diff --git a/resources/asciidoctor/lib/chunker/v3-mapping.json b/resources/asciidoctor/lib/chunker/v3-mapping.json index c073f422d2c93..fcf314767343d 100644 --- a/resources/asciidoctor/lib/chunker/v3-mapping.json +++ b/resources/asciidoctor/lib/chunker/v3-mapping.json @@ -30,9 +30,7 @@ "/en/apm/agent/dotnet/*/packages.html": "/docs/reference/apm/agents/dotnet/nuget-packages", "/en/apm/agent/dotnet/*/performance-tuning.html": "/docs/reference/apm/agents/dotnet/performance-tuning", "/en/apm/agent/dotnet/*/public-api.html": "/docs/reference/apm/agents/dotnet/public-api", - "/en/apm/agent/dotnet/*/redirects.html": "/guide/en/apm/agent/dotnet/1.x/redirects.html", "/en/apm/agent/dotnet/*/release-notes-1.x.html": "/docs/release-notes/apm/agents/dotnet", - "/en/apm/agent/dotnet/*/release-notes-beta.html": "/guide/en/apm/agent/dotnet/1.x/release-notes-beta.html", "/en/apm/agent/dotnet/*/release-notes.html": "/docs/release-notes/apm/agents/dotnet", "/en/apm/agent/dotnet/*/serilog.html": "/docs/reference/apm/agents/dotnet/serilog", "/en/apm/agent/dotnet/*/setup-asp-dot-net.html": "/docs/reference/apm/agents/dotnet/setup-asp-dot-net", @@ -70,16 +68,11 @@ "/en/apm/agent/go/*/metrics.html": "/docs/reference/apm/agents/go/metrics", "/en/apm/agent/go/*/opentelemetry.html": "/docs/reference/apm/agents/go/opentelemetry-api", "/en/apm/agent/go/*/opentracing.html": "/docs/reference/apm/agents/go/opentracing-api", - "/en/apm/agent/go/*/redirects.html": "/guide/en/apm/agent/go/2.x/redirects.html", - "/en/apm/agent/go/*/release-notes-0.x.html": "/guide/en/apm/agent/go/2.x/release-notes-0.x.html", - "/en/apm/agent/go/*/release-notes-1.x.html": "/guide/en/apm/agent/go/2.x/release-notes-1.x.html", "/en/apm/agent/go/*/release-notes-2.x.html": "/docs/release-notes/apm/agents/go", "/en/apm/agent/go/*/release-notes.html": "/docs/release-notes/apm/agents/go", "/en/apm/agent/go/*/supported-tech.html": "/docs/reference/apm/agents/go/supported-technologies", "/en/apm/agent/go/*/troubleshooting.html": "/docs/troubleshoot/observability/apm-agent-go/apm-go-agent", - "/en/apm/agent/go/*/unreleased.html": "/guide/en/apm/agent/go/2.x/unreleased.html", "/en/apm/agent/go/*/upgrading.html": "/docs/reference/apm/agents/go/upgrading", - "/en/apm/agent/java/*/_unreleased.html": "/guide/en/apm/agent/java/1.x/_unreleased.html", "/en/apm/agent/java/*/apis.html": "/docs/reference/apm/agents/java/tracing-apis", "/en/apm/agent/java/*/aws-lambda.html": "/docs/reference/apm/agents/java/aws-lambda", "/en/apm/agent/java/*/community-plugins.html": "/docs/reference/apm/agents/java/community-plugins", @@ -103,7 +96,6 @@ "/en/apm/agent/java/*/index.html": "/docs/reference/apm/agents/java", "/en/apm/agent/java/*/intro.html": "/docs/reference/apm/agents/java", "/en/apm/agent/java/*/java-method-monitoring.html": "/docs/reference/apm/agents/java/how-to-find-slow-methods", - "/en/apm/agent/java/*/log-correlation.html": "/guide/en/apm/agent/java/1.x/log-correlation.html", "/en/apm/agent/java/*/logs.html": "/docs/reference/apm/agents/java/logs", "/en/apm/agent/java/*/method-annotations.html": "/docs/reference/apm/agents/java/method-annotations", "/en/apm/agent/java/*/method-api.html": "/docs/reference/apm/agents/java/method-api", @@ -114,9 +106,6 @@ "/en/apm/agent/java/*/opentracing-bridge.html": "/docs/reference/apm/agents/java/opentracing-bridge", "/en/apm/agent/java/*/plugin-api.html": "/docs/reference/apm/agents/java/plugin-api", "/en/apm/agent/java/*/public-api.html": "/docs/reference/apm/agents/java/public-api", - "/en/apm/agent/java/*/redirects.html": "/guide/en/apm/agent/java/1.x/redirects.html", - "/en/apm/agent/java/*/release-notes-0.7.x.html": "/guide/en/apm/agent/java/1.x/release-notes-0.7.x.html", - "/en/apm/agent/java/*/release-notes-0.8.x.html": "/guide/en/apm/agent/java/1.x/release-notes-0.8.x.html", "/en/apm/agent/java/*/release-notes-1.x.html": "/docs/release-notes/apm/agents/java", "/en/apm/agent/java/*/release-notes.html": "/docs/release-notes/apm/agents/java", "/en/apm/agent/java/*/setup-attach-api.html": "/docs/reference/apm/agents/java/setup-attach-api", @@ -131,8 +120,8 @@ "/en/apm/agent/nodejs/*/advanced-setup.html": "/docs/reference/apm/agents/nodejs/advanced-setup", "/en/apm/agent/nodejs/*/agent-api.html": "/docs/reference/apm/agents/nodejs/agent-api", "/en/apm/agent/nodejs/*/api.html": "/docs/reference/apm/agents/nodejs/api", - "/en/apm/agent/nodejs/*/apm-add-tags.html": "/guide/en/apm/agent/nodejs/current/agent-api.html#apm-add-labels", - "/en/apm/agent/nodejs/*/apm-set-tag.html": "/guide/en/apm/agent/nodejs/current/agent-api.html#apm-set-label", + "/en/apm/agent/nodejs/*/apm-add-tags.html": "/docs/reference/apm/agents/nodejs/agent-api", + "/en/apm/agent/nodejs/*/apm-set-tag.html": "/docs/reference/apm/agents/nodejs/agent-api", "/en/apm/agent/nodejs/*/azure-functions.html": "/docs/reference/apm/agents/nodejs/azure-functions", "/en/apm/agent/nodejs/*/compatibility.html": "/docs/reference/apm/agents/nodejs/supported-technologies", "/en/apm/agent/nodejs/*/configuration.html": "/docs/reference/apm/agents/nodejs/configuration", @@ -141,7 +130,6 @@ "/en/apm/agent/nodejs/*/custom-stack.html": "/docs/reference/apm/agents/nodejs/custom-stack", "/en/apm/agent/nodejs/*/custom-transactions.html": "/docs/reference/apm/agents/nodejs/custom-transactions", "/en/apm/agent/nodejs/*/distributed-tracing.html": "/docs/reference/apm/agents/nodejs/distributed-tracing", - "/en/apm/agent/nodejs/*/es-modules.html": "/guide/en/apm/agent/nodejs/4.x/es-modules.html", "/en/apm/agent/nodejs/*/esm.html": "/docs/reference/apm/agents/nodejs/esm", "/en/apm/agent/nodejs/*/express.html": "/docs/reference/apm/agents/nodejs/express", "/en/apm/agent/nodejs/*/fastify.html": "/docs/reference/apm/agents/nodejs/fastify", @@ -159,24 +147,19 @@ "/en/apm/agent/nodejs/*/opentelemetry-bridge.html": "/docs/reference/apm/agents/nodejs/opentelemetry-bridge", "/en/apm/agent/nodejs/*/opentracing.html": "/docs/reference/apm/agents/nodejs/opentracing", "/en/apm/agent/nodejs/*/performance-tuning.html": "/docs/reference/apm/agents/nodejs/performance-tuning", - "/en/apm/agent/nodejs/*/redirects.html": "/guide/en/apm/agent/nodejs/4.x/redirects.html", - "/en/apm/agent/nodejs/*/release-notes-0.x.html": "/guide/en/apm/agent/nodejs/4.x/release-notes-0.x.html", - "/en/apm/agent/nodejs/*/release-notes-1.x.html": "/guide/en/apm/agent/nodejs/4.x/release-notes-1.x.html", - "/en/apm/agent/nodejs/*/release-notes-2.x.html": "/guide/en/apm/agent/nodejs/4.x/release-notes-2.x.html", - "/en/apm/agent/nodejs/*/release-notes-3.x.html": "/guide/en/apm/agent/nodejs/4.x/release-notes-3.x.html", "/en/apm/agent/nodejs/*/release-notes-4.x.html": "/docs/release-notes/apm/agents/nodejs", "/en/apm/agent/nodejs/*/release-notes.html": "/docs/release-notes/apm/agents/nodejs", "/en/apm/agent/nodejs/*/restify.html": "/docs/reference/apm/agents/nodejs/restify", "/en/apm/agent/nodejs/*/set-up.html": "/docs/reference/apm/agents/nodejs/set-up", "/en/apm/agent/nodejs/*/source-maps.html": "/docs/reference/apm/agents/nodejs/source-maps", - "/en/apm/agent/nodejs/*/span-add-tags.html": "/guide/en/apm/agent/nodejs/current/span-api.html#span-add-labels", + "/en/apm/agent/nodejs/*/span-add-tags.html": "/docs/reference/apm/agents/nodejs/span-api", "/en/apm/agent/nodejs/*/span-api.html": "/docs/reference/apm/agents/nodejs/span-api", - "/en/apm/agent/nodejs/*/span-set-tag.html": "/guide/en/apm/agent/nodejs/current/span-api.html#span-set-label", + "/en/apm/agent/nodejs/*/span-set-tag.html": "/docs/reference/apm/agents/nodejs/span-api", "/en/apm/agent/nodejs/*/starting-the-agent.html": "/docs/reference/apm/agents/nodejs/starting-agent", "/en/apm/agent/nodejs/*/supported-technologies.html": "/docs/reference/apm/agents/nodejs/supported-technologies", - "/en/apm/agent/nodejs/*/transaction-add-tags.html": "/guide/en/apm/agent/nodejs/current/transaction-api.html#transaction-add-labels", + "/en/apm/agent/nodejs/*/transaction-add-tags.html": "/docs/reference/apm/agents/nodejs/transaction-api", "/en/apm/agent/nodejs/*/transaction-api.html": "/docs/reference/apm/agents/nodejs/transaction-api", - "/en/apm/agent/nodejs/*/transaction-set-tag.html": "/guide/en/apm/agent/nodejs/current/transaction-api.html#transaction-set-label", + "/en/apm/agent/nodejs/*/transaction-set-tag.html": "/docs/reference/apm/agents/nodejs/transaction-api", "/en/apm/agent/nodejs/*/troubleshooting.html": "/docs/troubleshoot/observability/apm-agent-nodejs/apm-nodejs-agent", "/en/apm/agent/nodejs/*/typescript.html": "/docs/reference/apm/agents/nodejs/typescript", "/en/apm/agent/nodejs/*/upgrade-to-v1.html": "/docs/reference/apm/agents/nodejs/upgrade-to-v1", @@ -244,12 +227,6 @@ "/en/apm/agent/python/*/metrics.html": "/docs/reference/apm/agents/python/metrics", "/en/apm/agent/python/*/opentelemetry-bridge.html": "/docs/reference/apm/agents/python/opentelemetry-api-bridge", "/en/apm/agent/python/*/opentracing-bridge.html": "/docs/reference/apm/agents/python/opentelemetry-api-bridge", - "/en/apm/agent/python/*/redirects.html": "/guide/en/apm/agent/python/6.x/redirects.html", - "/en/apm/agent/python/*/release-notes-1.x.html": "/guide/en/apm/agent/python/6.x/release-notes-1.x.html", - "/en/apm/agent/python/*/release-notes-2.x.html": "/guide/en/apm/agent/python/6.x/release-notes-2.x.html", - "/en/apm/agent/python/*/release-notes-3.x.html": "/guide/en/apm/agent/python/6.x/release-notes-3.x.html", - "/en/apm/agent/python/*/release-notes-4.x.html": "/guide/en/apm/agent/python/6.x/release-notes-4.x.html", - "/en/apm/agent/python/*/release-notes-5.x.html": "/guide/en/apm/agent/python/6.x/release-notes-5.x.html", "/en/apm/agent/python/*/release-notes-6.x.html": "/docs/release-notes/apm/agents/python", "/en/apm/agent/python/*/release-notes.html": "/docs/release-notes/apm/agents/python", "/en/apm/agent/python/*/run-tests-locally.html": "/docs/reference/apm/agents/python/run-tests-locally", @@ -280,10 +257,6 @@ "/en/apm/agent/ruby/*/log-correlation.html": "/docs/reference/apm/agents/ruby/logs", "/en/apm/agent/ruby/*/metrics.html": "/docs/reference/apm/agents/ruby/metrics", "/en/apm/agent/ruby/*/opentracing.html": "/docs/reference/apm/agents/ruby/opentracing-api", - "/en/apm/agent/ruby/*/release-notes-0.x.html": "/guide/en/apm/agent/ruby/4.x/release-notes-0.x.html", - "/en/apm/agent/ruby/*/release-notes-1.x.html": "/guide/en/apm/agent/ruby/4.x/release-notes-1.x.html", - "/en/apm/agent/ruby/*/release-notes-2.x.html": "/guide/en/apm/agent/ruby/4.x/release-notes-2.x.html", - "/en/apm/agent/ruby/*/release-notes-3.x.html": "/guide/en/apm/agent/ruby/4.x/release-notes-3.x.html", "/en/apm/agent/ruby/*/release-notes-4.x.html": "/docs/release-notes/apm/agents/ruby", "/en/apm/agent/ruby/*/release-notes.html": "/docs/release-notes/apm/agents/ruby", "/en/apm/agent/ruby/*/set-up.html": "/docs/reference/apm/agents/ruby/set-up-apm-ruby-agent", @@ -310,11 +283,6 @@ "/en/apm/agent/rum-js/*/opentracing.html": "/docs/reference/apm/agents/rum-js/opentracing", "/en/apm/agent/rum-js/*/performance-tuning.html": "/docs/reference/apm/agents/rum-js/performance-tuning", "/en/apm/agent/rum-js/*/react-integration.html": "/docs/reference/apm/agents/rum-js/react-integration", - "/en/apm/agent/rum-js/*/release-notes-0.x.html": "/guide/en/apm/agent/rum-js/5.x/release-notes-0.x.html", - "/en/apm/agent/rum-js/*/release-notes-1.x.html": "/guide/en/apm/agent/rum-js/5.x/release-notes-1.x.html", - "/en/apm/agent/rum-js/*/release-notes-2.x.html": "/guide/en/apm/agent/rum-js/5.x/release-notes-2.x.html", - "/en/apm/agent/rum-js/*/release-notes-3.x.html": "/guide/en/apm/agent/rum-js/5.x/release-notes-3.x.html", - "/en/apm/agent/rum-js/*/release-notes-4.x.html": "/guide/en/apm/agent/rum-js/5.x/release-notes-4.x.html", "/en/apm/agent/rum-js/*/release-notes-5.x.html": "/docs/release-notes/apm/agents/rum-js", "/en/apm/agent/rum-js/*/release-notes.html": "/docs/release-notes/apm/agents/rum-js", "/en/apm/agent/rum-js/*/sourcemap.html": "/docs/reference/apm/agents/rum-js/source-maps", @@ -326,26 +294,13 @@ "/en/apm/agent/rum-js/*/upgrade-to-v5.html": "/docs/release-notes/apm/agents/rum-js/breaking-changes", "/en/apm/agent/rum-js/*/upgrading.html": "/docs/reference/apm/agents/rum-js/upgrading", "/en/apm/agent/rum-js/*/vue-integration.html": "/docs/reference/apm/agents/rum-js/vue-integration", - "/en/apm/agent/swift/*/Instrumentation.html": "/docs/reference/apm/agents/ios/instrumentation", - "/en/apm/agent/swift/*/_deprecated.html": "/guide/en/apm/agent/swift/1.x/_deprecated.html", - "/en/apm/agent/swift/*/_improvements_2.html": "/guide/en/apm/agent/swift/1.x/_improvements_2.html", "/en/apm/agent/swift/*/configuration.html": "/docs/reference/apm/agents/ios/configuration", "/en/apm/agent/swift/*/index.html": "/docs/reference/apm/agents/ios", + "/en/apm/agent/swift/*/Instrumentation.html": "/docs/reference/apm/agents/ios/instrumentation", "/en/apm/agent/swift/*/intro.html": "/docs/reference/apm/agents/ios", - "/en/apm/agent/swift/*/release-notes-0.1.0.html": "/guide/en/apm/agent/swift/1.x/release-notes-0.1.0.html", - "/en/apm/agent/swift/*/release-notes-0.2.1.html": "/guide/en/apm/agent/swift/1.x/release-notes-0.2.1.html", - "/en/apm/agent/swift/*/release-notes-next.html": "/guide/en/apm/agent/swift/1.x/release-notes-next.html", - "/en/apm/agent/swift/*/release-notes-v0.3.0.html": "/guide/en/apm/agent/swift/1.x/release-notes-v0.3.0.html", - "/en/apm/agent/swift/*/release-notes-v0.4.0.html": "/guide/en/apm/agent/swift/1.x/release-notes-v0.4.0.html", - "/en/apm/agent/swift/*/release-notes-v0.4.1.html": "/guide/en/apm/agent/swift/1.x/release-notes-v0.4.1.html", - "/en/apm/agent/swift/*/release-notes-v0.5.0.html": "/guide/en/apm/agent/swift/1.x/release-notes-v0.5.0.html", - "/en/apm/agent/swift/*/release-notes-v0.6.0.html": "/guide/en/apm/agent/swift/1.x/release-notes-v0.6.0.html", - "/en/apm/agent/swift/*/release-notes-v0.7.0.html": "/guide/en/apm/agent/swift/1.x/release-notes-v0.7.0.html", - "/en/apm/agent/swift/*/release-notes-v0.8.0.html": "/guide/en/apm/agent/swift/1.x/release-notes-v0.8.0.html", "/en/apm/agent/swift/*/release-notes-v1.0.0.html": "/docs/release-notes/apm/agents/ios", "/en/apm/agent/swift/*/release-notes-v1.0.1.html": "/docs/release-notes/apm/agents/ios", "/en/apm/agent/swift/*/release-notes-v1.0.2.html": "/docs/release-notes/apm/agents/ios", - "/en/apm/agent/swift/*/release-notes.html": "/guide/en/apm/agent/swift/1.x/release-notes.html", "/en/apm/agent/swift/*/setup.html": "/docs/reference/apm/agents/ios/set-up-apm-ios-agent", "/en/apm/agent/swift/*/supported-technologies.html": "/docs/reference/apm/agents/ios/supported-technologies", "/en/apm/agent/swift/*/troubleshooting.html": "/docs/troubleshoot/observability/apm-agent-swift/apm-ios-agent", @@ -541,14 +496,13 @@ "/en/beats/devguide/*/python-beats.html": "/docs/extend/beats/python-beats", "/en/beats/devguide/*/share-beat-dashboards.html": "/docs/extend/beats/share-beat-dashboards", "/en/beats/devguide/*/testing.html": "/docs/extend/beats/testing", - "/en/beats/filebeat/*/_debugging_on_kibana.html": "/docs/reference/beats/filebeat/_debugging_on_kibana", - "/en/beats/filebeat/*/_if_something_went_wrong.html": "/guide/en/beats/filebeat/8.18/_if_something_went_wrong.html", + "/en/beats/filebeat/*/_debugging_on_kibana.html": "/docs/reference/beats/filebeat/migrate-to-filestream", "/en/beats/filebeat/*/_live_reloading.html": "/docs/reference/beats/filebeat/_live_reloading", "/en/beats/filebeat/*/_set_up_the_oauth_app_in_the_salesforce_2.html": "/docs/reference/beats/filebeat/_set_up_the_oauth_app_in_the_salesforce_2", - "/en/beats/filebeat/*/_step_1_set_an_identifier_for_each_filestream_input.html": "/docs/reference/beats/filebeat/_step_1_set_an_identifier_for_each_filestream_input", - "/en/beats/filebeat/*/_step_2_enable_the_take_over_mode.html": "/docs/reference/beats/filebeat/_step_2_enable_the_take_over_mode", - "/en/beats/filebeat/*/_step_3_use_new_option_names.html": "/docs/reference/beats/filebeat/_step_3_use_new_option_names", - "/en/beats/filebeat/*/_step_4.html": "/docs/reference/beats/filebeat/_step_4", + "/en/beats/filebeat/*/_step_1_set_an_identifier_for_each_filestream_input.html": "/docs/reference/beats/filebeat/migrate-to-filestream", + "/en/beats/filebeat/*/_step_2_enable_the_take_over_mode.html": "/docs/reference/beats/filebeat/migrate-to-filestream", + "/en/beats/filebeat/*/_step_3_use_new_option_names.html": "/docs/reference/beats/filebeat/migrate-to-filestream", + "/en/beats/filebeat/*/_step_4.html": "/docs/reference/beats/filebeat/migrate-to-filestream", "/en/beats/filebeat/*/add-cached-metadata.html": "/docs/reference/beats/filebeat/add-cached-metadata", "/en/beats/filebeat/*/add-cloud-metadata.html": "/docs/reference/beats/filebeat/add-cloud-metadata", "/en/beats/filebeat/*/add-cloudfoundry-metadata.html": "/docs/reference/beats/filebeat/add-cloudfoundry-metadata", @@ -574,7 +528,6 @@ "/en/beats/filebeat/*/configuration-autodiscover-advanced.html": "/docs/reference/beats/filebeat/configuration-autodiscover-advanced", "/en/beats/filebeat/*/configuration-autodiscover-hints.html": "/docs/reference/beats/filebeat/configuration-autodiscover-hints", "/en/beats/filebeat/*/configuration-autodiscover.html": "/docs/reference/beats/filebeat/configuration-autodiscover", - "/en/beats/filebeat/*/configuration-central-management.html": "/guide/en/beats/filebeat/8.18/configuration-central-management.html", "/en/beats/filebeat/*/configuration-dashboards.html": "/docs/reference/beats/filebeat/configuration-dashboards", "/en/beats/filebeat/*/configuration-feature-flags.html": "/docs/reference/beats/filebeat/configuration-feature-flags", "/en/beats/filebeat/*/configuration-filebeat-modules.html": "/docs/reference/beats/filebeat/configuration-filebeat-modules", @@ -618,7 +571,6 @@ "/en/beats/filebeat/*/drop-fields.html": "/docs/reference/beats/filebeat/drop-fields", "/en/beats/filebeat/*/elasticsearch-output.html": "/docs/reference/beats/filebeat/elasticsearch-output", "/en/beats/filebeat/*/enable-filebeat-debugging.html": "/docs/reference/beats/filebeat/enable-filebeat-debugging", - "/en/beats/filebeat/*/enroll-beats.html": "/guide/en/beats/filebeat/8.18/enroll-beats.html", "/en/beats/filebeat/*/error-found-unexpected-character.html": "/docs/reference/beats/filebeat/error-found-unexpected-character", "/en/beats/filebeat/*/error-loading-config.html": "/docs/reference/beats/filebeat/error-loading-config", "/en/beats/filebeat/*/exported-fields-activemq.html": "/docs/reference/beats/filebeat/exported-fields-activemq", @@ -752,8 +704,6 @@ "/en/beats/filebeat/*/filebeat-module-fortinet.html": "/docs/reference/beats/filebeat/filebeat-module-fortinet", "/en/beats/filebeat/*/filebeat-module-gcp.html": "/docs/reference/beats/filebeat/filebeat-module-gcp", "/en/beats/filebeat/*/filebeat-module-google_workspace.html": "/docs/reference/beats/filebeat/filebeat-module-google_workspace", - "/en/beats/filebeat/*/filebeat-module-googlecloud.html": "/guide/en/beats/filebeat/8.18/filebeat-module-googlecloud.html", - "/en/beats/filebeat/*/filebeat-module-gsuite.html": "/guide/en/beats/filebeat/8.18/filebeat-module-gsuite.html", "/en/beats/filebeat/*/filebeat-module-haproxy.html": "/docs/reference/beats/filebeat/filebeat-module-haproxy", "/en/beats/filebeat/*/filebeat-module-ibmmq.html": "/docs/reference/beats/filebeat/filebeat-module-ibmmq", "/en/beats/filebeat/*/filebeat-module-icinga.html": "/docs/reference/beats/filebeat/filebeat-module-icinga", @@ -803,7 +753,6 @@ "/en/beats/filebeat/*/filtering-and-enhancing-data.html": "/docs/reference/beats/filebeat/filtering-enhancing-data", "/en/beats/filebeat/*/fingerprint.html": "/docs/reference/beats/filebeat/fingerprint", "/en/beats/filebeat/*/getting-help.html": "/docs/reference/beats/filebeat/getting-help", - "/en/beats/filebeat/*/how-central-managment-works.html": "/guide/en/beats/filebeat/8.18/how-central-managment-works.html", "/en/beats/filebeat/*/how-filebeat-works.html": "/docs/reference/beats/filebeat/how-filebeat-works", "/en/beats/filebeat/*/howto-guides.html": "/docs/reference/beats/filebeat/howto-guides", "/en/beats/filebeat/*/http-endpoint.html": "/docs/reference/beats/filebeat/http-endpoint", @@ -845,8 +794,6 @@ "/en/beats/filebeat/*/processor-translate-sid.html": "/docs/reference/beats/filebeat/processor-translate-sid", "/en/beats/filebeat/*/publishing-ls-fails-connection-reset-by-peer.html": "/docs/reference/beats/filebeat/publishing-ls-fails-connection-reset-by-peer", "/en/beats/filebeat/*/rate-limit.html": "/docs/reference/beats/filebeat/rate-limit", - "/en/beats/filebeat/*/redirects-global.html": "/guide/en/beats/filebeat/8.18/redirects-global.html", - "/en/beats/filebeat/*/redirects.html": "/guide/en/beats/filebeat/8.18/redirects.html", "/en/beats/filebeat/*/redis-output.html": "/docs/reference/beats/filebeat/redis-output", "/en/beats/filebeat/*/reduce-registry-size.html": "/docs/reference/beats/filebeat/reduce-registry-size", "/en/beats/filebeat/*/regexp-support.html": "/docs/reference/beats/filebeat/regexp-support", @@ -983,7 +930,6 @@ "/en/beats/heartbeat/*/logstash-output.html": "/docs/reference/beats/heartbeat/logstash-output", "/en/beats/heartbeat/*/madvdontneed-rss.html": "/docs/reference/beats/heartbeat/madvdontneed-rss", "/en/beats/heartbeat/*/metadata-missing.html": "/docs/reference/beats/heartbeat/metadata-missing", - "/en/beats/heartbeat/*/monitor-browser-options.html": "/guide/en/beats/heartbeat/8.18/monitor-browser-options.html", "/en/beats/heartbeat/*/monitor-http-options.html": "/docs/reference/beats/heartbeat/monitor-http-options", "/en/beats/heartbeat/*/monitor-icmp-options.html": "/docs/reference/beats/heartbeat/monitor-icmp-options", "/en/beats/heartbeat/*/monitor-options.html": "/docs/reference/beats/heartbeat/monitor-options", @@ -1026,12 +972,6 @@ "/en/beats/heartbeat/*/yaml-tips.html": "/docs/reference/beats/heartbeat/yaml-tips", "/en/beats/libbeat/8.17/release-notes.html": "/docs/release-notes/beats", "/en/beats/libbeat/*/beats-reference.html": "/docs/reference/beats", - "/en/beats/libbeat/*/breaking-changes-8.0.html": "/guide/en/beats/libbeat/8.18/breaking-changes-8.0.html", - "/en/beats/libbeat/*/breaking-changes-8.1.html": "/guide/en/beats/libbeat/8.18/breaking-changes-8.1.html", - "/en/beats/libbeat/*/breaking-changes-8.2.html": "/guide/en/beats/libbeat/8.18/breaking-changes-8.2.html", - "/en/beats/libbeat/*/breaking-changes-8.3.html": "/guide/en/beats/libbeat/8.18/breaking-changes-8.3.html", - "/en/beats/libbeat/*/breaking-changes-8.4.html": "/guide/en/beats/libbeat/8.18/breaking-changes-8.4.html", - "/en/beats/libbeat/*/breaking-changes-8.5.html": "/guide/en/beats/libbeat/8.18/breaking-changes-8.5.html", "/en/beats/libbeat/*/breaking-changes.html": "/docs/release-notes/beats/breaking-changes", "/en/beats/libbeat/*/community-beats.html": "/docs/reference/beats/libbeat/community-beats", "/en/beats/libbeat/*/config-file-format-cli.html": "/docs/reference/beats/libbeat/config-file-format-cli", @@ -1045,234 +985,8 @@ "/en/beats/libbeat/*/contributing-to-beats.html": "/docs/reference/beats/libbeat/contributing-to-beats", "/en/beats/libbeat/*/getting-started.html": "/docs/reference/beats", "/en/beats/libbeat/*/index.html": "/docs/reference/beats", - "/en/beats/libbeat/*/release-notes-1.0.0-beta4.html": "/guide/en/beats/libbeat/8.18/release-notes-1.0.0-beta4.html", - "/en/beats/libbeat/*/release-notes-1.0.0-rc1.html": "/guide/en/beats/libbeat/8.18/release-notes-1.0.0-rc1.html", - "/en/beats/libbeat/*/release-notes-1.0.0-rc2.html": "/guide/en/beats/libbeat/8.18/release-notes-1.0.0-rc2.html", - "/en/beats/libbeat/*/release-notes-1.0.0.html": "/guide/en/beats/libbeat/8.18/release-notes-1.0.0.html", - "/en/beats/libbeat/*/release-notes-1.0.1.html": "/guide/en/beats/libbeat/8.18/release-notes-1.0.1.html", - "/en/beats/libbeat/*/release-notes-1.1.0.html": "/guide/en/beats/libbeat/8.18/release-notes-1.1.0.html", - "/en/beats/libbeat/*/release-notes-1.1.1.html": "/guide/en/beats/libbeat/8.18/release-notes-1.1.1.html", - "/en/beats/libbeat/*/release-notes-1.1.2.html": "/guide/en/beats/libbeat/8.18/release-notes-1.1.2.html", - "/en/beats/libbeat/*/release-notes-1.2.0.html": "/guide/en/beats/libbeat/8.18/release-notes-1.2.0.html", - "/en/beats/libbeat/*/release-notes-1.2.1.html": "/guide/en/beats/libbeat/8.18/release-notes-1.2.1.html", - "/en/beats/libbeat/*/release-notes-1.2.2.html": "/guide/en/beats/libbeat/8.18/release-notes-1.2.2.html", - "/en/beats/libbeat/*/release-notes-1.2.3.html": "/guide/en/beats/libbeat/8.18/release-notes-1.2.3.html", - "/en/beats/libbeat/*/release-notes-1.3.0.html": "/guide/en/beats/libbeat/8.18/release-notes-1.3.0.html", - "/en/beats/libbeat/*/release-notes-1.3.1.html": "/guide/en/beats/libbeat/8.18/release-notes-1.3.1.html", - "/en/beats/libbeat/*/release-notes-5.0.0-alpha1.html": "/guide/en/beats/libbeat/8.18/release-notes-5.0.0-alpha1.html", - "/en/beats/libbeat/*/release-notes-5.0.0-alpha2.html": "/guide/en/beats/libbeat/8.18/release-notes-5.0.0-alpha2.html", - "/en/beats/libbeat/*/release-notes-5.0.0-alpha3.html": "/guide/en/beats/libbeat/8.18/release-notes-5.0.0-alpha3.html", - "/en/beats/libbeat/*/release-notes-5.0.0-alpha4.html": "/guide/en/beats/libbeat/8.18/release-notes-5.0.0-alpha4.html", - "/en/beats/libbeat/*/release-notes-5.0.0-alpha5.html": "/guide/en/beats/libbeat/8.18/release-notes-5.0.0-alpha5.html", - "/en/beats/libbeat/*/release-notes-5.0.0-beta1.html": "/guide/en/beats/libbeat/8.18/release-notes-5.0.0-beta1.html", - "/en/beats/libbeat/*/release-notes-5.0.0-ga.html": "/guide/en/beats/libbeat/8.18/release-notes-5.0.0-ga.html", - "/en/beats/libbeat/*/release-notes-5.0.0-rc1.html": "/guide/en/beats/libbeat/8.18/release-notes-5.0.0-rc1.html", - "/en/beats/libbeat/*/release-notes-5.0.0.html": "/guide/en/beats/libbeat/8.18/release-notes-5.0.0.html", - "/en/beats/libbeat/*/release-notes-5.0.1.html": "/guide/en/beats/libbeat/8.18/release-notes-5.0.1.html", - "/en/beats/libbeat/*/release-notes-5.0.2.html": "/guide/en/beats/libbeat/8.18/release-notes-5.0.2.html", - "/en/beats/libbeat/*/release-notes-5.1.0.html": "/guide/en/beats/libbeat/8.18/release-notes-5.1.0.html", - "/en/beats/libbeat/*/release-notes-5.1.1.html": "/guide/en/beats/libbeat/8.18/release-notes-5.1.1.html", - "/en/beats/libbeat/*/release-notes-5.1.2.html": "/guide/en/beats/libbeat/8.18/release-notes-5.1.2.html", - "/en/beats/libbeat/*/release-notes-5.2.0.html": "/guide/en/beats/libbeat/8.18/release-notes-5.2.0.html", - "/en/beats/libbeat/*/release-notes-5.2.1.html": "/guide/en/beats/libbeat/8.18/release-notes-5.2.1.html", - "/en/beats/libbeat/*/release-notes-5.2.2.html": "/guide/en/beats/libbeat/8.18/release-notes-5.2.2.html", - "/en/beats/libbeat/*/release-notes-5.3.0.html": "/guide/en/beats/libbeat/8.18/release-notes-5.3.0.html", - "/en/beats/libbeat/*/release-notes-5.3.1.html": "/guide/en/beats/libbeat/8.18/release-notes-5.3.1.html", - "/en/beats/libbeat/*/release-notes-5.3.2.html": "/guide/en/beats/libbeat/8.18/release-notes-5.3.2.html", - "/en/beats/libbeat/*/release-notes-5.4.0.html": "/guide/en/beats/libbeat/8.18/release-notes-5.4.0.html", - "/en/beats/libbeat/*/release-notes-5.4.1.html": "/guide/en/beats/libbeat/8.18/release-notes-5.4.1.html", - "/en/beats/libbeat/*/release-notes-5.4.2.html": "/guide/en/beats/libbeat/8.18/release-notes-5.4.2.html", - "/en/beats/libbeat/*/release-notes-5.5.0.html": "/guide/en/beats/libbeat/8.18/release-notes-5.5.0.html", - "/en/beats/libbeat/*/release-notes-5.5.1.html": "/guide/en/beats/libbeat/8.18/release-notes-5.5.1.html", - "/en/beats/libbeat/*/release-notes-5.5.2.html": "/guide/en/beats/libbeat/8.18/release-notes-5.5.2.html", - "/en/beats/libbeat/*/release-notes-5.5.3.html": "/guide/en/beats/libbeat/8.18/release-notes-5.5.3.html", - "/en/beats/libbeat/*/release-notes-5.6.0.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.0.html", - "/en/beats/libbeat/*/release-notes-5.6.1.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.1.html", - "/en/beats/libbeat/*/release-notes-5.6.10.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.10.html", - "/en/beats/libbeat/*/release-notes-5.6.11.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.11.html", - "/en/beats/libbeat/*/release-notes-5.6.12.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.12.html", - "/en/beats/libbeat/*/release-notes-5.6.13.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.13.html", - "/en/beats/libbeat/*/release-notes-5.6.14.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.14.html", - "/en/beats/libbeat/*/release-notes-5.6.2.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.2.html", - "/en/beats/libbeat/*/release-notes-5.6.3.