diff --git a/docs/kb/threatprevention/images/ka0Qk000000DMp7_0EMQk00000Bq4h7.png b/docs/kb/threatprevention/0-images/ka0Qk000000DMp7_0EMQk00000Bq4h7.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000DMp7_0EMQk00000Bq4h7.png rename to docs/kb/threatprevention/0-images/ka0Qk000000DMp7_0EMQk00000Bq4h7.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000DZET_0EM4u000008M9O8.png b/docs/kb/threatprevention/0-images/ka0Qk000000DZET_0EM4u000008M9O8.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000DZET_0EM4u000008M9O8.png rename to docs/kb/threatprevention/0-images/ka0Qk000000DZET_0EM4u000008M9O8.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000DZET_0EM4u000008M9OD.png b/docs/kb/threatprevention/0-images/ka0Qk000000DZET_0EM4u000008M9OD.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000DZET_0EM4u000008M9OD.png rename to docs/kb/threatprevention/0-images/ka0Qk000000DZET_0EM4u000008M9OD.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000DZET_0EM4u000008M9OI.png b/docs/kb/threatprevention/0-images/ka0Qk000000DZET_0EM4u000008M9OI.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000DZET_0EM4u000008M9OI.png rename to docs/kb/threatprevention/0-images/ka0Qk000000DZET_0EM4u000008M9OI.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000DZET_0EM4u000008M9OS.png b/docs/kb/threatprevention/0-images/ka0Qk000000DZET_0EM4u000008M9OS.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000DZET_0EM4u000008M9OS.png rename to docs/kb/threatprevention/0-images/ka0Qk000000DZET_0EM4u000008M9OS.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000DZET_0EM4u000008M9OX.png b/docs/kb/threatprevention/0-images/ka0Qk000000DZET_0EM4u000008M9OX.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000DZET_0EM4u000008M9OX.png rename to docs/kb/threatprevention/0-images/ka0Qk000000DZET_0EM4u000008M9OX.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000DZET_0EM4u000008M9Oc.png b/docs/kb/threatprevention/0-images/ka0Qk000000DZET_0EM4u000008M9Oc.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000DZET_0EM4u000008M9Oc.png rename to docs/kb/threatprevention/0-images/ka0Qk000000DZET_0EM4u000008M9Oc.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000DZHh_0EM4u0000084oo1.png b/docs/kb/threatprevention/0-images/ka0Qk000000DZHh_0EM4u0000084oo1.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000DZHh_0EM4u0000084oo1.png rename to docs/kb/threatprevention/0-images/ka0Qk000000DZHh_0EM4u0000084oo1.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000DZHh_0EM4u0000084oo6.png b/docs/kb/threatprevention/0-images/ka0Qk000000DZHh_0EM4u0000084oo6.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000DZHh_0EM4u0000084oo6.png rename to docs/kb/threatprevention/0-images/ka0Qk000000DZHh_0EM4u0000084oo6.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000DZHh_0EM4u0000084ooB.png b/docs/kb/threatprevention/0-images/ka0Qk000000DZHh_0EM4u0000084ooB.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000DZHh_0EM4u0000084ooB.png rename to docs/kb/threatprevention/0-images/ka0Qk000000DZHh_0EM4u0000084ooB.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000DZHh_0EM4u0000084ooG.png b/docs/kb/threatprevention/0-images/ka0Qk000000DZHh_0EM4u0000084ooG.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000DZHh_0EM4u0000084ooG.png rename to docs/kb/threatprevention/0-images/ka0Qk000000DZHh_0EM4u0000084ooG.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000Dk3S_0EM4u000008L8RW.png b/docs/kb/threatprevention/0-images/ka0Qk000000Dk3S_0EM4u000008L8RW.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000Dk3S_0EM4u000008L8RW.png rename to docs/kb/threatprevention/0-images/ka0Qk000000Dk3S_0EM4u000008L8RW.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000Dk3S_0EM4u000008L8RX.png b/docs/kb/threatprevention/0-images/ka0Qk000000Dk3S_0EM4u000008L8RX.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000Dk3S_0EM4u000008L8RX.png rename to docs/kb/threatprevention/0-images/ka0Qk000000Dk3S_0EM4u000008L8RX.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000Dk3S_0EM4u000008L8RY.png b/docs/kb/threatprevention/0-images/ka0Qk000000Dk3S_0EM4u000008L8RY.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000Dk3S_0EM4u000008L8RY.png rename to docs/kb/threatprevention/0-images/ka0Qk000000Dk3S_0EM4u000008L8RY.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000DmDJ_0EM4u000004d1hf.png b/docs/kb/threatprevention/0-images/ka0Qk000000DmDJ_0EM4u000004d1hf.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000DmDJ_0EM4u000004d1hf.png rename to docs/kb/threatprevention/0-images/ka0Qk000000DmDJ_0EM4u000004d1hf.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000E6NJ_0EMQk000009RgNm.png b/docs/kb/threatprevention/0-images/ka0Qk000000E6NJ_0EMQk000009RgNm.