"\u003cstring>"}}},"exampleType":"generated"}},"description":"The PUT body holds the attributes associated with the attachment.","exampleType":"generated"},"responses":{"fe41b117-3d00-4b16-8235-d556b2c56b92":{"description":"OK","headers":{"X-ATT-MessageId":{"description":"A client-provided value that uniquely identifies a client\ngenerated message sent to the service. This header will be\npresent in the response if the client provided one in the\nrequest.","schema":{"type":"string"},"required":false},"X-ATT-TransactionId":{"description":"A service provided value that uniquely identifies a message\nreturned by the service.","schema":{"type":"string","format":"uuid"},"required":true},"X-ATT-ServiceVersion":{"description":"Identifies the version number of the service that processed\nthe request.","schema":{"type":"string"},"required":true}},"content":{"application/json":{"schema":{"title":"getAttachment","type":"object","properties":{"_links":{"type":"object","properties":{"self":{"type":"object","description":"References the returned resource","format":"uri","properties":{"href":{"type":"string","format":"uri","description":"An absolute URI [RFC3986]","uniqueKey":"_links.self.href","typeLabel":"string\u003curi>"}},"uniqueKey":"_links.self","typeLabel":"object"}},"uniqueKey":"_links","typeLabel":"object"},"id":{"type":"string","title":"id","format":"uuid","description":"Unique identifier of the resource.","uniqueKey":"id","typeLabel":"string\u003cuuid>"},"private":{"type":"boolean","description":"Specifies the visibility of the item. This semantic is only valid when there exists a relationship between a USM Central deployment and a USM Anywhere deployment. When set to true, only the users within the same deployment, USM Central or USM Anywhere, can see the item; the users from the other deployment cannot. ","uniqueKey":"private","typeLabel":"boolean"},"name":{"title":"fileName","type":"string","description":"Name of the file.","uniqueKey":"name","typeLabel":"string"},"size":{"title":"fileSize","type":"integer","description":"Size of the file in bytes. ","uniqueKey":"size","typeLabel":"integer"},"uri":{"title":"fileLocation","type":"string","description":"Location of the file.","uniqueKey":"uri","typeLabel":"string"},"created":{"type":"object","title":"_mod_on_by","description":"Specifies when the resource was created and by whom. ","required":["by","on"],"properties":{"by":{"type":"string","format":"email","description":"Email of the user who made the change. ","isRequired":true,"uniqueKey":"created.by","typeLabel":"string\u003cemail>"},"on":{"type":"string","format":"date-time","description":"Date and time when the change was made. Accepted format is ISO-8601 YYYY-MM-DDThh:mm:ss.sTZD. ","isRequired":true,"uniqueKey":"created.on","typeLabel":"string\u003cdate-time>"}},"uniqueKey":"created","typeLabel":"_mod_on_by · object"},"lastModified":{"type":"object","title":"lastModified","description":"Specifies when the latest modification was made and by whom. ","required":["by","on"],"properties":{"by":{"type":"string","format":"email","description":"Email of the user who made the change. ","isRequired":true,"uniqueKey":"lastModified.by","typeLabel":"string\u003cemail>"},"on":{"type":"string","format":"date-time","description":"Date and time when the change was made. Accepted format is ISO-8601 YYYY-MM-DDThh:mm:ss.sTZD. ","isRequired":true,"uniqueKey":"lastModified.on","typeLabel":"string\u003cdate-time>"}},"uniqueKey":"lastModified","typeLabel":"lastModified · object"}},"description":"Returns an attachment. ","uniqueKey":"","typeLabel":"getAttachment · object"},"examples":{"Example":{"title":"Example","value":{"_links":{"self":{"href":"\u003cstring>"}},"id":"3c90c3cc-0d44-4b50-8888-8dd25736052a","private":true,"name":"\u003cstring>","size":123,"uri":"\u003cstring>","created":{"by":"jsmith@example.com","on":"2023-11-07T05:31:56Z"},"lastModified":{"by":"jsmith@example.com","on":"2023-11-07T05:31:56Z"}}}},"exampleType":"generated"}},"exampleType":"generated"},"b4176d61-4c63-4a26-abbe-a024bdecfb66":{"description":"Bad Request - Many possible reasons associated with the request\n(form, content, etc.). Do not resubmit this request unchanged.","headers":{"Date":{"schema":{"type":"string","format":"date-time"},"required":true},"X-ATT-TransactionId":{"description":"A service provided value that uniquely identifies a message\nreturned by the service.","schema":{"type":"string","format":"uuid"},"required":true},"X-ATT-ServiceVersion":{"description":"Identifies the version number of the service that processed\nthe request.","schema":{"type":"string"},"required":true},"X-ATT-MessageId":{"description":"A client-provided value that uniquely identifies a client\ngenerated message sent to the service. This header will be\npresent in the response if the client provided one in the\nrequest.","schema":{"type":"string"},"required":false}},"content":{"application/json":{"schema":{"title":"errorBody","type":"object","properties":{"errorId":{"type":"string","description":"Unique errorId in the context of an API.\n\nRecommendation: two hyphen-delimited subfields:\n* Domain: identifies the API, application, service or general\n category to which the error belongs.\n* Code: provides a unique numeric code within the domain.\n\nExamples: General-0001, DataDict-0001","isRequired":true,"uniqueKey":"errorId","typeLabel":"string"},"message":{"type":"string","description":"Message text","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"variables":{"type":"array","description":"List of zero or more strings that represent the contents of the variables used by the message text.","items":{"type":"string","uniqueKey":"variables.items.[INDEX]","typeLabel":"string"},"uniqueKey":"variables","typeLabel":"string[]"},"errorUrl":{"type":"string","format":"uri","description":"Hyperlink to more information about the error, including causes and solutions.","uniqueKey":"errorUrl","typeLabel":"string\u003curi>"}},"required":["errorId","message"],"x-examples":{"full error body":{"errorId":"addressbook-0003","message":"Invalid input value for property %1. Valid values are: %2.","variables":["addressType","Home, Work, Other"],"errorUrl":"http://dev.att.com/apis/errors?code=addressbook-0003"},"minimal error body":{"errorId":"addressbook-0001","message":"Daily TPS limit exceeded."}},"uniqueKey":"","typeLabel":"errorBody · object"},"examples":{"Example":{"title":"Example","value":{"errorId":"\u003cstring>","message":"\u003cstring>","variables":["\u003cstring>"],"errorUrl":"\u003cstring>"}}},"exampleType":"generated"}},"exampleType":"generated"},"bfd8c42d-a76e-4b69-bd1e-0208a45041ac":{"description":"Unauthorized - Authentication failed or was not provided in the\nAuthorization header.","headers":{"WWW-Authenticate":{"schema":{"type":"string","enum":["Bearer"]}},"Date":{"schema":{"type":"string","format":"date-time"},"required":true},"X-ATT-TransactionId":{"description":"A service provided value that uniquely identifies a message\nreturned by the service.","schema":{"type":"string","format":"uuid"},"required":true},"X-ATT-ServiceVersion":{"description":"Identifies the version number of the service that processed\nthe request.","schema":{"type":"string"},"required":true},"X-ATT-MessageId":{"description":"A client-provided value that uniquely identifies a client\ngenerated message sent to the service. This header will be\npresent in the response if the client provided one in the\nrequest.","schema":{"type":"string"},"required":false}},"content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}},"2ab58e70-2259-41bc-99ea-9cdeb5acb42a":{"description":"Forbidden - The client has insufficient permissions to access\nthe resource","headers":{"Date":{"schema":{"type":"string","format":"date-time"},"required":true},"X-ATT-TransactionId":{"description":"A service provided value that uniquely identifies a message\nreturned by the service.","schema":{"type":"string","format":"uuid"},"required":true},"X-ATT-ServiceVersion":{"description":"Identifies the version number of the service that processed\nthe request.","schema":{"type":"string"},"required":true},"X-ATT-MessageId":{"description":"A client-provided value that uniquely identifies a client\ngenerated message sent to the service. This header will be\npresent in the response if the client provided one in the\nrequest.","schema":{"type":"string"},"required":false}},"content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}},"40ce6de3-2c4d-4e78-9b60-145bb0eecf0e":{"description":"Not Found - The server has not found anything matching the\nRequest-URI. No indication is given of whether the condition\nis temporary or permanent.","headers":{"Date":{"schema":{"type":"string","format":"date-time"},"required":true},"X-ATT-TransactionId":{"description":"A service provided value that uniquely identifies a message\nreturned by the service.","schema":{"type":"string","format":"uuid"},"required":true},"X-ATT-ServiceVersion":{"description":"Identifies the version number of the service that processed\nthe request.","schema":{"type":"string"},"required":true},"X-ATT-MessageId":{"description":"A client-provided value that uniquely identifies a client\ngenerated message sent to the service. This header will be\npresent in the response if the client provided one in the\nrequest.","schema":{"type":"string"},"required":false}},"content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}},"15c523f1-6825-4229-bc74-efcb9d08f4d5":{"description":"Not Acceptable - The value specified for the Accept header in the request is not supported. Acceptable value is \"application/json\".","headers":{"Date":{"schema":{"type":"string","format":"date-time"},"required":true},"X-ATT-TransactionId":{"description":"A service provided value that uniquely identifies a message\nreturned by the service.","schema":{"type":"string","format":"uuid"},"required":true},"X-ATT-ServiceVersion":{"description":"Identifies the version number of the service that processed\nthe request.","schema":{"type":"string"},"required":true},"X-ATT-MessageId":{"description":"A client-provided value that uniquely identifies a client\ngenerated message sent to the service. This header will be\npresent in the response if the client provided one in the\nrequest.","schema":{"type":"string"},"required":false}},"content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}},"cfc00dbd-91dd-4e93-8287-09337836d9c9":{"description":"Length Required - The Content-Length header was not specified.","headers":{"Date":{"schema":{"type":"string","format":"date-time"},"required":true},"X-ATT-TransactionId":{"description":"A service provided value that uniquely identifies a message\nreturned by the service.","schema":{"type":"string","format":"uuid"},"required":true},"X-ATT-ServiceVersion":{"description":"Identifies the version number of the service that processed\nthe request.","schema":{"type":"string"},"required":true},"X-ATT-MessageId":{"description":"A client-provided value that uniquely identifies a client\ngenerated message sent to the service. This header will be\npresent in the response if the client provided one in the\nrequest.","schema":{"type":"string"},"required":false}},"content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}},"57c1f6ba-1f97-416c-8c1e-77cb6a4f1bcd":{"description":"Unsupported Media Type - The value specified for the Content-Type header in the request is\nnot supported. Acceptable value is \"application/json\".","headers":{"Date":{"schema":{"type":"string","format":"date-time"},"required":true},"X-ATT-TransactionId":{"description":"A service provided value that uniquely identifies a message\nreturned by the service.","schema":{"type":"string","format":"uuid"},"required":true},"X-ATT-ServiceVersion":{"description":"Identifies the version number of the service that processed\nthe request.","schema":{"type":"string"},"required":true},"X-ATT-MessageId":{"description":"A client-provided value that uniquely identifies a client\ngenerated message sent to the service. This header will be\npresent in the response if the client provided one in the\nrequest.","schema":{"type":"string"},"required":false}},"content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}},"534ca455-fed6-4415-a03c-48455bd79868":{"description":"Too Many Requests","headers":{"Date":{"schema":{"type":"string","format":"date-time"},"required":true},"Retry-After":{"schema":{"type":"integer"},"description":"Tells the user how long to wait in seconds before making\nanother request in seconds."},"X-ATT-TransactionId":{"description":"A service provided value that uniquely identifies a message\nreturned by the service.","schema":{"type":"string","format":"uuid"},"required":true},"X-ATT-ServiceVersion":{"description":"Identifies the version number of the service that processed\nthe request.","schema":{"type":"string"},"required":true},"X-ATT-MessageId":{"description":"A client-provided value that uniquely identifies a client\ngenerated message sent to the service. This header will be\npresent in the response if the client provided one in the\nrequest.","schema":{"type":"string"},"required":false}},"content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}},"53b30acf-eddf-4a2c-bc1e-1a5fbae82ef2":{"description":"Request Header Fields Too Large - either an individual\nheader or the headers as a whole","headers":{"Date":{"schema":{"type":"string","format":"date-time"},"required":true},"Retry-After":{"schema":{"type":"integer"},"description":"Tells the user how long to wait in seconds before making\nanother request in seconds."},"X-ATT-TransactionId":{"description":"A service provided value that uniquely identifies a message\nreturned by the service.","schema":{"type":"string","format":"uuid"},"required":true},"X-ATT-ServiceVersion":{"description":"Identifies the version number of the service that processed\nthe request.","schema":{"type":"string"},"required":true},"X-ATT-MessageId":{"description":"A client-provided value that uniquely identifies a client\ngenerated message sent to the service. This header will be\npresent in the response if the client provided one in the\nrequest.","schema":{"type":"string"},"required":false}},"content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}},"cb5e3a89-0195-4216-a27a-ad72b2ac9101":{"description":"Internal Sever Error - The server encountered an internal error\nor timed out. Please try again later.","headers":{"Date":{"schema":{"type":"string","format":"date-time"},"required":true},"X-ATT-TransactionId":{"description":"A service provided value that uniquely identifies a message\nreturned by the service.","schema":{"type":"string","format":"uuid"},"required":true},"X-ATT-ServiceVersion":{"description":"Identifies the version number of the service that processed\nthe request.","schema":{"type":"string"},"required":true},"X-ATT-MessageId":{"description":"A client-provided value that uniquely identifies a client\ngenerated message sent to the service. This header will be\npresent in the response if the client provided one in the\nrequest.","schema":{"type":"string"},"required":false}},"content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}},"97f0c781-0223-48f6-b3f8-1337f82d69c6":{"description":"Service Unavailable - The server is currently unable to receive\nrequests. Please try again later.","headers":{"Date":{"schema":{"type":"string","format":"date-time"},"required":true},"X-ATT-TransactionId":{"description":"A service provided value that uniquely identifies a message\nreturned by the service.","schema":{"type":"string","format":"uuid"},"required":true},"X-ATT-ServiceVersion":{"description":"Identifies the version number of the service that processed\nthe request.","schema":{"type":"string"},"required":true},"X-ATT-MessageId":{"description":"A client-provided value that uniquely identifies a client\ngenerated message sent to the service. This header will be\npresent in the response if the client provided one in the\nrequest.","schema":{"type":"string"},"required":false}},"content":{"_mintlify/placeholder":{"schema":{"type":"object","description":""}}}}},"security":{"4a32e218-978f-4f17-b2d8-4f430cde063b":{"JWT":{"type":"http","scheme":"bearer","scopes":[]}}},"servers":{"373610eb-f27a-492d-b6d3-27fc9792cc05":{"url":"http://investigations.{region}.alienvault.cloud/investigations/v3"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"http","scheme":"bearer","scopes":[]},"schema":{"title":"Bearer Auth","type":"string","isRequired":true,"description":"Bearer authentication header of the form `Bearer \u003ctoken>`, where `\u003ctoken>` is your auth token.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"JWT","name":"Authorization"}],"title":"JWT"}]},"originalFileLocation":"documentation/api-reference/v3.yaml"},"subdomain":"levelblue-5324744e","siteName":"Level Blue","title":"Modify an Attachment - Level Blue","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-08-05T20:46:41.239Z","originalFileLocation":"api-reference/attachments/modify-an-attachment.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"light\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Modifies the properties of an attachment.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Level Blue\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/levelblue-5324744e/h4B_F8i4vpbW1J4G/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/levelblue-5324744e/h4B_F8i4vpbW1J4G/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/levelblue-5324744e/h4B_F8i4vpbW1J4G/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/levelblue-5324744e/h4B_F8i4vpbW1J4G/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/levelblue-5324744e/h4B_F8i4vpbW1J4G/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/levelblue-5324744e/h4B_F8i4vpbW1J4G/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/levelblue-5324744e/h4B_F8i4vpbW1J4G/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/levelblue-5324744e/h4B_F8i4vpbW1J4G/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/levelblue-5324744e/h4B_F8i4vpbW1J4G/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Modify an Attachment - Level Blue\">\u003cmeta data-mint-head property=\"og:description\" content=\"Modifies the properties of an attachment.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Level Blue\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.levelblue.com/api-reference/attachments/modify-an-attachment\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://levelblue-5324744e.mintlify.app/_mintlify/api/og/v2?division=Attachments\u0026amp;title=Modify+an+Attachment\u0026amp;description=Modifies+the+properties+of+an+attachment.\u0026amp;theme=9f4d62d76c363f643960f6a4\u0026amp;signature=46738e561e15f0376046601cef8fa1b9c977ea372fad15458fd9da8e409b568d\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Modify an Attachment - Level Blue\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Modifies the properties of an attachment.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://levelblue-5324744e.mintlify.app/_mintlify/api/og/v2?division=Attachments\u0026amp;title=Modify+an+Attachment\u0026amp;description=Modifies+the+properties+of+an+attachment.\u0026amp;theme=9f4d62d76c363f643960f6a4\u0026amp;signature=46738e561e15f0376046601cef8fa1b9c977ea372fad15458fd9da8e409b568d\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/levelblue-5324744e/h4B_F8i4vpbW1J4G/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Level Blue\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#001AFF\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.levelblue.com/api-reference/attachments/modify-an-attachment\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/attachments/modify-an-attachment.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.levelblue.com/#organization\",\"name\":\"Level Blue\",\"url\":\"https://docs.levelblue.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/levelblue-5324744e/cXQBEU4dvbfLKeHt/logo/light.svg?fit=max\u0026auto=format\u0026n=cXQBEU4dvbfLKeHt\u0026q=85\u0026s=cecf2679f1120d056509c620754393e0\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.levelblue.com#website\",\"name\":\"Level Blue\",\"url\":\"https://docs.levelblue.com\",\"publisher\":{\"@id\":\"https://docs.levelblue.