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.3.html", - "/en/beats/libbeat/*/release-notes-5.6.4.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.4.html", - "/en/beats/libbeat/*/release-notes-5.6.5.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.5.html", - "/en/beats/libbeat/*/release-notes-5.6.6.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.6.html", - "/en/beats/libbeat/*/release-notes-5.6.7.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.7.html", - "/en/beats/libbeat/*/release-notes-5.6.8.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.8.html", - "/en/beats/libbeat/*/release-notes-5.6.9.html": "/guide/en/beats/libbeat/8.18/release-notes-5.6.9.html", - "/en/beats/libbeat/*/release-notes-6.0.0-alpha1.html": "/guide/en/beats/libbeat/8.18/release-notes-6.0.0-alpha1.html", - "/en/beats/libbeat/*/release-notes-6.0.0-alpha2.html": "/guide/en/beats/libbeat/8.18/release-notes-6.0.0-alpha2.html", - "/en/beats/libbeat/*/release-notes-6.0.0-beta1.html": "/guide/en/beats/libbeat/8.18/release-notes-6.0.0-beta1.html", - "/en/beats/libbeat/*/release-notes-6.0.0-beta2.html": "/guide/en/beats/libbeat/8.18/release-notes-6.0.0-beta2.html", - "/en/beats/libbeat/*/release-notes-6.0.0-ga.html": "/guide/en/beats/libbeat/8.18/release-notes-6.0.0-ga.html", - "/en/beats/libbeat/*/release-notes-6.0.0-rc1.html": "/guide/en/beats/libbeat/8.18/release-notes-6.0.0-rc1.html", - "/en/beats/libbeat/*/release-notes-6.0.0-rc2.html": "/guide/en/beats/libbeat/8.18/release-notes-6.0.0-rc2.html", - "/en/beats/libbeat/*/release-notes-6.0.0.html": "/guide/en/beats/libbeat/8.18/release-notes-6.0.0.html", - "/en/beats/libbeat/*/release-notes-6.0.1.html": "/guide/en/beats/libbeat/8.18/release-notes-6.0.1.html", - "/en/beats/libbeat/*/release-notes-6.1.0.html": "/guide/en/beats/libbeat/8.18/release-notes-6.1.0.html", - "/en/beats/libbeat/*/release-notes-6.1.1.html": "/guide/en/beats/libbeat/8.18/release-notes-6.1.1.html", - "/en/beats/libbeat/*/release-notes-6.1.2.html": "/guide/en/beats/libbeat/8.18/release-notes-6.1.2.html", - "/en/beats/libbeat/*/release-notes-6.1.3.html": "/guide/en/beats/libbeat/8.18/release-notes-6.1.3.html", - "/en/beats/libbeat/*/release-notes-6.2.0.html": "/guide/en/beats/libbeat/8.18/release-notes-6.2.0.html", - "/en/beats/libbeat/*/release-notes-6.2.1.html": "/guide/en/beats/libbeat/8.18/release-notes-6.2.1.html", - "/en/beats/libbeat/*/release-notes-6.2.2.html": "/guide/en/beats/libbeat/8.18/release-notes-6.2.2.html", - "/en/beats/libbeat/*/release-notes-6.2.3.html": "/guide/en/beats/libbeat/8.18/release-notes-6.2.3.html", - "/en/beats/libbeat/*/release-notes-6.3.0.html": "/guide/en/beats/libbeat/8.18/release-notes-6.3.0.html", - "/en/beats/libbeat/*/release-notes-6.3.1.html": "/guide/en/beats/libbeat/8.18/release-notes-6.3.1.html", - "/en/beats/libbeat/*/release-notes-6.4.0.html": "/guide/en/beats/libbeat/8.18/release-notes-6.4.0.html", - "/en/beats/libbeat/*/release-notes-6.4.1.html": "/guide/en/beats/libbeat/8.18/release-notes-6.4.1.html", - "/en/beats/libbeat/*/release-notes-6.4.2.html": "/guide/en/beats/libbeat/8.18/release-notes-6.4.2.html", - "/en/beats/libbeat/*/release-notes-6.4.3.html": "/guide/en/beats/libbeat/8.18/release-notes-6.4.3.html", - "/en/beats/libbeat/*/release-notes-6.5.0.html": "/guide/en/beats/libbeat/8.18/release-notes-6.5.0.html", - "/en/beats/libbeat/*/release-notes-6.5.1.html": "/guide/en/beats/libbeat/8.18/release-notes-6.5.1.html", - "/en/beats/libbeat/*/release-notes-6.5.2.html": "/guide/en/beats/libbeat/8.18/release-notes-6.5.2.html", - "/en/beats/libbeat/*/release-notes-6.5.3.html": "/guide/en/beats/libbeat/8.18/release-notes-6.5.3.html", - "/en/beats/libbeat/*/release-notes-6.5.4.html": "/guide/en/beats/libbeat/8.18/release-notes-6.5.4.html", - "/en/beats/libbeat/*/release-notes-6.6.0.html": "/guide/en/beats/libbeat/8.18/release-notes-6.6.0.html", - "/en/beats/libbeat/*/release-notes-6.6.1.html": "/guide/en/beats/libbeat/8.18/release-notes-6.6.1.html", - "/en/beats/libbeat/*/release-notes-6.6.2.html": "/guide/en/beats/libbeat/8.18/release-notes-6.6.2.html", - "/en/beats/libbeat/*/release-notes-6.7.0.html": "/guide/en/beats/libbeat/8.18/release-notes-6.7.0.html", - "/en/beats/libbeat/*/release-notes-6.7.1.html": "/guide/en/beats/libbeat/8.18/release-notes-6.7.1.html", - "/en/beats/libbeat/*/release-notes-6.7.2.html": "/guide/en/beats/libbeat/8.18/release-notes-6.7.2.html", - "/en/beats/libbeat/*/release-notes-6.8.0.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.0.html", - "/en/beats/libbeat/*/release-notes-6.8.1.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.1.html", - "/en/beats/libbeat/*/release-notes-6.8.10.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.10.html", - "/en/beats/libbeat/*/release-notes-6.8.11.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.11.html", - "/en/beats/libbeat/*/release-notes-6.8.12.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.12.html", - "/en/beats/libbeat/*/release-notes-6.8.13.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.13.html", - "/en/beats/libbeat/*/release-notes-6.8.2.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.2.html", - "/en/beats/libbeat/*/release-notes-6.8.3.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.3.html", - "/en/beats/libbeat/*/release-notes-6.8.4.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.4.html", - "/en/beats/libbeat/*/release-notes-6.8.5.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.5.html", - "/en/beats/libbeat/*/release-notes-6.8.6.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.6.html", - "/en/beats/libbeat/*/release-notes-6.8.7.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.7.html", - "/en/beats/libbeat/*/release-notes-6.8.8.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.8.html", - "/en/beats/libbeat/*/release-notes-6.8.9.html": "/guide/en/beats/libbeat/8.18/release-notes-6.8.9.html", - "/en/beats/libbeat/*/release-notes-7.0.0-alpha1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.0.0-alpha1.html", - "/en/beats/libbeat/*/release-notes-7.0.0-alpha2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.0.0-alpha2.html", - "/en/beats/libbeat/*/release-notes-7.0.0-beta1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.0.0-beta1.html", - "/en/beats/libbeat/*/release-notes-7.0.0-ga.html": "/guide/en/beats/libbeat/8.18/release-notes-7.0.0-ga.html", - "/en/beats/libbeat/*/release-notes-7.0.0-rc1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.0.0-rc1.html", - "/en/beats/libbeat/*/release-notes-7.0.0-rc2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.0.0-rc2.html", - "/en/beats/libbeat/*/release-notes-7.0.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.0.0.html", - "/en/beats/libbeat/*/release-notes-7.0.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.0.1.html", - "/en/beats/libbeat/*/release-notes-7.1.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.1.0.html", - "/en/beats/libbeat/*/release-notes-7.1.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.1.1.html", - "/en/beats/libbeat/*/release-notes-7.10.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.10.0.html", - "/en/beats/libbeat/*/release-notes-7.10.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.10.1.html", - "/en/beats/libbeat/*/release-notes-7.10.2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.10.2.html", - "/en/beats/libbeat/*/release-notes-7.11.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.11.0.html", - "/en/beats/libbeat/*/release-notes-7.11.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.11.1.html", - "/en/beats/libbeat/*/release-notes-7.11.2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.11.2.html", - "/en/beats/libbeat/*/release-notes-7.12.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.12.0.html", - "/en/beats/libbeat/*/release-notes-7.12.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.12.1.html", - "/en/beats/libbeat/*/release-notes-7.13.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.13.0.html", - "/en/beats/libbeat/*/release-notes-7.13.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.13.1.html", - "/en/beats/libbeat/*/release-notes-7.13.2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.13.2.html", - "/en/beats/libbeat/*/release-notes-7.13.3.html": "/guide/en/beats/libbeat/8.18/release-notes-7.13.3.html", - "/en/beats/libbeat/*/release-notes-7.13.4.html": "/guide/en/beats/libbeat/8.18/release-notes-7.13.4.html", - "/en/beats/libbeat/*/release-notes-7.14.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.14.0.html", - "/en/beats/libbeat/*/release-notes-7.14.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.14.1.html", - "/en/beats/libbeat/*/release-notes-7.14.2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.14.2.html", - "/en/beats/libbeat/*/release-notes-7.15.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.15.0.html", - "/en/beats/libbeat/*/release-notes-7.15.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.15.1.html", - "/en/beats/libbeat/*/release-notes-7.15.2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.15.2.html", - "/en/beats/libbeat/*/release-notes-7.16.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.16.0.html", - "/en/beats/libbeat/*/release-notes-7.16.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.16.1.html", - "/en/beats/libbeat/*/release-notes-7.16.2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.16.2.html", - "/en/beats/libbeat/*/release-notes-7.16.3.html": "/guide/en/beats/libbeat/8.18/release-notes-7.16.3.html", - "/en/beats/libbeat/*/release-notes-7.17.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.17.0.html", - "/en/beats/libbeat/*/release-notes-7.2.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.2.0.html", - "/en/beats/libbeat/*/release-notes-7.2.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.2.1.html", - "/en/beats/libbeat/*/release-notes-7.3.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.3.0.html", - "/en/beats/libbeat/*/release-notes-7.3.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.3.1.html", - "/en/beats/libbeat/*/release-notes-7.3.2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.3.2.html", - "/en/beats/libbeat/*/release-notes-7.4.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.4.0.html", - "/en/beats/libbeat/*/release-notes-7.4.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.4.1.html", - "/en/beats/libbeat/*/release-notes-7.4.2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.4.2.html", - "/en/beats/libbeat/*/release-notes-7.5.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.5.0.html", - "/en/beats/libbeat/*/release-notes-7.5.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.5.1.html", - "/en/beats/libbeat/*/release-notes-7.5.2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.5.2.html", - "/en/beats/libbeat/*/release-notes-7.6.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.6.0.html", - "/en/beats/libbeat/*/release-notes-7.6.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.6.1.html", - "/en/beats/libbeat/*/release-notes-7.6.2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.6.2.html", - "/en/beats/libbeat/*/release-notes-7.7.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.7.0.html", - "/en/beats/libbeat/*/release-notes-7.7.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.7.1.html", - "/en/beats/libbeat/*/release-notes-7.8.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.8.0.html", - "/en/beats/libbeat/*/release-notes-7.8.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.8.1.html", - "/en/beats/libbeat/*/release-notes-7.9.0.html": "/guide/en/beats/libbeat/8.18/release-notes-7.9.0.html", - "/en/beats/libbeat/*/release-notes-7.9.1.html": "/guide/en/beats/libbeat/8.18/release-notes-7.9.1.html", - "/en/beats/libbeat/*/release-notes-7.9.2.html": "/guide/en/beats/libbeat/8.18/release-notes-7.9.2.html", - "/en/beats/libbeat/*/release-notes-7.9.3.html": "/guide/en/beats/libbeat/8.18/release-notes-7.9.3.html", - "/en/beats/libbeat/*/release-notes-8.0.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.0.0.html", - "/en/beats/libbeat/*/release-notes-8.0.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.0.1.html", - "/en/beats/libbeat/*/release-notes-8.1.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.1.0.html", - "/en/beats/libbeat/*/release-notes-8.1.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.1.1.html", - "/en/beats/libbeat/*/release-notes-8.1.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.1.2.html", - "/en/beats/libbeat/*/release-notes-8.1.3.html": "/guide/en/beats/libbeat/8.18/release-notes-8.1.3.html", - "/en/beats/libbeat/*/release-notes-8.10.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.10.0.html", - "/en/beats/libbeat/*/release-notes-8.10.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.10.1.html", - "/en/beats/libbeat/*/release-notes-8.10.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.10.2.html", - "/en/beats/libbeat/*/release-notes-8.10.3.html": "/guide/en/beats/libbeat/8.18/release-notes-8.10.3.html", - "/en/beats/libbeat/*/release-notes-8.10.4.html": "/guide/en/beats/libbeat/8.18/release-notes-8.10.4.html", - "/en/beats/libbeat/*/release-notes-8.11.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.11.0.html", - "/en/beats/libbeat/*/release-notes-8.11.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.11.1.html", - "/en/beats/libbeat/*/release-notes-8.11.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.11.2.html", - "/en/beats/libbeat/*/release-notes-8.11.3.html": "/guide/en/beats/libbeat/8.18/release-notes-8.11.3.html", - "/en/beats/libbeat/*/release-notes-8.11.4.html": "/guide/en/beats/libbeat/8.18/release-notes-8.11.4.html", - "/en/beats/libbeat/*/release-notes-8.12.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.12.0.html", - "/en/beats/libbeat/*/release-notes-8.12.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.12.1.html", - "/en/beats/libbeat/*/release-notes-8.12.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.12.2.html", - "/en/beats/libbeat/*/release-notes-8.13.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.13.0.html", - "/en/beats/libbeat/*/release-notes-8.13.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.13.1.html", - "/en/beats/libbeat/*/release-notes-8.13.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.13.2.html", - "/en/beats/libbeat/*/release-notes-8.13.3.html": "/guide/en/beats/libbeat/8.18/release-notes-8.13.3.html", - "/en/beats/libbeat/*/release-notes-8.13.4.html": "/guide/en/beats/libbeat/8.18/release-notes-8.13.4.html", - "/en/beats/libbeat/*/release-notes-8.14.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.14.0.html", - "/en/beats/libbeat/*/release-notes-8.14.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.14.1.html", - "/en/beats/libbeat/*/release-notes-8.14.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.14.2.html", - "/en/beats/libbeat/*/release-notes-8.14.3.html": "/guide/en/beats/libbeat/8.18/release-notes-8.14.3.html", - "/en/beats/libbeat/*/release-notes-8.15.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.15.0.html", - "/en/beats/libbeat/*/release-notes-8.15.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.15.1.html", - "/en/beats/libbeat/*/release-notes-8.15.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.15.2.html", - "/en/beats/libbeat/*/release-notes-8.15.3.html": "/guide/en/beats/libbeat/8.18/release-notes-8.15.3.html", - "/en/beats/libbeat/*/release-notes-8.15.4.html": "/guide/en/beats/libbeat/8.18/release-notes-8.15.4.html", - "/en/beats/libbeat/*/release-notes-8.15.5.html": "/guide/en/beats/libbeat/8.18/release-notes-8.15.5.html", - "/en/beats/libbeat/*/release-notes-8.16.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.16.0.html", - "/en/beats/libbeat/*/release-notes-8.16.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.16.1.html", - "/en/beats/libbeat/*/release-notes-8.17.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.17.0.html", - "/en/beats/libbeat/*/release-notes-8.17.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.17.1.html", - "/en/beats/libbeat/*/release-notes-8.2.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.2.0.html", - "/en/beats/libbeat/*/release-notes-8.2.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.2.1.html", - "/en/beats/libbeat/*/release-notes-8.2.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.2.2.html", - "/en/beats/libbeat/*/release-notes-8.2.3.html": "/guide/en/beats/libbeat/8.18/release-notes-8.2.3.html", - "/en/beats/libbeat/*/release-notes-8.3.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.3.0.html", - "/en/beats/libbeat/*/release-notes-8.3.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.3.1.html", - "/en/beats/libbeat/*/release-notes-8.3.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.3.2.html", - "/en/beats/libbeat/*/release-notes-8.3.3.html": "/guide/en/beats/libbeat/8.18/release-notes-8.3.3.html", - "/en/beats/libbeat/*/release-notes-8.4.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.4.0.html", - "/en/beats/libbeat/*/release-notes-8.4.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.4.1.html", - "/en/beats/libbeat/*/release-notes-8.4.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.4.2.html", - "/en/beats/libbeat/*/release-notes-8.4.3.html": "/guide/en/beats/libbeat/8.18/release-notes-8.4.3.html", - "/en/beats/libbeat/*/release-notes-8.5.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.5.0.html", - "/en/beats/libbeat/*/release-notes-8.5.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.5.1.html", - "/en/beats/libbeat/*/release-notes-8.5.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.5.2.html", - "/en/beats/libbeat/*/release-notes-8.5.3.html": "/guide/en/beats/libbeat/8.18/release-notes-8.5.3.html", - "/en/beats/libbeat/*/release-notes-8.6.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.6.0.html", - "/en/beats/libbeat/*/release-notes-8.6.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.6.1.html", - "/en/beats/libbeat/*/release-notes-8.6.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.6.2.html", - "/en/beats/libbeat/*/release-notes-8.7.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.7.0.html", - "/en/beats/libbeat/*/release-notes-8.7.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.7.1.html", - "/en/beats/libbeat/*/release-notes-8.8.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.8.0.html", - "/en/beats/libbeat/*/release-notes-8.8.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.8.1.html", - "/en/beats/libbeat/*/release-notes-8.8.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.8.2.html", - "/en/beats/libbeat/*/release-notes-8.9.0.html": "/guide/en/beats/libbeat/8.18/release-notes-8.9.0.html", - "/en/beats/libbeat/*/release-notes-8.9.1.html": "/guide/en/beats/libbeat/8.18/release-notes-8.9.1.html", - "/en/beats/libbeat/*/release-notes-8.9.2.html": "/guide/en/beats/libbeat/8.18/release-notes-8.9.2.html", "/en/beats/libbeat/*/release-notes.html": "/docs/release-notes/beats", "/en/beats/libbeat/*/upgrading.html": "/docs/reference/beats/libbeat/upgrading", - "/en/beats/libbeat/*/whats-new.html": "/guide/en/beats/libbeat/8.18/whats-new.html", "/en/beats/loggingplugin/*/index.html": "/docs/reference/beats/loggingplugin", "/en/beats/loggingplugin/*/log-driver-configuration.html": "/docs/reference/beats/loggingplugin/log-driver-configuration", "/en/beats/loggingplugin/*/log-driver-installation.html": "/docs/reference/beats/loggingplugin/log-driver-installation", @@ -1283,7 +997,6 @@ "/en/beats/metricbeat/*/_galera_status_metricset.html": "/docs/reference/beats/metricbeat/_galera_status_metricset", "/en/beats/metricbeat/*/_host_setup.html": "/docs/reference/beats/metricbeat/_host_setup", "/en/beats/metricbeat/*/_live_reloading.html": "/docs/reference/beats/metricbeat/_live_reloading", - "/en/beats/metricbeat/*/_metricsets_67.html": "/guide/en/beats/metricbeat/8.17/_metricsets_67.html", "/en/beats/metricbeat/*/add-cloud-metadata.html": "/docs/reference/beats/metricbeat/add-cloud-metadata", "/en/beats/metricbeat/*/add-cloudfoundry-metadata.html": "/docs/reference/beats/metricbeat/add-cloudfoundry-metadata", "/en/beats/metricbeat/*/add-docker-metadata.html": "/docs/reference/beats/metricbeat/add-docker-metadata", @@ -1307,7 +1020,6 @@ "/en/beats/metricbeat/*/configuration-autodiscover-advanced.html": "/docs/reference/beats/metricbeat/configuration-autodiscover-advanced", "/en/beats/metricbeat/*/configuration-autodiscover-hints.html": "/docs/reference/beats/metricbeat/configuration-autodiscover-hints", "/en/beats/metricbeat/*/configuration-autodiscover.html": "/docs/reference/beats/metricbeat/configuration-autodiscover", - "/en/beats/metricbeat/*/configuration-central-management.html": "/guide/en/beats/metricbeat/8.18/configuration-central-management.html", "/en/beats/metricbeat/*/configuration-dashboards.html": "/docs/reference/beats/metricbeat/configuration-dashboards", "/en/beats/metricbeat/*/configuration-feature-flags.html": "/docs/reference/beats/metricbeat/configuration-feature-flags", "/en/beats/metricbeat/*/configuration-general-options.html": "/docs/reference/beats/metricbeat/configuration-general-options", @@ -1348,7 +1060,6 @@ "/en/beats/metricbeat/*/drop-fields.html": "/docs/reference/beats/metricbeat/drop-fields", "/en/beats/metricbeat/*/elasticsearch-output.html": "/docs/reference/beats/metricbeat/elasticsearch-output", "/en/beats/metricbeat/*/enable-metricbeat-debugging.html": "/docs/reference/beats/metricbeat/enable-metricbeat-debugging", - "/en/beats/metricbeat/*/enroll-beats.html": "/guide/en/beats/metricbeat/8.18/enroll-beats.html", "/en/beats/metricbeat/*/error-event-structure.html": "/docs/reference/beats/metricbeat/error-event-structure", "/en/beats/metricbeat/*/error-found-unexpected-character.html": "/docs/reference/beats/metricbeat/error-found-unexpected-character", "/en/beats/metricbeat/*/error-loading-config.html": "/docs/reference/beats/metricbeat/error-loading-config", @@ -1376,7 +1087,6 @@ "/en/beats/metricbeat/*/exported-fields-dropwizard.html": "/docs/reference/beats/metricbeat/exported-fields-dropwizard", "/en/beats/metricbeat/*/exported-fields-ecs.html": "/docs/reference/beats/metricbeat/exported-fields-ecs", "/en/beats/metricbeat/*/exported-fields-elasticsearch.html": "/docs/reference/beats/metricbeat/exported-fields-elasticsearch", - "/en/beats/metricbeat/*/exported-fields-enterprisesearch.html": "/guide/en/beats/metricbeat/8.18/exported-fields-enterprisesearch.html", "/en/beats/metricbeat/*/exported-fields-envoyproxy.html": "/docs/reference/beats/metricbeat/exported-fields-envoyproxy", "/en/beats/metricbeat/*/exported-fields-etcd.html": "/docs/reference/beats/metricbeat/exported-fields-etcd", "/en/beats/metricbeat/*/exported-fields-gcp.html": "/docs/reference/beats/metricbeat/exported-fields-gcp", @@ -1436,7 +1146,6 @@ "/en/beats/metricbeat/*/fingerprint.html": "/docs/reference/beats/metricbeat/fingerprint", "/en/beats/metricbeat/*/freebsd-no-such-file.html": "/docs/reference/beats/metricbeat/freebsd-no-such-file", "/en/beats/metricbeat/*/getting-help.html": "/docs/reference/beats/metricbeat/getting-help", - "/en/beats/metricbeat/*/how-central-managment-works.html": "/guide/en/beats/metricbeat/8.18/how-central-managment-works.html", "/en/beats/metricbeat/*/how-metricbeat-works.html": "/docs/reference/beats/metricbeat/how-metricbeat-works", "/en/beats/metricbeat/*/howto-guides.html": "/docs/reference/beats/metricbeat/howto-guides", "/en/beats/metricbeat/*/http-endpoint.html": "/docs/reference/beats/metricbeat/http-endpoint", @@ -1485,8 +1194,8 @@ "/en/beats/metricbeat/*/metricbeat-metricset-azure-app_insights.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-azure-app_insights", "/en/beats/metricbeat/*/metricbeat-metricset-azure-app_state.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-azure-app_state", "/en/beats/metricbeat/*/metricbeat-metricset-azure-billing.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-azure-billing", - "/en/beats/metricbeat/*/metricbeat-metricset-azure-compute_vm.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-azure-compute_vm", "/en/beats/metricbeat/*/metricbeat-metricset-azure-compute_vm_scaleset.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-azure-compute_vm_scaleset", + "/en/beats/metricbeat/*/metricbeat-metricset-azure-compute_vm.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-azure-compute_vm", "/en/beats/metricbeat/*/metricbeat-metricset-azure-container_instance.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-azure-container_instance", "/en/beats/metricbeat/*/metricbeat-metricset-azure-container_registry.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-azure-container_registry", "/en/beats/metricbeat/*/metricbeat-metricset-azure-container_service.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-azure-container_service", @@ -1529,23 +1238,21 @@ "/en/beats/metricbeat/*/metricbeat-metricset-docker-image.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-docker-image", "/en/beats/metricbeat/*/metricbeat-metricset-docker-info.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-docker-info", "/en/beats/metricbeat/*/metricbeat-metricset-docker-memory.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-docker-memory", - "/en/beats/metricbeat/*/metricbeat-metricset-docker-network.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-docker-network", "/en/beats/metricbeat/*/metricbeat-metricset-docker-network_summary.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-docker-network_summary", + "/en/beats/metricbeat/*/metricbeat-metricset-docker-network.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-docker-network", "/en/beats/metricbeat/*/metricbeat-metricset-dropwizard-collector.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-dropwizard-collector", "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-ccr.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-ccr", "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-cluster_stats.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-cluster_stats", "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-enrich.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-enrich", - "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-index.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-index", "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-index_recovery.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-index_recovery", "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-index_summary.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-index_summary", + "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-index.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-index", "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-ingest_pipeline.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-ingest_pipeline", "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-ml_job.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-ml_job", - "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-node.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-node", "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-node_stats.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-node_stats", + "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-node.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-node", "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-pending_tasks.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-pending_tasks", "/en/beats/metricbeat/*/metricbeat-metricset-elasticsearch-shard.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-elasticsearch-shard", - "/en/beats/metricbeat/*/metricbeat-metricset-enterprisesearch-health.html": "/guide/en/beats/metricbeat/8.18/metricbeat-metricset-enterprisesearch-health.html", - "/en/beats/metricbeat/*/metricbeat-metricset-enterprisesearch-stats.html": "/guide/en/beats/metricbeat/8.18/metricbeat-metricset-enterprisesearch-stats.html", "/en/beats/metricbeat/*/metricbeat-metricset-envoyproxy-server.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-envoyproxy-server", "/en/beats/metricbeat/*/metricbeat-metricset-etcd-leader.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-etcd-leader", "/en/beats/metricbeat/*/metricbeat-metricset-etcd-metrics.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-etcd-metrics", @@ -1589,7 +1296,6 @@ "/en/beats/metricbeat/*/metricbeat-metricset-kibana-cluster_rules.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-kibana-cluster_rules", "/en/beats/metricbeat/*/metricbeat-metricset-kibana-node_actions.