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000E6NJ_0EMQk000009RgNm.png rename to docs/kb/threatprevention/0-images/ka0Qk000000E6NJ_0EMQk000009RgNm.png diff --git a/docs/kb/threatprevention/images/ka0Qk000000FNHF_0EMQk00000E8sBH.png b/docs/kb/threatprevention/0-images/ka0Qk000000FNHF_0EMQk00000E8sBH.png similarity index 100% rename from docs/kb/threatprevention/images/ka0Qk000000FNHF_0EMQk00000E8sBH.png rename to docs/kb/threatprevention/0-images/ka0Qk000000FNHF_0EMQk00000E8sBH.png diff --git a/docs/kb/threatprevention/_category_.json b/docs/kb/threatprevention/_category_.json index 31ba0aed9c..7ad393fb13 100644 --- a/docs/kb/threatprevention/_category_.json +++ b/docs/kb/threatprevention/_category_.json @@ -1,6 +1,10 @@ { - "label": "Troubleshooting Articles", + "label": "Knowledge Base", "position": 999, "collapsed": true, - "collapsible": true + "collapsible": true, + "link": { + "type": "doc", + "id": "index" + } } diff --git a/docs/kb/threatprevention/agent_not_detected_and_reinstallation_fails_with_error_agent_is_already_installed.md b/docs/kb/threatprevention/agent-installation-and-deployment/agent_not_detected_and_reinstallation_fails_with_error_agent_is_already_installed.md similarity index 100% rename from docs/kb/threatprevention/agent_not_detected_and_reinstallation_fails_with_error_agent_is_already_installed.md rename to docs/kb/threatprevention/agent-installation-and-deployment/agent_not_detected_and_reinstallation_fails_with_error_agent_is_already_installed.md diff --git a/docs/kb/threatprevention/is-ntlm-authentication-required-for-netwrix-threat-prevention.md b/docs/kb/threatprevention/agent-installation-and-deployment/is-ntlm-authentication-required-for-netwrix-threat-prevention.md similarity index 100% rename from docs/kb/threatprevention/is-ntlm-authentication-required-for-netwrix-threat-prevention.md rename to docs/kb/threatprevention/agent-installation-and-deployment/is-ntlm-authentication-required-for-netwrix-threat-prevention.md diff --git a/docs/kb/threatprevention/set-up-eset-hips-rules-to-allow-threat-prevention-si-agent-hook.md b/docs/kb/threatprevention/agent-installation-and-deployment/set-up-eset-hips-rules-to-allow-threat-prevention-si-agent-hook.md similarity index 85% rename from docs/kb/threatprevention/set-up-eset-hips-rules-to-allow-threat-prevention-si-agent-hook.md rename to docs/kb/threatprevention/agent-installation-and-deployment/set-up-eset-hips-rules-to-allow-threat-prevention-si-agent-hook.md index a7df867365..e33e9de553 100644 --- a/docs/kb/threatprevention/set-up-eset-hips-rules-to-allow-threat-prevention-si-agent-hook.md +++ b/docs/kb/threatprevention/agent-installation-and-deployment/set-up-eset-hips-rules-to-allow-threat-prevention-si-agent-hook.md @@ -30,12 +30,12 @@ How to set up ESET HIPS rules to allow Threat Prevention SI Agent hook? 1. In the left pane of your **ESET PROTECT Web Console**, select **Policies**. Select the **Detection Engine** tab > **HIPS**. 2. Under the **Rules** section, click **Edit**. - ![Step 2](./images/ka0Qk000000DZET_0EM4u000008M9O8.png) + ![Step 2](../0-images/ka0Qk000000DZET_0EM4u000008M9O8.png) 3. In the **HIPS Rules** window, click **Add**. 4. Specify the **Rule name**, select **Allow** for the **Action** type, and proceed by clicking **Next**. - ![Steps 3-4](./images/ka0Qk000000DZET_0EM4u000008M9OD.png) + ![Steps 3-4](../0-images/ka0Qk000000DZET_0EM4u000008M9OD.png) 5. Select **Specific applications** in the dropdown list, and click **Add** to add the path to `SIWindowsAgent.exe`. Refer to the following code block for a default path: @@ -45,19 +45,19 @@ How to set up ESET HIPS rules to allow Threat Prevention SI Agent hook? Proceed to the next step by clicking **Next**. - ![Step 5](./images/ka0Qk000000DZET_0EM4u000008M9OI.png) + ![Step 5](../0-images/ka0Qk000000DZET_0EM4u000008M9OI.png) 6. Switch the **All file operations** switch to the on position, and proceed by clicking **Next**. Click **OK** to save changes. - ![Step 6](./images/ka0Qk000000DZET_0EM4u000008M9OS.png) + ![Step 6](../0-images/ka0Qk000000DZET_0EM4u000008M9OS.png) 7. Once the configuration steps are completed, proceed to the **Assign** tab. Assign the new rule to corresponding systems. - ![Step 7](./images/ka0Qk000000DZET_0EM4u000008M9OX.png) + ![Step 7](../0-images/ka0Qk000000DZET_0EM4u000008M9OX.png) 8. The rule should become visible in your ESET host. Refer to the **Advanced Setup** menu > **HIPS** tab > **Basic** section > **Rules** tab. - ![Step 8](./images/ka0Qk000000DZET_0EM4u000008M9Oc.png) + ![Step 8](../0-images/ka0Qk000000DZET_0EM4u000008M9Oc.png) > **NOTE:** Once