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.levelblue.com/api-reference/attachments/modify-an-attachment#webpage\",\"url\":\"https://docs.levelblue.com/api-reference/attachments/modify-an-attachment\",\"name\":\"Modify an Attachment\",\"description\":\"Modifies the properties of an attachment.\",\"dateModified\":\"2026-08-05T20:46:41.239Z\",\"isPartOf\":{\"@id\":\"https://docs.levelblue.com#website\"},\"breadcrumb\":{\"@id\":\"https://docs.levelblue.com/api-reference/attachments/modify-an-attachment#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.levelblue.com/api-reference/attachments/modify-an-attachment#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"USM Investigations\",\"item\":\"https://docs.levelblue.com/api-reference/investigations/list-investigations\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Attachments\",\"item\":\"https://docs.levelblue.com/api-reference/attachments/list-attachments\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Modify an Attachment\",\"item\":\"https://docs.levelblue.com/api-reference/attachments/modify-an-attachment\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.levelblue.com/api-reference/attachments/modify-an-attachment#apireference\",\"headline\":\"Modify an Attachment\",\"name\":\"Modify an Attachment\",\"description\":\"Modifies the properties of an attachment.\",\"url\":\"https://docs.levelblue.com/api-reference/attachments/modify-an-attachment\",\"mainEntityOfPage\":{\"@id\":\"https://docs.levelblue.com/api-reference/attachments/modify-an-attachment#webpage\"},\"dateModified\":\"2026-08-05T20:46:41.239Z\",\"publisher\":{\"@id\":\"https://docs.levelblue.com/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.levelblue.com#website\"}}]}\u003c/script>","siteName":"Level Blue","nav":{"global":{"anchors":[{"anchor":"Blog","icon":"newspaper","href":"https://levelblue.com/blogs"},{"anchor":"Events","icon":"calendar-days","href":"https://levelblue.com/newsroom/events"},{"anchor":"Contact Us","icon":"headset","href":"https://levelblue.com/contact"}]},"tabs":[{"tab":"Home","pages":[{"title":"Home","href":"/documentation"}]},{"tab":"Documentation","products":[{"product":"USM Anywhere™","icon":"globe","pages":[{"title":"USM Anywhere™ Documentation","mode":"wide","sidebarTitle":"Overview","href":"/documentation/usm-anywhere"},{"title":"USM Anywhere Architecture","href":"/documentation/usm-anywhere/deployment-guide/admin/usm-anywhere-architecture"},{"title":"USM Anywhere Data Security","href":"/documentation/usm-anywhere/deployment-guide/admin/usm-anywhere-data-security"},{"title":"USM Anywhere Log Data Enhancement","href":"/documentation/usm-anywhere/deployment-guide/admin/usm-anywhere-log-enhancement"},{"group":"USM Anywhere Quick Start Guides","pages":[{"title":"USM Anywhere Quick Start Guides","sidebarTitle":"Overview","mode":"wide","href":"/documentation/usm-anywhere/quickstart-guides/qsg-index"},{"title":"Quick Start Guide for AWS Sensor","href":"/documentation/usm-anywhere/quickstart-guides/qsg-aws"},{"title":"Quick Start Guide for Azure Sensor","href":"/documentation/usm-anywhere/quickstart-guides/qsg-azure"},{"title":"Quick Start Guide for GCP Sensor","href":"/documentation/usm-anywhere/quickstart-guides/qsg-gcp"},{"title":"Quick Start Guide for Hyper-V Sensor","href":"/documentation/usm-anywhere/quickstart-guides/qsg-hyper-v"},{"title":"Quick Start Guide for VMware Sensor","href":"/documentation/usm-anywhere/quickstart-guides/qsg-vmware"}]},{"group":"USM Anywhere Deployment Guide","pages":[{"title":"USM Anywhere Deployment Guide","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/about-usm-anywhere-deployment"},{"group":"USM Anywhere Deployment Types and Scalability","pages":[{"title":"USM Anywhere Deployment Types and Scalability","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/admin/usm-anywhere-deploy-types"},{"title":"USM Anywhere Trial Pre-Deployment Checklist","href":"/documentation/usm-anywhere/deployment-guide/usm-anywhere-trial-checklist"},{"title":"USM Anywhere Deployment Process","href":"/documentation/usm-anywhere/deployment-guide/admin/usm-anywhere-deploy-process"},{"title":"USM Anywhere Updates","href":"/documentation/usm-anywhere/deployment-guide/admin/usm-anywhere-deploy-upgrades"}]},{"group":"USM Anywhere Sensor Deployments","pages":[{"title":"USM Anywhere Sensor Deployments","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/admin/usm-anywhere-deploy-reqs"},{"title":"LevelBlue USM Anywhere Sensors","href":"/documentation/usm-anywhere/deployment-guide/admin/level-blue-usm-anywhere-sensors"},{"group":"AWS Sensor Deployment","pages":[{"title":"AWS Sensor Deployment","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/aws/about-usm-aws-sensor-deployment"},{"group":"Requirements for AWS Sensor Deployment","pages":[{"title":"Requirements for AWS Sensor Deployment","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/aws/aws-requirements"},{"title":"IAM Roles and Permissions Required by Your AWS Sensor","href":"/documentation/usm-anywhere/deployment-guide/aws/iam-policies-aws-requires"}]},{"title":"Deploy the AWS Sensor","href":"/documentation/usm-anywhere/deployment-guide/aws/deploying-aws-sensor"},{"title":"Connect the AWS Sensor to USM Anywhere","href":"/documentation/usm-anywhere/deployment-guide/aws/aws-sensor-setup"},{"title":"Complete the AWS Sensor Setup","href":"/documentation/usm-anywhere/deployment-guide/aws/configure-sensor-aws"},{"title":"Enable Connections in an AWS VPC","href":"/documentation/usm-anywhere/deployment-guide/aws/enabling-syslog-in-vpcs"},{"title":"VPC Traffic Mirroring with an AWS Sensor","href":"/documentation/usm-anywhere/deployment-guide/aws/vpc-traffic-mirroring"},{"title":"Adding an Additional Sensor for Other AWS Accounts","href":"/documentation/usm-anywhere/deployment-guide/aws/aws-additional-sensor"},{"group":"AWS Log Discovery and Collection in USM Anywhere","pages":[{"title":"AWS Log Discovery and Collection in USM Anywhere","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/aws/aws-log-discovery"},{"title":"Configure Amazon GuardDuty for the AWS Sensor","href":"/documentation/usm-anywhere/deployment-guide/aws/aws-sensor-guardduty"},{"title":"Collect AWS CloudTrail Logs on an AWS Sensor","href":"/documentation/usm-anywhere/deployment-guide/aws/collect-cloudtrail-logs"}]}]},{"group":"Azure Sensor Deployment","pages":[{"title":"Azure Sensor Deployment","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/azure/about-azure"},{"title":"Requirements for Azure Sensor Deployment","href":"/documentation/usm-anywhere/deployment-guide/azure/azure-requirements"},{"title":"Deploy the USM Anywhere Sensor from the Azure Marketplace","href":"/documentation/usm-anywhere/deployment-guide/azure/deploying-azure-sensor-1"},{"title":"Connect the Azure Sensor to USM Anywhere","href":"/documentation/usm-anywhere/deployment-guide/azure/deploying-azure-sensor-2"},{"title":"Complete the Azure Sensor Setup","href":"/documentation/usm-anywhere/deployment-guide/azure/configure-sensor-azure"},{"title":"Create an Application and Obtain Azure Credentials","href":"/documentation/usm-anywhere/deployment-guide/azure/getting-azure-credentials"},{"title":"Add Another Sensor for Other Azure Subscriptions","href":"/documentation/usm-anywhere/deployment-guide/azure/azure-additional-sensor"},{"group":"Azure Log Discovery and Collection in USM Anywhere","pages":[{"title":"Azure Log Discovery and Collection in USM Anywhere","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/azure/azure-log-collections"},{"title":"Collect Azure Resource Logs","href":"/documentation/usm-anywhere/deployment-guide/azure/azure-resource-logs"},{"title":"Collect Logs from Azure Event Hubs","href":"/documentation/usm-anywhere/deployment-guide/azure/azure-event-hubs"}]}]},{"group":"GCP Sensor Deployment","pages":[{"title":"GCP Sensor Deployment","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/gcp/about-gcp-sensor-deployment"},{"title":"Requirements for GCP Sensor Deployment","href":"/documentation/usm-anywhere/deployment-guide/gcp/gcp-requirements"},{"group":"Preparing Your GCP Environment for Sensor Deployment","pages":[{"title":"Preparing Your GCP Environment for Sensor Deployment","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/gcp/preparing-gcp-env-for-deployment"},{"title":"Creating a Custom Role","href":"/documentation/usm-anywhere/deployment-guide/gcp/custom-role-gcp"}]},{"title":"Deploy the GCP Sensor","href":"/documentation/usm-anywhere/deployment-guide/gcp/manually-deploying-gcp-sensor"},{"title":"Connect the GCP Sensor to USM Anywhere","href":"/documentation/usm-anywhere/deployment-guide/gcp/gcp-sensor-setup"},{"title":"Complete the GCP Sensor Setup","href":"/documentation/usm-anywhere/deployment-guide/gcp/configure-sensor-gcp"},{"title":"Add Additional Sensor for Other GCP Subscriptions","href":"/documentation/usm-anywhere/deployment-guide/gcp/gcp-additional-sensor"},{"group":"GCP Log Discovery and Collection in USM Anywhere","pages":[{"title":"GCP Log Discovery and Collection in USM Anywhere","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/gcp/gcp-log-collection"},{"title":"Configure Log Collection Using Templates","href":"/documentation/usm-anywhere/deployment-guide/gcp/pub-sub-templates"},{"title":"Manually Create a Cloud Pub/Sub Topic for Your GCP Sensor","href":"/documentation/usm-anywhere/deployment-guide/gcp/manually-create-topic"},{"title":"Manually Create and Configure an Export Sink for Your GCP Sensor","href":"/documentation/usm-anywhere/deployment-guide/gcp/manually-create-sink"}]}]},{"group":"Hyper-V Sensor Deployment","pages":[{"title":"Hyper-V Sensor Deployment","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/hyperv/about-hyperv"},{"title":"Requirements for Hyper-V Sensor Deployment","href":"/documentation/usm-anywhere/deployment-guide/hyperv/requirements"},{"title":"Create the Hyper-V Virtual Machine","href":"/documentation/usm-anywhere/deployment-guide/hyperv/creating-hyper-v-virtual-machine"},{"title":"Set Up USM Anywhere on the Hyper-V Virtual Machine","href":"/documentation/usm-anywhere/deployment-guide/hyperv/hyperv-vm-sensor"},{"title":"Connect the Hyper-V Sensor to USM Anywhere","href":"/documentation/usm-anywhere/deployment-guide/hyperv/hyperv-sensorsetup"},{"title":"Complete the Hyper-V Sensor Setup","href":"/documentation/usm-anywhere/deployment-guide/hyperv/configuring-sensor-hyper-v"}]},{"group":"VMware Sensor Deployment","pages":[{"title":"VMware Sensor Deployment","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/vmware/about-vmware-sensor-deployment"},{"title":"Requirements for VMware Sensor Deployment","href":"/documentation/usm-anywhere/deployment-guide/vmware/requirements"},{"title":"Create the VMware Virtual Machine","href":"/documentation/usm-anywhere/deployment-guide/vmware/importing-ovf"},{"title":"The OVF Package Is Invalid and Cannot Be Deployed - SHA256 Error","href":"/documentation/usm-anywhere/deployment-guide/vmware/sha-error"},{"title":"Set Up USM Anywhere on the VMware Virtual Machine","href":"/documentation/usm-anywhere/deployment-guide/vmware/vmware-virtual-machine"},{"title":"Connect the VMware Sensor to USM Anywhere","href":"/documentation/usm-anywhere/deployment-guide/vmware/vmware-sensorsetup"},{"title":"Complete the VMware Sensor Setup","href":"/documentation/usm-anywhere/deployment-guide/vmware/configuring-vmware"}]},{"title":"Deploying Your Sensor in a DHCP Environment","href":"/documentation/usm-anywhere/deployment-guide/setup/best-practices-dhcp"}]},{"group":"The AWS Cloud Connector Deployment in USM Anywhere","pages":[{"title":"The AWS Cloud Connector Deployment in USM Anywhere","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/cloud-connector/aws/about-aws-cloud-connector"},{"title":"Uploading AWS CloudFormation Templates","href":"/documentation/usm-anywhere/deployment-guide/cloud-connector/aws/uploading-cloud-formation-template"},{"title":"AWS Cloud Connector Resources","href":"/documentation/usm-anywhere/deployment-guide/cloud-connector/aws/cloud-connector-resources"}]},{"group":"Network Setup and Configuration","pages":[{"title":"Network Setup and Configuration","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/setup/setup-wizard"},{"group":"Configure Network Interfaces for On-Premises Sensors","pages":[{"title":"Configure Network Interfaces for On-Premises Sensors","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/setup/configuring-network"},{"title":"Direct Traffic from Your Physical Network to the VMware Sensor","href":"/documentation/usm-anywhere/deployment-guide/vmware/getting-traffic-from-physical-network-vmware"},{"title":"Direct Traffic from Your Physical Network to the Hyper-V Sensor","href":"/documentation/usm-anywhere/deployment-guide/hyperv/getting-traffic-from-physical-network-hyper-v"}]},{"title":"Configure USM Anywhere to Receive ERSPAN Traffic","href":"/documentation/usm-anywhere/deployment-guide/portmirroring/erspan-traffic"},{"group":"Port Mirroring Configuration on Network Devices","pages":[{"title":"Port Mirroring Configuration on Network Devices","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/portmirroring/portmirroring"},{"title":"Configuring the ADTRAN (AOS) Switch for Port Mirroring","href":"/documentation/usm-anywhere/deployment-guide/portmirroring/adtran"},{"title":"Configuring the Check Point Gateway for Port Mirroring","href":"/documentation/usm-anywhere/deployment-guide/portmirroring/checkpoint"},{"title":"Configuring the Cisco ASA 5505 for Port Mirroring","href":"/documentation/usm-anywhere/deployment-guide/portmirroring/cisco-asa"},{"title":"Configuring the Cisco Nexus 5000 Series for Port Mirroring","href":"/documentation/usm-anywhere/deployment-guide/portmirroring/cisco-nexus"},{"title":"Configuring the Cisco SGxxx Series for Port Mirroring","href":"/documentation/usm-anywhere/deployment-guide/portmirroring/cisco-sgxxx"},{"title":"Configuring the Dell Networking Force10 Switch for Port Mirroring","href":"/documentation/usm-anywhere/deployment-guide/portmirroring/dell-networking-force10-switches"},{"title":"Configuring Dell SonicWALL Port Mirroring","href":"/documentation/usm-anywhere/deployment-guide/portmirroring/sonicwall"},{"title":"Configuring the Fortinet FortiGate Switch for Port Mirroring","href":"/documentation/usm-anywhere/deployment-guide/portmirroring/fortinet-fortigate"}]},{"title":"Proxy Configuration on the USM Anywhere Sensor","href":"/documentation/usm-anywhere/deployment-guide/setup/proxy-configuration"}]},{"group":"Data Sources and Log Collection","pages":[{"title":"Data Sources and Log Collection","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/setup/about-log-management"},{"title":"The Syslog Server Sensor App","href":"/documentation/usm-anywhere/deployment-guide/data-source/app-sensor-syslog"},{"title":"The Graylog (GELF) Sensor App","href":"/documentation/usm-anywhere/deployment-guide/data-source/app-sensor-graylog"},{"group":"Collecting Linux System Logs","pages":[{"title":"Collecting Linux System Logs","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/setup/collecting-logs-linux"},{"title":"Linux Log Collection with Syslog","href":"/documentation/usm-anywhere/deployment-guide/setup/linux-logs-syslog"},{"title":"Linux Log Collection with Osquery","href":"/documentation/usm-anywhere/deployment-guide/setup/linux-logs-osquery"},{"title":"Linux Log Collection with NXLog","href":"/documentation/usm-anywhere/deployment-guide/setup/linux-logs-nxlog"}]},{"group":"Collecting Windows System Logs","pages":[{"title":"Collecting Windows System Logs","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/setup/collecting-logs-windows"},{"group":"NXLog CE for Windows Hosts","pages":[{"title":"NXLog CE for Windows Hosts","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/setup/windows-events-nxlog-ce"},{"title":"Forward NXLog Messages Directly to a USM Anywhere Sensor","href":"/documentation/usm-anywhere/deployment-guide/setup/nxlog-direct-forward"},{"title":"Use Windows Server as an NXLog Collector","href":"/documentation/usm-anywhere/deployment-guide/setup/nxlog-windows-server-collector"},{"title":"Configure NXLog Collection and Subscriptions","href":"/documentation/usm-anywhere/deployment-guide/setup/nxlog-collection-subscription"}]},{"group":"Windows Event Collector Sensor App","pages":[{"title":"Windows Event Collector Sensor App","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/setup/windows-event-collector-app"},{"title":"Microsoft Windows Event Collector Sensor App Setup","href":"/documentation/usm-anywhere/deployment-guide/setup/wec-setup"},{"title":"Windows Event Collector Sensor App Manual Certificate Installation","href":"/documentation/usm-anywhere/deployment-guide/setup/wec-manual-setup"},{"title":"Windows Event Collector Sensor App Log Forwarding","href":"/documentation/usm-anywhere/deployment-guide/setup/wec-logs"},{"title":"Windows Event Collector Sysmon Installation","href":"/documentation/usm-anywhere/deployment-guide/setup/wec-sysmon"}]}]}]},{"title":"File Integrity Monitoring","href":"/documentation/usm-anywhere/deployment-guide/admin/file-integrity-monitoring"},{"group":"Alarm and Event Notifications","pages":[{"title":"Alarm and Event Notifications","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/notifications/notifications"},{"title":"Sending USM Anywhere Notifications to Slack","href":"/documentation/usm-anywhere/deployment-guide/notifications/slack"},{"title":"Sending USM Anywhere Notifications to Datadog","href":"/documentation/usm-anywhere/deployment-guide/notifications/datadog-events"},{"title":"Sending USM Anywhere Notifications to PagerDuty","href":"/documentation/usm-anywhere/deployment-guide/notifications/pagerduty"},{"group":"Sending Notifications Through Amazon SNS","pages":[{"title":"Sending Notifications Through Amazon SNS","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/notifications/amazon-sns-messaging"},{"title":"Set Up an Amazon SNS Topic","href":"/documentation/usm-anywhere/deployment-guide/notifications/setup-sns-topic"},{"title":"Create an AWS Access Key","href":"/documentation/usm-anywhere/deployment-guide/notifications/create-aws-key"},{"title":"Configure Amazon SNS Notifications in USM Anywhere","href":"/documentation/usm-anywhere/deployment-guide/notifications/usm-sns-notifications"}]}]},{"group":"Troubleshooting and Remote Sensor Support","pages":[{"title":"Troubleshooting and Remote Sensor Support","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/admin/remote-support-about"},{"title":"Checking Connectivity to the Remote Server","href":"/documentation/usm-anywhere/deployment-guide/admin/remote-support-connectivity"},{"title":"Creating a Remote Support Session","href":"/documentation/usm-anywhere/deployment-guide/admin/remote-support-session"},{"title":"Sensor System Menu","href":"/documentation/usm-anywhere/deployment-guide/admin/remote-support-network-configuration"},{"title":"Collecting Debug Information","href":"/documentation/usm-anywhere/deployment-guide/admin/remote-support-collect-debug"},{"title":"View Network Testing Information","href":"/documentation/usm-anywhere/deployment-guide/admin/remote-support-network-testing"},{"title":"Retrieve Unique Identifier Information","href":"/documentation/usm-anywhere/deployment-guide/admin/obtain-uid-info"}]}]},{"group":"USM Anywhere User Guides","pages":[{"title":"USM Anywhere User Guide","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/introduction"},{"group":"Getting Started with USM Anywhere","pages":[{"title":"Getting Started with USM Anywhere","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/getting-started/getting-started"},{"title":"Prerequisites and Requirements","href":"/documentation/usm-anywhere/user-guide/introduction/prerequisites-requirements"},{"title":"USM Anywhere Network Security Concepts and