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-kibana-node_actions", "/en/beats/metricbeat/*/metricbeat-metricset-kibana-node_rules.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-kibana-node_rules", - "/en/beats/metricbeat/*/metricbeat-metricset-kibana-settings.html": "/guide/en/beats/metricbeat/8.18/metricbeat-metricset-kibana-settings.html", "/en/beats/metricbeat/*/metricbeat-metricset-kibana-stats.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-kibana-stats", "/en/beats/metricbeat/*/metricbeat-metricset-kibana-status.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-kibana-status", "/en/beats/metricbeat/*/metricbeat-metricset-kubernetes-apiserver.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-kubernetes-apiserver", @@ -1624,8 +1330,8 @@ "/en/beats/metricbeat/*/metricbeat-metricset-linux-pageinfo.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-linux-pageinfo", "/en/beats/metricbeat/*/metricbeat-metricset-linux-pressure.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-linux-pressure", "/en/beats/metricbeat/*/metricbeat-metricset-linux-rapl.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-linux-rapl", - "/en/beats/metricbeat/*/metricbeat-metricset-logstash-node.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-logstash-node", "/en/beats/metricbeat/*/metricbeat-metricset-logstash-node_stats.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-logstash-node_stats", + "/en/beats/metricbeat/*/metricbeat-metricset-logstash-node.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-logstash-node", "/en/beats/metricbeat/*/metricbeat-metricset-memcached-stats.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-memcached-stats", "/en/beats/metricbeat/*/metricbeat-metricset-meraki-device_health.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-meraki-device_health", "/en/beats/metricbeat/*/metricbeat-metricset-mongodb-collstats.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-mongodb-collstats", @@ -1691,14 +1397,14 @@ "/en/beats/metricbeat/*/metricbeat-metricset-system-fsstat.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-fsstat", "/en/beats/metricbeat/*/metricbeat-metricset-system-load.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-load", "/en/beats/metricbeat/*/metricbeat-metricset-system-memory.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-memory", - "/en/beats/metricbeat/*/metricbeat-metricset-system-network.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-network", "/en/beats/metricbeat/*/metricbeat-metricset-system-network_summary.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-network_summary", - "/en/beats/metricbeat/*/metricbeat-metricset-system-process.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-process", + "/en/beats/metricbeat/*/metricbeat-metricset-system-network.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-network", "/en/beats/metricbeat/*/metricbeat-metricset-system-process_summary.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-process_summary", + "/en/beats/metricbeat/*/metricbeat-metricset-system-process.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-process", "/en/beats/metricbeat/*/metricbeat-metricset-system-raid.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-raid", "/en/beats/metricbeat/*/metricbeat-metricset-system-service.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-service", - "/en/beats/metricbeat/*/metricbeat-metricset-system-socket.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-socket", "/en/beats/metricbeat/*/metricbeat-metricset-system-socket_summary.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-socket_summary", + "/en/beats/metricbeat/*/metricbeat-metricset-system-socket.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-socket", "/en/beats/metricbeat/*/metricbeat-metricset-system-uptime.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-uptime", "/en/beats/metricbeat/*/metricbeat-metricset-system-users.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-system-users", "/en/beats/metricbeat/*/metricbeat-metricset-tomcat-cache.html": "/docs/reference/beats/metricbeat/metricbeat-metricset-tomcat-cache", @@ -1738,7 +1444,6 @@ "/en/beats/metricbeat/*/metricbeat-module-docker.html": "/docs/reference/beats/metricbeat/metricbeat-module-docker", "/en/beats/metricbeat/*/metricbeat-module-dropwizard.html": "/docs/reference/beats/metricbeat/metricbeat-module-dropwizard", "/en/beats/metricbeat/*/metricbeat-module-elasticsearch.html": "/docs/reference/beats/metricbeat/metricbeat-module-elasticsearch", - "/en/beats/metricbeat/*/metricbeat-module-enterprisesearch.html": "/guide/en/beats/metricbeat/8.18/metricbeat-module-enterprisesearch.html", "/en/beats/metricbeat/*/metricbeat-module-envoyproxy.html": "/docs/reference/beats/metricbeat/metricbeat-module-envoyproxy", "/en/beats/metricbeat/*/metricbeat-module-etcd.html": "/docs/reference/beats/metricbeat/metricbeat-module-etcd", "/en/beats/metricbeat/*/metricbeat-module-gcp.html": "/docs/reference/beats/metricbeat/metricbeat-module-gcp", @@ -1804,7 +1509,6 @@ "/en/beats/metricbeat/*/processor-translate-sid.html": "/docs/reference/beats/metricbeat/processor-translate-sid", "/en/beats/metricbeat/*/publishing-ls-fails-connection-reset-by-peer.html": "/docs/reference/beats/metricbeat/publishing-ls-fails-connection-reset-by-peer", "/en/beats/metricbeat/*/rate-limit.html": "/docs/reference/beats/metricbeat/rate-limit", - "/en/beats/metricbeat/*/redirects-global.html": "/guide/en/beats/metricbeat/8.18/redirects-global.html", "/en/beats/metricbeat/*/redis-output.html": "/docs/reference/beats/metricbeat/redis-output", "/en/beats/metricbeat/*/regexp-support.html": "/docs/reference/beats/metricbeat/regexp-support", "/en/beats/metricbeat/*/rename-fields.html": "/docs/reference/beats/metricbeat/rename-fields", @@ -2158,19 +1862,19 @@ "/en/beats/winlogbeat/*/winlogbeat-starting.html": "/docs/reference/beats/winlogbeat/winlogbeat-starting", "/en/beats/winlogbeat/*/winlogbeat-template.html": "/docs/reference/beats/winlogbeat/winlogbeat-template", "/en/beats/winlogbeat/*/yaml-tips.html": "/docs/reference/beats/winlogbeat/yaml-tips", - "/en/cloud-enterprise/*/API_-_Base_Url.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", - "/en/cloud-enterprise/*/APM_routes.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", + "/en/cloud-enterprise/*/accept-organization-invitation.html": "/docs/api/doc/cloud-enterprise/operation/operation-accept-organization-invitation", "/en/cloud-enterprise/*/AccountResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Accounts.html": "/docs/api/doc/cloud-enterprise/group/endpoint-accounts", "/en/cloud-enterprise/*/AccountTrustRelationship.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AccountTrustSettings.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AccountUpdateRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Accounts.html": "/docs/api/doc/cloud-enterprise/group/endpoint-accounts", "/en/cloud-enterprise/*/ActiveDirectoryGroupSearch.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ActiveDirectorySecurityRealmLoadBalance.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ActiveDirectorySecurityRealmRoleMappingRule.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ActiveDirectorySecurityRealmRoleMappingRules.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ActiveDirectorySettings.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ActiveDirectoryUserSearch.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/add-blueprinter-blessing.html": "/docs/api/doc/cloud-enterprise/operation/operation-add-blueprinter-blessing", "/en/cloud-enterprise/*/AdminconsoleInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AdminconsolesOverview.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AllocatedInstancePlansInfo.html": "/docs/api/doc/cloud-enterprise", @@ -2185,12 +1889,14 @@ "/en/cloud-enterprise/*/AllocatorMoveRequest.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AllocatorOverview.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AllocatorSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/AllocatorZoneInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AllocatorsSummary.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AllocatorsZoneSummary.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/AllocatorZoneInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/API_-_Base_Url.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", "/en/cloud-enterprise/*/ApiBaseUrlData.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ApiKeyResponse.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ApiKeysResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/APM_routes.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", "/en/cloud-enterprise/*/Apm.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ApmConfiguration.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ApmCrudResponse.html": "/docs/api/doc/cloud-enterprise", @@ -2205,6 +1911,7 @@ "/en/cloud-enterprise/*/ApmSubInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ApmSystemSettings.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ApmTopologyElement.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/App_Search_-_Read-only.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", "/en/cloud-enterprise/*/AppSearch.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AppSearchConfiguration.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AppSearchInfo.html": "/docs/api/doc/cloud-enterprise", @@ -2219,7 +1926,6 @@ "/en/cloud-enterprise/*/AppSearchSubInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AppSearchSystemSettings.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AppSearchTopologyElement.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/App_Search_-_Read-only.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", "/en/cloud-enterprise/*/Authentication.html": "/docs/api/doc/cloud-enterprise/group/endpoint-authentication", "/en/cloud-enterprise/*/AuthenticationInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/AutodetectStrategyConfig.html": "/docs/api/doc/cloud-enterprise", @@ -2232,14 +1938,20 @@ "/en/cloud-enterprise/*/Blessings.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/BlessingsWithMeta.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/BoolQuery.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/cancel-deployment-resource-pending-plan.html": "/docs/api/doc/cloud-enterprise/operation/operation-cancel-deployment-resource-pending-plan", "/en/cloud-enterprise/*/CapacityConstraintsResource.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/capture-deployment-instance-heap-dump.html": "/docs/api/doc/cloud-enterprise/operation/operation-capture-deployment-instance-heap-dump", + "/en/cloud-enterprise/*/capture-deployment-instance-thread-dump.html": "/docs/api/doc/cloud-enterprise/operation/operation-capture-deployment-instance-thread-dump", + "/en/cloud-enterprise/*/capture-deployment-resource-diagnostics.html": "/docs/api/doc/cloud-enterprise/operation/operation-capture-deployment-resource-diagnostics", + "/en/cloud-enterprise/*/ce-add-support-for-node-roles-and-autoscaling.html": "/docs/deploy-manage/deploy/cloud-enterprise/ce-add-support-for-node-roles-autoscaling", "/en/cloud-enterprise/*/CertificateAuthority.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/CertificateMetaData.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ChainStatus.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ChangeSourceInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ChartItem.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ChartItemValue.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ChartItems.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ChartItemValue.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/claim-traffic-filter-link-id.html": "/docs/api/doc/cloud-enterprise/operation/operation-claim-traffic-filter-link-id", "/en/cloud-enterprise/*/ClusterCredentials.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ClusterCurationSettings.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ClusterCurationSpec.html": "/docs/api/doc/cloud-enterprise", @@ -2266,10 +1978,10 @@ "/en/cloud-enterprise/*/ClusterTopologyInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/Comment.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/CommentCreateRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/CommentUpdateRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/CommentWithMeta.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/Comments.html": "/docs/api/doc/cloud-enterprise/group/endpoint-comments", "/en/cloud-enterprise/*/CommentsWithMetas.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/CommentUpdateRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/CommentWithMeta.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/CommonClusterPlanInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/CompatibleNodeTypesResource.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/CompatibleVersionResource.html": "/docs/api/doc/cloud-enterprise", @@ -2280,25 +1992,96 @@ "/en/cloud-enterprise/*/ConstructorInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ConstructorOverview.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ContainerConfigHostConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ContainerSetSummary.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ContainerSetsSummary.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ContainersEntry.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ContainersEntryOptions.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ContainersEntryOptionsACL.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ContainersEntryOptionsAuth.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ContainersEntryOptionsContainerConfig.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/ContainersEntryOptionsOverrides.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ContainerSetsSummary.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ContainerSetSummary.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/CoordinatorCandidateInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/CoordinatorCandidatesSummary.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/CoordinatorSummary.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/CoordinatorsSummary.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/CoordinatorSummary.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/Costs.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/CostsOverview.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/create-active-directory-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-active-directory-configuration", + "/en/cloud-enterprise/*/create-api-key.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-api-key", + "/en/cloud-enterprise/*/create-blueprinter-role.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-blueprinter-role", + "/en/cloud-enterprise/*/create-comment.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-comment", + "/en/cloud-enterprise/*/create-config-store-option.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-config-store-option", + "/en/cloud-enterprise/*/create-deployment-template-v2.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-deployment-template-v2", + "/en/cloud-enterprise/*/create-deployment.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-deployment", + "/en/cloud-enterprise/*/create-enrollment-token.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-enrollment-token", + "/en/cloud-enterprise/*/create-extension.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-extension", + "/en/cloud-enterprise/*/create-instance-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-instance-configuration", + "/en/cloud-enterprise/*/create-ldap-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-ldap-configuration", + "/en/cloud-enterprise/*/create-organization-invitations.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-organization-invitations", + "/en/cloud-enterprise/*/create-proxies-filtered-group.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-proxies-filtered-group", + "/en/cloud-enterprise/*/create-saml-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-saml-configuration", + "/en/cloud-enterprise/*/create-security-deployment.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-security-deployment", + "/en/cloud-enterprise/*/create-traffic-filter-ruleset-association.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-traffic-filter-ruleset-association", + "/en/cloud-enterprise/*/create-traffic-filter-ruleset.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-traffic-filter-ruleset", + "/en/cloud-enterprise/*/create-trust-relationship.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-trust-relationship", + "/en/cloud-enterprise/*/create-user.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-user", "/en/cloud-enterprise/*/CreateApiKeyRequest.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/CreateExtensionRequest.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/Creates.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/definitions.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/delete-active-directory-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-active-directory-configuration", + "/en/cloud-enterprise/*/delete-adminconsole-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-adminconsole-logging-settings", + "/en/cloud-enterprise/*/delete-allocator-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-allocator-logging-settings", + "/en/cloud-enterprise/*/delete-allocator-metadata-item.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-allocator-metadata-item", + "/en/cloud-enterprise/*/delete-allocator.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-allocator", + "/en/cloud-enterprise/*/delete-api-key.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-api-key", + "/en/cloud-enterprise/*/delete-api-keys.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-api-keys", + "/en/cloud-enterprise/*/delete-blueprinter-role.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-blueprinter-role", + "/en/cloud-enterprise/*/delete-comment.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-comment", + "/en/cloud-enterprise/*/delete-config-store-option.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-config-store-option", + "/en/cloud-enterprise/*/delete-constructor-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-constructor-logging-settings", + "/en/cloud-enterprise/*/delete-coordinator-candidate.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-coordinator-candidate", + "/en/cloud-enterprise/*/delete-deployment-es-resource-snapshot-dependency.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-deployment-es-resource-snapshot-dependency", + "/en/cloud-enterprise/*/delete-deployment-resource-proxy-requests.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-deployment-resource-proxy-requests", + "/en/cloud-enterprise/*/delete-deployment-stateless-resource.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-deployment-stateless-resource", + "/en/cloud-enterprise/*/delete-deployment-template-v2.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-deployment-template-v2", + "/en/cloud-enterprise/*/delete-deployment.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-deployment", + "/en/cloud-enterprise/*/delete-enrollment-token.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-enrollment-token", + "/en/cloud-enterprise/*/delete-extension.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-extension", + "/en/cloud-enterprise/*/delete-extra-certificate.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-extra-certificate", + "/en/cloud-enterprise/*/delete-instance-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-instance-configuration", + "/en/cloud-enterprise/*/delete-ldap-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-ldap-configuration", + "/en/cloud-enterprise/*/delete-license.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-license", + "/en/cloud-enterprise/*/delete-organization-invitations.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-organization-invitations", + "/en/cloud-enterprise/*/delete-organization-memberships.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-organization-memberships", + "/en/cloud-enterprise/*/delete-proxies-filtered-group.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-proxies-filtered-group", + "/en/cloud-enterprise/*/delete-runner-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-runner-logging-settings", + "/en/cloud-enterprise/*/delete-runner.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-runner", + "/en/cloud-enterprise/*/delete-saml-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-saml-configuration", + "/en/cloud-enterprise/*/delete-snapshot-repository.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-snapshot-repository", + "/en/cloud-enterprise/*/delete-traffic-filter-ruleset-association.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-traffic-filter-ruleset-association", + "/en/cloud-enterprise/*/delete-traffic-filter-ruleset.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-traffic-filter-ruleset", + "/en/cloud-enterprise/*/delete-trust-relationship.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-trust-relationship", + "/en/cloud-enterprise/*/delete-user-api-key.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-user-api-key", + "/en/cloud-enterprise/*/delete-user-api-keys.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-user-api-keys", + "/en/cloud-enterprise/*/delete-user.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-user", + "/en/cloud-enterprise/*/delete-users-api-keys.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-users-api-keys", + "/en/cloud-enterprise/*/delete-version-stack.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-version-stack", "/en/cloud-enterprise/*/DeleteApiKeysRequest.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeleteUsersApiKeysRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/demote-coordinator.html": "/docs/api/doc/cloud-enterprise/operation/operation-demote-coordinator", + "/en/cloud-enterprise/*/Deployment_-_Commands.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", + "/en/cloud-enterprise/*/Deployment_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", + "/en/cloud-enterprise/*/Deployment_-_Diagnostics.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", + "/en/cloud-enterprise/*/Deployment_-_Info.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", + "/en/cloud-enterprise/*/Deployment_-_Remote_Clusters.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", + "/en/cloud-enterprise/*/Deployment_-_resync.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", + "/en/cloud-enterprise/*/Deployment_-_Trust.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", + "/en/cloud-enterprise/*/Deployment_-_Upgrade_Assistant.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", + "/en/cloud-enterprise/*/Deployment_Plan_-_Activity.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", + "/en/cloud-enterprise/*/Deployment_Resources_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", + "/en/cloud-enterprise/*/Deployment_Resources_-_Proxy.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", + "/en/cloud-enterprise/*/deployment-apm-reset-secret-token.html": "/docs/api/doc/cloud-enterprise/operation/operation-deployment-apm-reset-secret-token", "/en/cloud-enterprise/*/DeploymentCosts.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentCreateMetadata.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentCreateRequest.html": "/docs/api/doc/cloud-enterprise", @@ -2320,12 +2103,21 @@ "/en/cloud-enterprise/*/DeploymentResource.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentResourceCommandResponse.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentResourceCrudResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/DeploymentResourceUpgradeResponse.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentResources.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/DeploymentResourceUpgradeResponse.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentRestoreResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Deployments_-_Extensions.html": "/docs/api/doc/cloud-enterprise/group/endpoint-extensions", + "/en/cloud-enterprise/*/Deployments_-_Templates.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deploymenttemplates", + "/en/cloud-enterprise/*/Deployments_-_Traffic_Filter_-_Associations.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deploymentstrafficfilter", + "/en/cloud-enterprise/*/Deployments_-_Traffic_Filter_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deploymentstrafficfilter", + "/en/cloud-enterprise/*/Deployments_-_Traffic_Filter_Claimed_Link_Id.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deploymentstrafficfilter", + "/en/cloud-enterprise/*/DeploymentsCosts.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentSearchResponse.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentSettings.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentShutdownResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/DeploymentsListingData.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/DeploymentsListResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/DeploymentsSearchResponse.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentTemplateInfoV2.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentTemplateReference.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentTemplateRequestBody.html": "/docs/api/doc/cloud-enterprise", @@ -2335,430 +2127,16 @@ "/en/cloud-enterprise/*/DeploymentUpdateResponse.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentUpdateSettings.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DeploymentUpgradeAssistantStatusResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Deployment_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", - "/en/cloud-enterprise/*/Deployment_-_Commands.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", - "/en/cloud-enterprise/*/Deployment_-_Diagnostics.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", - "/en/cloud-enterprise/*/Deployment_-_Info.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", - "/en/cloud-enterprise/*/Deployment_-_Remote_Clusters.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", - "/en/cloud-enterprise/*/Deployment_-_Trust.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", - "/en/cloud-enterprise/*/Deployment_-_Upgrade_Assistant.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", - "/en/cloud-enterprise/*/Deployment_-_resync.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", - "/en/cloud-enterprise/*/Deployment_Plan_-_Activity.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", - "/en/cloud-enterprise/*/Deployment_Resources_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", - "/en/cloud-enterprise/*/Deployment_Resources_-_Proxy.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deployments", - "/en/cloud-enterprise/*/DeploymentsCosts.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/DeploymentsListResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/DeploymentsListingData.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/DeploymentsSearchResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Deployments_-_Extensions.html": "/docs/api/doc/cloud-enterprise/group/endpoint-extensions", - "/en/cloud-enterprise/*/Deployments_-_Templates.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deploymenttemplates", - "/en/cloud-enterprise/*/Deployments_-_Traffic_Filter_-_Associations.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deploymentstrafficfilter", - "/en/cloud-enterprise/*/Deployments_-_Traffic_Filter_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deploymentstrafficfilter", - "/en/cloud-enterprise/*/Deployments_-_Traffic_Filter_Claimed_Link_Id.html": "/docs/api/doc/cloud-enterprise/group/endpoint-deploymentstrafficfilter", "/en/cloud-enterprise/*/Dimension.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DirectTrustRelationship.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DiscreteSizes.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/download-deployment-instance-heap-dump.html": "/docs/api/doc/cloud-enterprise/operation/operation-download-deployment-instance-heap-dump", "/en/cloud-enterprise/*/DtsDimensionCosts.