the rule is applied, SI Agent should be restarted. diff --git a/docs/kb/threatprevention/threat-prevention-agent-install-fails-with-error-643.md b/docs/kb/threatprevention/agent-installation-and-deployment/threat-prevention-agent-install-fails-with-error-643.md similarity index 100% rename from docs/kb/threatprevention/threat-prevention-agent-install-fails-with-error-643.md rename to docs/kb/threatprevention/agent-installation-and-deployment/threat-prevention-agent-install-fails-with-error-643.md diff --git a/docs/kb/threatprevention/unable-to-upgrade-si-agents.md b/docs/kb/threatprevention/agent-installation-and-deployment/unable-to-upgrade-si-agents.md similarity index 100% rename from docs/kb/threatprevention/unable-to-upgrade-si-agents.md rename to docs/kb/threatprevention/agent-installation-and-deployment/unable-to-upgrade-si-agents.md diff --git a/docs/kb/threatprevention/agent-connection-lost-after-upgrading.md b/docs/kb/threatprevention/agent-management-and-connectivity/agent-connection-lost-after-upgrading.md similarity index 97% rename from docs/kb/threatprevention/agent-connection-lost-after-upgrading.md rename to docs/kb/threatprevention/agent-management-and-connectivity/agent-connection-lost-after-upgrading.md index 9112633c1a..ecbff5e46e 100644 --- a/docs/kb/threatprevention/agent-connection-lost-after-upgrading.md +++ b/docs/kb/threatprevention/agent-management-and-connectivity/agent-connection-lost-after-upgrading.md @@ -41,7 +41,7 @@ In the `NVMonitorConfig` database, the host may appear multiple times within the > SELECT * FROM [NVMonitorConfig].[dbo].[Server] WHERE name LIKE '%%' > ``` > -> ![Query results in SSMS showing duplicate host entries in the Server table](./images/ka0Qk000000FNHF_0EMQk00000E8sBH.png) +> ![Query results in SSMS showing duplicate host entries in the Server table](../0-images/ka0Qk000000FNHF_0EMQk00000E8sBH.png) ## Resolution diff --git a/docs/kb/threatprevention/duplicate-threat-prevention-windows-agent-entries-in-the-threat-prevention-admin-console.md b/docs/kb/threatprevention/agent-management-and-connectivity/duplicate-threat-prevention-windows-agent-entries-in-the-threat-prevention-admin-console.md similarity index 100% rename from docs/kb/threatprevention/duplicate-threat-prevention-windows-agent-entries-in-the-threat-prevention-admin-console.md rename to docs/kb/threatprevention/agent-management-and-connectivity/duplicate-threat-prevention-windows-agent-entries-in-the-threat-prevention-admin-console.md diff --git a/docs/kb/threatprevention/how-to-configure-mixed-version-mode-in-threat-prevention.md b/docs/kb/threatprevention/agent-management-and-connectivity/how-to-configure-mixed-version-mode-in-threat-prevention.md similarity index 100% rename from docs/kb/threatprevention/how-to-configure-mixed-version-mode-in-threat-prevention.md rename to docs/kb/threatprevention/agent-management-and-connectivity/how-to-configure-mixed-version-mode-in-threat-prevention.md diff --git a/docs/kb/threatprevention/siagent_7.3.6.331_7.3.7.249_7.3.8.176_7.3.9.7_297960_298390.md b/docs/kb/threatprevention/agent-management-and-connectivity/siagent_7.3.6.331_7.3.7.249_7.3.8.176_7.3.9.7_297960_298390.md similarity index 100% rename from docs/kb/threatprevention/siagent_7.3.6.331_7.3.7.249_7.3.8.176_7.3.9.7_297960_298390.md rename to docs/kb/threatprevention/agent-management-and-connectivity/siagent_7.3.6.331_7.3.7.249_7.3.8.176_7.3.9.7_297960_298390.md diff --git a/docs/kb/threatprevention/threat-prevention-agents-in-unknown-state-following-upgrade.md b/docs/kb/threatprevention/agent-management-and-connectivity/threat-prevention-agents-in-unknown-state-following-upgrade.md similarity index 100% rename from docs/kb/threatprevention/threat-prevention-agents-in-unknown-state-following-upgrade.md rename to docs/kb/threatprevention/agent-management-and-connectivity/threat-prevention-agents-in-unknown-state-following-upgrade.md diff --git a/docs/kb/threatprevention/how-to-change-threat-prevention-credentials.md b/docs/kb/threatprevention/configuration-and-administration/how-to-change-threat-prevention-credentials.md similarity index 100% rename from docs/kb/threatprevention/how-to-change-threat-prevention-credentials.md rename to docs/kb/threatprevention/configuration-and-administration/how-to-change-threat-prevention-credentials.md diff --git a/docs/kb/threatprevention/identify-threat-prevention-installed-components-and-version.md b/docs/kb/threatprevention/configuration-and-administration/identify-threat-prevention-installed-components-and-version.md similarity index 100% rename from docs/kb/threatprevention/identify-threat-prevention-installed-components-and-version.md