Terminology","href":"/documentation/usm-anywhere/user-guide/introduction/concepts-terminology"},{"title":"USM Anywhere Network Security Capabilities","href":"/documentation/usm-anywhere/user-guide/introduction/capabilities"},{"title":"USM Anywhere Network Security Best Practices","href":"/documentation/usm-anywhere/user-guide/getting-started/network-security-best-practices"},{"title":"Expectations of Security Monitoring","href":"/documentation/usm-anywhere/user-guide/getting-started/expectations"},{"title":"Establishing Baseline Network Behavior","href":"/documentation/usm-anywhere/user-guide/getting-started/baseline-network-behavior"},{"title":"USM Anywhere Web UI","href":"/documentation/usm-anywhere/user-guide/introduction/web-user-interface"},{"title":"Verifying USM Anywhere Operation","href":"/documentation/usm-anywhere/user-guide/getting-started/usm-operation"},{"title":"Start Using USM Anywhere","href":"/documentation/usm-anywhere/user-guide/getting-started/start-using-usma"}]},{"title":"USM Anywhere Best Practices","href":"/documentation/usm-anywhere/user-guide/best-practices/usma-best-practices"},{"group":"USM Anywhere Dashboards","pages":[{"title":"USM Anywhere Dashboards","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/dashboards/usm-dashboards"},{"title":"Refreshing and Filtering Data from the USM Anywhere Dashboards","sidebarTitle":"Refreshing and Filtering Data from the USM Anywhere Dashboards","href":"/documentation/usm-anywhere/user-guide/dashboards/filtering-data"},{"title":"Exporting Data from the USM Anywhere Dashboards","sidebarTitle":"Exporting Data from the USM Anywhere Dashboards","href":"/documentation/usm-anywhere/user-guide/dashboards/exporting-data"},{"group":"Executive Dashboard","pages":[{"title":"Executive Dashboard","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/dashboards/executive-reporting"},{"title":"Executive Summary Section inside the Executive Dashboard","sidebarTitle":"Executive Summary Section inside the Executive Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/executive-summary"},{"title":"Investigations Section inside the Executive Dashboard","sidebarTitle":"Investigations Section inside the Executive Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/executive-investigations"},{"title":"Alarms Section inside the Executive Dashboard","sidebarTitle":"Alarms Section inside the Executive Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/executive-alarms"},{"title":"Vulnerability Assessment Section inside the Executive Dashboard","sidebarTitle":"Vulnerability Assessment Section inside the Executive Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/executive-vuln-assessment"},{"title":"Events Section inside the Executive Dashboard","sidebarTitle":"Events Section inside the Executive Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/executive-events"},{"title":"Actions on the Executive Dashboard","sidebarTitle":"Actions on the Executive Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/executive-actions"},{"title":"Clone the Executive Dashboard","sidebarTitle":"Clone the Executive Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/executive-clone"}]},{"group":"Viewing USM Anywhere Dashboards","pages":[{"title":"Viewing USM Anywhere Dashboards","sidebarTitle":"Viewing USM Anywhere Dashboards","href":"/documentation/usm-anywhere/user-guide/dashboards/viewing-dashboards"},{"title":"LevelBlue Agent Dashboard","sidebarTitle":"LevelBlue Agent Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/alienvault-agent"},{"title":"Amazon DynamoDB Dashboard","sidebarTitle":"Amazon DynamoDB Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/amazon-dynamodb"},{"title":"Amazon S3 Dashboard","sidebarTitle":"Amazon S3 Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/amazon-s3"},{"title":"Amazon VPC Flow Logs Dashboard","sidebarTitle":"Amazon VPC Flow Logs Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/aws-vpc-flow-logs"},{"title":"AWS Dashboard","sidebarTitle":"AWS Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/aws"},{"title":"AWS Load Balancer Dashboard","sidebarTitle":"AWS Load Balancer Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/aws-load-balancers"},{"title":"Azure Dashboard","sidebarTitle":"Azure Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/azure"},{"title":"Box Dashboard","sidebarTitle":"Box Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/box"},{"title":"Cisco AMP Dashboard","sidebarTitle":"Cisco AMP Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/cisco-amp"},{"title":"Cisco Meraki Dashboard","sidebarTitle":"Cisco Meraki Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/cisco-meraki"},{"title":"Cisco Umbrella Dashboard","sidebarTitle":"Cisco Umbrella Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/cisco-umbrella"},{"title":"Cloudflare Dashboard","sidebarTitle":"Cloudflare Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/cloudflare"},{"title":"Cylance Dashboard","sidebarTitle":"Cylance Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/cylance"},{"title":"FireEye Dashboard","sidebarTitle":"FireEye Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/fireeye"},{"title":"FortiGate Dashboard","sidebarTitle":"FortiGate Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/fortigate"},{"title":null,"sidebarTitle":"","href":"/documentation/usm-anywhere/user-guide/dashboards/g-cloud-platform"},{"title":"Google G Suite Audit Dashboard","sidebarTitle":"Google G Suite Audit Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/g-suite-audit"},{"title":"Google G Suite Drive Dashboard","sidebarTitle":"Google G Suite Drive Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/g-suite-drive"},{"title":"McAfee ePO Dashboard","sidebarTitle":"McAfee ePO Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/mcafeeepo"},{"title":"Microsoft ATA Dashboard","sidebarTitle":"Microsoft ATA Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/microsoft-ata"},{"title":"MITRE ATT\u0026CK Dashboard","sidebarTitle":"MITRE ATT\u0026CK Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/mitre-att-ck"},{"title":"MobileIron Threat Defense Dashboard","sidebarTitle":"MobileIron Threat Defense Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/mobileiron"},{"title":"NIDS Dashboard","sidebarTitle":"NIDS Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/nids"},{"title":"Office 365 Azure Active Directory Dashboard","sidebarTitle":"Office 365 Azure Active Directory Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/office-365-azure-ad"},{"title":"Office 365 OneDrive Dashboard","sidebarTitle":"Office 365 OneDrive Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/office-365-onedrive"},{"title":"Office 365 SharePoint Dashboard","sidebarTitle":"Office 365 SharePoint Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/office-365-sharepoint"},{"title":"Okta Dashboard","sidebarTitle":"Okta Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/okta"},{"title":"Open Threat Exchange Dashboard","sidebarTitle":"Open Threat Exchange Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/otx"},{"title":"Overview Dashboard","sidebarTitle":"Overview Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/overview"},{"title":"Palo Alto Networks Dashboard","sidebarTitle":"Palo Alto Networks Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/palo-alto"},{"title":"SonicWall UTM Dashboard","sidebarTitle":"SonicWall UTM Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/sonicwall"},{"title":"Sophos UTM Dashboard","sidebarTitle":"Sophos UTM Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/sophos"},{"title":"VMware Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/vmware"},{"title":"Vulnerabilities Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/vulnerabilities"},{"title":"Watchguard","href":"/documentation/usm-anywhere/user-guide/dashboards/watchguard"},{"title":"Windows Authentication Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/windows-authentication"},{"title":"Windows Dashboard","href":"/documentation/usm-anywhere/user-guide/dashboards/windows"}]},{"group":"USM Anywhere Custom Dashboards","pages":[{"title":"USM Anywhere Custom Dashboards","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/dashboards/creating-custom-dashboard"},{"title":"Example: Creating a Custom Widget on Dashboards","href":"/documentation/usm-anywhere/user-guide/dashboards/ex-create-custom-dashboard-events-over-time"}]}]},{"group":"Asset Management","pages":[{"title":"Asset Management","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-management"},{"group":"Asset Administration in USM Anywhere","pages":[{"title":"Asset Administration in USM Anywhere","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/assets-administration"},{"title":"Adding Assets","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/adding-assets"},{"title":"Importing Assets from a CSV File","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/importing-assets"},{"group":"Asset List View","pages":[{"title":"Asset List View","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/asset-list-view"},{"title":"Assets List Columns","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/assets-list-columns"},{"title":"Configuring Columns on Assets","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/assets-list-conf-columns"},{"title":"Assets Views","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/views"},{"title":"Report Templates in Assets","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/report-templates"}]},{"title":"Selecting Assets in Asset List View","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/selecting-assets"},{"group":"Searching Assets","pages":[{"title":"Searching Assets","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/searching-for-assets"},{"title":"Managing Filters","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/managing-filters"},{"title":"Advanced Search Filter","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/advanced-search-filter"},{"title":null,"href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/standard-advanced-modes"}]},{"title":"Running Asset Scans","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/running-asset-scan"},{"title":"Running Asset Scans Using a BlueApp","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/scan-with-alienapp"},{"title":"Running Authenticated Asset Scans","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/running-vuln-scan"},{"title":"Scheduling Asset Scans from Assets","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/scheduling-asset-scans"},{"title":"Scheduling Authenticated Asset Scans from Assets","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/scheduling-auth-scans"},{"title":"Adding BlueApps to an Asset","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/adding-alienapps-to-assets"},{"title":"Viewing Assets Details","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/viewing-asset-details"},{"title":"Events Created When an Asset Is Discovered","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/event-discovery"},{"title":"Events Created When an Asset Stops Sending Data","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/event-timeout-threshold"},{"title":"Managing Asset Fields","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/asset-fields"},{"title":"Deleting the Assets","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/deleting-assets"},{"title":"Editing Assets","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/editing-assets"},{"title":"Create an Assets Report","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-administration/exporting-assets"}]},{"group":"Asset Groups Administration","pages":[{"title":"Asset Groups Administration","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/asset-group-administration"},{"group":"Creating an Asset Group","pages":[{"title":"Creating an Asset Group","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/creating-asset-group"},{"title":"How to Create a PCI Dynamic Asset Group","sidebarTitle":"How to Create a PCI Dynamic Asset Group","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/ex-creating-pci-dynamic"},{"title":"How to Create a Dynamic Asset Group Based on a Sensor","sidebarTitle":"How to Create a Dynamic Asset Group Based on a Sensor","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/ex-creating-sensor-dynamic"}]},{"title":"Asset Group List View","sidebarTitle":"Asset Group List View","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/asset-group-list-view"},{"title":"Searching Asset Groups","sidebarTitle":"Searching Asset Groups","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/searching-asset-groups"},{"title":"Running Asset Group Scans","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/running-asset-groups-scan"},{"title":"Running Authenticated Asset Groups Scans","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/running-vuln-scan-asset-groups"},{"title":"Scheduling Asset Group Scans from Asset Groups","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/scheduling-asset-group-scans"},{"title":"Scheduling Authenticated Asset Group Scans from Asset Groups","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/scheduling-auth-ag-scans"},{"title":"Configuring an Asset Group","sidebarTitle":"Configuring an Asset Group","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/configuring-asset-group"},{"title":"Viewing Asset Group Details","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/viewing-asset-group-details"},{"title":"Deleting an Asset Group","href":"/documentation/usm-anywhere/user-guide/asset-management/asset-groups/deleting-asset-groups"}]},{"title":"Performing Vulnerability Scans","sidebarTitle":"Performing Vulnerability Scans","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/perf-vulnerability-scans"},{"group":"Viewing Vulnerabilities Scan Results","pages":[{"title":"Viewing Vulnerabilities Scan Results","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/viewing-scan-results"},{"title":"Vulnerabilities List Columns","sidebarTitle":"Vulnerabilities List Columns","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/vulns-list-columns"},{"title":"Vulnerabilities Views","sidebarTitle":"Vulnerabilities Views","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/views"},{"title":"Report Templates in Vulnerabilities","sidebarTitle":"Report Templates in Vulnerabilities","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/report-templates"}]},{"group":"Searching Vulnerabilities","pages":[{"title":"Searching Vulnerabilities","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/searching-vuln"},{"title":"Standard and Advanced Modes on Vulnerabilities","sidebarTitle":"Standard and Advanced Modes on Vulnerabilities","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/standard-advanced-modes"}]},{"group":"Viewing Vulnerabilities Details","pages":[{"title":"Viewing Vulnerabilities Details","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/viewing-vulns-details"},{"title":"Applying Actions to Vulnerabilities","sidebarTitle":"Applying Actions to Vulnerabilities","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/actions-to-vulns"}]},{"title":"Available Remediation Patches for Vulnerabilities","sidebarTitle":"Available Remediation Patches for Vulnerabilities","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/remediation-steps"},{"title":"Labeling the Vulnerabilities","sidebarTitle":"Labeling the Vulnerabilities","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/labeling-vulnerabilities"},{"title":"Create a Vulnerabilities Report","sidebarTitle":"Create a Vulnerabilities Report","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/exporting-vuln"},{"title":"USM Anywhere Scans Best Practices","sidebarTitle":"USM Anywhere Scans Best Practices","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/scans-best-practices"}]},{"group":"Alarms Management","pages":[{"title":"Alarms Management","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/alarms/alarms-management"},{"group":"Alarms List View","pages":[{"title":"Alarms List View","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/alarms/alarms-list-view"},{"title":"Columns Within List Views","href":"/documentation/usm-anywhere/user-guide/alarms/alarms-list-columns"},{"title":"Configuring Columns within List View","href":"/documentation/usm-anywhere/user-guide/alarms/alarms-list-conf-columns"},{"title":"Priority Field for Alarms","href":"/documentation/usm-anywhere/user-guide/alarms/alarms-list-priority-field"},{"title":"Alarms Views","href":"/documentation/usm-anywhere/user-guide/alarms/views"},{"title":"Report Templates in Alarms","href":"/documentation/usm-anywhere/user-guide/alarms/report-templates"}]},{"title":"Selecting Alarms in Alarm List View","href":"/documentation/usm-anywhere/user-guide/alarms/selecting-alarms"},{"group":"Searching Alarms","pages":[{"title":"Searching Alarms","href":"/documentation/usm-anywhere/user-guide/alarms/searching-alarms"},{"title":"Searching Alarms by Using the Search Field","href":"/documentation/usm-anywhere/user-guide/alarms/searching-box"},{"title":"Standard and Advanced Modes on Alarms","href":"/documentation/usm-anywhere/user-guide/alarms/standard-advanced-modes"},{"title":"About the No Value Option","href":"/documentation/usm-anywhere/user-guide/alarms/no-value"}]},{"group":"Viewing Alarm Details","pages":[{"title":"Viewing Alarm Details","href":"/documentation/usm-anywhere/user-guide/alarms/viewing-alarms-details"},{"title":"Applying Actions to Alarms","href":"/documentation/usm-anywhere/user-guide/alarms/actions-to-alarms"},{"group":"Creating Rules from Alarms","pages":[{"title":"Creating Rules from Alarms","href":"/documentation/usm-anywhere/user-guide/alarms/creating-rules-from-alarms"},{"title":"Creating Suppression Rules from the Alarms Page","href":"/documentation/usm-anywhere/user-guide/alarms/suppression-rule"},{"title":"Creating Notification Rules from the Alarms Page","href":"/documentation/usm-anywhere/user-guide/alarms/notification-rule"}]},{"title":"Adding an Alarm to an Investigation","href":"/documentation/usm-anywhere/user-guide/alarms/investigation"},{"title":"Searching Events from the Details of an Alarm","href":"/documentation/usm-anywhere/user-guide/alarms/searching-details-alarms"}]},{"title":"Labeling the Alarms","href":"/documentation/usm-anywhere/user-guide/alarms/labeling-alarms"},{"title":"Alarm Status","href":"/documentation/usm-anywhere/user-guide/alarms/alarms-status"},{"title":"Create an Alarms Report","href":"/documentation/usm-anywhere/user-guide/alarms/exporting-alarms"},{"title":"Alarms Settings","href":"/documentation/usm-anywhere/user-guide/alarms/alarms-settings"}]},{"group":"System Events Management","pages":[{"title":"System Events Management","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/system-events/system-events-management"},{"title":"USM Anywhere System Events List View","href":"/documentation/usm-anywhere/user-guide/system-events/system-events-list-view"},{"title":"Searching System Events","href":"/documentation/usm-anywhere/user-guide/system-events/searching-system-events"},{"title":"Viewing System Event Details","href":"/documentation/usm-anywhere/user-guide/system-events/viewing-system-events-details"},{"group":"Regular Events and System Events","pages":[{"title":"Regular Events and System Events","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/system-events/rules-for-system-events"},{"title":"Orchestration Rule for the \"Sensor Appears Offline\" System Event","href":"/documentation/usm-anywhere/user-guide/system-events/sensor-appears-offline"},{"title":"Orchestration Rule for the \"Sensor Reconnected\" System Event","href":"/documentation/usm-anywhere/user-guide/system-events/sensor-reconnected"},{"title":"Orchestration Rule for the \"Event from Asset Not Received\" System Event","href":"/documentation/usm-anywhere/user-guide/system-events/event-asset-not-received"},{"title":"Orchestration Rule for the \"Event from BlueApp Not Received\" System