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DtsQuantity.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/DtsRate.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Elastic-Cloud-Enterprise-overview.html": "/docs/deploy-manage/deploy/cloud-enterprise", - "/en/cloud-enterprise/*/Elasticsearch.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchBlockingIssueElement.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchBlockingIssues.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchClusterBlockingIssueElement.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchClusterBlockingIssues.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchClusterInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchClusterPlan.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchClusterPlanInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchClusterPlansInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchClusterRole.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchClusterSecurityInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchClusterSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchClusterTopologyElement.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchClusterTrustSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchClusterUser.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchCuration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchDependant.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchElasticUserPasswordResetResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchMasterElement.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchMasterInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchMonitoringInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchNodeType.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchPayload.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchPlanControlConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchReplicaElement.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchResourceInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchScriptTypeSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchScriptingUserSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchShardElement.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchShardsInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchShardsStatus.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchSystemSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchUserBundle.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElasticsearchUserPlugin.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ElevatedPermissions.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EmptyResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnableIlmRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnrollmentTokenRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearch.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchNodeTypes.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchPayload.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchPlan.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchPlanControlConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchPlanInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchPlansInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchResourceInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchSubInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchSystemSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/EnterpriseSearchTopologyElement.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ExistsQuery.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Extension.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ExtensionFileMetadata.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Extensions.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ExternalHyperlink.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ExternalTrustRelationship.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/FilterAssociation.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/GenericResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/GlobalDeploymentTemplateInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/GlobalDeploymentTemplateRegion.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/GrowShrinkStrategyConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/HeapDump.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Hyperlink.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IdResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IndexPattern.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IndexSynchronizationResults.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/InstanceConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/InstanceConfigurationInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/InstanceMoveRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/InstanceOverrides.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/InstanceTypeResource.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IntegrationsServer.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IntegrationsServerConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IntegrationsServerInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IntegrationsServerPayload.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IntegrationsServerPlan.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IntegrationsServerPlanControlConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IntegrationsServerPlanInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IntegrationsServerPlansInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IntegrationsServerResourceInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IntegrationsServerSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IntegrationsServerSystemSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/IntegrationsServerTopologyElement.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ItemCosts.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ItemsCosts.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KeystoreContents.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KeystoreSecret.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Kibana.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaClusterInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaClusterPlan.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaClusterPlanInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaClusterPlansInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaClusterSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaClusterTopologyElement.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaDeeplink.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaPayload.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaPlanControlConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaResourceInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaSubClusterInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/KibanaSystemSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/LdapGroupSearch.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/LdapSecurityRealmLoadBalance.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/LdapSecurityRealmRoleMappingRule.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/LdapSecurityRealmRoleMappingRules.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/LdapSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/LdapUserSearch.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/LicenseInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/LicenseObject.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ListEnrollmentTokenElement.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ListEnrollmentTokenReply.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/LoggingSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/LoginRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/LoginState.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ManagedMonitoringSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MatchAllQuery.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MatchNoneQuery.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MatchQuery.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Metadata.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MetadataItem.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MetadataItemValue.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MetadataItems.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ModelVersionIndexSynchronizationResults.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveApmClusterConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveApmClusterDetails.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveAppSearchConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveAppSearchDetails.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveClustersCommandResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveClustersDetails.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveClustersRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveElasticsearchClusterConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveElasticsearchClusterDetails.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveEnterpriseSearchConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveEnterpriseSearchDetails.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveKibanaClusterConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/MoveKibanaClusterDetails.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/NestedQuery.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Networking_-_Deployment_Domain_Names.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationnetworking", - "/en/cloud-enterprise/*/NodeTypeResource.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ObservabilityAbsoluteDeployment.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ObservabilityIssue.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Organization.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/OrganizationInvitation.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/OrganizationInvitationRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/OrganizationInvitations.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/OrganizationList.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/OrganizationMembership.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/OrganizationMemberships.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/OrganizationRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Organizations.html": "/docs/api/doc/cloud-enterprise/group/endpoint-organizations", - "/en/cloud-enterprise/*/Orphaned.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/OrphanedElasticsearch.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/PendingState.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/PendingStates.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/PendingStatesWithMeta.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Period.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/PlanStrategy.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Platform.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platform", - "/en/cloud-enterprise/*/PlatformInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/PlatformResourcesSummary.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/PlatformServiceImageInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/PlatformServiceInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Platform_-_Adminconsoles.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", - "/en/cloud-enterprise/*/Platform_-_Allocators.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", - "/en/cloud-enterprise/*/Platform_-_Configuration_-_Instances_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationinstances", - "/en/cloud-enterprise/*/Platform_-_Configuration_-_Security.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationsecurity", - "/en/cloud-enterprise/*/Platform_-_Configuration_-_Security_-_Extra_Certificates_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platform", - "/en/cloud-enterprise/*/Platform_-_Configuration_-_Security_Deployment.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationsecurity", - "/en/cloud-enterprise/*/Platform_-_Configuration_-_Security_Realms.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationsecurity", - "/en/cloud-enterprise/*/Platform_-_Configuration_-_TLS.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationsecurity", - "/en/cloud-enterprise/*/Platform_-_Configuration_-_Trust_relationships.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationtrustrelationships", - "/en/cloud-enterprise/*/Platform_-_Constructors.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", - "/en/cloud-enterprise/*/Platform_-_Coordinators.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", - "/en/cloud-enterprise/*/Platform_-_License.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", - "/en/cloud-enterprise/*/Platform_-_Repository_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationsnapshots", - "/en/cloud-enterprise/*/Platform_-_Runners.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", - "/en/cloud-enterprise/*/Platform_-_configuration_-_Store.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", - "/en/cloud-enterprise/*/Platform_-_proxies.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", - "/en/cloud-enterprise/*/PortBinding.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/PrefixQuery.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxiesAllocationsInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxiesFilter.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxiesFilteredGroup.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxiesFilteredGroupHealth.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxiesHealth.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxiesHttpSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxiesSSOSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxiesSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxiesSummary.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxyAllocationCounts.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxyAllocationInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxyInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxyOverview.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ProxySummary.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/PublicCertChain.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/PublicCertChainCollection.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/PublicCertificate.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/QueryContainer.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/QueryStringQuery.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RangeQuery.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ReadOnlyRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ReadOnlyResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RegionInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RemoteResourceInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RemoteResourceRef.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RemoteResources.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ReplyWarning.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RepositoryConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RepositoryConfigs.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RequestEnrollmentTokenReply.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ResourceHeapDumps.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RestartPolicy.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RestoreSnapshotApiConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RestoreSnapshotConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RestoreSnapshotRepoConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Role.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RoleAggregate.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RoleAggregateCreateData.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RoleAggregates.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RoleWithMeta.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Roles.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", - "/en/cloud-enterprise/*/RollingGrowShrinkStrategyConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RollingStrategyConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RulesetAssociations.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RunnerBuildInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RunnerContainerInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RunnerHealthChecks.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RunnerInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RunnerOverview.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RunnerRoleInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RunnerRolesInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/RunnersSummary.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SamlAttributeSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SamlIdpSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SamlSecurityRealmRoleMappingRule.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SamlSecurityRealmRoleMappingRules.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SamlSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SamlSpSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SearchRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SecurityDeployment.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SecurityDeploymentCreateRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SecurityDeploymentTopology.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SecurityDeploymentUpdateRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SecurityRealmInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SecurityRealmInfoList.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SecurityRealmsReorderRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ServiceUrl.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SimpleQueryStringQuery.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SimplifiedLineItem.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SnapshotDependencies.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SnapshotDependency.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SnapshotRepositoryConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SnapshotStatusInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/SsoAuthenticationMethodInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionApmConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionAppSearchConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionArchiveProcessingError.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionArchiveProcessingResult.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionConfigPost.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionConfigs.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionElasticsearchConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionEnterpriseSearchConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionInstanceCapacityConstraint.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionIntegrationsServerConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionKibanaConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionMetadata.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionNodeType.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionTemplateFileHash.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/StackVersionTemplateInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Stack_-_Instance_Types_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-stack", - "/en/cloud-enterprise/*/Stack_-_Versions_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-stack", - "/en/cloud-enterprise/*/TargetElasticsearchCluster.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Telemetry.html": "/docs/api/doc/cloud-enterprise/group/endpoint-telemetry", - "/en/cloud-enterprise/*/TelemetryConfig.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TelemetryConfigRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Templates_-_Deployments_-_Global.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationtemplates", - "/en/cloud-enterprise/*/TermQuery.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TlsPublicCertChain.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TokenResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TopologyElementControl.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TopologySize.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrafficFilterClaimedLinkIdInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrafficFilterClaimedLinkIdRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrafficFilterClaimedLinkIds.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrafficFilterEgressRule.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrafficFilterRule.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrafficFilterRulesetInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrafficFilterRulesetRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrafficFilterRulesetResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrafficFilterRulesets.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrafficFilterSettings.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TransientApmPlanConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TransientAppSearchPlanConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TransientElasticsearchPlanConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TransientEnterpriseSearchPlanConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TransientIntegrationsServerPlanConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TransientKibanaPlanConfiguration.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrustRelationshipCreateRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrustRelationshipCreateResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrustRelationshipGetResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrustRelationshipUpdateRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrustRelationshipUpdateResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrustRelationshipsListResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrustedCertificate.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/TrustedEnvironments.html": "/docs/api/doc/cloud-enterprise/group/endpoint-trustedenvironments", - "/en/cloud-enterprise/*/UnreachableRegionInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/UpdateExtensionRequest.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/UpdatedTlsChain.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Updates.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/UsageStats.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/User.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/UserApiKey.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/UserList.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/UserMetadata.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/UserSecurity.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/UserSecurityRealm.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/Users.html": "/docs/api/doc/cloud-enterprise/group/endpoint-users", - "/en/cloud-enterprise/*/VersionedIdResponse.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ZkAcl.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ZookeeperNodeInfo.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/ZookeeperSummary.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/accept-organization-invitation.html": "/docs/api/doc/cloud-enterprise/operation/operation-accept-organization-invitation", - "/en/cloud-enterprise/*/add-blueprinter-blessing.html": "/docs/api/doc/cloud-enterprise/operation/operation-add-blueprinter-blessing", - "/en/cloud-enterprise/*/cancel-deployment-resource-pending-plan.html": "/docs/api/doc/cloud-enterprise/operation/operation-cancel-deployment-resource-pending-plan", - "/en/cloud-enterprise/*/capture-deployment-instance-heap-dump.html": "/docs/api/doc/cloud-enterprise/operation/operation-capture-deployment-instance-heap-dump", - "/en/cloud-enterprise/*/capture-deployment-instance-thread-dump.html": "/docs/api/doc/cloud-enterprise/operation/operation-capture-deployment-instance-thread-dump", - "/en/cloud-enterprise/*/capture-deployment-resource-diagnostics.html": "/docs/api/doc/cloud-enterprise/operation/operation-capture-deployment-resource-diagnostics", - "/en/cloud-enterprise/*/ce-add-support-for-node-roles-and-autoscaling.html": "/docs/deploy-manage/deploy/cloud-enterprise/ce-add-support-for-node-roles-autoscaling", - "/en/cloud-enterprise/*/claim-traffic-filter-link-id.html": "/docs/api/doc/cloud-enterprise/operation/operation-claim-traffic-filter-link-id", - "/en/cloud-enterprise/*/create-active-directory-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-active-directory-configuration", - "/en/cloud-enterprise/*/create-api-key.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-api-key", - "/en/cloud-enterprise/*/create-blueprinter-role.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-blueprinter-role", - "/en/cloud-enterprise/*/create-comment.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-comment", - "/en/cloud-enterprise/*/create-config-store-option.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-config-store-option", - "/en/cloud-enterprise/*/create-deployment-template-v2.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-deployment-template-v2", - "/en/cloud-enterprise/*/create-deployment.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-deployment", - "/en/cloud-enterprise/*/create-enrollment-token.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-enrollment-token", - "/en/cloud-enterprise/*/create-extension.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-extension", - "/en/cloud-enterprise/*/create-instance-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-instance-configuration", - "/en/cloud-enterprise/*/create-ldap-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-ldap-configuration", - "/en/cloud-enterprise/*/create-organization-invitations.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-organization-invitations", - "/en/cloud-enterprise/*/create-proxies-filtered-group.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-proxies-filtered-group", - "/en/cloud-enterprise/*/create-saml-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-saml-configuration", - "/en/cloud-enterprise/*/create-security-deployment.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-security-deployment", - "/en/cloud-enterprise/*/create-traffic-filter-ruleset-association.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-traffic-filter-ruleset-association", - "/en/cloud-enterprise/*/create-traffic-filter-ruleset.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-traffic-filter-ruleset", - "/en/cloud-enterprise/*/create-trust-relationship.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-trust-relationship", - "/en/cloud-enterprise/*/create-user.html": "/docs/api/doc/cloud-enterprise/operation/operation-create-user", - "/en/cloud-enterprise/*/definitions.html": "/docs/api/doc/cloud-enterprise", - "/en/cloud-enterprise/*/delete-active-directory-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-active-directory-configuration", - "/en/cloud-enterprise/*/delete-adminconsole-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-adminconsole-logging-settings", - "/en/cloud-enterprise/*/delete-allocator-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-allocator-logging-settings", - "/en/cloud-enterprise/*/delete-allocator-metadata-item.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-allocator-metadata-item", - "/en/cloud-enterprise/*/delete-allocator.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-allocator", - "/en/cloud-enterprise/*/delete-api-key.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-api-key", - "/en/cloud-enterprise/*/delete-api-keys.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-api-keys", - "/en/cloud-enterprise/*/delete-blueprinter-role.