rename to docs/kb/threatprevention/configuration-and-administration/identify-threat-prevention-installed-components-and-version.md diff --git a/docs/kb/threatprevention/pwnd-passwords-database-downloader-for-netwrix-threat-prevention.md b/docs/kb/threatprevention/configuration-and-administration/pwnd-passwords-database-downloader-for-netwrix-threat-prevention.md similarity index 90% rename from docs/kb/threatprevention/pwnd-passwords-database-downloader-for-netwrix-threat-prevention.md rename to docs/kb/threatprevention/configuration-and-administration/pwnd-passwords-database-downloader-for-netwrix-threat-prevention.md index 121a42b526..968c52d411 100644 --- a/docs/kb/threatprevention/pwnd-passwords-database-downloader-for-netwrix-threat-prevention.md +++ b/docs/kb/threatprevention/configuration-and-administration/pwnd-passwords-database-downloader-for-netwrix-threat-prevention.md @@ -47,7 +47,7 @@ knowledge_article_id: kA04u000000HDkaCAG dotnet tool install --global haveibeenpwned-downloader ``` -![User-added image](./images/ka0Qk000000DZHh_0EM4u0000084oo1.png) +![User-added image](../0-images/ka0Qk000000DZHh_0EM4u0000084oo1.png) ### Step 3. Update an already installed Pwnd Passwords Downloader @@ -58,7 +58,7 @@ dotnet tool install --global haveibeenpwned-downloader dotnet tool update --global haveibeenpwned-downloader ``` -![User-added image](./images/ka0Qk000000DZHh_0EM4u0000084oo6.png) +![User-added image](../0-images/ka0Qk000000DZHh_0EM4u0000084oo6.png) ### Usage of Pwnd Passwords Downloader @@ -71,7 +71,7 @@ To download NTLM hashes: haveibeenpwned-downloader.exe -n pwnedpasswords ``` -![User-added image](./images/ka0Qk000000DZHh_0EM4u0000084ooB.png) +![User-added image](../0-images/ka0Qk000000DZHh_0EM4u0000084ooB.png) ### Step 4. Prepare Pwned DB for SI @@ -81,4 +81,4 @@ haveibeenpwned-downloader.exe -n pwnedpasswords 4. Click **Select File** and choose downloaded txt file. 5. Click the **Update** button. -![User-added image](./images/ka0Qk000000DZHh_0EM4u0000084ooG.png) +![User-added image](../0-images/ka0Qk000000DZHh_0EM4u0000084ooG.png) diff --git a/docs/kb/threatprevention/threat-prevention-security-best-practices.md b/docs/kb/threatprevention/configuration-and-administration/threat-prevention-security-best-practices.md similarity index 100% rename from docs/kb/threatprevention/threat-prevention-security-best-practices.md rename to docs/kb/threatprevention/configuration-and-administration/threat-prevention-security-best-practices.md diff --git a/docs/kb/threatprevention/updating-the-have-i-been-pwnd-ntml-hash-list.md b/docs/kb/threatprevention/configuration-and-administration/updating-the-have-i-been-pwnd-ntml-hash-list.md similarity index 90% rename from docs/kb/threatprevention/updating-the-have-i-been-pwnd-ntml-hash-list.md rename to docs/kb/threatprevention/configuration-and-administration/updating-the-have-i-been-pwnd-ntml-hash-list.md index 432390db54..100b732f4e 100644 --- a/docs/kb/threatprevention/updating-the-have-i-been-pwnd-ntml-hash-list.md +++ b/docs/kb/threatprevention/configuration-and-administration/updating-the-have-i-been-pwnd-ntml-hash-list.md @@ -26,7 +26,7 @@ knowledge_article_id: kA04u00000110ffCAA # Updating the Have I Been Pwnd NTML Hash List ## Overview -The Pwnd Passwords Downloader is a dotnet tool to download all Pwned Passwords hash ranges and save them offline so they can be used without a dependency on the k-anonymity API. For Netwrix Password Policy Enforcer Netwrix Password Policy Enforcer v.10.1 and up, you will need to download NTLM hashes using the Pwnd Passwords Downloader. +The Pwnd Passwords Downloader is a dotnet tool to download all Pwned Passwords hash ranges and save them offline so they can be used without a dependency on the k-anonymity API. For Netwrix Password Policy Enforcer v.10.1 and up, you will need to download NTLM hashes using the Pwnd Passwords Downloader. ## Prerequisites You will need to install .NET 6 first to be able to install [Pwnd Passwords Downloader](https://github.com/HaveIBeenPwned/PwnedPasswordsDownloader). Only then can you use that tool to get the latest breached hashes from Have I Been Pwned (HIBP). You can download and install .NET 6 from: https://dotnet.microsoft.com/en-us/download/dotnet/6.0 @@ -47,7 +47,7 @@ Follow the steps to install the Pwnd Passwords Downloader. dotnet tool install --global haveibeenpwned-downloader ``` -![A screenshot of a computer Description automatically generated with medium confidence](./images/ka0Qk000000Dk3S_0EM4u000008L8RW.png) +![A screenshot of a computer Description automatically generated with medium confidence](../0-images/ka0Qk000000Dk3S_0EM4u000008L8RW.png) 