Event","href":"/documentation/usm-anywhere/user-guide/system-events/event-alienapp-not-received"}]}]},{"group":"Console User Events on USM Anywhere","pages":[{"title":"Console User Events on USM Anywhere","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/console-user-events/console-user-events-management"},{"title":"USM Anywhere Console User Events List View","href":"/documentation/usm-anywhere/user-guide/console-user-events/console-user-events-list-view"},{"title":"Searching Console User Events","href":"/documentation/usm-anywhere/user-guide/console-user-events/searching-console-user-events"},{"title":"Viewing Console User Events Details","href":"/documentation/usm-anywhere/user-guide/console-user-events/viewing-console-user-events-details"},{"title":"Create a Console User Events Report","href":"/documentation/usm-anywhere/user-guide/console-user-events/exporting-console-user-events"}]},{"group":"Configuration Issues Management","pages":[{"title":"Configuration Issues Management","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/configuration-issues/confissues-management"},{"title":"Configuration Issues List View","href":"/documentation/usm-anywhere/user-guide/configuration-issues/confissues-list-view"},{"title":"Searching Configuration Issues","href":"/documentation/usm-anywhere/user-guide/configuration-issues/searching-confissues"},{"title":"Viewing Configuration Issues Details","href":"/documentation/usm-anywhere/user-guide/configuration-issues/viewing-confissues-details"},{"title":"Create a Configuration Issues Report","href":"/documentation/usm-anywhere/user-guide/configuration-issues/exporting-confissues"},{"title":"List of Configuration Issues in USM Anywhere","href":"/documentation/usm-anywhere/user-guide/configuration-issues/confissues-list"}]},{"group":"User Behaviour Analytics","pages":[{"title":"User Behavior Analytics","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/user-behavior-analytics/user-behavior-analytics"},{"title":"User List View","href":"/documentation/usm-anywhere/user-guide/user-behavior-analytics/user-list-view"},{"title":"User Discovery","href":"/documentation/usm-anywhere/user-guide/user-behavior-analytics/managing-users"},{"title":"Understanding User Status in User Data Sources","href":"/documentation/usm-anywhere/user-guide/user-behavior-analytics/user-status-in-data-sources"},{"title":"Viewing Full User Details","href":"/documentation/usm-anywhere/user-guide/user-behavior-analytics/full-user-details"},{"title":"Events, Alarms, and Notifications Created When a User's Status Changes","href":"/documentation/usm-anywhere/user-guide/user-behavior-analytics/user-state-events-and-alarms"},{"title":"Merging Users","href":"/documentation/usm-anywhere/user-guide/user-behavior-analytics/merging-users"},{"title":"Deleting Users","href":"/documentation/usm-anywhere/user-guide/user-behavior-analytics/deleting-users"},{"title":"Importing Users from a CSV File","href":"/documentation/usm-anywhere/user-guide/user-behavior-analytics/csv-user-import"}]},{"group":"Events Management","pages":[{"title":"Events Management","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/events/events-management"},{"title":"Workflow of the USM Anywhere Event Process","href":"/documentation/usm-anywhere/user-guide/getting-started/event-processing-workflow"},{"group":"Events List View","pages":[{"title":"Events List View","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/events/events-list-view"},{"title":"Event Views","href":"/documentation/usm-anywhere/user-guide/events/views"},{"title":"Report Templates in Events","href":"/documentation/usm-anywhere/user-guide/events/report-templates"},{"title":"LevelBlue Generic Data Source","href":"/documentation/usm-anywhere/user-guide/events/av-generic-plugin"}]},{"group":"Searching Events","pages":[{"title":"Searching Events","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/events/searching-events"},{"title":"Searching Events by Using the Search Field","href":"/documentation/usm-anywhere/user-guide/events/searching-box"},{"title":"Standard and Advanced Modes on Events","href":"/documentation/usm-anywhere/user-guide/events/standard-advanced-modes"},{"title":"About the No Value Option","href":"/documentation/usm-anywhere/user-guide/events/no-value"}]},{"group":"Viewing Event Details","pages":[{"title":"Viewing Event Details","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/events/viewing-events-details"},{"title":"Applying Actions to Events","href":"/documentation/usm-anywhere/user-guide/events/actions-to-events"},{"group":"Creating Rules From Events","pages":[{"title":"Creating Rules from Events","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/events/creating-rules-from-events"},{"title":"Creating Suppression Rules from the Events Page","href":"/documentation/usm-anywhere/user-guide/events/supression-rule"},{"title":"Creating Filtering Rules from the Events Page","href":"/documentation/usm-anywhere/user-guide/events/filtering-rule"},{"title":"Creating Alarm Rules from the Events Page","href":"/documentation/usm-anywhere/user-guide/events/alarm-rules"},{"title":"Creating Notification Rules from the Events Page","href":"/documentation/usm-anywhere/user-guide/events/notification-rule"}]},{"title":"Adding an Event to an Investigation","href":"/documentation/usm-anywhere/user-guide/events/investigation"}]},{"title":"Create an Events Report","href":"/documentation/usm-anywhere/user-guide/events/exporting-events"},{"title":"Protecting Your Sensor's Performance with EPS Adaptive Response","href":"/documentation/usm-anywhere/user-guide/events/eps-adaptive-response"},{"title":"Raw Logs in Events","href":"/documentation/usm-anywhere/user-guide/events/raw-logs"},{"title":"Managing Collected CloudTrail Event Logs","href":"/documentation/usm-anywhere/user-guide/events/cloudtrail-events-rules"},{"title":"Event Keys","href":"/documentation/usm-anywhere/user-guide/events/event-keys"}]},{"group":"USM Anywhere Scheduler","pages":[{"title":"USM Anywhere Scheduler","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/scheduler/scheduler"},{"title":"USM Anywhere Scheduler Best Practices","href":"/documentation/usm-anywhere/user-guide/scheduler/scheduler-best-practices"},{"title":"Managing Jobs in the Scheduler","href":"/documentation/usm-anywhere/user-guide/scheduler/managing-scheduler-jobs"},{"group":"Scheduling Active Directory Scans from the Job Scheduler Page","pages":[{"title":null,"sidebarTitle":null,"href":"/documentation/usm-anywhere/deployment-guide/data-source/asset-scan-active-directory"},{"title":" Granting Access to Active Directory for USM Anywhere","href":"/documentation/usm-anywhere/deployment-guide/setup/granting-access-to-ad-from-usma"}]},{"title":"Scheduling Asset Scans from the Job Scheduler Page","href":"/documentation/usm-anywhere/user-guide/scheduler/scheduling-asset-scans-from-scheduler"},{"title":"Scheduling Asset Groups Scans from the Job Scheduler Page","href":"/documentation/usm-anywhere/user-guide/scheduler/scheduling-ag-scans-from-scheduler"},{"title":"Scheduling User Discovery Jobs from the Job Scheduler Page","href":"/documentation/usm-anywhere/user-guide/scheduler/managing-uba-scheduler-jobs"},{"group":"Scheduling Log Collection from the Job Scheduler Page","pages":[{"title":"Scheduling Log Collection from the Job Scheduler Page","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/scheduler/scheduling-log-collection"},{"group":"AWS Log Discovery and Collection in USM Anywhere","pages":[{"title":"AWS Log Discovery and Collection in USM Anywhere","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/aws/aws-log-discovery"},{"title":"Configure Amazon GuardDuty for the AWS Sensor","href":"/documentation/usm-anywhere/deployment-guide/aws/aws-sensor-guardduty"},{"title":"Collect AWS CloudTrail Logs on an AWS Sensor","href":"/documentation/usm-anywhere/deployment-guide/aws/collect-cloudtrail-logs"},{"title":"Collect Amazon CloudWatch Logs","href":"/documentation/usm-anywhere/deployment-guide/aws/collect-cloudwatch-job"},{"title":"Collect Amazon CloudWatch Logs","href":"/documentation/usm-anywhere/deployment-guide/aws/collect-cloudwatch-job"},{"title":"Collect Amazon S3 Access Logs","href":"/documentation/usm-anywhere/deployment-guide/aws/collect-s3-access-logs"},{"title":"Collect Amazon S3 Access Logs","href":"/documentation/usm-anywhere/deployment-guide/aws/collect-s3-access-logs"},{"title":"Collect ELB Access Logs","href":"/documentation/usm-anywhere/deployment-guide/aws/collect-elb-access-logs"},{"title":"Collect ELB Access Logs","href":"/documentation/usm-anywhere/deployment-guide/aws/collect-elb-access-logs"},{"title":"Collect Other Logs from an Amazon S3 Bucket","href":"/documentation/usm-anywhere/deployment-guide/aws/creating-s3-collection-job"},{"title":"Collect Other Logs from an Amazon S3 Bucket","href":"/documentation/usm-anywhere/deployment-guide/aws/creating-s3-collection-job"},{"title":"Collect Logs from Amazon S3 Buckets with KMS Encryption","href":"/documentation/usm-anywhere/deployment-guide/aws/kms-encrypted-logs"},{"title":"Collect Logs from Amazon S3 Buckets with KMS Encryption","href":"/documentation/usm-anywhere/deployment-guide/aws/kms-encrypted-logs"}]},{"group":"Azure Log Discovery and Collection in USM Anywhere","pages":[{"title":"Azure Log Discovery and Collection in USM Anywhere","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/deployment-guide/azure/azure-log-collections"},{"group":"Collect Azure Resource Logs","pages":[{"title":"Collect Azure Resource Logs","href":"/documentation/usm-anywhere/deployment-guide/azure/azure-resource-logs"},{"title":"Enable Diagnostics for Azure Web Apps","href":"/documentation/usm-anywhere/deployment-guide/azure/azure-enable-diagnostics"},{"title":"Enable Diagnostics for Azure Web Apps","href":"/documentation/usm-anywhere/deployment-guide/azure/azure-enable-diagnostics"},{"title":"Create a New Azure Log Collection Job","href":"/documentation/usm-anywhere/deployment-guide/azure/creating-azure-collection-job"},{"title":"Create a New Azure Log Collection Job","href":"/documentation/usm-anywhere/deployment-guide/azure/creating-azure-collection-job"}]},{"title":"Collect Logs from Azure Event Hubs","href":"/documentation/usm-anywhere/deployment-guide/azure/azure-event-hubs"}]}]}]},{"group":"Rules Management","pages":[{"title":"Rules Management","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/rules-management/rules-management"},{"group":"Orchestration Rules","pages":[{"title":"Orchestration Rules","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/rules-management/orchestration-rules"},{"title":"Orchestration Rules Workflow","sidebarTitle":"Orchestration Rules Workflow","href":"/documentation/usm-anywhere/user-guide/rules-management/orchestration-rules-workflow"},{"title":"Orchestration Rules Best Practices","sidebarTitle":"Orchestration Rules Best Practices","href":"/documentation/usm-anywhere/user-guide/rules-management/orchestration-best-practices"},{"title":"Orchestration Rules Page Overview","sidebarTitle":"Orchestration Rules Page Overview","href":"/documentation/usm-anywhere/user-guide/rules-management/orchestration-rules-navigation"},{"group":"Orchestration Rules Creation","pages":[{"title":"Orchestration Rules Creation","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/rules-management/orchestration-rules-creation"},{"title":"Operators in the Orchestration Rules","sidebarTitle":"Operators in the Orchestration Rules","href":"/documentation/usm-anywhere/user-guide/rules-management/orchestration-rules-operators"},{"title":"Determining the Mapping of a Field","sidebarTitle":"Determining the Mapping of a Field","href":"/documentation/usm-anywhere/user-guide/rules-management/mapping-field"},{"group":"Suppression Rules from the Orchestration Rules Page","pages":[{"title":"Suppression Rules from the Orchestration Rules Page","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/rules-management/suppression-rules"},{"title":"Example: Creating a Suppression Rule for Sudo Events","sidebarTitle":"Example: Creating a Suppression Rule for Sudo Events","href":"/documentation/usm-anywhere/user-guide/rules-management/ex-creating-supp-rule"},{"title":"Example: Creating a Suppression Rule for VPC Flow Logs","sidebarTitle":"Example: Creating a Suppression Rule for VPC Flow Logs","href":"/documentation/usm-anywhere/user-guide/rules-management/ex-suppress-vpc-flow-logs"}]},{"title":"Filtering Rules from the Orchestration Rules Page","sidebarTitle":"Filtering Rules from the Orchestration Rules Page","href":"/documentation/usm-anywhere/user-guide/rules-management/filtering-rules"},{"title":"Alarm Rules from the Orchestration Rules Page","sidebarTitle":"Alarm Rules from the Orchestration Rules Page","href":"/documentation/usm-anywhere/user-guide/rules-management/alarm-rules"},{"title":"Notification Rules from the Orchestration Rules Page","sidebarTitle":"Notification Rules from the Orchestration Rules Page","href":"/documentation/usm-anywhere/user-guide/rules-management/notification-rules"},{"title":"Response Action Rules from the Orchestration Rules Page","sidebarTitle":"Response Action Rules from the Orchestration Rules Page","href":"/documentation/usm-anywhere/user-guide/rules-management/response-action-rule"},{"title":"Orchestration Rule Validation","sidebarTitle":"Orchestration Rule Validation","href":"/documentation/usm-anywhere/user-guide/rules-management/orchestration-rule-validation"}]}]},{"group":"Correlation Rules","pages":[{"title":"Correlation Rules","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/rules-management/correlation-rules"},{"title":"View and override Correlation Rules","href":"/documentation/usm-anywhere/user-guide/rules-management/view-and-override-correlation-rules"},{"title":"Operators in the Correlation Rules","sidebarTitle":"Operators in the Correlation Rules","href":"/documentation/usm-anywhere/user-guide/rules-management/correlation-rules-operators"}]},{"group":"Correlation Lists","pages":[{"title":"Correlation Lists","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/rules-management/correlation-lists"},{"title":"Example: Creating an Alarm Rule Using a Correlation List","sidebarTitle":"Example: Creating an Alarm Rule Using a Correlation List","href":"/documentation/usm-anywhere/user-guide/rules-management/ex-correlation-list"}]},{"group":"Playbooks","pages":[{"title":"Playbooks","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/rules-management/playbooks"},{"title":"Viewing Your Playbooks","sidebarTitle":"Viewing Your Playbooks","href":"/documentation/usm-anywhere/user-guide/rules-management/playbooks-navigation"},{"title":"Executing a Playbook","sidebarTitle":"Executing a Playbook","href":"/documentation/usm-anywhere/user-guide/rules-management/playbooks-execute"},{"title":"Creating a Playbook","sidebarTitle":"Creating a Playbook","href":"/documentation/usm-anywhere/user-guide/rules-management/playbooks-creation"},{"title":"Editing a Playbook","sidebarTitle":"Editing a Playbook","href":"/documentation/usm-anywhere/user-guide/rules-management/playbooks-edit"},{"title":"Cloning a Playbook","sidebarTitle":"Cloning a Playbook","href":"/documentation/usm-anywhere/user-guide/rules-management/playbooks-clone"},{"title":"Transforming a Playbook","sidebarTitle":"Transforming a Playbook","href":"/documentation/usm-anywhere/user-guide/rules-management/playbooks-transform"},{"title":"Archiving Your Playbooks","sidebarTitle":"Archiving Your Playbooks","href":"/documentation/usm-anywhere/user-guide/rules-management/playbooks-archive"},{"title":"Deleting a Playbook","sidebarTitle":"Deleting a Playbook","href":"/documentation/usm-anywhere/user-guide/rules-management/playbooks-delete"}]}]},{"group":"Vulnerability Assessment","pages":[{"title":"Vulnerability Assessment","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/vulnerability-assessment"},{"title":"About Vulnerability Assessment","sidebarTitle":"About Vulnerability Assessment","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/about-vuln-assess"},{"title":"System Settings for Authenticated Scans","sidebarTitle":"System Settings for Authenticated Scans","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/system-settings-auth-scan"},{"group":"Managing Credentials in USM Anywhere","pages":[{"title":"Managing Credentials in USM Anywhere","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/credentials"},{"title":"Creating Credentials","sidebarTitle":"Creating Credentials","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/creating-credentials"},{"title":"Assigning Credentials to Assets","sidebarTitle":"Assigning Credentials to Assets","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/assigning-credentials"},{"title":"Removing Credentials from Assets","sidebarTitle":"Removing Credentials from Assets","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/removing-credentials"}]},{"title":"LevelBlue Vulnerability Scanner Guide","sidebarTitle":"LevelBlue Vulnerability Scanner Guide","href":"/documentation/usm-anywhere/usm-anywhere-user-guides/vulnerability-assessment/level-blue-vulnerability-scanner-guide"},{"group":"Deployment Guides for Tenable Scanners","pages":[{"title":"Deployment Guides for Tenable Scanners","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/deployment-guides-for-tenable-scanners"},{"title":"Tenable Sensor Deployment for Hyper-V","sidebarTitle":"Tenable Sensor Deployment for Hyper-V","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/tenable-sensor-deploy-hyperv"},{"title":"Tenable Sensor Deployment for VMware","sidebarTitle":"Tenable Sensor Deployment for VMware","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/tenable-sensor-deployment-for-v-mware"},{"title":"Tenable Sensor Deployment for GCP","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/tenable-sensor-deployment-for-gcp"},{"title":"Tenable Sensor Deployment for Azure","sidebarTitle":"Tenable Sensor Deployment for Azure","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/tenable-sensor-deployment-for-azure"},{"title":"Tenable Sensor Deployment for AWS","sidebarTitle":"Tenable Sensor Deployment for AWS","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/tenable-sensor-deployment-for-aws"}]},{"title":"LevelBlue Vulnerability Scanner FAQs","href":"/documentation/usm-anywhere/user-guide/vulnerability-assessment/level-blue-vulnerability-scanner-faqs"}]},{"group":"Open Threat Exchange® and USM Anywhere","pages":[{"title":"Open Threat Exchange® and USM Anywhere","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/otx/open-threat-exchange"},{"title":"About OTX","sidebarTitle":"About OTX","href":"/documentation/usm-anywhere/user-guide/otx/about-otx"},{"title":"Using OTX in USM Anywhere","sidebarTitle":"Using OTX in USM Anywhere","href":"/documentation/usm-anywhere/user-guide/otx/using-otx-in-anywhere"},{"title":"Entering Your OTX Key","sidebarTitle":"Entering Your OTX Key","href":"/documentation/usm-anywhere/user-guide/otx/otx-key"}]},{"group":"USM Anywhere Sensor Management","pages":[{"title":"USM Anywhere Sensor Management","sidebarTitle":"USM Anywhere Sensor Management","href":"/documentation/usm-anywhere/user-guide/sensor-management/sensor-management"},{"title":"Sensors Page Overview","sidebarTitle":"Sensors Page Overview","href":"/documentation/usm-anywhere/user-guide/sensor-management/sensors-navigation"},{"title":"Adding a New Sensor","sidebarTitle":"Adding a New Sensor","href":"/documentation/usm-anywhere/user-guide/sensor-management/adding-sensors"},{"title":"Configuring a Sensor","sidebarTitle":"Configuring a Sensor","href":"/documentation/usm-anywhere/user-guide/sensor-management/configuring-sensors"},{"title":"Editing a Sensor","sidebarTitle":"Editing a Sensor","href":"/documentation/usm-anywhere/user-guide/sensor-management/editing-sensors"},{"title":"Assigning a Sensor","sidebarTitle":"Assigning a Sensor","href":"/documentation/usm-anywhere/user-guide/sensor-management/assigning-sensors"},{"title":"Redeploying a Sensor","sidebarTitle":"Redeploying