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-blueprinter-role", - "/en/cloud-enterprise/*/delete-comment.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-comment", - "/en/cloud-enterprise/*/delete-config-store-option.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-config-store-option", - "/en/cloud-enterprise/*/delete-constructor-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-constructor-logging-settings", - "/en/cloud-enterprise/*/delete-coordinator-candidate.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-coordinator-candidate", - "/en/cloud-enterprise/*/delete-deployment-es-resource-snapshot-dependency.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-deployment-es-resource-snapshot-dependency", - "/en/cloud-enterprise/*/delete-deployment-resource-proxy-requests.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-deployment-resource-proxy-requests", - "/en/cloud-enterprise/*/delete-deployment-stateless-resource.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-deployment-stateless-resource", - "/en/cloud-enterprise/*/delete-deployment-template-v2.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-deployment-template-v2", - "/en/cloud-enterprise/*/delete-deployment.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-deployment", - "/en/cloud-enterprise/*/delete-enrollment-token.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-enrollment-token", - "/en/cloud-enterprise/*/delete-extension.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-extension", - "/en/cloud-enterprise/*/delete-extra-certificate.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-extra-certificate", - "/en/cloud-enterprise/*/delete-instance-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-instance-configuration", - "/en/cloud-enterprise/*/delete-ldap-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-ldap-configuration", - "/en/cloud-enterprise/*/delete-license.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-license", - "/en/cloud-enterprise/*/delete-organization-invitations.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-organization-invitations", - "/en/cloud-enterprise/*/delete-organization-memberships.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-organization-memberships", - "/en/cloud-enterprise/*/delete-proxies-filtered-group.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-proxies-filtered-group", - "/en/cloud-enterprise/*/delete-runner-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-runner-logging-settings", - "/en/cloud-enterprise/*/delete-runner.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-runner", - "/en/cloud-enterprise/*/delete-saml-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-saml-configuration", - "/en/cloud-enterprise/*/delete-snapshot-repository.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-snapshot-repository", - "/en/cloud-enterprise/*/delete-traffic-filter-ruleset-association.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-traffic-filter-ruleset-association", - "/en/cloud-enterprise/*/delete-traffic-filter-ruleset.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-traffic-filter-ruleset", - "/en/cloud-enterprise/*/delete-trust-relationship.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-trust-relationship", - "/en/cloud-enterprise/*/delete-user-api-key.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-user-api-key", - "/en/cloud-enterprise/*/delete-user-api-keys.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-user-api-keys", - "/en/cloud-enterprise/*/delete-user.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-user", - "/en/cloud-enterprise/*/delete-users-api-keys.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-users-api-keys", - "/en/cloud-enterprise/*/delete-version-stack.html": "/docs/api/doc/cloud-enterprise/operation/operation-delete-version-stack", - "/en/cloud-enterprise/*/demote-coordinator.html": "/docs/api/doc/cloud-enterprise/operation/operation-demote-coordinator", - "/en/cloud-enterprise/*/deployment-apm-reset-secret-token.html": "/docs/api/doc/cloud-enterprise/operation/operation-deployment-apm-reset-secret-token", - "/en/cloud-enterprise/*/download-deployment-instance-heap-dump.html": "/docs/api/doc/cloud-enterprise/operation/operation-download-deployment-instance-heap-dump", - "/en/cloud-enterprise/*/ece-3-0-removals.html": "/guide/en/cloud-enterprise/3.7/ece-3-0-removals.html", - "/en/cloud-enterprise/*/ece-about_this_product.html": "/guide/en/cloud-enterprise/3.7/ece-about_this_product.html", + "/en/cloud-enterprise/*/ece_optional_settings.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/saml", + "/en/cloud-enterprise/*/ece_re_running_the_ece_upgrade.html": "/docs/deploy-manage/upgrade/orchestrator/upgrade-cloud-enterprise", + "/en/cloud-enterprise/*/ece_sign_outgoing_saml_message.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/saml", "/en/cloud-enterprise/*/ece-access-kibana.html": "/docs/deploy-manage/deploy/cloud-enterprise/access-kibana", "/en/cloud-enterprise/*/ece-activity-page.html": "/docs/deploy-manage/deploy/cloud-enterprise/keep-track-of-deployment-activity", "/en/cloud-enterprise/*/ece-add-capacity.html": "/docs/deploy-manage/maintenance/ece/scale-out-installation", @@ -2782,7 +2160,6 @@ "/en/cloud-enterprise/*/ece-api-generate-client.html": "/docs/reference/cloud/cloud-enterprise/ece-api-generate-client", "/en/cloud-enterprise/*/ece-api-reference.html": "/docs/reference/cloud/cloud-enterprise/restful-api", "/en/cloud-enterprise/*/ece-api-terraform.html": "/docs/reference/cloud/cloud-enterprise/ece-api-terraform", - "/en/cloud-enterprise/*/ece-appsearch-readonly2.html": "/guide/en/cloud-enterprise/3.7/ece-appsearch-readonly2.html", "/en/cloud-enterprise/*/ece-architecture.html": "/docs/deploy-manage/deploy/cloud-enterprise/ece-architecture", "/en/cloud-enterprise/*/ece-autoscaling-api-example.html": "/docs/deploy-manage/autoscaling/autoscaling-in-ece-and-ech", "/en/cloud-enterprise/*/ece-autoscaling-example.html": "/docs/deploy-manage/autoscaling/autoscaling-in-ece-and-ech", @@ -2811,7 +2188,6 @@ "/en/cloud-enterprise/*/ece-configure-hosts-sles12-onprem.html": "/docs/deploy-manage/deploy/cloud-enterprise/configure-host-suse", "/en/cloud-enterprise/*/ece-configure-hosts-ubuntu-cloud.html": "/docs/deploy-manage/deploy/cloud-enterprise/configure-host-ubuntu", "/en/cloud-enterprise/*/ece-configure-hosts-ubuntu-onprem.html": "/docs/deploy-manage/deploy/cloud-enterprise/configure-host-ubuntu", - "/en/cloud-enterprise/*/ece-configure-index-management.html": "/guide/en/cloud-enterprise/3.7/ece-configure-index-management.html", "/en/cloud-enterprise/*/ece-configure-os-cloud.html": "/docs/deploy-manage/deploy/cloud-enterprise/configure-operating-system", "/en/cloud-enterprise/*/ece-configure-os-onprem.html": "/docs/deploy-manage/deploy/cloud-enterprise/configure-operating-system", "/en/cloud-enterprise/*/ece-configure-rbac.html": "/docs/deploy-manage/users-roles/cloud-enterprise-orchestrator/manage-users-roles", @@ -2845,12 +2221,9 @@ "/en/cloud-enterprise/*/ece-deployment-templates.html": "/docs/deploy-manage/deploy/cloud-enterprise/deployment-templates", "/en/cloud-enterprise/*/ece-disable-data-tier.html": "/docs/manage-data/lifecycle/data-tiers", "/en/cloud-enterprise/*/ece-edit-remove-trusted-environment.html": "/docs/deploy-manage/remote-clusters/ece-edit-remove-trusted-environment", - "/en/cloud-enterprise/*/ece-enable-appsearch.html": "/guide/en/cloud-enterprise/3.7/ece-enable-appsearch.html", "/en/cloud-enterprise/*/ece-enable-auditing.html": "/docs/deploy-manage/security/logging-configuration/enabling-audit-logs", "/en/cloud-enterprise/*/ece-enable-ccs-for-eck.html": "/docs/deploy-manage/remote-clusters/ece-enable-ccs-for-eck", "/en/cloud-enterprise/*/ece-enable-ccs.html": "/docs/deploy-manage/remote-clusters/ece-enable-ccs", - "/en/cloud-enterprise/*/ece-enable-enterprise-search.html": "/guide/en/cloud-enterprise/3.7/ece-enable-enterprise-search.html", - "/en/cloud-enterprise/*/ece-enable-graph.html": "/guide/en/cloud-enterprise/3.7/ece-enable-graph.html", "/en/cloud-enterprise/*/ece-enable-logging-and-monitoring.html": "/docs/deploy-manage/monitor/stack-monitoring/ece-ech-stack-monitoring", "/en/cloud-enterprise/*/ece-find.html": "/docs/troubleshoot/deployments/cloud-enterprise/cloud-enterprise", "/en/cloud-enterprise/*/ece-generate-roles-token.html": "/docs/deploy-manage/deploy/cloud-enterprise/generate-roles-tokens", @@ -2900,10 +2273,7 @@ "/en/cloud-enterprise/*/ece-maintenance-mode-pausing.html": "/docs/deploy-manage/maintenance/ece/pause-instance", "/en/cloud-enterprise/*/ece-maintenance-mode-routing.html": "/docs/deploy-manage/maintenance/start-stop-routing-requests", "/en/cloud-enterprise/*/ece-maintenance-mode.html": "/docs/deploy-manage/maintenance/ece/enable-maintenance-mode", - "/en/cloud-enterprise/*/ece-manage-apm-and-fleet.html": "/guide/en/cloud-enterprise/3.7/ece-manage-apm-and-fleet.html", - "/en/cloud-enterprise/*/ece-manage-apm-settings.html": "/docs/solutions/observability/apps/configure-apm-server", - "/en/cloud-enterprise/*/ece-manage-apm.html": "/guide/en/cloud-enterprise/3.7/ece-manage-apm.html", - "/en/cloud-enterprise/*/ece-manage-appsearch-settings.html": "/guide/en/cloud-enterprise/3.7/ece-manage-appsearch-settings.html", + "/en/cloud-enterprise/*/ece-manage-apm-settings.html": "/docs/solutions/observability/apm/configure-apm-server", "/en/cloud-enterprise/*/ece-manage-capacity.html": "/docs/deploy-manage/deploy/cloud-enterprise/ece-manage-capacity", "/en/cloud-enterprise/*/ece-manage-certificates.html": "/docs/deploy-manage/security/secure-your-elastic-cloud-enterprise-installation/manage-security-certificates", "/en/cloud-enterprise/*/ece-manage-elastic-stack.html": "/docs/deploy-manage/deploy/cloud-enterprise/manage-elastic-stack-versions", @@ -2913,7 +2283,6 @@ "/en/cloud-enterprise/*/ece-manage-kibana.html": "/docs/deploy-manage/deploy/cloud-enterprise/create-deployment", "/en/cloud-enterprise/*/ece-manage-repositories.html": "/docs/deploy-manage/tools/snapshot-and-restore/cloud-enterprise", "/en/cloud-enterprise/*/ece-manage-system-passwords.html": "/docs/deploy-manage/users-roles/cloud-enterprise-orchestrator/manage-system-passwords", - "/en/cloud-enterprise/*/ece-memory-pressure.html": "/guide/en/cloud-enterprise/3.7/ece-memory-pressure.html", "/en/cloud-enterprise/*/ece-migrate-ccs.html": "/docs/deploy-manage/remote-clusters/ece-migrate-ccs", "/en/cloud-enterprise/*/ece-migrate-index-management.html": "/docs/manage-data/lifecycle/index-lifecycle-management/migrate-index-management", "/en/cloud-enterprise/*/ece-migrate-to-podman.html": "/docs/deploy-manage/deploy/cloud-enterprise/migrate-ece-to-podman-hosts", @@ -2929,79 +2298,9 @@ "/en/cloud-enterprise/*/ece-password-reset-elastic.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/manage-elastic-user-cloud", "/en/cloud-enterprise/*/ece-perform-host-maintenance.html": "/docs/deploy-manage/maintenance/ece/perform-ece-hosts-maintenance", "/en/cloud-enterprise/*/ece-phone-home.html": "/docs/deploy-manage/deploy/cloud-enterprise/statistics-collected-by-cloud-enterprise", - "/en/cloud-enterprise/*/ece-placeholder.html": "/guide/en/cloud-enterprise/3.7/ece-placeholder.html", "/en/cloud-enterprise/*/ece-prereqs.html": "/docs/deploy-manage/deploy/cloud-enterprise/prepare-environment", "/en/cloud-enterprise/*/ece-proxy-log-fields.html": "/docs/deploy-manage/monitor/orchestrators/ece-proxy-log-fields", "/en/cloud-enterprise/*/ece-regional-deployment-aliases.html": "/docs/deploy-manage/deploy/cloud-enterprise/ece-regional-deployment-aliases", - "/en/cloud-enterprise/*/ece-release-notes-1.0.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-1.0.0.html", - "/en/cloud-enterprise/*/ece-release-notes-1.0.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-1.0.1.html", - "/en/cloud-enterprise/*/ece-release-notes-1.0.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-1.0.2.html", - "/en/cloud-enterprise/*/ece-release-notes-1.1.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-1.1.0.html", - "/en/cloud-enterprise/*/ece-release-notes-1.1.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-1.1.1.html", - "/en/cloud-enterprise/*/ece-release-notes-1.1.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-1.1.2.html", - "/en/cloud-enterprise/*/ece-release-notes-1.1.3.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-1.1.3.html", - "/en/cloud-enterprise/*/ece-release-notes-1.1.4.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-1.1.4.html", - "/en/cloud-enterprise/*/ece-release-notes-1.1.5.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-1.1.5.html", - "/en/cloud-enterprise/*/ece-release-notes-2.0.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.0.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.0.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.0.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.1.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.1.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.1.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.1.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.10.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.10.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.10.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.10.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.11.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.11.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.11.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.11.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.11.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.11.2.html", - "/en/cloud-enterprise/*/ece-release-notes-2.12.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.12.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.12.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.12.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.12.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.12.2.html", - "/en/cloud-enterprise/*/ece-release-notes-2.12.3.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.12.3.html", - "/en/cloud-enterprise/*/ece-release-notes-2.12.4.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.12.4.html", - "/en/cloud-enterprise/*/ece-release-notes-2.13.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.13.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.13.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.13.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.13.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.13.2.html", - "/en/cloud-enterprise/*/ece-release-notes-2.13.3.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.13.3.html", - "/en/cloud-enterprise/*/ece-release-notes-2.13.4.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.13.4.html", - "/en/cloud-enterprise/*/ece-release-notes-2.2.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.2.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.2.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.2.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.2.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.2.2.html", - "/en/cloud-enterprise/*/ece-release-notes-2.2.3.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.2.3.html", - "/en/cloud-enterprise/*/ece-release-notes-2.3.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.3.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.3.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.3.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.3.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.3.2.html", - "/en/cloud-enterprise/*/ece-release-notes-2.4.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.4.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.4.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.4.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.4.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.4.2.html", - "/en/cloud-enterprise/*/ece-release-notes-2.4.3.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.4.3.html", - "/en/cloud-enterprise/*/ece-release-notes-2.5.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.5.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.5.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.5.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.6.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.6.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.6.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.6.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.6.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.6.2.html", - "/en/cloud-enterprise/*/ece-release-notes-2.7.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.7.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.7.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.7.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.7.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.7.2.html", - "/en/cloud-enterprise/*/ece-release-notes-2.8.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.8.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.8.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.8.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.9.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.9.0.html", - "/en/cloud-enterprise/*/ece-release-notes-2.9.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.9.1.html", - "/en/cloud-enterprise/*/ece-release-notes-2.9.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-2.9.2.html", - "/en/cloud-enterprise/*/ece-release-notes-3.0.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.0.0.html", - "/en/cloud-enterprise/*/ece-release-notes-3.1.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.1.0.html", - "/en/cloud-enterprise/*/ece-release-notes-3.1.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.1.1.html", - "/en/cloud-enterprise/*/ece-release-notes-3.2.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.2.0.html", - "/en/cloud-enterprise/*/ece-release-notes-3.2.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.2.1.html", - "/en/cloud-enterprise/*/ece-release-notes-3.3.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.3.0.html", - "/en/cloud-enterprise/*/ece-release-notes-3.4.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.4.0.html", - "/en/cloud-enterprise/*/ece-release-notes-3.4.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.4.1.html", - "/en/cloud-enterprise/*/ece-release-notes-3.5.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.5.0.html", - "/en/cloud-enterprise/*/ece-release-notes-3.5.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.5.1.html", - "/en/cloud-enterprise/*/ece-release-notes-3.6.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.6.0.html", - "/en/cloud-enterprise/*/ece-release-notes-3.6.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.6.1.html", - "/en/cloud-enterprise/*/ece-release-notes-3.6.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.6.2.html", - "/en/cloud-enterprise/*/ece-release-notes-3.7.0.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.7.0.html", - "/en/cloud-enterprise/*/ece-release-notes-3.7.1.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.7.1.html", - "/en/cloud-enterprise/*/ece-release-notes-3.7.2.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.7.2.html", - "/en/cloud-enterprise/*/ece-release-notes-3.7.3.html": "/guide/en/cloud-enterprise/3.7/ece-release-notes-3.7.3.html", "/en/cloud-enterprise/*/ece-release-notes.html": "/docs/release-notes/cloud-enterprise", "/en/cloud-enterprise/*/ece-remote-cluster-ece-ess.html": "/docs/deploy-manage/remote-clusters/ece-remote-cluster-ece-ess", "/en/cloud-enterprise/*/ece-remote-cluster-other-ece.html": "/docs/deploy-manage/remote-clusters/ece-remote-cluster-other-ece", @@ -3036,12 +2335,12 @@ "/en/cloud-enterprise/*/ece-script-reference.html": "/docs/reference/cloud/cloud-enterprise/scripts", "/en/cloud-enterprise/*/ece-secure-clusters-kerberos.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/kerberos", "/en/cloud-enterprise/*/ece-secure-clusters-oidc.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/openid-connect", - "/en/cloud-enterprise/*/ece-securing-clusters-JWT.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/jwt", - "/en/cloud-enterprise/*/ece-securing-clusters-SAML.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/saml", "/en/cloud-enterprise/*/ece-securing-clusters-ad-5x.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/active-directory", "/en/cloud-enterprise/*/ece-securing-clusters-ad.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/active-directory", + "/en/cloud-enterprise/*/ece-securing-clusters-JWT.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/jwt", "/en/cloud-enterprise/*/ece-securing-clusters-ldap-5x.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/ldap", "/en/cloud-enterprise/*/ece-securing-clusters-ldap.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/ldap", + "/en/cloud-enterprise/*/ece-securing-clusters-SAML.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/saml", "/en/cloud-enterprise/*/ece-securing-clusters.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth", "/en/cloud-enterprise/*/ece-securing-considerations.html": "/docs/deploy-manage/security/secure-your-elastic-cloud-enterprise-installation", "/en/cloud-enterprise/*/ece-securing-ece.html": "/docs/deploy-manage/security", @@ -3065,22 +2364,77 @@ "/en/cloud-enterprise/*/ece-uninstall.html": "/docs/deploy-manage/uninstall/uninstall-elastic-cloud-enterprise", "/en/cloud-enterprise/*/ece-upgrade-deployment.html": "/docs/deploy-manage/upgrade/deployment-or-cluster", "/en/cloud-enterprise/*/ece-upgrade.html": "/docs/deploy-manage/upgrade/orchestrator/upgrade-cloud-enterprise", - "/en/cloud-enterprise/*/ece-upgrading-v5.html": "/guide/en/cloud-enterprise/3.7/ece-upgrading-v5.html", - "/en/cloud-enterprise/*/ece-upgrading-v6.html": "/guide/en/cloud-enterprise/3.7/ece-upgrading-v6.html", - "/en/cloud-enterprise/*/ece-upgrading-v7.html": "/guide/en/cloud-enterprise/3.7/ece-upgrading-v7.html", "/en/cloud-enterprise/*/ece-users-permissions.html": "/docs/deploy-manage/deploy/cloud-enterprise/ece-users-permissions", - "/en/cloud-enterprise/*/ece-whats-new.html": "/guide/en/cloud-enterprise/3.7/ece-whats-new.html", "/en/cloud-enterprise/*/ece-wildcard-dns.html": "/docs/deploy-manage/deploy/cloud-enterprise/ece-wildcard-dns", "/en/cloud-enterprise/*/ece-working-with-elasticsearch.html": "/docs/manage-data/data-store/manage-data-from-the-command-line", "/en/cloud-enterprise/*/ece-zookeeper-sync.html": "/docs/troubleshoot/deployments/cloud-enterprise/verify-zookeeper-sync-status", - "/en/cloud-enterprise/*/ece_deprecations_8.html": "/guide/en/cloud-enterprise/3.7/ece_deprecations_8.html", - "/en/cloud-enterprise/*/ece_optional_settings.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/saml", - "/en/cloud-enterprise/*/ece_re_running_the_ece_upgrade.html": "/docs/deploy-manage/upgrade/orchestrator/upgrade-cloud-enterprise", - "/en/cloud-enterprise/*/ece_sign_outgoing_saml_message.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/saml", "/en/cloud-enterprise/*/editing-user-settings.html": "/docs/deploy-manage/deploy/cloud-enterprise/edit-stack-settings", + "/en/cloud-enterprise/*/Elastic-Cloud-Enterprise-overview.html": "/docs/deploy-manage/deploy/cloud-enterprise", + "/en/cloud-enterprise/*/Elasticsearch.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchBlockingIssueElement.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchBlockingIssues.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchClusterBlockingIssueElement.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchClusterBlockingIssues.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchClusterInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchClusterPlan.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchClusterPlanInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchClusterPlansInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchClusterRole.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchClusterSecurityInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchClusterSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchClusterTopologyElement.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchClusterTrustSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchClusterUser.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchCuration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchDependant.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchElasticUserPasswordResetResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchMasterElement.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchMasterInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchMonitoringInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchNodeType.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchPayload.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchPlanControlConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchReplicaElement.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchResourceInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchScriptingUserSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchScriptTypeSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchShardElement.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchShardsInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchShardsStatus.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchSystemSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchUserBundle.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElasticsearchUserPlugin.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ElevatedPermissions.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EmptyResponse.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/enable-deployment-resource-ccr.html": "/docs/api/doc/cloud-enterprise/operation/operation-enable-deployment-resource-ccr", "/en/cloud-enterprise/*/enable-deployment-resource-ilm.html": "/docs/api/doc/cloud-enterprise/operation/operation-enable-deployment-resource-ilm", "/en/cloud-enterprise/*/enable-deployment-resource-slm.html": "/docs/api/doc/cloud-enterprise/operation/operation-enable-deployment-resource-slm", + "/en/cloud-enterprise/*/EnableIlmRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnrollmentTokenRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearch.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchNodeTypes.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchPayload.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchPlan.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchPlanControlConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchPlanInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchPlansInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchResourceInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchSubInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchSystemSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/EnterpriseSearchTopologyElement.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ExistsQuery.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Extension.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ExtensionFileMetadata.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Extensions.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ExternalHyperlink.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ExternalTrustRelationship.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/FilterAssociation.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/GenericResponse.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/get-active-directory-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-get-active-directory-configuration", "/en/cloud-enterprise/*/get-adminconsole-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-get-adminconsole-logging-settings", "/en/cloud-enterprise/*/get-adminconsoles.html": "/docs/api/doc/cloud-enterprise/operation/operation-get-adminconsoles", @@ -3176,7 +2530,58 @@ "/en/cloud-enterprise/*/get-users.html": "/docs/api/doc/cloud-enterprise/operation/operation-get-users", "/en/cloud-enterprise/*/get-version-stack.html": "/docs/api/doc/cloud-enterprise/operation/operation-get-version-stack", "/en/cloud-enterprise/*/get-version-stacks.html": "/docs/api/doc/cloud-enterprise/operation/operation-get-version-stacks", + "/en/cloud-enterprise/*/GlobalDeploymentTemplateInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/GlobalDeploymentTemplateRegion.