3. Close the command prompt. @@ -61,7 +61,7 @@ Follow the steps to update an installed Pwnd Passwords Downloader. dotnet tool update --global haveibeenpwned-downloader ``` -![A picture containing text, screenshot, font Description automatically generated](./images/ka0Qk000000Dk3S_0EM4u000008L8RX.png) +![A picture containing text, screenshot, font Description automatically generated](../0-images/ka0Qk000000Dk3S_0EM4u000008L8RX.png) ### Download NTML Hashes with the Pwnd Passwords Downloader Follow the steps to download NTLM hashes (for Netwrix Password Policy Enforcer v10.1 and up): @@ -75,7 +75,7 @@ Run: haveibeenpwned-downloader.exe -n pwnedpasswords_ntlm ``` -![A picture containing text, screenshot, font Description automatically generated](./images/ka0Qk000000Dk3S_0EM4u000008L8RY.png) +![A picture containing text, screenshot, font Description automatically generated](../0-images/ka0Qk000000Dk3S_0EM4u000008L8RY.png) This screenshot shows the completed download. diff --git a/docs/kb/threatprevention/error-database-maintenance-failing-with-error-code-0x5-error-15404.md b/docs/kb/threatprevention/database-and-maintenance/error-database-maintenance-failing-with-error-code-0x5-error-15404.md similarity index 96% rename from docs/kb/threatprevention/error-database-maintenance-failing-with-error-code-0x5-error-15404.md rename to docs/kb/threatprevention/database-and-maintenance/error-database-maintenance-failing-with-error-code-0x5-error-15404.md index 03eed6329f..a7dcd76da4 100644 --- a/docs/kb/threatprevention/error-database-maintenance-failing-with-error-code-0x5-error-15404.md +++ b/docs/kb/threatprevention/database-and-maintenance/error-database-maintenance-failing-with-error-code-0x5-error-15404.md @@ -43,4 +43,4 @@ The account running the SQL Server Service on the SQL server does not have acces 4. Click **Apply** to save the change and then click **Restart**. 5. Repeat steps 1–4 for **SQL Server Agent (Instance name)**. -![SQL Server Configuration Manager showing Log On tab settings for Network Service](./images/ka0Qk000000E6NJ_0EMQk000009RgNm.png) +![SQL Server Configuration Manager showing Log On tab settings for Network Service](../0-images/ka0Qk000000E6NJ_0EMQk000009RgNm.png) diff --git a/docs/kb/threatprevention/how-to-manage-sql-database-size.md b/docs/kb/threatprevention/database-and-maintenance/how-to-manage-sql-database-size.md similarity index 100% rename from docs/kb/threatprevention/how-to-manage-sql-database-size.md rename to docs/kb/threatprevention/database-and-maintenance/how-to-manage-sql-database-size.md diff --git a/docs/kb/threatprevention/threat-prevention-upgrade-procedure-fails-when-windows-authentication-enabled.md b/docs/kb/threatprevention/database-and-maintenance/threat-prevention-upgrade-procedure-fails-when-windows-authentication-enabled.md similarity index 100% rename from docs/kb/threatprevention/threat-prevention-upgrade-procedure-fails-when-windows-authentication-enabled.md rename to docs/kb/threatprevention/database-and-maintenance/threat-prevention-upgrade-procedure-fails-when-windows-authentication-enabled.md diff --git a/docs/kb/threatprevention/index.md b/docs/kb/threatprevention/index.md index 11bcaf82a9..6b0918e981 100644 --- a/docs/kb/threatprevention/index.md +++ b/docs/kb/threatprevention/index.md @@ -8,11 +8,34 @@ slug: threatprevention Welcome to the Threat Prevention knowledge base. Browse our collection of troubleshooting guides, configuration instructions, and best practices. -Use the search function above to find specific articles or browse through all Threat Prevention KB articles in this section. +## Browse by Category + +### Agent Installation and Deployment +Articles covering agent installation challenges, upgrade issues, NTLM authentication requirements, and third-party security software compatibility during deployment. + +### Agent Management and Connectivity +Guidance on managing agent status, resolving connection issues, handling duplicate entries, and configuring mixed version mode for managing agents at different versions. + +### Configuration and Administration +Articles on system configuration tasks including credential management, component identification, pwned password database management, and security best practices. + +### Database and Maintenance +Information on SQL database management, maintenance job configuration, database size control, and authentication issues during upgrades. + +### Troubleshooting and Diagnostics +Guidance on enabling debug logging, locating log files, and troubleshooting specific errors that require diagnostic information gathering. + +### Licensing +Articles addressing