a Sensor","href":"/documentation/usm-anywhere/user-guide/sensor-management/redeploying-sensors"},{"title":"Deleting a Sensor","sidebarTitle":"Deleting a Sensor","href":"/documentation/usm-anywhere/user-guide/sensor-management/deleting-sensors"},{"title":"Backing Up and Restoring a Sensor","sidebarTitle":"Backing Up and Restoring a Sensor","href":"/documentation/usm-anywhere/user-guide/sensor-management/sensor-backups"},{"group":"Upgrading Your Sensor Resources","pages":[{"title":"Upgrading Your Sensor Resources","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/sensor-management/sensor-upgrade-resources"},{"title":"Migrating a Sensor from Ubuntu 18.04 to Ubuntu 20.04","sidebarTitle":"Migrating a Sensor from Ubuntu 18.04 to Ubuntu 20.04","href":"/documentation/usm-anywhere/user-guide/sensor-management/migrating-sensor-to-ubuntu-20.04"},{"title":"Upgrading the AWS CloudFormation Template for a Deployed Sensor","sidebarTitle":"Upgrading the AWS CloudFormation Template for a Deployed Sensor","href":"/documentation/usm-anywhere/user-guide/sensor-management/sensor-template-replacement"}]},{"title":"Sensor Disconnected from the USM Anywhere Service","sidebarTitle":"Sensor Disconnected from the USM Anywhere Service","href":"/documentation/usm-anywhere/user-guide/sensor-management/sensor-disconnected"}]},{"group":"USM Anywhere Advanced Query","pages":[{"title":"USM Anywhere Advanced Query","href":"/documentation/usm-anywhere/user-guide/advanced-query/advanced-query"},{"title":"Submitting a custom query","href":"/documentation/usm-anywhere/user-guide/advanced-query/submit-custom-query"},{"title":"SQL Queries","href":"/documentation/usm-anywhere/user-guide/advanced-query/sql-queries"},{"title":"PPL Queries","href":"/documentation/usm-anywhere/user-guide/advanced-query/ppl-queries"},{"title":"Favorite a query","href":"/documentation/usm-anywhere/user-guide/advanced-query/favorite-a-query"},{"title":"Saving a query","href":"/documentation/usm-anywhere/user-guide/advanced-query/save-a-query"},{"title":"Generating a CSV report","href":"/documentation/usm-anywhere/user-guide/advanced-query/generate-csv-report"},{"title":"Information to support query writing","href":"/documentation/usm-anywhere/user-guide/advanced-query/support-info-query-writing"},{"title":"List of Fields","href":"/documentation/usm-anywhere/user-guide/advanced-query/list-of-fields"}]},{"group":"The AWS Cloud Connector in USM Anywhere","pages":[{"title":"The AWS Cloud Connector in USM Anywhere","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/cloud-connector/aws/aws-about"},{"title":"Cloud Connector List View","sidebarTitle":"Cloud Connector List View","href":"/documentation/usm-anywhere/user-guide/cloud-connector/aws/aws-cc-list-view"},{"title":"Adding an AWS Cloud Connector","sidebarTitle":"Adding an AWS Cloud Connector","href":"/documentation/usm-anywhere/user-guide/cloud-connector/aws/adding-new-connector"},{"title":"Viewing AWS Cloud Connector Details","sidebarTitle":"Viewing AWS Cloud Connector Details","href":"/documentation/usm-anywhere/user-guide/cloud-connector/aws/viewing-cc-details"},{"group":"Data Source Rules Management","pages":[{"title":"Data Source Rules Management","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/cloud-connector/aws/data-source-rules"},{"title":"Adding a Data Source Rule","sidebarTitle":"Adding a Data Source Rule","href":"/documentation/usm-anywhere/user-guide/cloud-connector/aws/adding-data-source-rules"},{"title":"Editing a Data Source Rule","sidebarTitle":"Editing a Data Source Rule","href":"/documentation/usm-anywhere/user-guide/cloud-connector/aws/editing-data-source-rules"},{"title":"Deleting Data Source Rules","sidebarTitle":"Deleting Data Source Rules","href":"/documentation/usm-anywhere/user-guide/cloud-connector/aws/deleting-data-source-rules"}]},{"title":"Editing an AWS Cloud Connector","sidebarTitle":"Editing an AWS Cloud Connector","href":"/documentation/usm-anywhere/user-guide/cloud-connector/aws/editing-cc"},{"title":"Downloading an Existing AWS Cloud Connector Template","sidebarTitle":"Downloading an Existing AWS Cloud Connector Template","href":"/documentation/usm-anywhere/user-guide/cloud-connector/aws/downloading-template"},{"title":"Cloud Connectors System Events","sidebarTitle":"Cloud Connectors System Events","href":"/documentation/usm-anywhere/user-guide/cloud-connector/aws/system-events-notification"},{"title":"Deleting an AWS Cloud Connector","sidebarTitle":"Deleting an AWS Cloud Connector","href":"/documentation/usm-anywhere/user-guide/cloud-connector/aws/deleting-cc"}]},{"group":"Webhook Connectors in USM Anywhere","pages":[{"title":"Webhook Connectors","href":"/documentation/usm-anywhere/user-guide/cloud-connector/webhook_connector/webhook_overview"},{"title":"Creating new webhook connectors","href":"/documentation/usm-anywhere/user-guide/cloud-connector/webhook_connector/create_new_webhook"},{"title":"Editing webhook connectors","href":"/documentation/usm-anywhere/user-guide/cloud-connector/webhook_connector/edit_webhook"},{"title":"Deleting webhook connectors","href":"/documentation/usm-anywhere/user-guide/cloud-connector/webhook_connector/delete_webhook"},{"title":"Resetting API Keys of webhook connectors","href":"/documentation/usm-anywhere/user-guide/cloud-connector/webhook_connector/reset_api_key"},{"title":"Pushing events","href":"/documentation/usm-anywhere/user-guide/cloud-connector/webhook_connector/push_events"},{"title":"Webhook connector status and stats","href":"/documentation/usm-anywhere/user-guide/cloud-connector/webhook_connector/webhook_status_and_stats"}]},{"group":"Subscription Management","pages":[{"title":"Subscription Management","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/subscription-management/my-subscription"},{"title":"Projected Data Consumption","sidebarTitle":"Projected Data Consumption","href":"/documentation/usm-anywhere/user-guide/subscription-management/projected-data-consumption"},{"title":"Connecting a USM Anywhere to a USM Central","sidebarTitle":"Connecting a USM Anywhere to a USM Central","href":"/documentation/usm-anywhere/user-guide/subscription-management/connection-usm-central"},{"title":"Disconnecting a USM Anywhere from a USM Central","sidebarTitle":"Disconnecting a USM Anywhere from a USM Central","href":"/documentation/usm-anywhere/user-guide/subscription-management/disconnect-usm-central"},{"title":"Understanding Your Data Consumption Status","sidebarTitle":"Understanding Your Data Consumption Status","href":"/documentation/usm-anywhere/user-guide/subscription-management/subscription-status"}]},{"group":"USM Anywhere Reports","pages":[{"title":"USM Anywhere Reports","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/reports/usma-reports"},{"title":"Create and Schedule Reports","sidebarTitle":"Create and Schedule Reports","href":"/documentation/usm-anywhere/user-guide/reports/scheduled-reports"},{"title":"Saved Reports on USM Anywhere","sidebarTitle":"Saved Reports on USM Anywhere","href":"/documentation/usm-anywhere/user-guide/reports/saved-reports"},{"group":"USM Anywhere Compliance Templates","pages":[{"title":"USM Anywhere Compliance Templates","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/reports/compliance-templates"},{"group":"PCI DSS Compliance Templates","pages":[{"title":"PCI DSS Compliance Templates","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss"},{"title":"PCI DSS 10.2.4 - Linux","sidebarTitle":"PCI DSS 10.2.4 - Linux","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss10.2.4linux"},{"title":"PCI DSS 10.2.4 - Windows","sidebarTitle":"PCI DSS 10.2.4 - Windows","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss10.2.4windows"},{"title":"PCI DSS 10.2.5.b - Linux","sidebarTitle":"PCI DSS 10.2.5.b - Linux","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss10.2.5blinux"},{"title":"PCI DSS 10.2.5.b - Windows","sidebarTitle":"PCI DSS 10.2.5.b - Windows","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss10.2.5bwindows"},{"title":"PCI DSS 10.2.5.c - Linux","sidebarTitle":"PCI DSS 10.2.5.c - Linux","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss10.2.5clinux"},{"title":"PCI DSS 10.2.5.c - Windows","sidebarTitle":"PCI DSS 10.2.5.c - Windows","hidden":true,"href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss10.2.5cwindows"},{"title":"PCI DSS 10.2.5.c Category: Security - Windows","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss-10-2-5-c-category-security-windows"},{"title":"PCI DSS 10.2.5.c Subcategory: Security - Windows","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss-10-2-5-c-sub-category-security-windows"},{"title":"PCI DSS 10.7.a","sidebarTitle":"PCI DSS 10.7.a","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss10.7a"},{"title":"PCI DSS 10.7.c","sidebarTitle":"PCI DSS 10.7.c","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss10.7c"},{"title":"PCI DSS 11.5.a - Linux","sidebarTitle":"PCI DSS 11.5.a - Linux","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss11.5alinux"},{"title":"PCI DSS 11.5.a - Windows","sidebarTitle":"PCI DSS 11.5.a - Windows","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss11.5awindows"},{"title":"PCI DSS 11.5.a - File System - Windows","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss-11-5-a"},{"title":"PCI DSS 5.1.2","sidebarTitle":"PCI DSS 5.1.2","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss5.1.2"},{"title":"PCI DSS 6.1","sidebarTitle":"PCI DSS 6.1","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss6.1"},{"title":"PCI DSS 8.1.6.a - Windows","sidebarTitle":"PCI DSS 8.1.6.a - Windows","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss8.1.6awindows"},{"title":"PCI DSS 8.2.1.c","sidebarTitle":"PCI DSS 8.2.1.c","href":"/documentation/usm-anywhere/user-guide/pci-dss/pci-dss8.2.1c"}]},{"group":"NIST CSF Compliance Templates","pages":[{"title":"NIST CSF Compliance Templates","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/nist-csf/nist-csf"},{"title":"NIST CSF Control ID.AM-1: Physical Devices and Systems Within the Organization are Inventoried","sidebarTitle":"NIST CSF Control ID.AM-1: Physical Devices and Systems within the Organization are Inventoried","href":"/documentation/usm-anywhere/user-guide/nist-csf/id.am-1"},{"title":"NIST CSF Control ID.AM-5: Resources (e.g., Hardware, Devices, Data, and Software) are Prioritized Based on their Classification, Criticality, and Business Value","sidebarTitle":"NIST CSF Control ID.AM-5: Resources (e.g., Hardware, Devices, Data, and Software) are Prioritized Based on their Classification, Criticality, and Business Value","href":"/documentation/usm-anywhere/user-guide/nist-csf/id.am-5"},{"title":"NIST CSF Control ID.RA-1: Asset Vulnerabilities are Identified and Documented","sidebarTitle":"NIST CSF Control ID.RA-1: Asset Vulnerabilities are Identified and Documented","href":"/documentation/usm-anywhere/user-guide/nist-csf/id.ra-1"},{"title":"NIST CSF Control ID.RA-2: Threat and Vulnerability Information is Received from Information Sharing Forums and Sources","sidebarTitle":"NIST CSF Control ID.RA-2: Threat and Vulnerability Information is Received from Information Sharing Forums and Sources","href":"/documentation/usm-anywhere/user-guide/nist-csf/id.ra-2"},{"title":"NIST CSF Control PR.AC-1: Identities and Credentials are Managed for Authorized Devices and Users","sidebarTitle":"NIST CSF Control PR.AC-1: Identities and Credentials are Managed for Authorized Devices and Users","href":"/documentation/usm-anywhere/user-guide/nist-csf/pr.ac-1"},{"title":"NIST CSF Windows Control PR.AC-1: Identities and Credentials are Managed for Authorized Devices and Users","sidebarTitle":"NIST CSF Windows Control PR.AC-1: Identities and Credentials are Managed for Authorized Devices and Users","href":"/documentation/usm-anywhere/user-guide/nist-csf/nist-csf-windows-control-pr-ac-1-identities-and-credentials-are-managed-for-authorized-devices-and-users"},{"title":"NIST CSC Control PR.IP-12: A Vulnerability Management Plan is Developed and Implemented","sidebarTitle":"NIST CSC Control PR.IP-12: A Vulnerability Management Plan is Developed and Implemented","href":"/documentation/usm-anywhere/user-guide/nist-csf/pr.ip-12"},{"title":"NIST CSC Control PR.PT-1: Audit/Log Records are Determined, Documented, Implemented, and Reviewed in Accordance with Policy","sidebarTitle":"NIST CSC Control PR.PT-1: Audit/Log Records are Determined, Documented, Implemented, and Reviewed in Accordance with Policy","href":"/documentation/usm-anywhere/user-guide/nist-csf/pr.pt-1"},{"title":"NIST CSF Control DE.AE-2: Detected Events are Analyzed to Understand Attack Targets and Methods","sidebarTitle":"NIST CSF Control DE.AE-2: Detected Events are Analyzed to Understand Attack Targets and Methods","href":"/documentation/usm-anywhere/user-guide/nist-csf/de.ae-2"},{"title":"NIST CSF Control DE.AE-3: Event Data are Aggregated and Correlated from Multiple Sources and Sensors","sidebarTitle":"NIST CSF Control DE.AE-3: Event Data are Aggregated and Correlated from Multiple Sources and Sensors","href":"/documentation/usm-anywhere/user-guide/nist-csf/de.ae-3"},{"title":"NIST CSF Control DE.AE-5: Incident Alert Thresholds are Established","sidebarTitle":"NIST CSF Control DE.AE-5: Incident Alert Thresholds are Established","href":"/documentation/usm-anywhere/user-guide/nist-csf/de.ae-5"},{"title":"NIST CSF Control DE.CM-3: Personnel Activity is Monitored to Detect Potential Cybersecurity Events","sidebarTitle":"NIST CSF Control DE.CM-3: Personnel Activity is Monitored to Detect Potential Cybersecurity Events","href":"/documentation/usm-anywhere/user-guide/nist-csf/de.cm-3"},{"title":"NIST CSF Control DE.CM-4: Malicious Code is Detected","sidebarTitle":"NIST CSF Control DE.CM-4: Malicious Code is Detected","href":"/documentation/usm-anywhere/user-guide/nist-csf/de.cm-4"},{"title":"NIST CSF Malware_variant Control DE.CM-4: Malicious Code is Detected","sidebarTitle":"NIST CSF Malware_variant Control DE.CM-4: Malicious Code is Detected","href":"/documentation/usm-anywhere/user-guide/nist-csf/nist-csf-malware-variant-control-de-cm-4-malicious-code-is-detected"},{"title":"NIST CSF Subcategory Control DE.CM-4: Malicious Code is Detected","sidebarTitle":"NIST CSF Subcategory Control DE.CM-4: Malicious Code is Detected","href":"/documentation/usm-anywhere/user-guide/nist-csf/nist-csf-subcategory-control-de-cm-4-malicious-code-is-detected"},{"title":"NIST CSF Control DE.CM-7: Monitoring for Unauthorized Personnel, Connections, Devices, and Software is Performed","sidebarTitle":"NIST CSF Control DE.CM-7: Monitoring for Unauthorized Personnel, Connections, Devices, and Software is Performed","href":"/documentation/usm-anywhere/user-guide/nist-csf/de.cm-7"},{"title":"NIST CSF Windows Control DE.CM-7: Monitoring for Unauthorized Personnel, Connections, Devices, and Software is Performed","sidebarTitle":"NIST CSF Windows Control DE.CM-7: Monitoring for Unauthorized Personnel, Connections, Devices, and Software is Performed","href":"/documentation/usm-anywhere/user-guide/nist-csf/nist-csf-windows-control-de-cm-7-monitoring-for-unauthorized-personnel-connections-devices-and-software-is-performed"},{"title":"NIST CSF Control DE.CM-8: Vulnerability Scans are Performed","sidebarTitle":"NIST CSF Control DE.CM-8: Vulnerability Scans are Performed","href":"/documentation/usm-anywhere/user-guide/nist-csf/de.cm-8"},{"title":"NIST CSF Control DE.DP-4: Event Detection Information is Communicated to Appropriate Parties","sidebarTitle":"NIST CSF Control DE.DP-4: Event Detection Information is Communicated to Appropriate Parties","href":"/documentation/usm-anywhere/user-guide/nist-csf/de.dp-4"},{"title":"NIST CSF Control RS.AN-3: Forensics are Performed","sidebarTitle":"NIST CSF Control RS.AN-3: Forensics are Performed","href":"/documentation/usm-anywhere/user-guide/nist-csf/rs.an-3"}]},{"group":"HIPAA Compliance Templates","pages":[{"title":"HIPAA Compliance Templates","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/hipaa/hipaa"},{"title":"HIPAA §164.308(a)(1)(ii)(A) Conduct Risk Assessment","sidebarTitle":"HIPAA §164.308(a)(1)(ii)(A) Conduct Risk Assessment","href":"/documentation/usm-anywhere/user-guide/hipaa/a03"},{"title":"HIPAA Control §164.312 (a)(1) Access Control","sidebarTitle":"HIPAA Control §164.312 (a)(1) Access Control","href":"/documentation/usm-anywhere/user-guide/hipaa/t03"},{"title":"HIPAA Control §164.312(b) Audit Controls","sidebarTitle":"HIPAA Control §164.312(b) Audit Controls","href":"/documentation/usm-anywhere/user-guide/hipaa/t30"},{"title":"HIPAA Control §164.312(c)(1) Integrity - Linux","sidebarTitle":"HIPAA Control §164.312(c)(1) Integrity - Linux","href":"/documentation/usm-anywhere/user-guide/hipaa/t33linux"},{"title":"HIPAA Control §164.312(c)(1) Integrity - Windows","sidebarTitle":"HIPAA Control §164.312(c)(1) Integrity - Windows","href":"/documentation/usm-anywhere/user-guide/hipaa/t33windows"},{"title":"HIPAA Control §164.312(c)(1) Integrity - Windows - File System Events","sidebarTitle":"HIPAA Control §164.312(c)(1) Integrity - Windows - File System Events","href":"/documentation/usm-anywhere/user-guide/hipaa/hipaa-control-164-312-c-1-integrity-windows-file-system-events"}]},{"group":"ISO 27001 Compliance Templates","pages":[{"title":"ISO 27001 Compliance Templates","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/iso-27001/iso-27001"},{"title":"ISO 27001:2022 5.6: Contact with Special Interest Groups","sidebarTitle":"ISO 27001:2022 5.6: Contact with Special Interest Groups","href":"/documentation/usm-anywhere/user-guide/iso-27001/a.6.1.4"},{"title":"ISO 27001:2022 5.9: Inventory of Information and Other Associated Assets","sidebarTitle":"ISO 27001:2022 5.9: Inventory of Information and Other Associated Assets","href":"/documentation/usm-anywhere/user-guide/iso-27001/a.8.1.1"},{"title":"ISO 27001:2022 5.13: Labeling of Information","sidebarTitle":"ISO 27001:2022 5.13: Labeling of Information","href":"/documentation/usm-anywhere/user-guide/iso-27001/a.8.2.2"},{"title":"ISO 27001:2022 5.25: Assessment of and Decision on Information Security Events","sidebarTitle":"ISO 27001:2022 5.25: Assessment of and Decision on Information Security Events","href":"/documentation/usm-anywhere/user-guide/iso-27001/a.16.1.4"},{"title":"ISO 27001:2022 5.36: Compliance with Policies, Rules, and Standards for Information Security","sidebarTitle":"ISO 27001:2022 5.36: Compliance with Policies, Rules, and Standards for Information Security","href":"/documentation/usm-anywhere/user-guide/iso-27001/a.18.2.2"},{"title":"ISO 27001:2022 6.8: Information Security Event Reporting","sidebarTitle":"ISO 27001:2022 6.8: Information Security Event Reporting","hidden":false,"href":"/documentation/usm-anywhere/user-guide/iso-27001/a.16.1.2"},{"title":"ISO 27001:2022 7.9: Security of Assets Off-Premises","sidebarTitle":"ISO 27001:2022 7.9: Security of Assets Off-Premises","hidden":false,"href":"/documentation/usm-anywhere/user-guide/iso-27001/a.11.2.6"},{"title":"ISO 27001:2022 Malware_family 8.7: Protection Against Malware","sidebarTitle":"ISO 27001:2022 Malware_family 8.7: Protection Against Malware","href":"/documentation/usm-anywhere/user-guide/iso-27001/iso-27001-2022-malware-family-8-7-protection-against-malware"},{"title":"ISO 27001:2022 Malware_variant 8.7: Protection Against Malware","sidebarTitle":"ISO 27001:2022 Malware_variant 8.7: Protection Against Malware","href":"/documentation/usm-anywhere/user-guide/iso-27001/iso-27001-2022-malware-variant-8-7-protection-against-malware"},{"title":"ISO 27001:2022 Subcategory 8.7: Protection Against Malware","sidebarTitle":"ISO 27001:2022 Subcategory 8.7: Protection Against Malware","href":"/documentation/usm-anywhere/user-guide/iso-27001/iso-27001-2022-subcategory-8-7-protection-against-malware"},{"title":"ISO 27001:2022 8.15 - Event Logging: Logging","sidebarTitle":"ISO 27001:2022 8.15 - Event Logging: Logging","hidden":false,"href":"/documentation/usm-anywhere/user-guide/iso-27001/a.12.4.1"},{"title":"ISO 27001:2022 8.15 - Linux: Logging","sidebarTitle":"ISO 27001:2022 8.15 - Linux: Logging","hidden":false,"href":"/documentation/usm-anywhere/user-guide/iso-27001/a.12.4.2linux"},{"title":"ISO 27001:2022 8.15 - Event Type - Windows: Logging","sidebarTitle":"ISO 27001:2022 8.15 - Event Type - Windows: Logging","hidden":false,"href":"/documentation/usm-anywhere/user-guide/iso-27001/a.12.4.2windows"},{"title":"ISO 27001:2022 8.15 - Windows: Logging","sidebarTitle":"ISO 27001:2022 8.15 - Windows: Logging","href":"/documentation/usm-anywhere/user-guide/iso-27001/iso-27001-2022-8-15-windows-logging"},{"title":"ISO 27001:2022 8.34: Protection of Information Systems During Audit Testing","sidebarTitle":"ISO 27001:2022 8.34: Protection of Information Systems During Audit Testing","hidden":false,"href":"/documentation/usm-anywhere/user-guide/iso-27001/a.12.7.1"},{"title":"ISO 27001:2022 5.12: Classification of Information","sidebarTitle":"ISO 27001:2022 5.12: Classification of Information","hidden":false,"href":"/documentation/usm-anywhere/user-guide/iso-27001/a.8.2.1"},{"title":"ISO 27001 A.8.1.2: Ownership of Assets","sidebarTitle":"ISO 27001 A.8.1.2: Ownership of Assets","hidden":true,"href":"/documentation/usm-anywhere/user-guide/iso-27001/a.8.1.2"},{"title":"ISO 27001 A.12.2.1: Controls Against Malware","sidebarTitle":"ISO 27001 A.12.2.1: Controls Against Malware","hidden":true,"href":"/documentation/usm-anywhere/user-guide/iso-27001/a.12.2.1"},{"title":"ISO 27001 A.18.2.3: Technical Compliance Review","sidebarTitle":"ISO 27001 A.18.2.3: Technical Compliance Review","hidden":true,"href":"/documentation/usm-anywhere/user-guide/iso-27001/a.18.2.3"}]}]},{"title":"USM Anywhere Event Type Templates","sidebarTitle":"USM Anywhere Event Type Templates","href":"/documentation/usm-anywhere/user-guide/reports/event-type-templates"}]},{"group":"Machine Learning","pages":[{"title":"Machine Learning","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/machine-learning/about-machine-learning"},{"title":"Machine Learning Models","sidebarTitle":"Machine Learning Models","href":"/documentation/usm-anywhere/user-guide/machine-learning/machine-learning-models"},{"title":"Machine Learning Dashboard","sidebarTitle":"Machine Learning Dashboard","href":"/documentation/usm-anywhere/user-guide/machine-learning/machine-learning-dashboard"},{"title":"Viewing Machine Learning Alarms and Events","sidebarTitle":"Viewing Machine Learning Alarms and Events","href":"/documentation/usm-anywhere/user-guide/machine-learning/viewing-ml-events-alarms"}]},{"group":"USM Anywhere User Management","pages":[{"title":"USM Anywhere User Management","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/user-management/user-administration"},{"title":"Role-Based Access Control (RBAC) in USM Anywhere","sidebarTitle":"Role-Based Access Control (RBAC) in USM Anywhere","href":"/documentation/usm-anywhere/user-guide/user-management/rbac"},{"title":"Creating Users","sidebarTitle":"Creating Users","href":"/documentation/usm-anywhere/user-guide/user-management/creating-users"},{"title":"Editing Users","sidebarTitle":"Editing Users","href":"/documentation/usm-anywhere/user-guide/user-management/editing-users"},{"title":"Deleting Users","sidebarTitle":"Deleting Users","href":"/documentation/usm-anywhere/user-guide/user-management/deleting-users"},{"group":"Managing Your Profile Settings","pages":[{"title":"Managing Your Profile Settings","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/user-management/profile-settings"},{"title":"API Clients","sidebarTitle":"API Clients","href":"/documentation/usm-anywhere/user-guide/user-management/api-clients"}]},{"group":"Using Multifactor Authentication","pages":[{"title":"Using Multifactor Authentication","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/introduction/multifactor-authentication"},{"title":"Requiring Multifactor Authentication","sidebarTitle":"Requiring Multifactor Authentication","href":"/documentation/usm-anywhere/user-guide/introduction/requiring-multifactor-authentication"}]},{"title":"Configuring Web UI Session Timeout","sidebarTitle":"Configuring Web UI Session Timeout","href":"/documentation/usm-anywhere/user-guide/user-management/session-timeout"},{"title":"Configuring Single Sign-On","sidebarTitle":"Configuring Single Sign-On","href":"/documentation/usm-anywhere/user-guide/user-management/configuring-sso"}]},{"group":"Using USM Anywhere for PCI Compliance","pages":[{"title":"Using USM Anywhere for PCI Compliance","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/compliance/pci-dss"},{"title":"Working with Assets and PCI DSS","sidebarTitle":"Working with Assets and PCI DSS","href":"/documentation/usm-anywhere/user-guide/compliance/assets-pci"}]},{"group":"USM Anywhere Investigations","pages":[{"title":"USM Anywhere Investigations","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/investigations/about-investigations"},{"title":"Investigations List View","sidebarTitle":"Investigations List View","href":"/documentation/usm-anywhere/user-guide/investigations/investigations-list-view"},{"title":"Creating a New Investigation","sidebarTitle":"Creating a New Investigation","href":"/documentation/usm-anywhere/user-guide/investigations/creating-new-investigation"},{"title":"Editing Investigations","sidebarTitle":"Editing Investigations","href":"/documentation/usm-anywhere/user-guide/investigations/editing-investigations"},{"title":"Searching Investigations","sidebarTitle":"Searching Investigations","href":"/documentation/usm-anywhere/user-guide/investigations/searching-investigations"},{"group":"Viewing Investigations Details","pages":[{"title":"Viewing Investigations Details","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/investigations/viewing-investigations-details"},{"title":"Activity on Investigations","sidebarTitle":"Activity on Investigations","href":"/documentation/usm-anywhere/user-guide/investigations/activity"},{"title":"Notes on Investigations","sidebarTitle":"Notes on Investigations","href":"/documentation/usm-anywhere/user-guide/investigations/notes"},{"title":"Evidence on Investigations","href":"/documentation/usm-anywhere/user-guide/investigations/evidence"}]},{"title":"Deleting Investigations","sidebarTitle":"Deleting Investigations","href":"/documentation/usm-anywhere/user-guide/investigations/deleting-investigations"},{"title":"Notification Rule for Investigations","sidebarTitle":"Notification Rule for Investigations","href":"/documentation/usm-anywhere/user-guide/investigations/notification-rule"}]},{"group":"System Status within USM Anywhere","pages":[{"title":"System Status within USM Anywhere","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/user-guide/system-status/system-status"},{"title":"USM Anywhere Network System","sidebarTitle":"USM Anywhere Network System","href":"/documentation/usm-anywhere/user-guide/system-status/network-settings"},{"title":"USM Anywhere System Monitor","sidebarTitle":"USM Anywhere System Monitor","href":"/documentation/usm-anywhere/user-guide/system-status/system-monitor"},{"title":"USM Anywhere Log Collection","sidebarTitle":"USM Anywhere Log Collection","href":"/documentation/usm-anywhere/user-guide/system-status/log-collection"}]}]},{"group":"USM Anywhere Agents Guide","pages":[{"title":"The LevelBlue Agent","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/agents/alienvault-agents"},{"title":"LevelBlue Agent Use Cases","href":"/documentation/usm-anywhere/agents/agents-use-cases"},{"group":"LevelBlue Agent Deployment","pages":[{"title":"LevelBlue Agent Deployment","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/agents/agent-deployment"},{"title":"LevelBlue Agent Installation on Windows Hosts","href":"/documentation/usm-anywhere/agents/alienvault-agents-install-windows"},{"title":"LevelBlue Agent Installation on Linux Hosts","href":"/documentation/usm-anywhere/agents/alienvault-agents-install-linux"},{"title":"LevelBlue Agent Installation on macOS Hosts","href":"/documentation/usm-anywhere/agents/alienvault-agents-install-osx"}]},{"title":"LevelBlue Agent IDs","href":"/documentation/usm-anywhere/agents/alienvault-agent-ids"},{"title":"LevelBlue Agent and Asset Associations","href":"/documentation/usm-anywhere/agents/agent-asset-associations"},{"title":"LevelBlue Agent Configuration Profiles","href":"/documentation/usm-anywhere/agents/agent-configuration-profiles"},{"title":"The LevelBlue Agent Script and Agent Updates","href":"/documentation/usm-anywhere/agents/agent-script"},{"title":"LevelBlue Agents Memory Consumption and the osquery Watchdog","href":"/documentation/usm-anywhere/agents/agents-memory"},{"title":"LevelBlue Agent Events and Queries","href":"/documentation/usm-anywhere/agents/agent-query"}]},{"group":"USM Anywhere BlueApps Guide","pages":[{"title":"USM Anywhere BlueApps Guide","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/about-blueapps"},{"title":"BlueApps UI","href":"/documentation/usm-anywhere/alienapps-guide/blueapps-navigation"},{"title":"Advanced BlueApps Best Practices","href":"/documentation/usm-anywhere/alienapps-guide/blueapps-best-practices"},{"title":"BlueApps and Data Sources","href":"/documentation/usm-anywhere/alienapps-guide/blueapps-data-sources"},{"title":"Assign Assets to BlueApps","href":"/documentation/usm-anywhere/alienapps-guide/blueapps-assign-assets"},{"title":"Events Created When BlueApps Stop Receiving Data","href":"/documentation/usm-anywhere/alienapps-guide/event-when-app-stops-data"},{"title":"BlueApps Parser Syntax","href":"/documentation/usm-anywhere/alienapps-guide/blueapps-parser-syntax"},{"group":"Advanced BlueApps","pages":[{"title":"Advanced BlueApps","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/blueapps-orchestration"},{"group":"BlueApp for Akamai Enterprise Application Access","pages":[{"title":"BlueApp for Akamai Enterprise Application Access","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/akamai-eaa/alienapp-akamai-eaa"},{"title":"Configuring the BlueApp for Akamai Enterprise Application Access","href":"/documentation/usm-anywhere/alienapps-guide/akamai-eaa/config-alienapp-akamai-eaa"},{"title":"BlueApp for Akamai Enterprise Application Access Actions","href":"/documentation/usm-anywhere/alienapps-guide/akamai-eaa/actions-alienapp-akamai-eaa"},{"title":"Creating Akamai EAA Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/akamai-eaa/rules-alienapp-akamai-eaa"}]},{"group":"BlueApp for Akamai Enterprise Threat Protector","pages":[{"title":"BlueApp for Akamai Enterprise Threat Protector","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/akamai-etp/alienapp-akamai-etp"},{"title":"Configuring the BlueApp for Akamai Enterprise Threat Protector","href":"/documentation/usm-anywhere/alienapps-guide/akamai-etp/config-alienapp-akamai-etp"},{"title":"BlueApp for Akamai Enterprise Threat Protector Actions","href":"/documentation/usm-anywhere/alienapps-guide/akamai-etp/actions-alienapp-akamai-etp"},{"title":"Creating Akamai ETP Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/akamai-etp/rules-alienapp-akamai-etp"}]},{"group":"BlueApp for LevelBlue Forensics and Response","pages":[{"title":"BlueApp for LevelBlue Forensics and Response","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/forensics-response/blueapp-forensics-response"},{"title":"Configuring the BlueApp for LevelBlue Forensics and Response","href":"/documentation/usm-anywhere/alienapps-guide/forensics-response/requirements-blueapp-forensics-resp"},{"group":"Using the BlueApp for LevelBlue Forensics and Response Actions","pages":[{"title":"Using the BlueApp for LevelBlue Forensics and Response Actions","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/forensics-response/actions-blueapp-forensics-resp"},{"title":"Data Collection Functions","href":"/documentation/usm-anywhere/alienapps-guide/forensics-response/data-function-ref-blueapp-forensics-resp"},{"title":"Enforcement System Functions","href":"/documentation/usm-anywhere/alienapps-guide/forensics-response/enforce-function-ref-blueapp-forensics-resp"},{"title":"Defining a Launch Query Action","href":"/documentation/usm-anywhere/alienapps-guide/forensics-response/launch-query-blueapp-forensics-resp"}]},{"title":"Scheduling a Forensics and Response Job","href":"/documentation/usm-anywhere/alienapps-guide/forensics-response/log-collect-blueapp-forensics-resp"},{"title":"Launching a Forensics and Response Action from an Event or Alarm","href":"/documentation/usm-anywhere/alienapps-guide/forensics-response/event-alarm-action-blueapp-forensics-resp"},{"title":"Creating a Forensics and Response Rule","href":"/documentation/usm-anywhere/alienapps-guide/forensics-response/rule-blueapp-forensics-resp"},{"title":"Viewing Forensics and Response Events and Alarms","href":"/documentation/usm-anywhere/alienapps-guide/forensics-response/blueapp-forensics-resp-events"}]},{"group":"BlueApp for LevelBlue Secure Remote Gateway","pages":[{"title":"BlueApp for LevelBlue Secure Remote Gateway","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/att-swg/alienapp-att-swg"},{"title":"Configuring the BlueApp for LevelBlue Secure Remote Gateway","href":"/documentation/usm-anywhere/alienapps-guide/att-swg/config-alienapp-att-swg"},{"title":"BlueApp for LevelBlue Secure Remote Gateway Actions","href":"/documentation/usm-anywhere/alienapps-guide/att-swg/actions-alienapp-att-swg"},{"title":"Creating AT\u0026T Secure Web Gateway Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/att-swg/rules-alienapp-att-swg"}]},{"group":"BlueApp for Box","pages":[{"title":"BlueApp for Box","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/box/alienapp-box"},{"title":"Configuring the BlueApp for Box","href":"/documentation/usm-anywhere/alienapps-guide/box/config-alienapp-box"},{"group":"BlueApp for Box Orchestration","pages":[{"title":"BlueApp for Box Orchestration","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/box/response-alienapp-box"},{"title":"Launching a Box Response Action","href":"/documentation/usm-anywhere/alienapps-guide/box/actions-alienapp-box"},{"title":"Creating Box Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/box/rules-alienapp-box"}]}]},{"group":"BlueApp for VMWare Carbon Black Cloud","pages":[{"title":"BlueApp for VMware Carbon Black Cloud","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/carbon-black-cloud/alienapp-carbon-black-cloud"},{"title":"Configuring the BlueApp for VMware Carbon Black Cloud","href":"/documentation/usm-anywhere/alienapps-guide/carbon-black-cloud/config-alienapp-carbon-black-cloud"},{"title":"BlueApp for VMware Carbon Black Cloud Actions","href":"/documentation/usm-anywhere/alienapps-guide/carbon-black-cloud/actions-alienapp-carbon-black-cloud"},{"title":"BlueApp for VMware Carbon Black Cloud Asset Discovery and Management","href":"/documentation/usm-anywhere/alienapps-guide/carbon-black-cloud/asset-discovery-alienapp-carbon-black-cloud"}]},{"group":"BlueApp for Carbon Black EDR","pages":[{"title":"BlueApp for Carbon Black EDR","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/carbon-black/alienapp-carbon-black"},{"title":"Collecting Logs from Carbon Black EDR","href":"/documentation/usm-anywhere/alienapps-guide/carbon-black/log-collect-alienapp-carbon-black"},{"title":"Configuring the BlueApp for Carbon Black EDR","href":"/documentation/usm-anywhere/alienapps-guide/carbon-black/config-alienapp-carbon-black"},{"title":"BlueApp for Carbon Black EDR Actions","href":"/documentation/usm-anywhere/alienapps-guide/carbon-black/actions-alienapp-carbon-black"},{"title":"Creating Carbon Black EDR Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/carbon-black/rules-alienapp-carbon-black"},{"title":"Viewing Alarms with Applied Carbon Black EDR Response Actions","href":"/documentation/usm-anywhere/alienapps-guide/carbon-black/label-alienapp-carbon-black"}]},{"group":"BlueApp for Check Point","pages":[{"title":"BlueApp for Check Point","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/check-point/alienapp-checkpoint"},{"title":"Configuring the BlueApp for Check Point","href":"/documentation/usm-anywhere/alienapps-guide/check-point/config-alienapp-checkpoint"},{"title":"BlueApp for Check Point Actions","href":"/documentation/usm-anywhere/alienapps-guide/check-point/actions-alienapp-checkpoint"},{"title":"Creating Check Point Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/check-point/rules-alienapp-checkpoint"}]},{"group":"BlueApp for Cisco Duo","pages":[{"title":"BlueApp for Cisco Duo","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/cisco-duo/alienapp-cisco-duo"},{"title":"Configuring the BlueApp for Cisco Duo","href":"/documentation/usm-anywhere/alienapps-guide/cisco-duo/config-alienapp-cisco-duo"}]},{"group":"BlueApp for Cisco Firepower Management","pages":[{"title":"BlueApp for Cisco Firepower Management","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/cisco-fmc/alienapp-cisco-fmc"},{"title":"Configuring the BlueApp for Cisco Firepower Management","href":"/documentation/usm-anywhere/alienapps-guide/cisco-fmc/config-alienapp-cisco-fmc"}]},{"group":"BlueApp for Cisco Meraki","pages":[{"title":"BlueApp for Cisco Meraki","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/cisco-meraki/alienapp-cisco-meraki"},{"title":"Configuring the BlueApp for Cisco Meraki","href":"/documentation/usm-anywhere/alienapps-guide/cisco-meraki/config-alienapp-cisco-meraki"},{"title":"BlueApp for Cisco Meraki Asset Discovery and Management","href":"/documentation/usm-anywhere/alienapps-guide/cisco-meraki/asset-discovery-alienapp-cisco-meraki"},{"title":"BlueApp for Cisco Meraki Actions","href":"/documentation/usm-anywhere/alienapps-guide/cisco-meraki/actions-alienapp-cisco-meraki"},{"title":"Creating Cisco Meraki Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/cisco-meraki/rules-alienapp-cisco-meraki"}]},{"group":"BlueApp for Cisco Secure Endpoint","pages":[{"title":"BlueApp for Cisco Secure Endpoint","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/cisco-amp/alienapp-cisco-amp"},{"title":"Configuring the BlueApp for Cisco Secure Endpoint","href":"/documentation/usm-anywhere/alienapps-guide/cisco-amp/config-alienapp-cisco-amp"},{"title":"BlueApp for Cisco Secure Endpoint Actions","href":"/documentation/usm-anywhere/alienapps-guide/cisco-amp/actions-alienapp-cisco-amp"},{"title":"Creating Cisco Secure Endpoint Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/cisco-amp/rules-alienapp-cisco-amp"}]},{"group":"BlueApp for Cisco Secure Firewall ASA","pages":[{"title":"BlueApp for Cisco Secure Firewall ASA","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/cisco-asa/alienapp-cisco-asa"},{"title":"Configuring the BlueApp for Cisco Secure Firewall ASA","href":"/documentation/usm-anywhere/alienapps-guide/cisco-asa/config-alienapp-cisco-asa"},{"title":"BlueApp for Cisco Secure Firewall ASA Actions","href":"/documentation/usm-anywhere/alienapps-guide/cisco-asa/actions-alienapp-cisco-asa"},{"title":"Creating Cisco Secure Firewall ASA Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/cisco-asa/rules-alienapp-cisco-asa"}]},{"group":"BlueApp for Cisco Umbrella","pages":[{"title":"BlueApp for Cisco Umbrella","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/cisco-umbrella/alienapp-cisco-umbrella"},{"title":"Collecting Logs from Cisco Umbrella","href":"/documentation/usm-anywhere/alienapps-guide/cisco-umbrella/log-collect-alienapp-cisco-umbrella"},{"title":"Configuring the BlueApp for Cisco Umbrella","href":"/documentation/usm-anywhere/alienapps-guide/cisco-umbrella/config-alienapp-cisco-umbrella"},{"title":"BlueApp for Cisco Umbrella Actions","href":"/documentation/usm-anywhere/alienapps-guide/cisco-umbrella/actions-alienapp-cisco-umbrella"},{"title":"Creating Cisco Umbrella Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/cisco-umbrella/rules-alienapp-cisco-umbrella"},{"title":"Viewing Alarms with Applied Cisco Umbrella Response Actions","href":"/documentation/usm-anywhere/alienapps-guide/cisco-umbrella/label-alienapp-cisco-umbrella"}]},{"group":"BlueApp for Cloudflare","pages":[{"title":"BlueApp