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/GrowShrinkStrategyConfig.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/HeapDump.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Hyperlink.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IdResponse.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/index.html": "/docs/deploy-manage/deploy/cloud-enterprise", + "/en/cloud-enterprise/*/IndexPattern.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IndexSynchronizationResults.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/InstanceConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/InstanceConfigurationInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/InstanceMoveRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/InstanceOverrides.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/InstanceTypeResource.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IntegrationsServer.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IntegrationsServerConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IntegrationsServerInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IntegrationsServerPayload.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IntegrationsServerPlan.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IntegrationsServerPlanControlConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IntegrationsServerPlanInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IntegrationsServerPlansInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IntegrationsServerResourceInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IntegrationsServerSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IntegrationsServerSystemSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/IntegrationsServerTopologyElement.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ItemCosts.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ItemsCosts.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KeystoreContents.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KeystoreSecret.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Kibana.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaClusterInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaClusterPlan.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaClusterPlanInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaClusterPlansInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaClusterSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaClusterTopologyElement.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaDeeplink.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaPayload.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaPlanControlConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaResourceInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaSubClusterInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/KibanaSystemSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/LdapGroupSearch.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/LdapSecurityRealmLoadBalance.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/LdapSecurityRealmRoleMappingRule.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/LdapSecurityRealmRoleMappingRules.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/LdapSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/LdapUserSearch.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/LicenseInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/LicenseObject.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/list-blueprinter-roles.html": "/docs/api/doc/cloud-enterprise/operation/operation-list-blueprinter-roles", "/en/cloud-enterprise/*/list-comment.html": "/docs/api/doc/cloud-enterprise/group/endpoint-comments", "/en/cloud-enterprise/*/list-config-store-option.html": "/docs/api/doc/cloud-enterprise/operation/operation-list-config-store-option", @@ -3185,26 +2590,132 @@ "/en/cloud-enterprise/*/list-organization-invitations.html": "/docs/api/doc/cloud-enterprise/operation/operation-list-organization-invitations", "/en/cloud-enterprise/*/list-organization-members.html": "/docs/api/doc/cloud-enterprise/operation/operation-list-organization-members", "/en/cloud-enterprise/*/list-organizations.html": "/docs/api/doc/cloud-enterprise/operation/operation-list-organizations", + "/en/cloud-enterprise/*/ListEnrollmentTokenElement.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ListEnrollmentTokenReply.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/LoggingSettings.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/login.html": "/docs/api/doc/cloud-enterprise/operation/operation-login", + "/en/cloud-enterprise/*/LoginRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/LoginState.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/logout.html": "/docs/api/doc/cloud-enterprise/operation/operation-logout", + "/en/cloud-enterprise/*/ManagedMonitoringSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MatchAllQuery.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MatchNoneQuery.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MatchQuery.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Metadata.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MetadataItem.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MetadataItems.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MetadataItemValue.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/methods.html": "/docs/api/doc/cloud-enterprise/operation/operation-methods", "/en/cloud-enterprise/*/migrate-deployment-template.html": "/docs/api/doc/cloud-enterprise/operation/operation-migrate-deployment-template", + "/en/cloud-enterprise/*/ModelVersionIndexSynchronizationResults.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/move-clusters-by-type.html": "/docs/api/doc/cloud-enterprise/operation/operation-move-clusters-by-type", "/en/cloud-enterprise/*/move-clusters.html": "/docs/api/doc/cloud-enterprise/operation/operation-move-clusters", "/en/cloud-enterprise/*/move-deployment-elasticsearch-resource-instances.html": "/docs/api/doc/cloud-enterprise/operation/operation-move-deployment-elasticsearch-resource-instances", + "/en/cloud-enterprise/*/MoveApmClusterConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MoveApmClusterDetails.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MoveAppSearchConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MoveAppSearchDetails.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MoveClustersCommandResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MoveClustersDetails.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MoveClustersRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MoveElasticsearchClusterConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MoveElasticsearchClusterDetails.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MoveEnterpriseSearchConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MoveEnterpriseSearchDetails.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MoveKibanaClusterConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/MoveKibanaClusterDetails.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/NestedQuery.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Networking_-_Deployment_Domain_Names.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationnetworking", + "/en/cloud-enterprise/*/NodeTypeResource.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ObservabilityAbsoluteDeployment.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ObservabilityIssue.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Organization.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/OrganizationInvitation.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/OrganizationInvitationRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/OrganizationInvitations.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/OrganizationList.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/OrganizationMembership.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/OrganizationMemberships.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/OrganizationRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Organizations.html": "/docs/api/doc/cloud-enterprise/group/endpoint-organizations", + "/en/cloud-enterprise/*/Orphaned.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/OrphanedElasticsearch.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/patch-current-account.html": "/docs/api/doc/cloud-enterprise/operation/operation-patch-current-account", + "/en/cloud-enterprise/*/PendingState.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/PendingStates.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/PendingStatesWithMeta.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Period.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/PlanStrategy.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Platform_-_Adminconsoles.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", + "/en/cloud-enterprise/*/Platform_-_Allocators.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", + "/en/cloud-enterprise/*/Platform_-_Configuration_-_Instances_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationinstances", + "/en/cloud-enterprise/*/Platform_-_Configuration_-_Security_-_Extra_Certificates_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platform", + "/en/cloud-enterprise/*/Platform_-_Configuration_-_Security_Deployment.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationsecurity", + "/en/cloud-enterprise/*/Platform_-_Configuration_-_Security_Realms.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationsecurity", + "/en/cloud-enterprise/*/Platform_-_Configuration_-_Security.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationsecurity", + "/en/cloud-enterprise/*/Platform_-_configuration_-_Store.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", + "/en/cloud-enterprise/*/Platform_-_Configuration_-_TLS.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationsecurity", + "/en/cloud-enterprise/*/Platform_-_Configuration_-_Trust_relationships.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationtrustrelationships", + "/en/cloud-enterprise/*/Platform_-_Constructors.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", + "/en/cloud-enterprise/*/Platform_-_Coordinators.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", + "/en/cloud-enterprise/*/Platform_-_License.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", + "/en/cloud-enterprise/*/Platform_-_proxies.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", + "/en/cloud-enterprise/*/Platform_-_Repository_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationsnapshots", + "/en/cloud-enterprise/*/Platform_-_Runners.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", + "/en/cloud-enterprise/*/Platform.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platform", + "/en/cloud-enterprise/*/PlatformInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/PlatformResourcesSummary.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/PlatformServiceImageInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/PlatformServiceInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/PortBinding.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/post-deployment-resource-proxy-requests.html": "/docs/api/doc/cloud-enterprise/operation/operation-post-deployment-resource-proxy-requests", + "/en/cloud-enterprise/*/PrefixQuery.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/promote-coordinator-candidate.html": "/docs/api/doc/cloud-enterprise/operation/operation-promote-coordinator-candidate", + "/en/cloud-enterprise/*/ProxiesAllocationsInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxiesFilter.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxiesFilteredGroup.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxiesFilteredGroupHealth.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxiesHealth.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxiesHttpSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxiesSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxiesSSOSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxiesSummary.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxyAllocationCounts.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxyAllocationInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxyInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxyOverview.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ProxySummary.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/PublicCertChain.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/PublicCertChainCollection.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/PublicCertificate.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/put-config-store-option.html": "/docs/api/doc/cloud-enterprise/operation/operation-put-config-store-option", "/en/cloud-enterprise/*/put-deployment-resource-proxy-requests.html": "/docs/api/doc/cloud-enterprise/operation/operation-put-deployment-resource-proxy-requests", + "/en/cloud-enterprise/*/QueryContainer.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/QueryStringQuery.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RangeQuery.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ReadOnlyRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ReadOnlyResponse.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/refresh-token.html": "/docs/api/doc/cloud-enterprise/operation/operation-refresh-token", + "/en/cloud-enterprise/*/RegionInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/reindex-adminconsoles.html": "/docs/api/doc/cloud-enterprise/operation/operation-reindex-adminconsoles", + "/en/cloud-enterprise/*/RemoteResourceInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RemoteResourceRef.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RemoteResources.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/reorder-security-realms.html": "/docs/api/doc/cloud-enterprise/operation/operation-reorder-security-realms", + "/en/cloud-enterprise/*/ReplyWarning.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RepositoryConfig.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RepositoryConfigs.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RequestEnrollmentTokenReply.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/reset-elasticsearch-user-password.html": "/docs/api/doc/cloud-enterprise/operation/operation-reset-elasticsearch-user-password", + "/en/cloud-enterprise/*/ResourceHeapDumps.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/restart-deployment-es-resource.html": "/docs/api/doc/cloud-enterprise/operation/operation-restart-deployment-es-resource", "/en/cloud-enterprise/*/restart-deployment-stateless-resource.html": "/docs/api/doc/cloud-enterprise/operation/operation-restart-deployment-stateless-resource", + "/en/cloud-enterprise/*/RestartPolicy.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/restore-deployment-resource.html": "/docs/api/doc/cloud-enterprise/operation/operation-restore-deployment-resource", "/en/cloud-enterprise/*/restore-deployment.html": "/docs/api/doc/cloud-enterprise/operation/operation-restore-deployment", + "/en/cloud-enterprise/*/RestoreSnapshotApiConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RestoreSnapshotConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RestoreSnapshotRepoConfiguration.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/resync-allocator.html": "/docs/api/doc/cloud-enterprise/operation/operation-resync-allocator", "/en/cloud-enterprise/*/resync-allocators.html": "/docs/api/doc/cloud-enterprise/operation/operation-resync-allocators", "/en/cloud-enterprise/*/resync-constructor.html": "/docs/api/doc/cloud-enterprise/operation/operation-resync-constructor", @@ -3213,12 +2724,44 @@ "/en/cloud-enterprise/*/resync-deployments.html": "/docs/api/doc/cloud-enterprise/operation/operation-resync-deployments", "/en/cloud-enterprise/*/resync-runner.html": "/docs/api/doc/cloud-enterprise/operation/operation-resync-runner", "/en/cloud-enterprise/*/resync-runners.html": "/docs/api/doc/cloud-enterprise/operation/operation-resync-runners", + "/en/cloud-enterprise/*/Role.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RoleAggregate.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RoleAggregateCreateData.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RoleAggregates.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Roles.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platforminfrastructure", + "/en/cloud-enterprise/*/RoleWithMeta.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RollingGrowShrinkStrategyConfig.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RollingStrategyConfig.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RulesetAssociations.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RunnerBuildInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RunnerContainerInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RunnerHealthChecks.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RunnerInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RunnerOverview.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RunnerRoleInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RunnerRolesInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/RunnersSummary.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/saml-callback.html": "/docs/api/doc/cloud-enterprise/operation/operation-saml-callback", "/en/cloud-enterprise/*/saml-init.html": "/docs/api/doc/cloud-enterprise/operation/operation-saml-init", + "/en/cloud-enterprise/*/SamlAttributeSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SamlIdpSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SamlSecurityRealmRoleMappingRule.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SamlSecurityRealmRoleMappingRules.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SamlSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SamlSpSettings.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/search-allocators.html": "/docs/api/doc/cloud-enterprise/operation/operation-search-allocators", "/en/cloud-enterprise/*/search-deployments.html": "/docs/api/doc/cloud-enterprise/operation/operation-search-deployments", "/en/cloud-enterprise/*/search-eligible-remote-clusters.html": "/docs/api/doc/cloud-enterprise/operation/operation-search-eligible-remote-clusters", "/en/cloud-enterprise/*/search-runners.html": "/docs/api/doc/cloud-enterprise/operation/operation-search-runners", + "/en/cloud-enterprise/*/SearchRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SecurityDeployment.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SecurityDeploymentCreateRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SecurityDeploymentTopology.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SecurityDeploymentUpdateRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SecurityRealmInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SecurityRealmInfoList.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SecurityRealmsReorderRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ServiceUrl.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/set-adminconsole-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-set-adminconsole-logging-settings", "/en/cloud-enterprise/*/set-all-instances-settings-overrides.html": "/docs/api/doc/cloud-enterprise/operation/operation-set-all-instances-settings-overrides", "/en/cloud-enterprise/*/set-allocator-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-set-allocator-logging-settings", @@ -3248,6 +2791,31 @@ "/en/cloud-enterprise/*/shutdown-deployment-es-resource.html": "/docs/api/doc/cloud-enterprise/operation/operation-shutdown-deployment-es-resource", "/en/cloud-enterprise/*/shutdown-deployment-stateless-resource.html": "/docs/api/doc/cloud-enterprise/operation/operation-shutdown-deployment-stateless-resource", "/en/cloud-enterprise/*/shutdown-deployment.html": "/docs/api/doc/cloud-enterprise/operation/operation-shutdown-deployment", + "/en/cloud-enterprise/*/SimpleQueryStringQuery.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SimplifiedLineItem.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SnapshotDependencies.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SnapshotDependency.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SnapshotRepositoryConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SnapshotStatusInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/SsoAuthenticationMethodInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Stack_-_Instance_Types_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-stack", + "/en/cloud-enterprise/*/Stack_-_Versions_-_CRUD.html": "/docs/api/doc/cloud-enterprise/group/endpoint-stack", + "/en/cloud-enterprise/*/StackVersionApmConfig.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionAppSearchConfig.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionArchiveProcessingError.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionArchiveProcessingResult.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionConfig.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionConfigPost.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionConfigs.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionElasticsearchConfig.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionEnterpriseSearchConfig.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionInstanceCapacityConstraint.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionIntegrationsServerConfig.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionKibanaConfig.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionMetadata.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionNodeType.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionTemplateFileHash.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/StackVersionTemplateInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/start-allocator-maintenance-mode.html": "/docs/api/doc/cloud-enterprise/operation/operation-start-allocator-maintenance-mode", "/en/cloud-enterprise/*/start-constructor-maintenance-mode.html": "/docs/api/doc/cloud-enterprise/operation/operation-start-constructor-maintenance-mode", "/en/cloud-enterprise/*/start-deployment-resource-instances-all-maintenance-mode.html": "/docs/api/doc/cloud-enterprise/operation/operation-start-deployment-resource-instances-all-maintenance-mode", @@ -3260,8 +2828,42 @@ "/en/cloud-enterprise/*/stop-deployment-resource-instances-all.html": "/docs/api/doc/cloud-enterprise/operation/operation-stop-deployment-resource-instances-all", "/en/cloud-enterprise/*/stop-deployment-resource-instances.html": "/docs/api/doc/cloud-enterprise/operation/operation-stop-deployment-resource-instances", "/en/cloud-enterprise/*/stop-deployment-resource-maintenance-mode.html": "/docs/api/doc/cloud-enterprise/operation/operation-stop-deployment-resource-maintenance-mode", - "/en/cloud-enterprise/*/stubs.html": "/guide/en/cloud-enterprise/3.7/stubs.html", + "/en/cloud-enterprise/*/TargetElasticsearchCluster.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Telemetry.html": "/docs/api/doc/cloud-enterprise/group/endpoint-telemetry", + "/en/cloud-enterprise/*/TelemetryConfig.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TelemetryConfigRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Templates_-_Deployments_-_Global.html": "/docs/api/doc/cloud-enterprise/group/endpoint-platformconfigurationtemplates", + "/en/cloud-enterprise/*/TermQuery.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TlsPublicCertChain.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TokenResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TopologyElementControl.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TopologySize.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrafficFilterClaimedLinkIdInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrafficFilterClaimedLinkIdRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrafficFilterClaimedLinkIds.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrafficFilterEgressRule.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrafficFilterRule.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrafficFilterRulesetInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrafficFilterRulesetRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrafficFilterRulesetResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrafficFilterRulesets.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrafficFilterSettings.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TransientApmPlanConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TransientAppSearchPlanConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TransientElasticsearchPlanConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TransientEnterpriseSearchPlanConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TransientIntegrationsServerPlanConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TransientKibanaPlanConfiguration.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrustedCertificate.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrustedEnvironments.html": "/docs/api/doc/cloud-enterprise/group/endpoint-trustedenvironments", + "/en/cloud-enterprise/*/TrustRelationshipCreateRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrustRelationshipCreateResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrustRelationshipGetResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrustRelationshipsListResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrustRelationshipUpdateRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/TrustRelationshipUpdateResponse.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/unclaim-traffic-filter-link-id.html": "/docs/api/doc/cloud-enterprise/operation/operation-unclaim-traffic-filter-link-id", + "/en/cloud-enterprise/*/UnreachableRegionInfo.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/update-active-directory-configuration.html": "/docs/api/doc/cloud-enterprise/operation/operation-update-active-directory-configuration", "/en/cloud-enterprise/*/update-adminconsole-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-update-adminconsole-logging-settings", "/en/cloud-enterprise/*/update-allocator-logging-settings.html": "/docs/api/doc/cloud-enterprise/operation/operation-update-allocator-logging-settings", @@ -3285,8 +2887,23 @@ "/en/cloud-enterprise/*/update-trust-relationship.html": "/docs/api/doc/cloud-enterprise/operation/operation-update-trust-relationship", "/en/cloud-enterprise/*/update-user.html": "/docs/api/doc/cloud-enterprise/operation/operation-update-user", "/en/cloud-enterprise/*/update-version-stack.html": "/docs/api/doc/cloud-enterprise/operation/operation-update-version-stack", + "/en/cloud-enterprise/*/UpdatedTlsChain.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/UpdateExtensionRequest.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Updates.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-enterprise/*/upgrade-deployment-stateless-resource.html": "/docs/api/doc/cloud-enterprise/operation/operation-upgrade-deployment-stateless-resource", "/en/cloud-enterprise/*/upload-extension.html": "/docs/api/doc/cloud-enterprise/operation/operation-upload-extension", + "/en/cloud-enterprise/*/UsageStats.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/User.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/UserApiKey.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/UserList.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/UserMetadata.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/Users.html": "/docs/api/doc/cloud-enterprise/group/endpoint-users", + "/en/cloud-enterprise/*/UserSecurity.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/UserSecurityRealm.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/VersionedIdResponse.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ZkAcl.