license-related issues including premature expiration and service account permission problems. + +## Quick Links + +- [Threat Prevention Documentation](https://docs.netwrix.com/docs/threatprevention/7_5) - Main product documentation +- [News & Security Advisories](https://community.netwrix.com/lists/itdr) - Latest updates and changes ## Need Help? If you can't find what you're looking for: 1. Use the search function above -2. Check the main Threat Prevention documentation +2. Check the main [Threat Prevention documentation](https://docs.netwrix.com/docs/threatprevention/7_5) 3. Contact [Netwrix support](https://www.netwrix.com/support.html) \ No newline at end of file diff --git a/docs/kb/threatprevention/threat-prevention-license-has-prematurely-expired.md b/docs/kb/threatprevention/licensing/threat-prevention-license-has-prematurely-expired.md similarity index 100% rename from docs/kb/threatprevention/threat-prevention-license-has-prematurely-expired.md rename to docs/kb/threatprevention/licensing/threat-prevention-license-has-prematurely-expired.md diff --git a/docs/kb/threatprevention/enabling-additional-logging-for-the-threat-prevention-admin-console.md b/docs/kb/threatprevention/troubleshooting-and-diagnostics/enabling-additional-logging-for-the-threat-prevention-admin-console.md similarity index 100% rename from docs/kb/threatprevention/enabling-additional-logging-for-the-threat-prevention-admin-console.md rename to docs/kb/threatprevention/troubleshooting-and-diagnostics/enabling-additional-logging-for-the-threat-prevention-admin-console.md diff --git a/docs/kb/threatprevention/enabling-debug-logging-on-the-steathintercept-windows-agent.md b/docs/kb/threatprevention/troubleshooting-and-diagnostics/enabling-debug-logging-on-the-steathintercept-windows-agent.md similarity index 93% rename from docs/kb/threatprevention/enabling-debug-logging-on-the-steathintercept-windows-agent.md rename to docs/kb/threatprevention/troubleshooting-and-diagnostics/enabling-debug-logging-on-the-steathintercept-windows-agent.md index 7290cc3c4e..53b208d364 100644 --- a/docs/kb/threatprevention/enabling-debug-logging-on-the-steathintercept-windows-agent.md +++ b/docs/kb/threatprevention/troubleshooting-and-diagnostics/enabling-debug-logging-on-the-steathintercept-windows-agent.md @@ -37,7 +37,7 @@ There are two options. 3. Edit the file named `SIWindowsAgent.log.config` in your favorite text editor. 4. Change `WARN` to `DEBUG` in the appropriate portion of that file: - ![LogConfig.png](./images/ka0Qk000000DmDJ_0EM4u000004d1hf.png) + ![LogConfig.png](../0-images/ka0Qk000000DmDJ_0EM4u000004d1hf.png) 5. Save the `.log.config` file and restart the `SIWindowsAgent` service. @@ -50,9 +50,3 @@ There are two options. 6. Click the **Update Log Levels** button. After collecting debug logs, set Netwrix Threat Prevention Windows agent logging back to `WARN`. - -## Module -SI - Windows Agent - -## Salesforce Article ID -000001064 diff --git a/docs/kb/threatprevention/error-epe-rest-server-api-returns-error-code-0x80070021.md b/docs/kb/threatprevention/troubleshooting-and-diagnostics/error-epe-rest-server-api-returns-error-code-0x80070021.md similarity index 100% rename from docs/kb/threatprevention/error-epe-rest-server-api-returns-error-code-0x80070021.md rename to docs/kb/threatprevention/troubleshooting-and-diagnostics/error-epe-rest-server-api-returns-error-code-0x80070021.md diff --git a/docs/kb/threatprevention/locating_the_sienterprisemanager.log.md b/docs/kb/threatprevention/troubleshooting-and-diagnostics/locating_the_sienterprisemanager.log.md similarity index 100% rename from docs/kb/threatprevention/locating_the_sienterprisemanager.log.md rename to docs/kb/threatprevention/troubleshooting-and-diagnostics/locating_the_sienterprisemanager.log.md diff --git a/package-lock.json b/package-lock.json index 8efc821097..d348f32c8e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -173,6 +173,7 @@ "resolved": "https://registry.npmjs.org/@algolia/client-search/-/client-search-5.34.1.tgz", "integrity": "sha512-bt5hC9vvjaKvdvsgzfXJ42Sl3qjQqoi/FD8V7HOQgtNFhwSauZOlgLwFoUiw67sM+r7ehF7QDk5WRDgY7fAkIg==", "license": "MIT", + "peer": true, "dependencies": { "@algolia/client-common": "5.34.1", "@algolia/requester-browser-xhr": "5.34.1", @@ -333,6 +334,7 @@ "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.28.0.tgz", "integrity": "sha512-UlLAnTPrFdNGoFtbSXwcGFQBtQZJCNjaN6hQNP3UPvuNXT1i82N26KL3dZeIpNalWywr9IuQuncaAfUaS1g6sQ==", "license": "MIT", + "peer": true, "dependencies": { "@ampproject/remapping": "^2.2.0", "@babel/code-frame": "^7.27.1", @@ -2199,6 +2201,7 @@ } ], "license": "MIT", + "peer": true, "engines": { "node": ">=18" }, @@ -2221,6 +2224,7 @@ } ], "license": "MIT", + "peer": true, "engines": { "node": ">=18" } @@ -2301,6 +2305,7 @@ "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.0.tgz", "integrity": "sha512-8sLjZwK0R+JlxlYcTuVnyT2v+htpdrjDOKuMcOVdYjt52Lh8hWRYpxBPoKx/Zg+bcjc3wx6fmQevMmUztS/ccA==", "license": "MIT", + "peer": true, "dependencies": { "cssesc": "^3.0.0", "util-deprecate": "^1.0.2" @@ -2664,6 +2669,7 @@ "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.0.tgz", "integrity": "sha512-8sLjZwK0R+JlxlYcTuVnyT2v+htpdrjDOKuMcOVdYjt52Lh8hWRYpxBPoKx/Zg+bcjc3wx6fmQevMmUztS/ccA==", "license": "MIT", + "peer": true, "dependencies": { "cssesc": "^3.0.0", "util-deprecate": "^1.0.2" @@ -3431,6 +3437,7 @@ "resolved": "https://registry.npmjs.org/@docusaurus/faster/-/faster-3.8.1.tgz", "integrity": "sha512-XYrj3qnTm+o2d5ih5drCq9s63GJoM8vZ26WbLG5FZhURsNxTSXgHJcx11Qo7nWPUStCQkuqk1HvItzscCUnd4A==", "license": "MIT", + "peer": true, "dependencies": { "@docusaurus/types": "3.8.1", "@rspack/core": "^1.3.15", @@ -3559,6 +3566,7 @@ "resolved": "https://registry.npmjs.org/@docusaurus/plugin-content-docs/-/plugin-content-docs-3.8.1.tgz", "integrity": "sha512-oByRkSZzeGNQByCMaX+kif5Nl2vmtj2IHQI2fWjCfCootsdKZDPFLonhIp5s3IGJO7PLUfe0POyw0Xh/RrGXJA==", "license": "MIT", + "peer": true, "dependencies": { "@docusaurus/core": "3.8.1", "@docusaurus/logger": "3.8.1", @@ -4226,6 +4234,7 @@ "resolved": "https://registry.npmjs.org/@mdx-js/react/-/react-3.1.0.tgz", "integrity": "sha512-QjHtSaoameoalGnKDT3FoIl4+9RwyTmo9ZJGBdLOks/YOiWHoRDI3PUwEzOE7kEmGcV3AFcp9K6dYu9rEuKLAQ==", "license": "MIT", + "peer": true, "dependencies": { "@types/mdx": "^2.0.0" }, @@ -4729,6 +4738,7 @@ "resolved": "https://registry.npmjs.org/@rspack/core/-/core-1.4.10.tgz", "integrity": "sha512-eK3H328pihiM1323OlaClKJ9WlqgGBZpcR5AqFoWsG0KD01tKCJOeZEgtCY6paRLrsQrEJwBrLntkG0fE7WNGg==", "license": "MIT", + "peer": true, "dependencies": { "@module-federation/runtime-tools": "0.17.0", "@rspack/binding": "1.4.10", @@ -4970,6 +4980,7 @@ "resolved": "https://registry.npmjs.org/@svgr/core/-/core-8.1.0.tgz", "integrity": "sha512-8QqtOQT5ACVlmsvKOJNEaWmRPmcojMOzCz4Hs2BGG/toAp/K38LcsMRyLp349glq5AzJbCEeimEoxaX6v/fLrA==", "license": "MIT", + "peer": true, "dependencies": { "@babel/core": "^7.21.3", "@svgr/babel-preset": "8.1.0", @@ -5074,6 +5085,7 @@ "integrity": "sha512-YWqn+0IKXDhqVLKoac4v2tV6hJqB/wOh8/Br8zjqeqBkKa77Qb0Kw2i7LOFzjFNZbZaPH6AlMGlBwNrxaauaAg==", "hasInstallScript": true, "license": "Apache-2.0", + "peer": true, "dependencies": { "@swc/counter": "^0.1.3", "@swc/types": "^0.1.23" @@ -6047,6 +6059,7 @@ "resolved": "https://registry.npmjs.org/@types/react/-/react-19.1.8.tgz", "integrity": "sha512-AwAfQ2Wa5bCx9WP8nZL2uMZWod7J7/JSplxbTmBQ5ms6QpqNYm672H0Vu9ZVKVngQ+ii4R/byguVEUZQyeg44g==", "license": "MIT", + "peer": true, "dependencies": { "csstype": "^3.0.2" } @@ -6378,6 +6391,7 @@ "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz", "integrity": "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg==", "license": "MIT", + "peer": true, "bin": { "acorn": "bin/acorn" }, @@ -6455,6 +6469,7 @@ "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.17.1.tgz", "integrity": "sha512-B/gBuNg5SiMTrPkC+A2+cW0RszwxYmn6VYxB/inlBStS5nx6xHIt/ehKRhIMhqusl7a8LjQoZnjCs5vhwxOQ1g==", "license": "MIT", + "peer": true, "dependencies": { "fast-deep-equal": "^3.1.3", "fast-uri": "^3.0.1", @@ -6500,6 +6515,7 @@ "resolved": "https://registry.npmjs.org/algoliasearch/-/algoliasearch-5.34.1.tgz", "integrity": "sha512-s70HlfBgswgEdmCYkUJG8i/ULYhbkk8N9+N8JsWUwszcp7eauPEr5tIX4BY0qDGeKWQ/qZvmt4mxwTusYY23sg==", "license": "MIT", + "peer": true, "dependencies": { "@algolia/client-abtesting": "5.34.1", "@algolia/client-analytics": "5.34.1", @@ -6991,6 +7007,7 @@ } ], "license": "MIT", + "peer": true, "dependencies": { "caniuse-lite": "^1.0.30001726", "electron-to-chromium": "^1.5.173", @@ -7274,6 +7291,7 @@ "resolved": "https://registry.npmjs.org/chevrotain/-/chevrotain-11.0.3.tgz", "integrity": "sha512-ci2iJH6LeIkvP9eJW6gpueU8cnZhv85ELY8w8WiFtNjMHA5ad6pQLaJo9mEly/9qUyCpvqX8/POVUTf18/HFdw==", "license": "Apache-2.0", + "peer": true, "dependencies": { "@chevrotain/cst-dts-gen": "11.0.3", "@chevrotain/gast": "11.0.3", @@ -8201,6 +8219,7 @@ "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.0.tgz", "integrity": "sha512-8sLjZwK0R+JlxlYcTuVnyT2v+htpdrjDOKuMcOVdYjt52Lh8hWRYpxBPoKx/Zg+bcjc3wx6fmQevMmUztS/ccA==", "license": "MIT", + "peer": true, "dependencies": { "cssesc": "^3.0.0", "util-deprecate": "^1.0.2" @@ -8532,6 +8551,7 @@ "resolved": "https://registry.npmjs.org/cytoscape/-/cytoscape-3.32.1.tgz", "integrity": "sha512-dbeqFTLYEwlFg7UGtcZhCCG/2WayX72zK3Sq323CEX29CY81tYfVhw1MIdduCtpstB0cTOhJswWlM/OEB3Xp+Q==", "license": "MIT", + "peer": true, "engines": { "node": ">=0.10" } @@ -8953,6 +8973,7 @@ "resolved": "https://registry.npmjs.org/d3-selection/-/d3-selection-3.0.0.tgz", "integrity": "sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==", "license": "ISC", + "peer": true, "engines": { "node": ">=12" } @@ -10274,6 +10295,7 @@ "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz", "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==", "license": "MIT", + "peer": true, "dependencies": { "fast-deep-equal": "^3.1.1", "fast-json-stable-stringify": "^2.0.0", @@ -15323,6 +15345,7 @@ "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz", "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==", "license": "MIT", + "peer": true, "dependencies": { "fast-deep-equal": "^3.1.1", "fast-json-stable-stringify": "^2.0.0", @@ -16039,6 +16062,7 @@ } ], "license": "MIT", + "peer": true, "dependencies": { "nanoid": "^3.3.11", "picocolors": "^1.1.1", @@ -16954,6 +16978,7 @@ "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-7.1.0.tgz", "integrity": "sha512-8sLjZwK0R+JlxlYcTuVnyT2v+htpdrjDOKuMcOVdYjt52Lh8hWRYpxBPoKx/Zg+bcjc3wx6fmQevMmUztS/ccA==", "license": "MIT", + "peer": true, "dependencies": { "cssesc": "^3.0.0", "util-deprecate": "^1.0.2" @@ -17758,6 +17783,7 @@ "resolved": "https://registry.npmjs.org/react/-/react-18.3.1.tgz", "integrity": "sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ==", "license": "MIT", + "peer": true, "dependencies": { "loose-envify": "^1.1.0" }, @@ -17770,6 +17796,7 @@ "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-18.3.1.tgz", "integrity": "sha512-5m4nQKp+rZRb09LNH59GM4BxTh9251/ylbKIbpe7TpGxfJ+9kv6BLkLBXIjjspbgbnIBNqlI23tRnTWT0snUIw==", "license": "MIT", + "peer": true, "dependencies": { "loose-envify": "^1.1.0", "scheduler": "^0.23.2" @@ -17826,6 +17853,7 @@ "resolved": "https://registry.npmjs.org/@docusaurus/react-loadable/-/react-loadable-6.0.0.tgz", "integrity": "sha512-YMMxTUQV/QFSnbgrP3tjDzLHRg7vsbMn8e9HAa8o/1iXoiomo48b7sk/kkmWEuWNDPJVlKSJRB6Y2fHqdJk+SQ==", "license": "MIT", + "peer": true, "dependencies": { "@types/react": "*" }, @@ -17854,6 +17882,7 @@ "resolved": "https://registry.npmjs.org/react-router/-/react-router-5.3.4.tgz", "integrity": "sha512-Ys9K+ppnJah3QuaRiLxk+jDWOR1MekYQrlytiXxC1RyfbdsZkS5pvKAzCCr031xHixZwpnsYNT5xysdFHQaYsA==", "license": "MIT", + "peer": true, "dependencies": { "@babel/runtime": "^7.12.13", "history": "^4.9.0", @@ -20805,6 +20834,7 @@ "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz", "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==", "license": "MIT", + "peer": true, "dependencies": { "fast-deep-equal": "^3.1.1", "fast-json-stable-stringify": "^2.0.0", @@ -21161,6 +21191,7 @@ "resolved": "https://registry.npmjs.org/webpack/-/webpack-5.100.2.tgz", "integrity": "sha512-QaNKAvGCDRh3wW1dsDjeMdDXwZm2vqq3zn6Pvq4rHOEOGSaUMgOOjG2Y9ZbIGzpfkJk9ZYTHpDqgDfeBDcnLaw==", "license": "MIT", + "peer": true, "dependencies": { "@types/eslint-scope": "^3.7.7", "@types/estree": "^1.0.8", diff --git a/sidebars/threatprevention/7.4.js b/sidebars/threatprevention/7.4.js index 483e9e5450..d987d58595 100644 --- a/sidebars/threatprevention/7.4.js +++ b/sidebars/threatprevention/7.4.js @@ -1,4 +1,4 @@ -// DIAGNOSTIC TEST: const generateKBSidebar = require('../../src/utils/generateKBSidebar'); +const generateKBSidebar = require('../../src/utils/generateKBSidebar'); module.exports = { sidebar: [ @@ -6,12 +6,11 @@ module.exports = { type: 'autogenerated', dirName: '.', }, - // DIAGNOSTIC TEST: Comment out entire KB section - // { - // type: 'category', - // label: 'Knowledge Base', - // collapsed: true, - // items: generateKBSidebar('threatprevention') - // }, + { + type: 'category', + label: 'Knowledge Base', + collapsed: true, + items: generateKBSidebar('threatprevention') + }, ], }; diff --git a/sidebars/threatprevention/7.5.js b/sidebars/threatprevention/7.5.js index 483e9e5450..d987d58595 100644 --- a/sidebars/threatprevention/7.5.js +++ b/sidebars/threatprevention/7.5.js @@ -1,4 +1,4 @@ -// DIAGNOSTIC TEST: const generateKBSidebar = require('../../src/utils/generateKBSidebar'); +const generateKBSidebar = require('../../src/utils/generateKBSidebar'); module.exports = { sidebar: [ @@ -6,12 +6,11 @@ module.exports = { type: 'autogenerated', dirName: '.', }, - // DIAGNOSTIC TEST: Comment out entire KB section - // { - // type: 'category', - // label: 'Knowledge Base', - // collapsed: true, - // items: generateKBSidebar('threatprevention') - // }, + { + type: 'category', + label: 'Knowledge Base', + collapsed: true, + items: generateKBSidebar('threatprevention') + }, ], };