for Cloudflare","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/cloudflare/alienapp-cloudflare"},{"title":"Configuring the BlueApp for Cloudflare","href":"/documentation/usm-anywhere/alienapps-guide/cloudflare/config-alienapp-cloudflare"},{"title":"Managing Your Cloudflare Data Collection and Events","href":"/documentation/usm-anywhere/alienapps-guide/cloudflare/jobs-alienapp-cloudflare"},{"title":"Cloudflare Response Actions","href":"/documentation/usm-anywhere/alienapps-guide/cloudflare/actions-alienapp-cloudflare"},{"title":"Creating Cloudflare Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/cloudflare/rules-alienapp-cloudflare"},{"title":"BlueApp for Cloudflare Statistics","href":"/documentation/usm-anywhere/alienapps-guide/cloudflare/cloudflare-status"}]},{"group":"BlueApp for ConnectWise","pages":[{"title":"BlueApp for ConnectWise","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/connectwise/alienapp-connectwise"},{"title":"BlueApp for ConnectWise Requirements","href":"/documentation/usm-anywhere/alienapps-guide/connectwise/requirements-alienapp-connectwise"},{"title":"Configuring the BlueApp for ConnectWise","href":"/documentation/usm-anywhere/alienapps-guide/connectwise/config-alienapp-connectwise"},{"title":"BlueApp for ConnectWise Actions","href":"/documentation/usm-anywhere/alienapps-guide/connectwise/actions-alienapp-connectwise"},{"title":"USM Anywhere and ConnectWise Manage UI Integration","href":"/documentation/usm-anywhere/alienapps-guide/connectwise/integration-alienapp-connectwise"},{"title":"Accessing USM Anywhere Tickets in ConnectWise Manage","href":"/documentation/usm-anywhere/alienapps-guide/connectwise/tickets-alienapp-connectwise"},{"title":"Accessing USM Anywhere Asset Information in ConnectWise Manage","href":"/documentation/usm-anywhere/alienapps-guide/connectwise/assets-alienapp-connectwise"}]},{"group":"BlueApp for CrowdStrike Falcon","pages":[{"title":"BlueApp for CrowdStrike Falcon","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/crowdstrike/alienapp-crowdstrike"},{"title":"Configuring the BlueApp for CrowdStrike Falcon","href":"/documentation/usm-anywhere/alienapps-guide/crowdstrike/config-alienapp-crowdstrike"},{"title":"BlueApp for CrowdStrike Falcon Actions","href":"/documentation/usm-anywhere/alienapps-guide/crowdstrike/actions-alienapp-crowdstrike"}]},{"group":"BlueApp for DDI Frontline VM","pages":[{"title":"BlueApp for DDI Frontline VM","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/ddi-frontline/alienapp-ddi-frontline"},{"title":"Configuring the BlueApp for DDI Frontline VM","href":"/documentation/usm-anywhere/alienapps-guide/ddi-frontline/config-alienapp-ddi-frontline"},{"title":"BlueApp for DDI Frontline VM Asset Discovery and Management","href":"/documentation/usm-anywhere/alienapps-guide/ddi-frontline/asset-discovery-alienapp-ddi-frontline"},{"title":"BlueApp for DDI Frontline VM Orchestration","href":"/documentation/usm-anywhere/alienapps-guide/ddi-frontline/actions-alienapp-ddi-frontline"}]},{"group":"BlueApp for Fortinet FortiGate","pages":[{"title":"BlueApp for Fortinet FortiGate","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/fortinet-fortigate/alienapp-fortinet-fortigate"},{"title":"Configuring the BlueApp for Fortinet FortiGate","href":"/documentation/usm-anywhere/alienapps-guide/fortinet-fortigate/config-alienapp-fortinet-fortigate"},{"title":"BlueApp for Fortinet FortiGate Actions","href":"/documentation/usm-anywhere/alienapps-guide/fortinet-fortigate/actions-fortinet-fortigate"},{"title":"Creating FortiGate Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/fortinet-fortigate/rules-alienapp-fortinet-fortigate"}]},{"group":"BlueApp for Fortinet FortiManager","pages":[{"title":"BlueApp for Fortinet FortiManager","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/fortinet-fortimanager/alienapp-fortinet-fortimanager"},{"title":"Configuring the BlueApp for Fortinet FortiManager","href":"/documentation/usm-anywhere/alienapps-guide/fortinet-fortimanager/config-alienapp-fortinet-fortimanager"},{"title":"BlueApp for Fortinet FortiManager Actions","href":"/documentation/usm-anywhere/alienapps-guide/fortinet-fortimanager/actions-alienapp-fortinet-fortimanager"},{"title":"Creating FortiManager Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/fortinet-fortimanager/rules-alienapp-fortinet-fortimanager"}]},{"group":"BlueApp for G Suite","pages":[{"title":"BlueApp for G Suite","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/g-suite/alienapp-g-suite"},{"title":"Configuring the BlueApp for G Suite","href":"/documentation/usm-anywhere/alienapps-guide/g-suite/config-alienapp-g-suite"}]},{"group":"BlueApp for Jira","pages":[{"title":"BlueApp for Jira","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/jira/alienapp-jira"},{"title":"Configuring the BlueApp for Jira","href":"/documentation/usm-anywhere/alienapps-guide/jira/config-alienapp-jira"},{"title":"BlueApp for Jira Actions","href":"/documentation/usm-anywhere/alienapps-guide/jira/actions-alienapp-jira"},{"title":"Creating Jira Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/jira/rules-alienapp-jira"},{"title":"Managing Your Jira Issues","href":"/documentation/usm-anywhere/alienapps-guide/jira/issues-alienapp-jira"}]},{"group":"BlueApp for Lookout","pages":[{"title":"BlueApp for Lookout","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/lookout/alienapp-lookout"},{"title":"Configuring the BlueApp for Lookout","href":"/documentation/usm-anywhere/alienapps-guide/lookout/config-alienapp-lookout"}]},{"group":"BlueApp for McAfee ePO","pages":[{"title":"BlueApp for McAfee ePO","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/mcafee-epo/alienapp-mcafee-epo"},{"title":"Configuring the BlueApp for McAfee ePO","href":"/documentation/usm-anywhere/alienapps-guide/mcafee-epo/config-alienapp-mcafee-epo"}]},{"group":"BlueApp for Microsoft Defender ATP","pages":[{"title":"BlueApp for Microsoft Defender ATP","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/microsoft-defender-atp/alienapp-microsoft-defender-atp"},{"title":"Configuring the BlueApp for Microsoft Defender ATP","href":"/documentation/usm-anywhere/alienapps-guide/microsoft-defender-atp/config-alienapp-microsoft-defender-atp"},{"title":"BlueApp for Microsoft Defender ATP Actions","href":"/documentation/usm-anywhere/alienapps-guide/microsoft-defender-atp/actions-alienapp-microsoft-defender-atp"},{"title":"Creating Microsoft Defender ATP Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/microsoft-defender-atp/rules-alienapp-microsoft-defender-atp"}]},{"group":"BlueApp for Mimecast Events Collection","pages":[{"title":"BlueApp for Mimecast Events Collection","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/mimecast/alienapp-mimecast"},{"title":"Configuring the BlueApp for Mimecast Events Collection","href":"/documentation/usm-anywhere/alienapps-guide/mimecast/config-alienapp-mimecast"}]},{"group":"BlueApp for MobileIron Threat Defense","pages":[{"title":"BlueApp for MobileIron Threat Defense","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/mobileiron/alienapp-mobileiron"},{"title":"Configuring the BlueApp for MobileIron Threat Defense","href":"/documentation/usm-anywhere/alienapps-guide/mobileiron/config-alienapp-mobileiron"},{"title":"BlueApp for MobileIron Threat Defense Actions","href":"/documentation/usm-anywhere/alienapps-guide/mobileiron/actions-alienapp-mobileiron"},{"title":"Creating MobileIron Threat Defense Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/mobileiron/rules-alienapp-mobileiron"},{"title":"BlueApp for MobileIron Threat Defense Asset Discovery and Management","href":"/documentation/usm-anywhere/alienapps-guide/mobileiron/asset-discovery-alienapp-mobileiron"},{"title":"BlueApp for MobileIron Threat Defense User Behavior Analytics (UBA)","href":"/documentation/usm-anywhere/alienapps-guide/mobileiron/uba-user-mobileiron"}]},{"group":"BlueApp for Office 365","pages":[{"title":"BlueApp for Office 365","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/office-365/alienapp-office-365"},{"title":"BlueApp for Office 365 Requirements","href":"/documentation/usm-anywhere/alienapps-guide/office-365/requirements-alienapp-office-365"},{"title":"Configuring the BlueApp for Office 365","href":"/documentation/usm-anywhere/alienapps-guide/office-365/config-alienapp-office365"},{"title":"Office 365 Event Latency","href":"/documentation/usm-anywhere/alienapps-guide/office-365/office-365-event-latency"},{"title":"Office 365 UserLoggedIn Event Discrepancy","href":"/documentation/usm-anywhere/alienapps-guide/office-365/office-365-userloggedin-event-discrepancy"},{"title":"BlueApp for Office 365 Actions","href":"/documentation/usm-anywhere/alienapps-guide/office-365/actions-alienapp-office-365"},{"title":"Creating Office 365 Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/office-365/rules-alienapp-office-365"},{"title":"Tutorial: Create a Notification Rule for Office 365 Users Logged In from a Different Location than Assigned","href":"/documentation/usm-anywhere/alienapps-guide/office-365/alienapp-office-365-rule-tutorial"}]},{"group":"BlueApp for Okta","pages":[{"title":"BlueApp for Okta","sidebarTitle":"Okta","href":"/documentation/usm-anywhere/alienapps-guide/okta/alienapp-okta"},{"title":"Configuring the BlueApp for Okta","href":"/documentation/usm-anywhere/alienapps-guide/okta/config-alienapp-okta"}]},{"group":"BlueApp for Oracle Database","pages":[{"title":"BlueApp for Oracle Database","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/oracle-database/alienapp-oracle-db"},{"title":"Configuring the BlueApp for Oracle Database","href":"/documentation/usm-anywhere/alienapps-guide/oracle-database/config-alienapp-oracle-db"}]},{"group":"BlueApp for Palo Alto Networks PAN-OS","pages":[{"title":"BlueApp for Palo Alto Networks PAN-OS","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/palo-alto/alienapp-palo-alto-networks"},{"title":"Configuring the BlueApp for Palo Alto Networks PAN-OS","href":"/documentation/usm-anywhere/alienapps-guide/palo-alto/config-alienapp-palo-alto"},{"title":"BlueApp for Palo Alto Networks PAN-OS Actions","href":"/documentation/usm-anywhere/alienapps-guide/palo-alto/actions-alienapp-palo-alto"},{"title":"Creating Palo Alto Networks Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/palo-alto/rules-alienapp-palo-alto"},{"title":"Collecting Logs from Palo Alto Networks","href":"/documentation/usm-anywhere/alienapps-guide/palo-alto/log-collect-alienapp-palo-alto"}]},{"group":"BlueApp for Palo Alto Networks Panorama","pages":[{"title":"BlueApp for Palo Alto Networks Panorama","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/palo-alto-panorama/alienapp-palo-alto-panorama"},{"title":"Configuring the BlueApp for Palo Alto Networks Panorama","href":"/documentation/usm-anywhere/alienapps-guide/palo-alto-panorama/config-alienapp-palo-alto-panorama"},{"title":"BlueApp for Palo Alto Networks Panorama Actions","href":"/documentation/usm-anywhere/alienapps-guide/palo-alto-panorama/actions-palo-alto-panorama"},{"title":"Creating Palo Alto Panorama Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/palo-alto-panorama/rules-alienapp-palo-alto-panorama"}]},{"group":"BlueApp for Palo Alto Networks Prisma Access","pages":[{"title":"BlueApp for Palo Alto Networks Prisma Access","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/palo-alto-prisma-access/alienapp-palo-alto-prisma-access"},{"title":"Configuring the BlueApp for Palo Alto Networks Prisma Access","href":"/documentation/usm-anywhere/alienapps-guide/palo-alto-prisma-access/config-alienapp-palo-alto-prisma-access"},{"title":"BlueApp for Palo Alto Networks Prisma Access Actions","href":"/documentation/usm-anywhere/alienapps-guide/palo-alto-prisma-access/actions-alienapp-palo-alto-prisma-access"}]},{"group":"BlueApp for Qualys","pages":[{"title":"BlueApp for Qualys","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/qualys/alienapp-qualys"},{"title":"Configuring the BlueApp for Qualys","href":"/documentation/usm-anywhere/alienapps-guide/qualys/config-alienapp-qualys"},{"title":"BlueApp for Qualys Asset Discovery and Management","href":"/documentation/usm-anywhere/alienapps-guide/qualys/asset-discovery-alienapp-qualys"},{"title":"BlueApp for Qualys Actions","href":"/documentation/usm-anywhere/alienapps-guide/qualys/actions-alienapp-qualys"},{"title":"Creating Qualys Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/qualys/rules-alienapp-qualys"}]},{"group":"BlueApp for Salesforce","pages":[{"title":"BlueApp for Salesforce","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/salesforce/alienapp-salesforce"},{"title":"Configuring the BlueApp for Salesforce","href":"/documentation/usm-anywhere/alienapps-guide/salesforce/config-alienapp-salesforce"},{"title":"BlueApp for Salesforce Actions","href":"/documentation/usm-anywhere/alienapps-guide/salesforce/actions-alienapp-salesforce"},{"title":"Creating Salesforce Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/salesforce/rules-alienapp-salesforce"}]},{"group":"BlueApp for SentinelOne","pages":[{"title":"BlueApp for SentinelOne","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/sentinelone/alienapp-sentinelone"},{"title":"Configuring the BlueApp for SentinelOne","href":"/documentation/usm-anywhere/alienapps-guide/sentinelone/config-alienapp-sentinelone"},{"title":"BlueApp for SentinelOne Asset Discovery and Management","href":"/documentation/usm-anywhere/alienapps-guide/sentinelone/asset-discovery-alienapp-sentinelone"},{"title":"BlueApp for SentinelOne Actions","href":"/documentation/usm-anywhere/alienapps-guide/sentinelone/actions-alienapp-sentinelone"},{"title":"Creating SentinelOne Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/sentinelone/rules-alienapp-sentinelone"}]},{"group":"BlueApp for ServiceNow","pages":[{"title":"BlueApp for ServiceNow","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/servicenow/alienapp-servicenow"},{"title":"Configuring the BlueApp for ServiceNow","href":"/documentation/usm-anywhere/alienapps-guide/servicenow/config-alienapp-servicenow"},{"title":"BlueApp for ServiceNow Actions","href":"/documentation/usm-anywhere/alienapps-guide/servicenow/actions-alienapp-servicenow"},{"title":"Creating ServiceNow Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/servicenow/rules-alienapp-servicenow"},{"title":"Managing Your ServiceNow Incidents","href":"/documentation/usm-anywhere/alienapps-guide/servicenow/incidents-alienapp-servicenow"},{"title":"Orchestration Actions for BlueApp for ServiceNow","href":"/documentation/usm-anywhere/alienapps-guide/servicenow/orchestration-actions-servicenow"}]},{"group":"BlueApp for Sophos Central","pages":[{"title":"BlueApp for Sophos Central","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/sophos/alienapp-sophos"},{"title":"Configuring the BlueApp for Sophos Central","href":"/documentation/usm-anywhere/alienapps-guide/sophos/config-alienapp-sophos"},{"title":"Verifying the BlueApp for Sophos Central Collection Jobs","href":"/documentation/usm-anywhere/alienapps-guide/sophos/jobs-alienapp-sophos"},{"title":"Viewing Your Sophos Central Events and Alarms","href":"/documentation/usm-anywhere/alienapps-guide/sophos/view-events-alienapp-sophos"},{"title":"BlueApp for Sophos Central Actions","href":"/documentation/usm-anywhere/alienapps-guide/sophos/actions-alienapp-sophos"},{"title":"Creating Sophos Central Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/sophos/rules-alienapp-sophos"}]},{"group":"BlueApp for SpyCloud Dark Web Monitoring","pages":[{"title":"BlueApp for SpyCloud Dark Web Monitoring","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/dark-web/alienapp-spycloud"},{"title":"Configuring the BlueApp for SpyCloud Dark Web Monitoring","href":"/documentation/usm-anywhere/alienapps-guide/dark-web/config-alienapp-dark-web-monitoring"},{"title":"Collecting Your Historical Breach Events","href":"/documentation/usm-anywhere/alienapps-guide/dark-web/actions-alienapp-dark-web"},{"title":"SpyCloud Dark Web Monitoring Events and Alarms","href":"/documentation/usm-anywhere/alienapps-guide/dark-web/view-events-alienapp-dark-web"}]},{"group":"BlueApp for Tenable.io","pages":[{"title":"BlueApp for Tenable.io","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/tenableio/alienapp-tenable-io"},{"title":"Configuring the BlueApp for Tenable.io","href":"/documentation/usm-anywhere/alienapps-guide/tenableio/config-alienapp-tenable-io"},{"title":"BlueApp for Tenable.io Asset Discovery and Management","href":"/documentation/usm-anywhere/alienapps-guide/tenableio/asset-discovery-alienapp-tenable-io"},{"title":"BlueApp for Tenable.io Actions","href":"/documentation/usm-anywhere/alienapps-guide/tenableio/actions-alienapp-tenable-io"},{"title":"Creating Tenable.io Response Action Rules","href":"/documentation/usm-anywhere/alienapps-guide/tenableio/rules-alienapp-tenable-io"}]},{"group":"BlueApp for Zscaler","pages":[{"title":"BlueApp for Zscaler","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/zscaler/alienapp-zscaler"},{"title":"Configuring the BlueApp for Zscaler","href":"/documentation/usm-anywhere/alienapps-guide/zscaler/config-alienapp-zscaler"},{"title":"BlueApp for Zscaler Actions","href":"/documentation/usm-anywhere/alienapps-guide/zscaler/actions-alienapp-zscaler"},{"title":"Creating Zscaler Response Actions","href":"/documentation/usm-anywhere/alienapps-guide/zscaler/rules-alienapp-zscaler"}]}]},{"title":"BlueApps List","href":"/documentation/usm-anywhere/alienapps-guide/usma-blueapps-list"},{"group":"Custom BlueApps and Log Parsers","pages":[{"title":"Custom BlueApps and Log Parsers","sidebarTitle":"Overview","href":"/documentation/usm-anywhere/alienapps-guide/custom-app-builder/custom-app-home"},{"title":"Configuring a Custom BlueApp for Use with Your USM Anywhere","href":"/documentation/usm-anywhere/alienapps-guide/custom-app-builder/configuring-custom-alienapp"},{"title":"Configuring a Custom Log Parser for Use with Your USM Anywhere BlueApp","href":"/documentation/usm-anywhere/alienapps-guide/custom-app-builder/configuring-custom-log-collector"},{"title":"Templates for Custom Advanced BlueApp Configuration","href":"/documentation/usm-anywhere/alienapps-guide/custom-app-builder/templates-custom-alienapps"},{"title":"Guides for Custom Advanced BlueApp Configuration","href":"/documentation/usm-anywhere/alienapps-guide/custom-app-builder/guides-custom-alienapps"}]},{"title":"Request for a New BlueApp or Update to an Existing BlueApp","href":"/documentation/usm-anywhere/alienapps-guide/request-blueapps"}]},{"group":"Release Notes","pages":[{"title":"USM Anywhere and UI Release Notes","href":"/usm-anywhere-and-ui-release-notes"},{"title":"BlueApp Release Notes","href":"/blue-app-release-notes"},{"title":"Threat Intelligence Release Notes","href":"/threat-intelligence-release-notes"}]}]},{"product":"USM Central™","icon":"server","pages":[{"title":"USM Central™ Documentation","mode":"wide","sidebarTitle":"Overview","href":"/documentation/usm-central"},{"title":"USM Central Web User Interface (UI)","mode":"wide","href":"/documentation/usm-central/web-ui"},{"group":"USM Central Deployments","pages":[{"title":"USM Central Deployments","sidebarTitle":"Overview","href":"/documentation/usm-central/welcome-usm-central"},{"title":"USM Central Deployment Process","href":"/documentation/usm-central/deployment-process"},{"group":"USM Central Connections","pages":[{"title":"USM Central Connections","sidebarTitle":"Overview","href":"/documentation/usm-central/connections/connections"},{"title":"USM Anywhere Connections","href":"/documentation/usm-central/connections/usma-connections"},{"title":"USM Appliance Connections","href":"/documentation/usm-central/connections/appliance-connections"}]},{"title":"View Deployments","href":"/documentation/usm-central/view-deployments"}]},{"group":"Alarms Management","pages":[{"title":"Alarms Management","sidebarTitle":"Overview","href":"/documentation/usm-central/alarms/alarms-management"},{"group":"Alarms List