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ZookeeperNodeInfo.html": "/docs/api/doc/cloud-enterprise", + "/en/cloud-enterprise/*/ZookeeperSummary.html": "/docs/api/doc/cloud-enterprise", "/en/cloud-heroku/*/ech-about.html": "/docs/deploy-manage/deploy/elastic-cloud/heroku", "/en/cloud-heroku/*/ech-access-kibana.html": "/docs/deploy-manage/deploy/elastic-cloud/access-kibana", "/en/cloud-heroku/*/ech-activity-page.html": "/docs/deploy-manage/deploy/elastic-cloud/keep-track-of-deployment-activity", @@ -3385,6 +3002,14 @@ "/en/cloud-heroku/*/echsubscribe_to_individual_regionscomponents.html": "/docs/deploy-manage/cloud-organization/service-status", "/en/cloud-on-k8s/*/eck-release-notes.html": "/docs/release-notes/cloud-on-k8s", "/en/cloud-on-k8s/*/index.html": "/docs/deploy-manage/deploy/cloud-on-k8s", + "/en/cloud-on-k8s/*/k8s_audit_logging.html": "/docs/deploy-manage/security/logging-configuration/enabling-audit-logs", + "/en/cloud-on-k8s/*/k8s_connect_to_an_external_monitoring_elasticsearch_cluster.html": "/docs/deploy-manage/monitor/stack-monitoring/eck-stack-monitoring", + "/en/cloud-on-k8s/*/k8s_how_it_works.html": "/docs/deploy-manage/monitor/stack-monitoring/eck-stack-monitoring", + "/en/cloud-on-k8s/*/k8s_installation.html": "/docs/deploy-manage/deploy/cloud-on-k8s/deploy-fips-compatible-version-of-eck", + "/en/cloud-on-k8s/*/k8s_learn_more_about_eck.html": "/docs/deploy-manage/deploy/cloud-on-k8s", + "/en/cloud-on-k8s/*/k8s_override_the_beats_pod_template.html": "/docs/deploy-manage/monitor/stack-monitoring/eck-stack-monitoring", + "/en/cloud-on-k8s/*/k8s_prerequisites.html": "/docs/deploy-manage/security/k8s-network-policies", + "/en/cloud-on-k8s/*/k8s_when_to_use_it.html": "/docs/deploy-manage/monitor/stack-monitoring/eck-stack-monitoring", "/en/cloud-on-k8s/*/k8s-accessing-elastic-services.html": "/docs/deploy-manage/deploy/cloud-on-k8s/accessing-services", "/en/cloud-on-k8s/*/k8s-advanced-node-scheduling.html": "/docs/deploy-manage/deploy/cloud-on-k8s/advanced-elasticsearch-node-scheduling", "/en/cloud-on-k8s/*/k8s-advanced-topics.html": "/docs/deploy-manage/deploy/cloud-on-k8s", @@ -3446,10 +3071,6 @@ "/en/cloud-on-k8s/*/k8s-elastic-agent.html": "/docs/deploy-manage/deploy/cloud-on-k8s/standalone-elastic-agent", "/en/cloud-on-k8s/*/k8s-elasticsearch-specification.html": "/docs/deploy-manage/deploy/cloud-on-k8s/elasticsearch-configuration", "/en/cloud-on-k8s/*/k8s-enabling-the-metrics-endpoint.html": "/docs/deploy-manage/monitor/orchestrators/k8s-enabling-metrics-endpoint", - "/en/cloud-on-k8s/*/k8s-enterprise-search-configuration.html": "/guide/en/cloud-on-k8s/2.16/k8s-enterprise-search-configuration.html", - "/en/cloud-on-k8s/*/k8s-enterprise-search-quickstart.html": "/guide/en/cloud-on-k8s/2.16/k8s-enterprise-search-quickstart.html", - "/en/cloud-on-k8s/*/k8s-enterprise-search-troubleshoot.html": "/guide/en/cloud-on-k8s/2.16/k8s-enterprise-search-troubleshoot.html", - "/en/cloud-on-k8s/*/k8s-enterprise-search.html": "/guide/en/cloud-on-k8s/2.16/k8s-enterprise-search.html", "/en/cloud-on-k8s/*/k8s-es-secure-settings.html": "/docs/deploy-manage/security/k8s-secure-settings", "/en/cloud-on-k8s/*/k8s-fips.html": "/docs/deploy-manage/deploy/cloud-on-k8s/deploy-fips-compatible-version-of-eck", "/en/cloud-on-k8s/*/k8s-glossary.html": "/docs/reference/glossary", @@ -3537,108 +3158,16 @@ "/en/cloud-on-k8s/*/k8s-volume-claim-templates.html": "/docs/deploy-manage/deploy/cloud-on-k8s/volume-claim-templates", "/en/cloud-on-k8s/*/k8s-webhook-namespace-selectors.html": "/docs/deploy-manage/deploy/cloud-on-k8s/webhook-namespace-selectors", "/en/cloud-on-k8s/*/k8s-webhook.html": "/docs/deploy-manage/deploy/cloud-on-k8s/configure-validating-webhook", - "/en/cloud-on-k8s/*/k8s_audit_logging.html": "/docs/deploy-manage/security/logging-configuration/enabling-audit-logs", - "/en/cloud-on-k8s/*/k8s_connect_to_an_external_monitoring_elasticsearch_cluster.html": "/docs/deploy-manage/monitor/stack-monitoring/eck-stack-monitoring", - "/en/cloud-on-k8s/*/k8s_how_it_works.html": "/docs/deploy-manage/monitor/stack-monitoring/eck-stack-monitoring", - "/en/cloud-on-k8s/*/k8s_installation.html": "/docs/deploy-manage/deploy/cloud-on-k8s/deploy-fips-compatible-version-of-eck", - "/en/cloud-on-k8s/*/k8s_learn_more_about_eck.html": "/docs/deploy-manage/deploy/cloud-on-k8s", - "/en/cloud-on-k8s/*/k8s_override_the_beats_pod_template.html": "/docs/deploy-manage/monitor/stack-monitoring/eck-stack-monitoring", - "/en/cloud-on-k8s/*/k8s_prerequisites.html": "/docs/deploy-manage/security/k8s-network-policies", - "/en/cloud-on-k8s/*/k8s_when_to_use_it.html": "/docs/deploy-manage/monitor/stack-monitoring/eck-stack-monitoring", - "/en/cloud-on-k8s/*/release-highlights-1.0.0-beta1.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.0.0-beta1.html", - "/en/cloud-on-k8s/*/release-highlights-1.0.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.0.0.html", - "/en/cloud-on-k8s/*/release-highlights-1.0.1.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.0.1.html", - "/en/cloud-on-k8s/*/release-highlights-1.1.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.1.0.html", - "/en/cloud-on-k8s/*/release-highlights-1.1.1.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.1.1.html", - "/en/cloud-on-k8s/*/release-highlights-1.1.2.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.1.2.html", - "/en/cloud-on-k8s/*/release-highlights-1.2.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.2.0.html", - "/en/cloud-on-k8s/*/release-highlights-1.2.1.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.2.1.html", - "/en/cloud-on-k8s/*/release-highlights-1.2.2.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.2.2.html", - "/en/cloud-on-k8s/*/release-highlights-1.3.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.3.0.html", - "/en/cloud-on-k8s/*/release-highlights-1.3.1.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.3.1.html", - "/en/cloud-on-k8s/*/release-highlights-1.3.2.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.3.2.html", - "/en/cloud-on-k8s/*/release-highlights-1.4.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.4.0.html", - "/en/cloud-on-k8s/*/release-highlights-1.4.1.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.4.1.html", - "/en/cloud-on-k8s/*/release-highlights-1.5.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.5.0.html", - "/en/cloud-on-k8s/*/release-highlights-1.6.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.6.0.html", - "/en/cloud-on-k8s/*/release-highlights-1.7.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.7.0.html", - "/en/cloud-on-k8s/*/release-highlights-1.7.1.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.7.1.html", - "/en/cloud-on-k8s/*/release-highlights-1.8.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.8.0.html", - "/en/cloud-on-k8s/*/release-highlights-1.9.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.9.0.html", - "/en/cloud-on-k8s/*/release-highlights-1.9.1.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-1.9.1.html", - "/en/cloud-on-k8s/*/release-highlights-2.0.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.0.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.1.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.1.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.10.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.10.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.11.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.11.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.11.1.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.11.1.html", - "/en/cloud-on-k8s/*/release-highlights-2.12.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.12.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.12.1.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.12.1.html", - "/en/cloud-on-k8s/*/release-highlights-2.13.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.13.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.14.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.14.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.15.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.15.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.16.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.16.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.16.1.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.16.1.html", - "/en/cloud-on-k8s/*/release-highlights-2.2.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.2.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.3.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.3.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.4.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.4.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.5.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.5.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.6.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.6.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.6.1.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.6.1.html", - "/en/cloud-on-k8s/*/release-highlights-2.6.2.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.6.2.html", - "/en/cloud-on-k8s/*/release-highlights-2.7.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.7.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.8.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.8.0.html", - "/en/cloud-on-k8s/*/release-highlights-2.9.0.html": "/guide/en/cloud-on-k8s/2.16/release-highlights-2.9.0.html", "/en/cloud-on-k8s/*/release-highlights.html": "/docs/release-notes/cloud-on-k8s", - "/en/cloud-on-k8s/*/release-notes-1.0.0-beta1.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.0.0-beta1.html", - "/en/cloud-on-k8s/*/release-notes-1.0.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.0.0.html", - "/en/cloud-on-k8s/*/release-notes-1.0.1.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.0.1.html", - "/en/cloud-on-k8s/*/release-notes-1.1.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.1.0.html", - "/en/cloud-on-k8s/*/release-notes-1.1.1.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.1.1.html", - "/en/cloud-on-k8s/*/release-notes-1.1.2.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.1.2.html", - "/en/cloud-on-k8s/*/release-notes-1.2.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.2.0.html", - "/en/cloud-on-k8s/*/release-notes-1.2.1.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.2.1.html", - "/en/cloud-on-k8s/*/release-notes-1.2.2.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.2.2.html", - "/en/cloud-on-k8s/*/release-notes-1.3.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.3.0.html", - "/en/cloud-on-k8s/*/release-notes-1.3.1.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.3.1.html", - "/en/cloud-on-k8s/*/release-notes-1.3.2.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.3.2.html", - "/en/cloud-on-k8s/*/release-notes-1.4.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.4.0.html", - "/en/cloud-on-k8s/*/release-notes-1.4.1.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.4.1.html", - "/en/cloud-on-k8s/*/release-notes-1.5.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.5.0.html", - "/en/cloud-on-k8s/*/release-notes-1.6.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.6.0.html", - "/en/cloud-on-k8s/*/release-notes-1.7.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.7.0.html", - "/en/cloud-on-k8s/*/release-notes-1.7.1.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.7.1.html", - "/en/cloud-on-k8s/*/release-notes-1.8.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.8.0.html", - "/en/cloud-on-k8s/*/release-notes-1.9.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.9.0.html", - "/en/cloud-on-k8s/*/release-notes-1.9.1.html": "/guide/en/cloud-on-k8s/2.16/release-notes-1.9.1.html", - "/en/cloud-on-k8s/*/release-notes-2.0.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.0.0.html", - "/en/cloud-on-k8s/*/release-notes-2.1.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.1.0.html", - "/en/cloud-on-k8s/*/release-notes-2.10.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.10.0.html", - "/en/cloud-on-k8s/*/release-notes-2.11.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.11.0.html", - "/en/cloud-on-k8s/*/release-notes-2.11.1.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.11.1.html", - "/en/cloud-on-k8s/*/release-notes-2.12.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.12.0.html", - "/en/cloud-on-k8s/*/release-notes-2.12.1.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.12.1.html", - "/en/cloud-on-k8s/*/release-notes-2.13.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.13.0.html", - "/en/cloud-on-k8s/*/release-notes-2.14.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.14.0.html", - "/en/cloud-on-k8s/*/release-notes-2.15.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.15.0.html", - "/en/cloud-on-k8s/*/release-notes-2.16.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.16.0.html", - "/en/cloud-on-k8s/*/release-notes-2.16.1.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.16.1.html", - "/en/cloud-on-k8s/*/release-notes-2.2.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.2.0.html", - "/en/cloud-on-k8s/*/release-notes-2.3.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.3.0.html", - "/en/cloud-on-k8s/*/release-notes-2.4.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.4.0.html", - "/en/cloud-on-k8s/*/release-notes-2.5.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.5.0.html", - "/en/cloud-on-k8s/*/release-notes-2.6.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.6.0.html", - "/en/cloud-on-k8s/*/release-notes-2.6.1.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.6.1.html", - "/en/cloud-on-k8s/*/release-notes-2.6.2.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.6.2.html", - "/en/cloud-on-k8s/*/release-notes-2.7.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.7.0.html", - "/en/cloud-on-k8s/*/release-notes-2.8.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.8.0.html", - "/en/cloud-on-k8s/*/release-notes-2.9.0.html": "/guide/en/cloud-on-k8s/2.16/release-notes-2.9.0.html", - "/en/cloud/*/APM_routes.html": "/docs/api/doc/cloud/group/endpoint-deployments", "/en/cloud/*/Accounts.html": "/docs/api/doc/cloud/group/endpoint-accounts", + "/en/cloud/*/APM_routes.html": "/docs/api/doc/cloud/group/endpoint-deployments", "/en/cloud/*/App_Search_-_Read-only.html": "/docs/api/doc/cloud/group/endpoint-deployments", "/en/cloud/*/Authentication.html": "/docs/api/doc/cloud/group/endpoint-authentication", + "/en/cloud/*/aws-list-region.html": "/docs/reference/cloud/cloud-hosted/aws-list-region", "/en/cloud/*/Billing_Costs_Analysis.html": "/docs/api/doc/cloud/group/endpoint-billingcostsanalysis", - "/en/cloud/*/Deployment_-_CRUD.html": "/docs/api/doc/cloud/group/endpoint-deployments", + "/en/cloud/*/definitions.html": "/docs/api/doc/cloud", "/en/cloud/*/Deployment_-_Commands.html": "/docs/api/doc/cloud/group/endpoint-deployments", + "/en/cloud/*/Deployment_-_CRUD.html": "/docs/api/doc/cloud/group/endpoint-deployments", "/en/cloud/*/Deployment_-_Info.html": "/docs/api/doc/cloud/group/endpoint-deployments", "/en/cloud/*/Deployment_-_Remote_Clusters.html": "/docs/api/doc/cloud/group/endpoint-deployments", "/en/cloud/*/Deployment_-_Trust.html": "/docs/api/doc/cloud/group/endpoint-deployments", @@ -3649,12 +3178,10 @@ "/en/cloud/*/Deployments_-_Traffic_Filter_-_Associations.html": "/docs/api/doc/cloud/group/endpoint-deploymentstrafficfilter", "/en/cloud/*/Deployments_-_Traffic_Filter_-_CRUD.html": "/docs/api/doc/cloud/group/endpoint-deploymentstrafficfilter", "/en/cloud/*/Deployments_-_Traffic_Filter_Claimed_Link_Id.html": "/docs/api/doc/cloud/group/endpoint-deploymentstrafficfilter", - "/en/cloud/*/Organizations.html": "/docs/api/doc/cloud/group/endpoint-organizations", - "/en/cloud/*/Stack_-_Versions_-_CRUD.html": "/docs/api/doc/cloud/group/endpoint-stack", - "/en/cloud/*/TrustedEnvironments.html": "/docs/api/doc/cloud/group/endpoint-trustedenvironments", - "/en/cloud/*/Users_-_Role_Assignments.html": "/docs/api/doc/cloud/group/endpoint-userroleassignments", - "/en/cloud/*/aws-list-region.html": "/docs/reference/cloud/cloud-hosted/aws-list-region", - "/en/cloud/*/definitions.html": "/docs/api/doc/cloud", + "/en/cloud/*/ec_selecting_the_right_configuration_for_you.html": "/docs/reference/cloud/cloud-hosted/ec_selecting_the_right_configuration_for_you", + "/en/cloud/*/ec_service_status_api.html": "/docs/deploy-manage/cloud-organization/service-status", + "/en/cloud/*/ec_subscribe_to_individual_regionscomponents.html": "/docs/deploy-manage/cloud-organization/service-status", + "/en/cloud/*/ec_vm_configurations.html": "/docs/reference/cloud/cloud-hosted/ec_vm_configurations", "/en/cloud/*/ec-about.html": "/docs/deploy-manage/deploy/elastic-cloud/cloud-hosted", "/en/cloud/*/ec-access-kibana.html": "/docs/deploy-manage/deploy/elastic-cloud/access-kibana", "/en/cloud/*/ec-account-security-mfa.html": "/docs/cloud-account/multifactor-authentication", @@ -3676,7 +3203,6 @@ "/en/cloud/*/ec-api-principles.html": "/docs/reference/cloud/cloud-hosted/ec-api-principles", "/en/cloud/*/ec-api-rate-limiting.html": "/docs/reference/cloud/cloud-hosted/ec-api-rate-limiting", "/en/cloud/*/ec-api-swagger.html": "/docs/api/doc/cloud", - "/en/cloud/*/ec-appsearch-readonly.html": "/guide/en/cloud/current/ec-enable-enterprise-search.html#ec-appsearch-readonly2", "/en/cloud/*/ec-autoops-deployment-view.html": "/docs/deploy-manage/monitor/autoops/ec-autoops-deployment-view", "/en/cloud/*/ec-autoops-dismiss-event.html": "/docs/deploy-manage/monitor/autoops/ec-autoops-dismiss-event", "/en/cloud/*/ec-autoops-event-settings.html": "/docs/deploy-manage/monitor/autoops/ec-autoops-event-settings", @@ -3763,16 +3289,14 @@ "/en/cloud/*/ec-getting-started-node-js.html": "/docs/manage-data/ingest/ingesting-data-from-applications/ingest-data-with-nodejs-on-elasticsearch-service", "/en/cloud/*/ec-getting-started-private.html": "/docs/deploy-manage/deploy/elastic-cloud/cloud-hosted", "/en/cloud/*/ec-getting-started-profiles-hot-warm.html": "/docs/manage-data/lifecycle/data-tiers", - "/en/cloud/*/ec-getting-started-profiles.html": "/guide/en/cloud/current/ec-configure-deployment-settings.html#ec-hardware-profiles", + "/en/cloud/*/ec-getting-started-profiles.html": "/docs/deploy-manage/deploy/elastic-cloud/create-an-elastic-cloud-hosted-deployment", "/en/cloud/*/ec-getting-started-python.html": "/docs/manage-data/ingest/ingesting-data-from-applications/ingest-data-with-python-on-elasticsearch-service", "/en/cloud/*/ec-getting-started-search-use-cases-beats-logstash.html": "/docs/manage-data/ingest/ingesting-data-from-applications/ingest-data-from-beats-to-elasticsearch-service-with-logstash-as-proxy", "/en/cloud/*/ec-getting-started-search-use-cases-db-logstash.html": "/docs/manage-data/ingest/ingesting-data-from-applications/ingest-data-from-relational-database-into-elasticsearch-service", "/en/cloud/*/ec-getting-started-search-use-cases-node-logs.html": "/docs/manage-data/ingest/ingesting-data-from-applications/ingest-logs-from-nodejs-web-application-using-filebeat", "/en/cloud/*/ec-getting-started-search-use-cases-python-logs.html": "/docs/manage-data/ingest/ingesting-data-from-applications/ingest-logs-from-python-application-using-filebeat", "/en/cloud/*/ec-getting-started-solutions.html": "/docs/solutions", - "/en/cloud/*/ec-getting-started-templates-enterprise-search.html": "/guide/en/enterprise-search/current/index.html", "/en/cloud/*/ec-getting-started-templates-hot-warm.html": "/docs/manage-data/lifecycle/data-tiers", - "/en/cloud/*/ec-getting-started-templates.html": "/guide/en/cloud/current/ec-configure-deployment-settings.html#ec-hardware-profiles", "/en/cloud/*/ec-getting-started-trial.html": "/docs/deploy-manage/deploy/elastic-cloud/create-an-organization", "/en/cloud/*/ec-getting-started.html": "/docs/deploy-manage/deploy/elastic-cloud/cloud-hosted", "/en/cloud/*/ec-glossary.html": "/docs/reference/glossary", @@ -3781,8 +3305,8 @@ "/en/cloud/*/ec-invite-users.html": "/docs/deploy-manage/users-roles/cloud-organization/manage-users", "/en/cloud/*/ec-licensing.html": "/docs/deploy-manage/cloud-organization/billing/manage-subscription", "/en/cloud/*/ec-maintenance-mode-routing.html": "/docs/deploy-manage/maintenance/start-stop-routing-requests", - "/en/cloud/*/ec-manage-apm-settings.html": "/docs/solutions/observability/apps/configure-apm-server", - "/en/cloud/*/ec-manage-apm.html": "/guide/en/cloud/current/ec-integrations-server-apm-switch.html#ec-manage-apm-and-fleet", + "/en/cloud/*/ec-manage-apm-settings.html": "/docs/solutions/observability/apm/configure-apm-server", + "/en/cloud/*/ec-manage-apm.html": "/docs/deploy-manage/deploy/elastic-cloud/switch-from-apm-to-integrations-server-payload", "/en/cloud/*/ec-manage-appsearch-settings.html": "/docs/deploy-manage/deploy/elastic-cloud/edit-stack-settings", "/en/cloud/*/ec-manage-deployment.html": "/docs/deploy-manage/deploy/elastic-cloud/manage-deployments", "/en/cloud/*/ec-manage-enterprise-search-settings.html": "/docs/deploy-manage/deploy/elastic-cloud/edit-stack-settings", @@ -3814,128 +3338,6 @@ "/en/cloud/*/ec-reference-regions.html": "/docs/reference/cloud/cloud-hosted/regions", "/en/cloud/*/ec-regional-deployment-aliases.html": "/docs/deploy-manage/deploy/elastic-cloud/custom-endpoint-aliases", "/en/cloud/*/ec-regions-templates-instances.html": "/docs/reference/cloud/cloud-hosted/ec-regions-templates-instances", - "/en/cloud/*/ec-release-notes-2018-05-16.html": "/guide/en/cloud/master/ec-release-notes-2018-05-16.html", - "/en/cloud/*/ec-release-notes-2018-06-19.html": "/guide/en/cloud/master/ec-release-notes-2018-06-19.html", - "/en/cloud/*/ec-release-notes-2018-07-03.html": "/guide/en/cloud/master/ec-release-notes-2018-07-03.html", - "/en/cloud/*/ec-release-notes-2018-08-01.html": "/guide/en/cloud/master/ec-release-notes-2018-08-01.html", - "/en/cloud/*/ec-release-notes-2018-10-29.html": "/guide/en/cloud/master/ec-release-notes-2018-10-29.html", - "/en/cloud/*/ec-release-notes-2018-11-12.html": "/guide/en/cloud/master/ec-release-notes-2018-11-12.html", - "/en/cloud/*/ec-release-notes-2018-12-17.html": "/guide/en/cloud/master/ec-release-notes-2018-12-17.html", - "/en/cloud/*/ec-release-notes-2019-01-24.html": "/guide/en/cloud/master/ec-release-notes-2019-01-24.html", - "/en/cloud/*/ec-release-notes-2019-02-13.html": "/guide/en/cloud/master/ec-release-notes-2019-02-13.html", - "/en/cloud/*/ec-release-notes-2019-03-20.html": "/guide/en/cloud/master/ec-release-notes-2019-03-20.html", - "/en/cloud/*/ec-release-notes-2019-04-19.html": "/guide/en/cloud/master/ec-release-notes-2019-04-19.html", - "/en/cloud/*/ec-release-notes-2019-05-20.html": "/guide/en/cloud/master/ec-release-notes-2019-05-20.html", - "/en/cloud/*/ec-release-notes-2019-06-05.html": "/guide/en/cloud/master/ec-release-notes-2019-06-05.html", - "/en/cloud/*/ec-release-notes-2019-07-03.html": "/guide/en/cloud/master/ec-release-notes-2019-07-03.html", - "/en/cloud/*/ec-release-notes-2019-07-30a.html": "/guide/en/cloud/master/ec-release-notes-2019-07-30a.html", - "/en/cloud/*/ec-release-notes-2019-08-12.html": "/guide/en/cloud/master/ec-release-notes-2019-08-12.html", - "/en/cloud/*/ec-release-notes-2019-08-13.html": "/guide/en/cloud/master/ec-release-notes-2019-08-13.html", - "/en/cloud/*/ec-release-notes-2019-09-03.html": "/guide/en/cloud/master/ec-release-notes-2019-09-03.html", - "/en/cloud/*/ec-release-notes-2019-09-10.html": "/guide/en/cloud/master/ec-release-notes-2019-09-10.html", - "/en/cloud/*/ec-release-notes-2019-10-23.html": "/guide/en/cloud/master/ec-release-notes-2019-10-23.html", - "/en/cloud/*/ec-release-notes-2019-10-28.html": "/guide/en/cloud/master/ec-release-notes-2019-10-28.html", - "/en/cloud/*/ec-release-notes-2019-11-25.html": "/guide/en/cloud/master/ec-release-notes-2019-11-25.html", - "/en/cloud/*/ec-release-notes-2019-12-18.html": "/guide/en/cloud/master/ec-release-notes-2019-12-18.html", - "/en/cloud/*/ec-release-notes-2019-12-20.html": "/guide/en/cloud/master/ec-release-notes-2019-12-20.html", - "/en/cloud/*/ec-release-notes-2020-01-15.html": "/guide/en/cloud/master/ec-release-notes-2020-01-15.html", - "/en/cloud/*/ec-release-notes-2020-01-31.html": "/guide/en/cloud/master/ec-release-notes-2020-01-31.html", - "/en/cloud/*/ec-release-notes-2020-02-12.html": "/guide/en/cloud/master/ec-release-notes-2020-02-12.html", - "/en/cloud/*/ec-release-notes-2020-03-05.html": "/guide/en/cloud/master/ec-release-notes-2020-03-05.html", - "/en/cloud/*/ec-release-notes-2020-03-17.html": "/guide/en/cloud/master/ec-release-notes-2020-03-17.html", - "/en/cloud/*/ec-release-notes-2020-04-09.html": "/guide/en/cloud/master/ec-release-notes-2020-04-09.html", - "/en/cloud/*/ec-release-notes-2020-04-16.html": "/guide/en/cloud/master/ec-release-notes-2020-04-16.html", - "/en/cloud/*/ec-release-notes-2020-05-05.html": "/guide/en/cloud/master/ec-release-notes-2020-05-05.html", - "/en/cloud/*/ec-release-notes-2020-05-12.html": "/guide/en/cloud/master/ec-release-notes-2020-05-12.html", - "/en/cloud/*/ec-release-notes-2020-05-29.html": "/guide/en/cloud/master/ec-release-notes-2020-05-29.html", - "/en/cloud/*/ec-release-notes-2020-06-17a.html": "/guide/en/cloud/master/ec-release-notes-2020-06-17a.html", - "/en/cloud/*/ec-release-notes-2020-06-17b.html": "/guide/en/cloud/master/ec-release-notes-2020-06-17b.html", - "/en/cloud/*/ec-release-notes-2020-06-25.html": "/guide/en/cloud/master/ec-release-notes-2020-06-25.html", - "/en/cloud/*/ec-release-notes-2020-06-30.html": "/guide/en/cloud/master/ec-release-notes-2020-06-30.html", - "/en/cloud/*/ec-release-notes-2020-07-13.html": "/guide/en/cloud/master/ec-release-notes-2020-07-13.html", - "/en/cloud/*/ec-release-notes-2020-07-30.html": "/guide/en/cloud/master/ec-release-notes-2020-07-30.html", - "/en/cloud/*/ec-release-notes-2020-08-11.html": "/guide/en/cloud/master/ec-release-notes-2020-08-11.html", - "/en/cloud/*/ec-release-notes-2020-09-15.html": "/guide/en/cloud/master/ec-release-notes-2020-09-15.html", - "/en/cloud/*/ec-release-notes-2020-10-01.html": "/guide/en/cloud/master/ec-release-notes-2020-10-01.html", - "/en/cloud/*/ec-release-notes-2020-10-02.html": "/guide/en/cloud/master/ec-release-notes-2020-10-02.html", - "/en/cloud/*/ec-release-notes-2020-10-06.html": "/guide/en/cloud/master/ec-release-notes-2020-10-06.html", - "/en/cloud/*/ec-release-notes-2020-10-15.html": "/guide/en/cloud/master/ec-release-notes-2020-10-15.html", - "/en/cloud/*/ec-release-notes-2020-10-29.html": "/guide/en/cloud/master/ec-release-notes-2020-10-29.html", - "/en/cloud/*/ec-release-notes-2020-11-17.html": "/guide/en/cloud/master/ec-release-notes-2020-11-17.html", - "/en/cloud/*/ec-release-notes-2020-12-08.html": "/guide/en/cloud/master/ec-release-notes-2020-12-08.html", - "/en/cloud/*/ec-release-notes-2020-12-15.html": "/guide/en/cloud/master/ec-release-notes-2020-12-15.html", - "/en/cloud/*/ec-release-notes-2021-01-20.html": "/guide/en/cloud/master/ec-release-notes-2021-01-20.html", - "/en/cloud/*/ec-release-notes-2021-02-09.html": "/guide/en/cloud/master/ec-release-notes-2021-02-09.html", - "/en/cloud/*/ec-release-notes-2021-03-02.html": "/guide/en/cloud/master/ec-release-notes-2021-03-02.html", - "/en/cloud/*/ec-release-notes-2021-03-23.html": "/guide/en/cloud/master/ec-release-notes-2021-03-23.html", - "/en/cloud/*/ec-release-notes-2021-04-07.html": "/guide/en/cloud/master/ec-release-notes-2021-04-07.html", - "/en/cloud/*/ec-release-notes-2021-04-15.html": "/guide/en/cloud/master/ec-release-notes-2021-04-15.html", - "/en/cloud/*/ec-release-notes-2021-04-22.html": "/guide/en/cloud/master/ec-release-notes-2021-04-22.html", - "/en/cloud/*/ec-release-notes-2021-05-04.html": "/guide/en/cloud/master/ec-release-notes-2021-05-04.html", - "/en/cloud/*/ec-release-notes-2021-05-25.html": "/guide/en/cloud/master/ec-release-notes-2021-05-25.html", - "/en/cloud/*/ec-release-notes-2021-06-15.html": "/guide/en/cloud/master/ec-release-notes-2021-06-15.html", - "/en/cloud/*/ec-release-notes-2021-07-06.html": "/guide/en/cloud/master/ec-release-notes-2021-07-06.html", - "/en/cloud/*/ec-release-notes-2021-07-27.html": "/guide/en/cloud/master/ec-release-notes-2021-07-27.html", - "/en/cloud/*/ec-release-notes-2021-08-17.html": "/guide/en/cloud/master/ec-release-notes-2021-08-17.html", - "/en/cloud/*/ec-release-notes-2021-09-07.html": "/guide/en/cloud/master/ec-release-notes-2021-09-07.html", - "/en/cloud/*/ec-release-notes-2021-10-05.html": "/guide/en/cloud/master/ec-release-notes-2021-10-05.html", - "/en/cloud/*/ec-release-notes-2021-10-20.html": "/guide/en/cloud/master/ec-release-notes-2021-10-20.html", - "/en/cloud/*/ec-release-notes-2021-10-21-bahrain.html": "/guide/en/cloud/master/ec-release-notes-2021-10-21-bahrain.html", - "/en/cloud/*/ec-release-notes-2021-10-21-capetown.html": "/guide/en/cloud/master/ec-release-notes-2021-10-21-capetown.html", - "/en