View","pages":[{"title":"Alarms List View","sidebarTitle":"Overview","href":"/documentation/usm-central/alarms/alarms-list-view"},{"title":"Alarms List Columns","href":"/documentation/usm-central/alarms/alarms-list-columns"},{"title":"Configuring Columns on Alarms","href":"/documentation/usm-central/alarms/alarms-list-conf-columns"},{"title":"Priority Field for Alarms","href":"/documentation/usm-central/alarms/alarms-list-priority-field"},{"title":"Alarms Views","href":"/documentation/usm-central/alarms/views"}]},{"title":"Selecting Alarms in Alarm List View","href":"/documentation/usm-central/alarms/selecting-alarms"},{"title":"Searching Alarms","href":"/documentation/usm-central/alarms/searching-alarms"},{"group":"View Alarm Details","pages":[{"title":"View Alarm Details","sidebarTitle":"Overview","href":"/documentation/usm-central/alarms/view-alarms-details"},{"group":"Creating Rules from Alarms","pages":[{"title":"Creating Rules from Alarms","sidebarTitle":"Overview","href":"/documentation/usm-central/alarms/creating-rules-from-alarms"},{"title":"Creating Suppression Rules from the Alarms Page","href":"/documentation/usm-central/alarms/suppression-rule"},{"title":"Creating Notification Rules from the Alarms Page","href":"/documentation/usm-central/alarms/notification-rule"}]},{"title":"Searching Events from the Details of an Alarm","href":"/documentation/usm-central/alarms/searching-details-alarms"}]},{"title":"Labeling the Alarms","href":"/documentation/usm-central/alarms/labeling-alarms"},{"title":"Alarm Status","href":"/documentation/usm-central/alarms/alarm-status"},{"title":"Create an Alarms Report","href":"/documentation/usm-central/alarms/exporting-alarms"}]},{"group":"Vulnerabilities","pages":[{"title":"Vulnerabilities","sidebarTitle":"Overview","href":"/documentation/usm-central/vulnerabilities/vulnerability-assessment"},{"title":"Vulnerabilities Page List View","href":"/documentation/usm-central/vulnerabilities/vulnerabilities-list-view"},{"title":"Searching Vulnerabilities","href":"/documentation/usm-central/vulnerabilities/searching-vulnerabilities"},{"title":"View Vulnerabilities Details","href":"/documentation/usm-central/vulnerabilities/view-vulnerabilities-details"},{"title":"Labeling the Vulnerabilities","href":"/documentation/usm-central/vulnerabilities/labeling-vulnerabilities"},{"title":"Create Vulnerabilities Report","href":"/documentation/usm-central/vulnerabilities/exporting-vuln"}]},{"group":"Configuration Issues","pages":[{"title":"Configuration Issues","sidebarTitle":"Overview","href":"/documentation/usm-central/configuration-issues/config-issues"},{"title":"Configuration Issues List View","href":"/documentation/usm-central/configuration-issues/config-issues-list-view"},{"title":"Searching Configuration Issues","href":"/documentation/usm-central/configuration-issues/searching-confissues"},{"title":"Viewing Configuration Issues Details","href":"/documentation/usm-central/configuration-issues/view-config-issues-details"},{"title":"Create Configuration Issues Report","href":"/documentation/usm-central/configuration-issues/exporting-confissues"}]},{"group":"Orchestration Rules Management","pages":[{"title":"Orchestration Rules Management","sidebarTitle":"Overview","href":"/documentation/usm-central/rules-management/rules-management"},{"title":"Alarm Rules from the Orchestration Rules Page","href":"/documentation/usm-central/rules-management/alarm-rules"},{"title":"Filtering Rules from the Orchestration Rules Page","href":"/documentation/usm-central/rules-management/filtering-rules"},{"title":"Notification Rules from the Orchestration Rules Page","href":"/documentation/usm-central/rules-management/notification-rule"},{"title":"Suppression Rules from the Orchestration Rules Page","href":"/documentation/usm-central/rules-management/suppression-rule"},{"title":"Response Action Rules from the Orchestration Rules Page","href":"/documentation/usm-central/rules-management/response-action-rule"}]},{"title":"Saved Reports","href":"/documentation/usm-central/reports/saved-reports"},{"group":"System Events Management","pages":[{"title":"System Events Management","sidebarTitle":"Overview","href":"/documentation/usm-central/system-events/system-events-management"},{"title":"USM Central System Events List View","href":"/documentation/usm-central/system-events/system-events-list-view"},{"title":"Searching System Events","href":"/documentation/usm-central/system-events/searching-system-events"},{"title":"Viewing System Event Details","href":"/documentation/usm-central/system-events/viewing-system-events-details"}]},{"group":"User Management","pages":[{"title":"User Management","sidebarTitle":"Overview","href":"/documentation/usm-central/user-management/user-administration"},{"title":"Creating Users","href":"/documentation/usm-central/user-management/create-users"},{"title":"Role-Based Access Control (RBAC) in USM Central","href":"/documentation/usm-central/user-management/user-access-rbac"},{"title":"Editing Users","href":"/documentation/usm-central/user-management/edit-users"},{"group":"Managing Your Profile Settings","pages":[{"title":"Managing Your Profile Settings","href":"/documentation/usm-central/user-management/profile-settings"},{"title":"API Clients","href":"/documentation/usm-central/user-management/api-clients"}]},{"title":"Deleting Users","href":"/documentation/usm-central/user-management/delete-users"},{"title":"Configuring Web UI Session Timeout","href":"/documentation/usm-central/user-management/session-timeout"},{"title":"Regulated Deployment Access","href":"/documentation/usm-central/user-management/user-deployment-access"},{"title":"Using Multi-Factor Authentication","href":"/documentation/usm-central/user-management/multi-factor-authentication"},{"title":"User Account Protections","href":"/documentation/usm-central/user-management/user-protections"}]}]},{"product":"Automated Policy Manager","icon":"shield-halved","pages":[{"title":"Overview","href":"/documentation/policy-manager/overview"},{"title":"Navigation Panel","href":"/documentation/policy-manager/navigation"},{"title":"Dashboard","href":"/documentation/policy-manager/dashboard"},{"title":"Create","href":"/documentation/policy-manager/create"},{"group":"Manage","pages":[{"title":"Manage","sidebarTitle":"Overview","href":"/documentation/policy-manager/manage"},{"title":"Asset Info","href":"/documentation/policy-manager/manage/asset-info"},{"title":"Policies","href":"/documentation/policy-manager/manage/policies"},{"title":"Objects","href":"/documentation/policy-manager/manage/objects"},{"title":"Services","href":"/documentation/policy-manager/manage/services"},{"title":"Interfaces","href":"/documentation/policy-manager/manage/interfaces"},{"title":"Routes","href":"/documentation/policy-manager/manage/routes"},{"title":"URL Filtering","href":"/documentation/policy-manager/manage/url-filtering"},{"title":"Monitoring","href":"/documentation/policy-manager/manage/monitoring"},{"title":"Geoblocking","href":"/documentation/policy-manager/manage/geoblocking"}]},{"title":"Tickets","href":"/documentation/policy-manager/manage/tickets"},{"title":"Assets","href":"/documentation/policy-manager/manage/assets"},{"title":"Reports","sidebarTitle":"Reports","href":"/documentation/policy-manager/reports"},{"title":"Dark Mode/Light Mode","href":"/documentation/policy-manager/manage/ui-modes"},{"title":"Early Access Features","href":"/documentation/policy-manager/manage/early-access"}]},{"product":"DbProtect","icon":"database","pages":[{"group":"DbProtect 6.7.1","pages":[{"title":"DbProtect 6.7.1","mode":"wide","sidebarTitle":"Overview","href":"/documentation/db-protect/overview"},{"title":"DbProtect 6.7.1","sidebarTitle":"User Guide","href":"/documentation/db-protect/db-protect-6-7-1-user-guide"},{"title":"DbProtect v6.7.1 Release Notes","sidebarTitle":"Release Notes","href":"/documentation/db-protect/db-protect-v6-7-1-release-notes"},{"title":"DbProtect v6.7.1 Installation and Upgrade Guide","sidebarTitle":"Install \u0026 Upgrade Guide","href":"/documentation/db-protect/db-protect-v6-7-1-installation-and-upgrade-guide"}]},{"group":"DbProtect 6.7.2","pages":[{"title":"DbProtect 6.7.2","mode":"wide","sidebarTitle":"Overview","href":"/documentation/db-protect/overview-2"},{"title":"User Guide","href":"/documentation/db-protect/db-protect-6-7-2-user-guide"},{"title":"DbProtect 6.7.2 Release Notes","sidebarTitle":"Release Notes","href":"/documentation/db-protect/db-protect-6-7-2-release-notes"},{"title":"DbProtect v6.7.2 Installation and Upgrade Guide","sidebarTitle":"Install \u0026 Upgrade Guide","href":"/documentation/db-protect/db-protect-v6-7-2-installation-and-upgrade-guide"}]}]},{"product":"MailMarshal SMTP","icon":"envelope","pages":[{"group":"MailMarshal User Guide 12.0","pages":[{"title":"About This Guide","href":"/documentation/mailmarshal/user-guide/about-this-guide"},{"title":"Introduction","href":"/documentation/mailmarshal/user-guide/introduction"},{"title":"Planning Your MailMarshal Installation","sidebarTitle":"Planning Your Installation","href":"/documentation/mailmarshal/user-guide/planning-your-installation"},{"title":"Installing and Configuring MailMarshal","sidebarTitle":"Installing and Configuring","href":"/documentation/mailmarshal/user-guide/installing-and-configuring"},{"title":"Understanding MailMarshal Interfaces","sidebarTitle":"Understanding Interfaces","href":"/documentation/mailmarshal/user-guide/understanding-interfaces"},{"title":"Implementing Your Email Content Security Policy","sidebarTitle":"Implementing Your Security Policy","href":"/documentation/mailmarshal/user-guide/implementing-email-content-security-policy"},{"title":"Understanding Email Policy, Policy Groups, and Rules","sidebarTitle":"Email Policy, Policy Groups, and Rules","href":"/documentation/mailmarshal/user-guide/email-policy-groups-and-rules"},{"title":"Understanding Email Policy Elements","sidebarTitle":"Email Policy Elements","href":"/documentation/mailmarshal/user-guide/email-policy-elements"},{"title":"Monitoring Email Flow","href":"/documentation/mailmarshal/user-guide/monitoring-email-flow"},{"title":"Managing MailMarshal Configuration","sidebarTitle":"Managing Configuration","href":"/documentation/mailmarshal/user-guide/managing-configuration"},{"title":"Delegating Spam and Quarantine Management","sidebarTitle":"Delegating Spam and Quarantine","href":"/documentation/mailmarshal/user-guide/delegating-spam-and-quarantine-management"},{"title":"Reporting on MailMarshal Activity","sidebarTitle":"Reporting","href":"/documentation/mailmarshal/user-guide/reporting"},{"title":"Appendix A: Wildcards and Regular Expressions","sidebarTitle":"Wildcards and Regular Expressions","href":"/documentation/mailmarshal/user-guide/wildcards-and-regular-expressions"},{"title":"Appendix B: Third Party Extensions","sidebarTitle":"Third Party Extensions","href":"/documentation/mailmarshal/user-guide/third-party-extensions"},{"title":"Glossary","href":"/documentation/mailmarshal/user-guide/glossary"}]},{"title":"ReleaseNotes12.0","href":"/MailMarshal_SMTP/ReleaseNotes12.0"}]},{"product":"AppDetectivePRO","icon":"database","groups":[{"group":"AppDetectivePRO","pages":[{"title":"AppDetectivePRO 10.15","mode":"wide","sidebarTitle":"Overview","href":"/documentation/db-protect/overview_"},{"title":"AppDetectivePRO User Guide","sidebarTitle":"AppDetectivePRO User Guide 10.15","href":"/documentation/AppDetectivePRO/app-detective-pro-v10-15-userguide"},{"sidebarTitle":"Release Notes 10.15","title":"AppDetectivePRO v10.15 Release Notes","href":"/documentation/AppDetectivePRO/app-detective-pro-v10-15-release-notes"}]},{"group":"Knowledge Base","pages":[{"title":"INFO: What is the Product Support Lifecycle for DbProtect and AppDetectivePRO?","href":"/info-what-is-the-product-support-lifecycle-for-db-protect-and-app-detective-pro"}]}]}]},{"tab":"API Reference","groups":[{"group":"USM Anywhere","tag":"version 2.0","pages":[{"group":"OAuth","pages":[{"title":"Get OAuth Token","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml post /oauth/token","href":"/api-reference/oauth/get-oauth-token"}]},{"group":"Alarms","pages":[{"title":"Get a page of alarms","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml get /alarms","href":"/api-reference/alarms/get-a-page-of-alarms"},{"title":"Get Alarm Details","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml get /alarms/{alarmId}","href":"/api-reference/alarms/get-alarm-details"},{"title":"List labels for an alarm","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml get /alarms/{alarmId}/labels","href":"/api-reference/alarms/list-labels-for-an-alarm"},{"title":"Add a label to an alarm","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml put /alarms/{alarmId}/labels/{labelId}","href":"/api-reference/alarms/add-a-label-to-an-alarm"},{"title":"Remove a label from an alarm","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml delete /alarms/{alarmId}/labels/{labelId}","href":"/api-reference/alarms/remove-a-label-from-an-alarm"}]},{"group":"Events","pages":[{"title":"Get a page of events","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml get /events","href":"/api-reference/events/get-a-page-of-events"},{"title":"Get Event Details","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml get /events/{eventId}","href":"/api-reference/events/get-event-details"}]}]},{"group":"USM Central","tag":"version 1.1","pages":[{"group":"OAuth","pages":[{"title":"Get OAuth Token","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml post /oauth/token","href":"/api-reference/oauth/get-oauth-token"}]},{"group":"Alarms","pages":[{"title":"Get a page of alarms","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml get /alarms","href":"/api-reference/alarms/get-a-page-of-alarms"},{"title":"Get Alarm Details","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml get /alarms/{alarmId}","href":"/api-reference/alarms/get-alarm-details"},{"title":"List labels for an alarm","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml get /alarms/{alarmId}/labels","href":"/api-reference/alarms/list-labels-for-an-alarm"},{"title":"Add a label to an alarm","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml put /alarms/{alarmId}/labels/{labelId}","href":"/api-reference/alarms/add-a-label-to-an-alarm"},{"title":"Remove a label from an alarm","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml delete /alarms/{alarmId}/labels/{labelId}","href":"/api-reference/alarms/remove-a-label-from-an-alarm"}]},{"group":"Events","pages":[{"title":"Get a page of events","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml get /events","href":"/api-reference/events/get-a-page-of-events"},{"title":"Get Event Details","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v2.yaml get /events/{eventId}","href":"/api-reference/events/get-event-details"}]}]},{"group":"USM Investigations","tag":"version 1.0","pages":[{"group":"Investigations","pages":[{"title":"List Investigations","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml get /investigations","href":"/api-reference/investigations/list-investigations"},{"title":"Create an Investigation","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml post /investigations","href":"/api-reference/investigations/create-an-investigation"},{"title":"Obtain an Investigation","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml get /investigations/{investigationId}","href":"/api-reference/investigations/obtain-an-investigation"},{"title":"Modify an Investigation","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml put /investigations/{investigationId}","href":"/api-reference/investigations/modify-an-investigation"},{"title":"Delete an Investigation","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml delete /investigations/{investigationId}","href":"/api-reference/investigations/delete-an-investigation"}]},{"group":"Attachments","pages":[{"title":"List Attachments","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml get /investigations/{investigationId}/attachments","href":"/api-reference/attachments/list-attachments"},{"title":"Create an Attachment","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml post /investigations/{investigationId}/attachments","href":"/api-reference/attachments/create-an-attachment"},{"title":"Obtain an Attachment","description":"Returns an attachment associated with an investigtion.","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml get /investigations/{investigationId}/attachments/{attachmentId}","href":"/api-reference/attachments/obtain-an-attachment"},{"title":"Modify an Attachment","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml put /investigations/{investigationId}/attachments/{attachmentId}","href":"/api-reference/attachments/modify-an-attachment"},{"title":"Delete an Attachment","description":"Removes an attachment from an investigation.","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml delete /investigations/{investigationId}/attachments/{attachmentId}","href":"/api-reference/attachments/delete-an-attachment"}]},{"group":"Evidence","pages":[{"title":"List Evidence","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml get /investigations/{investigationId}/evidence","href":"/api-reference/evidence/list-evidence"},{"title":"Add Evidence","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml post /investigations/{investigationId}/evidence","href":"/api-reference/evidence/add-evidence"},{"title":"Obtain Evidence","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml get /investigations/{investigationId}/evidence/{evidenceId}","href":"/api-reference/evidence/obtain-evidence"},{"title":"Remove Evidence","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml delete /investigations/{investigationId}/evidence/{evidenceId}","href":"/api-reference/evidence/remove-evidence"}]},{"group":"History","pages":[{"title":"List Changes","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml get /investigations/{investigationId}/history","href":"/api-reference/history/list-changes"}]},{"group":"Notes","pages":[{"title":"List Notes","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml get /investigations/{investigationId}/notes","href":"/api-reference/notes/list-notes"},{"title":"Create a Note","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml post /investigations/{investigationId}/notes","href":"/api-reference/notes/create-a-note"},{"title":"Obtain a Note","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml get /investigations/{investigationId}/notes/{noteId}","href":"/api-reference/notes/obtain-a-note"},{"title":"Modify a Note","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml put /investigations/{investigationId}/notes/{noteId}","href":"/api-reference/notes/modify-a-note"},{"title":"Delete a Note","deprecated":null,"version":null,"openapi":"/documentation/api-reference/v3.yaml delete /investigations/{investigationId}/notes/{noteId}","href":"/api-reference/notes/delete-a-note"}]}]}]}]},"basePath":"","title":"Modify an Attachment - Level Blue","buildId":"dpl_345ReqzYaAjzS9QpeJemsKdb7KDj","deploymentId":"dpl_345ReqzYaAjzS9QpeJemsKdb7KDj","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-C8RPHPxo.js","utils-0BK-9q6z.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-DfjzsUJT.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-B4v9psJ4.js","snippetPresets-CpTQv-Ez.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-BNP-Fvr0.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-BSgu6h1D.js","shallow-Biv1i9Gs.js","getApiPlaygroundDisplay-BoGOXhtF.js","CodeSnippet-DvQoT18_.js","CodeSnippets-Dnpa15xT.js","Page-Buji1S4J.js","getPastedJson-xAIyhUFE.js","icon-S6FBih11.js","MethodPill-SaYeUZyk.js","DuplicateIcon-Cs-p3v2Q.js","createIcon-DjCFEoHq.js","DynamicMarkdown-BcnBltEQ.js","SectionHeading-BUBl0eEF.js","axios-vUo_bRtp.js","Markdown-h4cOoD8d.js","clsx-B2v50t8t.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-DJnKvr0g.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-BHrrjR1K.js"]}