/cloud/*/ec-release-notes-2021-10-21-milan.html": "/guide/en/cloud/master/ec-release-notes-2021-10-21-milan.html", - "/en/cloud/*/ec-release-notes-2021-11-09.html": "/guide/en/cloud/master/ec-release-notes-2021-11-09.html", - "/en/cloud/*/ec-release-notes-2021-12-06.html": "/guide/en/cloud/master/ec-release-notes-2021-12-06.html", - "/en/cloud/*/ec-release-notes-2022-01-18.html": "/guide/en/cloud/master/ec-release-notes-2022-01-18.html", - "/en/cloud/*/ec-release-notes-2022-02-03.html": "/guide/en/cloud/master/ec-release-notes-2022-02-03.html", - "/en/cloud/*/ec-release-notes-2022-02-28.html": "/guide/en/cloud/master/ec-release-notes-2022-02-28.html", - "/en/cloud/*/ec-release-notes-2022-03-22-azure.html": "/guide/en/cloud/master/ec-release-notes-2022-03-22-azure.html", - "/en/cloud/*/ec-release-notes-2022-03-22.html": "/guide/en/cloud/master/ec-release-notes-2022-03-22.html", - "/en/cloud/*/ec-release-notes-2022-04-26-brazil.html": "/guide/en/cloud/master/ec-release-notes-2022-04-26-brazil.html", - "/en/cloud/*/ec-release-notes-2022-04-26-canada.html": "/guide/en/cloud/master/ec-release-notes-2022-04-26-canada.html", - "/en/cloud/*/ec-release-notes-2022-04-26-india.html": "/guide/en/cloud/master/ec-release-notes-2022-04-26-india.html", - "/en/cloud/*/ec-release-notes-2022-04-26-southafrica.html": "/guide/en/cloud/master/ec-release-notes-2022-04-26-southafrica.html", - "/en/cloud/*/ec-release-notes-2022-04-26.html": "/guide/en/cloud/master/ec-release-notes-2022-04-26.html", - "/en/cloud/*/ec-release-notes-2022-05-16.html": "/guide/en/cloud/master/ec-release-notes-2022-05-16.html", - "/en/cloud/*/ec-release-notes-2022-06-09.html": "/guide/en/cloud/master/ec-release-notes-2022-06-09.html", - "/en/cloud/*/ec-release-notes-2022-06-28.html": "/guide/en/cloud/master/ec-release-notes-2022-06-28.html", - "/en/cloud/*/ec-release-notes-2022-07-26.html": "/guide/en/cloud/master/ec-release-notes-2022-07-26.html", - "/en/cloud/*/ec-release-notes-2022-08-09.html": "/guide/en/cloud/master/ec-release-notes-2022-08-09.html", - "/en/cloud/*/ec-release-notes-2022-08-30.html": "/guide/en/cloud/master/ec-release-notes-2022-08-30.html", - "/en/cloud/*/ec-release-notes-2022-09-20.html": "/guide/en/cloud/master/ec-release-notes-2022-09-20.html", - "/en/cloud/*/ec-release-notes-2022-10-11.html": "/guide/en/cloud/master/ec-release-notes-2022-10-11.html", - "/en/cloud/*/ec-release-notes-2022-11-01.html": "/guide/en/cloud/master/ec-release-notes-2022-11-01.html", - "/en/cloud/*/ec-release-notes-2022-12-14.html": "/guide/en/cloud/master/ec-release-notes-2022-12-14.html", - "/en/cloud/*/ec-release-notes-2023-01-24.html": "/guide/en/cloud/master/ec-release-notes-2023-01-24.html", - "/en/cloud/*/ec-release-notes-2023-02-14.html": "/guide/en/cloud/master/ec-release-notes-2023-02-14.html", - "/en/cloud/*/ec-release-notes-2023-03-07.html": "/guide/en/cloud/master/ec-release-notes-2023-03-07.html", - "/en/cloud/*/ec-release-notes-2023-04-06-new-templates.html": "/guide/en/cloud/master/ec-release-notes-2023-04-06-new-templates.html", - "/en/cloud/*/ec-release-notes-2023-04-18.html": "/guide/en/cloud/master/ec-release-notes-2023-04-18.html", - "/en/cloud/*/ec-release-notes-2023-05-12.html": "/guide/en/cloud/master/ec-release-notes-2023-05-12.html", - "/en/cloud/*/ec-release-notes-2023-06-06.html": "/guide/en/cloud/master/ec-release-notes-2023-06-06.html", - "/en/cloud/*/ec-release-notes-2023-07-11.html": "/guide/en/cloud/master/ec-release-notes-2023-07-11.html", - "/en/cloud/*/ec-release-notes-2023-08-15.html": "/guide/en/cloud/master/ec-release-notes-2023-08-15.html", - "/en/cloud/*/ec-release-notes-2023-09-05-aws.html": "/guide/en/cloud/master/ec-release-notes-2023-09-05-aws.html", - "/en/cloud/*/ec-release-notes-2023-09-05-gcp.html": "/guide/en/cloud/master/ec-release-notes-2023-09-05-gcp.html", - "/en/cloud/*/ec-release-notes-2023-09-14.html": "/guide/en/cloud/master/ec-release-notes-2023-09-14.html", - "/en/cloud/*/ec-release-notes-2023-10-03.html": "/guide/en/cloud/master/ec-release-notes-2023-10-03.html", - "/en/cloud/*/ec-release-notes-2023-11-06.html": "/guide/en/cloud/master/ec-release-notes-2023-11-06.html", - "/en/cloud/*/ec-release-notes-2023-12-12.html": "/guide/en/cloud/master/ec-release-notes-2023-12-12.html", - "/en/cloud/*/ec-release-notes-2024-01.html": "/guide/en/cloud/master/ec-release-notes-2024-01.html", - "/en/cloud/*/ec-release-notes-2024-03-29-aws.html": "/guide/en/cloud/master/ec-release-notes-2024-03-29-aws.html", - "/en/cloud/*/ec-release-notes-2024-03-29-gcp.html": "/guide/en/cloud/master/ec-release-notes-2024-03-29-gcp.html", - "/en/cloud/*/ec-release-notes-2024-03.html": "/guide/en/cloud/master/ec-release-notes-2024-03.html", - "/en/cloud/*/ec-release-notes-2024-04.html": "/guide/en/cloud/master/ec-release-notes-2024-04.html", - "/en/cloud/*/ec-release-notes-2024-05-2.html": "/guide/en/cloud/master/ec-release-notes-2024-05-2.html", - "/en/cloud/*/ec-release-notes-2024-05.html": "/guide/en/cloud/master/ec-release-notes-2024-05.html", - "/en/cloud/*/ec-release-notes-2024-06-27.html": "/guide/en/cloud/master/ec-release-notes-2024-06-27.html", - "/en/cloud/*/ec-release-notes-2024-07-18.html": "/guide/en/cloud/master/ec-release-notes-2024-07-18.html", - "/en/cloud/*/ec-release-notes-2024-08-08.html": "/guide/en/cloud/master/ec-release-notes-2024-08-08.html", - "/en/cloud/*/ec-release-notes-2024-08-29.html": "/guide/en/cloud/master/ec-release-notes-2024-08-29.html", - "/en/cloud/*/ec-release-notes-2024-09-19.html": "/guide/en/cloud/master/ec-release-notes-2024-09-19.html", - "/en/cloud/*/ec-release-notes-2024-10-10.html": "/guide/en/cloud/master/ec-release-notes-2024-10-10.html", - "/en/cloud/*/ec-release-notes-2024-10-31.html": "/guide/en/cloud/master/ec-release-notes-2024-10-31.html", - "/en/cloud/*/ec-release-notes-2024-11-21.html": "/guide/en/cloud/master/ec-release-notes-2024-11-21.html", - "/en/cloud/*/ec-release-notes-2024-12-12.html": "/guide/en/cloud/master/ec-release-notes-2024-12-12.html", "/en/cloud/*/ec-release-notes-2025-01-23.html": "/docs/release-notes/cloud-hosted/#elastic-cloud-hosted-012025-release-notes", "/en/cloud/*/ec-release-notes.html": "/docs/release-notes/cloud-hosted", "/en/cloud/*/ec-remote-cluster-ece.html": "/docs/deploy-manage/remote-clusters/ec-remote-cluster-ece", @@ -3966,9 +3368,9 @@ "/en/cloud/*/ec-secure-clusters-kerberos.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/kerberos", "/en/cloud/*/ec-secure-clusters-oidc.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/openid-connect", "/en/cloud/*/ec-securing-clusters-JWT.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/jwt", - "/en/cloud/*/ec-securing-clusters-SAML.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/saml", "/en/cloud/*/ec-securing-clusters-oidc-op.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/oidc-examples", "/en/cloud/*/ec-securing-clusters-saml-azure.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/saml-entra", + "/en/cloud/*/ec-securing-clusters-SAML.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/saml", "/en/cloud/*/ec-security-transport.html": "/docs/deploy-manage/remote-clusters/ec-enable-ccs", "/en/cloud/*/ec-security.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth", "/en/cloud/*/ec-select-subscription-level.html": "/docs/deploy-manage/cloud-organization/billing/manage-subscription", @@ -3988,7 +3390,6 @@ "/en/cloud/*/ec-traffic-filtering-vpc.html": "/docs/deploy-manage/security/aws-privatelink-traffic-filters", "/en/cloud/*/ec-trust-management.html": "/docs/deploy-manage/remote-clusters/ec-enable-ccs", "/en/cloud/*/ec-update-email-address.html": "/docs/cloud-account/update-your-email-address", - "/en/cloud/*/ec-upgrade-appsearch.html": "/guide/en/cloud/current/ec-enable-enterprise-search.html#ec-upgrade-appsearch2", "/en/cloud/*/ec-upgrade-deployment.html": "/docs/deploy-manage/upgrade/deployment-or-cluster", "/en/cloud/*/ec-user-privileges.html": "/docs/deploy-manage/users-roles/cloud-organization/user-roles", "/en/cloud/*/ec-vcpu-boost-instance.html": "/docs/deploy-manage/deploy/elastic-cloud/ec-vcpu-boost-instance", @@ -3998,80 +3399,38 @@ "/en/cloud/*/ec-work-with-apis.html": "/docs/deploy-manage/cloud-organization/tools-and-apis", "/en/cloud/*/ec-working-with-elasticsearch-clients.html": "/docs/reference/elasticsearch-clients", "/en/cloud/*/ec-working-with-elasticsearch.html": "/docs/manage-data/data-store/manage-data-from-the-command-line", - "/en/cloud/*/ec_selecting_the_right_configuration_for_you.html": "/docs/reference/cloud/cloud-hosted/ec_selecting_the_right_configuration_for_you", - "/en/cloud/*/ec_service_status_api.html": "/docs/deploy-manage/cloud-organization/service-status", - "/en/cloud/*/ec_subscribe_to_individual_regionscomponents.html": "/docs/deploy-manage/cloud-organization/service-status", - "/en/cloud/*/ec_vm_configurations.html": "/docs/reference/cloud/cloud-hosted/ec_vm_configurations", "/en/cloud/*/index.html": "/docs/deploy-manage/deploy/elastic-cloud/cloud-hosted", - "/en/ecctl/*/ecctl-authentication.html": "/docs/reference/ecctl/ecctl-authentication", - "/en/ecctl/*/ecctl-command-reference.html": "/docs/reference/ecctl/ecctl-command-reference", - "/en/ecctl/*/ecctl-configuring.html": "/docs/reference/ecctl/ecctl-configuring", - "/en/ecctl/*/ecctl-contributing.html": "/docs/reference/ecctl/ecctl-contributing", - "/en/ecctl/*/ecctl-custom-formatting.html": "/docs/reference/ecctl/ecctl-custom-formatting", - "/en/ecctl/*/ecctl-environment-variables.html": "/docs/reference/ecctl/ecctl-environment-variables", - "/en/ecctl/*/ecctl-example-create-deployment.html": "/docs/reference/ecctl/ecctl-example-create-deployment", - "/en/ecctl/*/ecctl-example-delete-deployment.html": "/docs/reference/ecctl/ecctl-example-delete-deployment", - "/en/ecctl/*/ecctl-example-list-deployments.html": "/docs/reference/ecctl/ecctl-example-list-deployments", - "/en/ecctl/*/ecctl-example-shared-configuration-file.html": "/docs/reference/ecctl/ecctl-example-shared-configuration-file", - "/en/ecctl/*/ecctl-example-update-deployment.html": "/docs/reference/ecctl/ecctl-example-update-deployment", - "/en/ecctl/*/ecctl-examples.html": "/docs/reference/ecctl/ecctl-examples", - "/en/ecctl/*/ecctl-installing.html": "/docs/reference/ecctl/ecctl-installing", - "/en/ecctl/*/ecctl-multiple-configuration-files.html": "/docs/reference/ecctl/ecctl-multiple-configuration-files", - "/en/ecctl/*/ecctl-output-format.html": "/docs/reference/ecctl/ecctl-output-format", - "/en/ecctl/*/ecctl-overview.html": "/docs/reference/ecctl", - "/en/ecctl/*/ecctl-release-notes-v1.0.0-beta1.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.0.0-beta2.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.0.0-beta3.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.0.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.1.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.10.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.11.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.12.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.13.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.14.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.14.1.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.14.2.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.14.3.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.2.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.3.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.3.1.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.4.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.5.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.6.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.7.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.8.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes-v1.9.0.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl-release-notes.html": "/docs/reference/ecctl/ecctl-release-notes", - "/en/ecctl/*/ecctl.html": "/docs/reference/ecctl/ecctl", - "/en/ecctl/*/ecctl_auth.html": "/docs/reference/ecctl/ecctl_auth", - "/en/ecctl/*/ecctl_auth_key.html": "/docs/reference/ecctl/ecctl_auth_key", + "/en/cloud/*/Organizations.html": "/docs/api/doc/cloud/group/endpoint-organizations", + "/en/cloud/*/Stack_-_Versions_-_CRUD.html": "/docs/api/doc/cloud/group/endpoint-stack", + "/en/cloud/*/TrustedEnvironments.html": "/docs/api/doc/cloud/group/endpoint-trustedenvironments", + "/en/cloud/*/Users_-_Role_Assignments.html": "/docs/api/doc/cloud/group/endpoint-userroleassignments", "/en/ecctl/*/ecctl_auth_key_create.html": "/docs/reference/ecctl/ecctl_auth_key_create", "/en/ecctl/*/ecctl_auth_key_delete.html": "/docs/reference/ecctl/ecctl_auth_key_delete", "/en/ecctl/*/ecctl_auth_key_list.html": "/docs/reference/ecctl/ecctl_auth_key_list", "/en/ecctl/*/ecctl_auth_key_show.html": "/docs/reference/ecctl/ecctl_auth_key_show", - "/en/ecctl/*/ecctl_comment.html": "/docs/reference/ecctl/ecctl_comment", + "/en/ecctl/*/ecctl_auth_key.html": "/docs/reference/ecctl/ecctl_auth_key", + "/en/ecctl/*/ecctl_auth.html": "/docs/reference/ecctl/ecctl_auth", "/en/ecctl/*/ecctl_comment_create.html": "/docs/reference/ecctl/ecctl_comment_create", "/en/ecctl/*/ecctl_comment_delete.html": "/docs/reference/ecctl/ecctl_comment_delete", "/en/ecctl/*/ecctl_comment_list.html": "/docs/reference/ecctl/ecctl_comment_list", "/en/ecctl/*/ecctl_comment_show.html": "/docs/reference/ecctl/ecctl_comment_show", "/en/ecctl/*/ecctl_comment_update.html": "/docs/reference/ecctl/ecctl_comment_update", - "/en/ecctl/*/ecctl_deployment.html": "/docs/reference/ecctl/ecctl_deployment", + "/en/ecctl/*/ecctl_comment.html": "/docs/reference/ecctl/ecctl_comment", "/en/ecctl/*/ecctl_deployment_create.html": "/docs/reference/ecctl/ecctl_deployment_create", "/en/ecctl/*/ecctl_deployment_delete.html": "/docs/reference/ecctl/ecctl_deployment_delete", - "/en/ecctl/*/ecctl_deployment_elasticsearch.html": "/docs/reference/ecctl/ecctl_deployment_elasticsearch", - "/en/ecctl/*/ecctl_deployment_elasticsearch_keystore.html": "/docs/reference/ecctl/ecctl_deployment_elasticsearch_keystore", "/en/ecctl/*/ecctl_deployment_elasticsearch_keystore_show.html": "/docs/reference/ecctl/ecctl_deployment_elasticsearch_keystore_show", "/en/ecctl/*/ecctl_deployment_elasticsearch_keystore_update.html": "/docs/reference/ecctl/ecctl_deployment_elasticsearch_keystore_update", - "/en/ecctl/*/ecctl_deployment_extension.html": "/docs/reference/ecctl/ecctl_deployment_extension", + "/en/ecctl/*/ecctl_deployment_elasticsearch_keystore.html": "/docs/reference/ecctl/ecctl_deployment_elasticsearch_keystore", + "/en/ecctl/*/ecctl_deployment_elasticsearch.html": "/docs/reference/ecctl/ecctl_deployment_elasticsearch", "/en/ecctl/*/ecctl_deployment_extension_create.html": "/docs/reference/ecctl/ecctl_deployment_extension_create", "/en/ecctl/*/ecctl_deployment_extension_delete.html": "/docs/reference/ecctl/ecctl_deployment_extension_delete", "/en/ecctl/*/ecctl_deployment_extension_list.html": "/docs/reference/ecctl/ecctl_deployment_extension_list", "/en/ecctl/*/ecctl_deployment_extension_show.html": "/docs/reference/ecctl/ecctl_deployment_extension_show", "/en/ecctl/*/ecctl_deployment_extension_update.html": "/docs/reference/ecctl/ecctl_deployment_extension_update", + "/en/ecctl/*/ecctl_deployment_extension.html": "/docs/reference/ecctl/ecctl_deployment_extension", "/en/ecctl/*/ecctl_deployment_list.html": "/docs/reference/ecctl/ecctl_deployment_list", - "/en/ecctl/*/ecctl_deployment_plan.html": "/docs/reference/ecctl/ecctl_deployment_plan", "/en/ecctl/*/ecctl_deployment_plan_cancel.html": "/docs/reference/ecctl/ecctl_deployment_plan_cancel", - "/en/ecctl/*/ecctl_deployment_resource.html": "/docs/reference/ecctl/ecctl_deployment_resource", + "/en/ecctl/*/ecctl_deployment_plan.html": "/docs/reference/ecctl/ecctl_deployment_plan", "/en/ecctl/*/ecctl_deployment_resource_delete.html": "/docs/reference/ecctl/ecctl_deployment_resource_delete", "/en/ecctl/*/ecctl_deployment_resource_restore.html": "/docs/reference/ecctl/ecctl_deployment_resource_restore", "/en/ecctl/*/ecctl_deployment_resource_shutdown.html": "/docs/reference/ecctl/ecctl_deployment_resource_shutdown", @@ -4080,105 +3439,147 @@ "/en/ecctl/*/ecctl_deployment_resource_stop-maintenance.html": "/docs/reference/ecctl/ecctl_deployment_resource_stop-maintenance", "/en/ecctl/*/ecctl_deployment_resource_stop.html": "/docs/reference/ecctl/ecctl_deployment_resource_stop", "/en/ecctl/*/ecctl_deployment_resource_upgrade.html": "/docs/reference/ecctl/ecctl_deployment_resource_upgrade", + "/en/ecctl/*/ecctl_deployment_resource.html": "/docs/reference/ecctl/ecctl_deployment_resource", "/en/ecctl/*/ecctl_deployment_restore.html": "/docs/reference/ecctl/ecctl_deployment_restore", "/en/ecctl/*/ecctl_deployment_resync.html": "/docs/reference/ecctl/ecctl_deployment_resync", "/en/ecctl/*/ecctl_deployment_search.html": "/docs/reference/ecctl/ecctl_deployment_search", "/en/ecctl/*/ecctl_deployment_show.html": "/docs/reference/ecctl/ecctl_deployment_show", "/en/ecctl/*/ecctl_deployment_shutdown.html": "/docs/reference/ecctl/ecctl_deployment_shutdown", - "/en/ecctl/*/ecctl_deployment_template.html": "/docs/reference/ecctl/ecctl_deployment_template", "/en/ecctl/*/ecctl_deployment_template_create.html": "/docs/reference/ecctl/ecctl_deployment_template_create", "/en/ecctl/*/ecctl_deployment_template_delete.html": "/docs/reference/ecctl/ecctl_deployment_template_delete", "/en/ecctl/*/ecctl_deployment_template_list.html": "/docs/reference/ecctl/ecctl_deployment_template_list", "/en/ecctl/*/ecctl_deployment_template_show.html": "/docs/reference/ecctl/ecctl_deployment_template_show", "/en/ecctl/*/ecctl_deployment_template_update.html": "/docs/reference/ecctl/ecctl_deployment_template_update", - "/en/ecctl/*/ecctl_deployment_traffic-filter.html": "/docs/reference/ecctl/ecctl_deployment_traffic-filter", - "/en/ecctl/*/ecctl_deployment_traffic-filter_association.html": "/docs/reference/ecctl/ecctl_deployment_traffic-filter_association", + "/en/ecctl/*/ecctl_deployment_template.html": "/docs/reference/ecctl/ecctl_deployment_template", "/en/ecctl/*/ecctl_deployment_traffic-filter_association_create.html": "/docs/reference/ecctl/ecctl_deployment_traffic-filter_association_create", "/en/ecctl/*/ecctl_deployment_traffic-filter_association_delete.html": "/docs/reference/ecctl/ecctl_deployment_traffic-filter_association_delete", + "/en/ecctl/*/ecctl_deployment_traffic-filter_association.html": "/docs/reference/ecctl/ecctl_deployment_traffic-filter_association", "/en/ecctl/*/ecctl_deployment_traffic-filter_create.html": "/docs/reference/ecctl/ecctl_deployment_traffic-filter_create", "/en/ecctl/*/ecctl_deployment_traffic-filter_delete.html": "/docs/reference/ecctl/ecctl_deployment_traffic-filter_delete", "/en/ecctl/*/ecctl_deployment_traffic-filter_list.html": "/docs/reference/ecctl/ecctl_deployment_traffic-filter_list", "/en/ecctl/*/ecctl_deployment_traffic-filter_show.html": "/docs/reference/ecctl/ecctl_deployment_traffic-filter_show", "/en/ecctl/*/ecctl_deployment_traffic-filter_update.html": "/docs/reference/ecctl/ecctl_deployment_traffic-filter_update", + "/en/ecctl/*/ecctl_deployment_traffic-filter.html": "/docs/reference/ecctl/ecctl_deployment_traffic-filter", "/en/ecctl/*/ecctl_deployment_update.html": "/docs/reference/ecctl/ecctl_deployment_update", - "/en/ecctl/*/ecctl_generate.html": "/docs/reference/ecctl/ecctl_generate", + "/en/ecctl/*/ecctl_deployment.html": "/docs/reference/ecctl/ecctl_deployment", "/en/ecctl/*/ecctl_generate_completions.html": "/docs/reference/ecctl/ecctl_generate_completions", "/en/ecctl/*/ecctl_generate_docs.html": "/docs/reference/ecctl/ecctl_generate_docs", + "/en/ecctl/*/ecctl_generate.html": "/docs/reference/ecctl/ecctl_generate", "/en/ecctl/*/ecctl_init.html": "/docs/reference/ecctl/ecctl_init", - "/en/ecctl/*/ecctl_platform.html": "/docs/reference/ecctl/ecctl_platform", - "/en/ecctl/*/ecctl_platform_allocator.html": "/docs/reference/ecctl/ecctl_platform_allocator", "/en/ecctl/*/ecctl_platform_allocator_list.html": "/docs/reference/ecctl/ecctl_platform_allocator_list", "/en/ecctl/*/ecctl_platform_allocator_maintenance.html": "/docs/reference/ecctl/ecctl_platform_allocator_maintenance", - "/en/ecctl/*/ecctl_platform_allocator_metadata.html": "/docs/reference/ecctl/ecctl_platform_allocator_metadata", "/en/ecctl/*/ecctl_platform_allocator_metadata_delete.html": "/docs/reference/ecctl/ecctl_platform_allocator_metadata_delete", "/en/ecctl/*/ecctl_platform_allocator_metadata_set.html": "/docs/reference/ecctl/ecctl_platform_allocator_metadata_set", "/en/ecctl/*/ecctl_platform_allocator_metadata_show.html": "/docs/reference/ecctl/ecctl_platform_allocator_metadata_show", + "/en/ecctl/*/ecctl_platform_allocator_metadata.html": "/docs/reference/ecctl/ecctl_platform_allocator_metadata", "/en/ecctl/*/ecctl_platform_allocator_search.html": "/docs/reference/ecctl/ecctl_platform_allocator_search", "/en/ecctl/*/ecctl_platform_allocator_show.html": "/docs/reference/ecctl/ecctl_platform_allocator_show", "/en/ecctl/*/ecctl_platform_allocator_vacate.html": "/docs/reference/ecctl/ecctl_platform_allocator_vacate", - "/en/ecctl/*/ecctl_platform_constructor.html": "/docs/reference/ecctl/ecctl_platform_constructor", + "/en/ecctl/*/ecctl_platform_allocator.html": "/docs/reference/ecctl/ecctl_platform_allocator", "/en/ecctl/*/ecctl_platform_constructor_list.html": "/docs/reference/ecctl/ecctl_platform_constructor_list", "/en/ecctl/*/ecctl_platform_constructor_maintenance.html": "/docs/reference/ecctl/ecctl_platform_constructor_maintenance", "/en/ecctl/*/ecctl_platform_constructor_resync.html": "/docs/reference/ecctl/ecctl_platform_constructor_resync", "/en/ecctl/*/ecctl_platform_constructor_show.html": "/docs/reference/ecctl/ecctl_platform_constructor_show", - "/en/ecctl/*/ecctl_platform_enrollment-token.html": "/docs/reference/ecctl/ecctl_platform_enrollment-token", + "/en/ecctl/*/ecctl_platform_constructor.html": "/docs/reference/ecctl/ecctl_platform_constructor", "/en/ecctl/*/ecctl_platform_enrollment-token_create.html": "/docs/reference/ecctl/ecctl_platform_enrollment-token_create", "/en/ecctl/*/ecctl_platform_enrollment-token_delete.html": "/docs/reference/ecctl/ecctl_platform_enrollment-token_delete", "/en/ecctl/*/ecctl_platform_enrollment-token_list.html": "/docs/reference/ecctl/ecctl_platform_enrollment-token_list", + "/en/ecctl/*/ecctl_platform_enrollment-token.html": "/docs/reference/ecctl/ecctl_platform_enrollment-token", "/en/ecctl/*/ecctl_platform_info.html": "/docs/reference/ecctl/ecctl_platform_info", - "/en/ecctl/*/ecctl_platform_instance-configuration.html": "/docs/reference/ecctl/ecctl_platform_instance-configuration", "/en/ecctl/*/ecctl_platform_instance-configuration_create.html": "/docs/reference/ecctl/ecctl_platform_instance-configuration_create", "/en/ecctl/*/ecctl_platform_instance-configuration_delete.html": "/docs/reference/ecctl/ecctl_platform_instance-configuration_delete", "/en/ecctl/*/ecctl_platform_instance-configuration_list.html": "/docs/reference/ecctl/ecctl_platform_instance-configuration_list", "/en/ecctl/*/ecctl_platform_instance-configuration_pull.html": "/docs/reference/ecctl/ecctl_platform_instance-configuration_pull", "/en/ecctl/*/ecctl_platform_instance-configuration_show.html": "/docs/reference/ecctl/ecctl_platform_instance-configuration_show", "/en/ecctl/*/ecctl_platform_instance-configuration_update.html": "/docs/reference/ecctl/ecctl_platform_instance-configuration_update", - "/en/ecctl/*/ecctl_platform_proxy.html": "/docs/reference/ecctl/ecctl_platform_proxy", - "/en/ecctl/*/ecctl_platform_proxy_filtered-group.html": "/docs/reference/ecctl/ecctl_platform_proxy_filtered-group", + "/en/ecctl/*/ecctl_platform_instance-configuration.html": "/docs/reference/ecctl/ecctl_platform_instance-configuration", "/en/ecctl/*/ecctl_platform_proxy_filtered-group_create.html": "/docs/reference/ecctl/ecctl_platform_proxy_filtered-group_create", "/en/ecctl/*/ecctl_platform_proxy_filtered-group_delete.html": "/docs/reference/ecctl/ecctl_platform_proxy_filtered-group_delete", "/en/ecctl/*/ecctl_platform_proxy_filtered-group_list.html": "/docs/reference/ecctl/ecctl_platform_proxy_filtered-group_list", "/en/ecctl/*/ecctl_platform_proxy_filtered-group_show.html": "/docs/reference/ecctl/ecctl_platform_proxy_filtered-group_show", "/en/ecctl/*/ecctl_platform_proxy_filtered-group_update.html": "/docs/reference/ecctl/ecctl_platform_proxy_filtered-group_update", + "/en/ecctl/*/ecctl_platform_proxy_filtered-group.html": "/docs/reference/ecctl/ecctl_platform_proxy_filtered-group", "/en/ecctl/*/ecctl_platform_proxy_list.html": "/docs/reference/ecctl/ecctl_platform_proxy_list", - "/en/ecctl/*/ecctl_platform_proxy_settings.html": "/docs/reference/ecctl/ecctl_platform_proxy_settings", "/en/ecctl/*/ecctl_platform_proxy_settings_show.html": "/docs/reference/ecctl/ecctl_platform_proxy_settings_show", "/en/ecctl/*/ecctl_platform_proxy_settings_update.html": "/docs/reference/ecctl/ecctl_platform_proxy_settings_update", + "/en/ecctl/*/ecctl_platform_proxy_settings.html": "/docs/reference/ecctl/ecctl_platform_proxy_settings", "/en/ecctl/*/ecctl_platform_proxy_show.html": "/docs/reference/ecctl/ecctl_platform_proxy_show", - "/en/ecctl/*/ecctl_platform_repository.html": "/docs/reference/ecctl/ecctl_platform_repository", + "/en/ecctl/*/ecctl_platform_proxy.html": "/docs/reference/ecctl/ecctl_platform_proxy", "/en/ecctl/*/ecctl_platform_repository_create.html": "/docs/reference/ecctl/ecctl_platform_repository_create", "/en/ecctl/*/ecctl_platform_repository_delete.html": "/docs/reference/ecctl/ecctl_platform_repository_delete", "/en/ecctl/*/ecctl_platform_repository_list.html": "/docs/reference/ecctl/ecctl_platform_repository_list", "/en/ecctl/*/ecctl_platform_repository_show.html": "/docs/reference/ecctl/ecctl_platform_repository_show", - "/en/ecctl/*/ecctl_platform_role.html": "/docs/reference/ecctl/ecctl_platform_role", + "/en/ecctl/*/ecctl_platform_repository.html": "/docs/reference/ecctl/ecctl_platform_repository", "/en/ecctl/*/ecctl_platform_role_create.html": "/docs/reference/ecctl/ecctl_platform_role_create", "/en/ecctl/*/ecctl_platform_role_delete.html": "/docs/reference/ecctl/ecctl_platform_role_delete", "/en/ecctl/*/ecctl_platform_role_list.html": "/docs/reference/ecctl/ecctl_platform_role_list", "/en/ecctl/*/ecctl_platform_role_show.html": "/docs/reference/ecctl/ecctl_platform_role_show", "/en/ecctl/*/ecctl_platform_role_update.html": "/docs/reference/ecctl/ecctl_platform_role_update", - "/en/ecctl/*/ecctl_platform_runner.html": "/docs/reference/ecctl/ecctl_platform_runner", + "/en/ecctl/*/ecctl_platform_role.html": "/docs/reference/ecctl/ecctl_platform_role", "/en/ecctl/*/ecctl_platform_runner_list.html": "/docs/reference/ecctl/ecctl_platform_runner_list", "/en/ecctl/*/ecctl_platform_runner_resync.html": "/docs/reference/ecctl/ecctl_platform_runner_resync", "/en/ecctl/*/ecctl_platform_runner_search.html": "/docs/reference/ecctl/ecctl_platform_runner_search", "/en/ecctl/*/ecctl_platform_runner_show.html": "/docs/reference/ecctl/ecctl_platform_runner_show", - "/en/ecctl/*/ecctl_stack.html": "/docs/reference/ecctl/ecctl_stack", + "/en/ecctl/*/ecctl_platform_runner.html": "/docs/reference/ecctl/ecctl_platform_runner", + "/en/ecctl/*/ecctl_platform.html": "/docs/reference/ecctl/ecctl_platform", "/en/ecctl/*/ecctl_stack_delete.html": "/docs/reference/ecctl/ecctl_stack_delete", "/en/ecctl/*/ecctl_stack_list.html": "/docs/reference/ecctl/ecctl_stack_list", "/en/ecctl/*/ecctl_stack_show.html": "/docs/reference/ecctl/ecctl_stack_show", "/en/ecctl/*/ecctl_stack_upload.html": "/docs/reference/ecctl/ecctl_stack_upload", - "/en/ecctl/*/ecctl_user.html": "/docs/reference/ecctl/ecctl_user", + "/en/ecctl/*/ecctl_stack.html": "/docs/reference/ecctl/ecctl_stack", "/en/ecctl/*/ecctl_user_create.html": "/docs/reference/ecctl/ecctl_user_create", "/en/ecctl/*/ecctl_user_delete.html": "/docs/reference/ecctl/ecctl_user_delete", "/en/ecctl/*/ecctl_user_disable.html": "/docs/reference/ecctl/ecctl_user_disable", "/en/ecctl/*/ecctl_user_enable.html": "/docs/reference/ecctl/ecctl_user_enable", - "/en/ecctl/*/ecctl_user_key.html": "/docs/reference/ecctl/ecctl_user_key", "/en/ecctl/*/ecctl_user_key_delete.html": "/docs/reference/ecctl/ecctl_user_key_delete", "/en/ecctl/*/ecctl_user_key_list.html": "/docs/reference/ecctl/ecctl_user_key_list", "/en/ecctl/*/ecctl_user_key_show.html": "/docs/reference/ecctl/ecctl_user_key_show", + "/en/ecctl/*/ecctl_user_key.html": "/docs/reference/ecctl/ecctl_user_key", "/en/ecctl/*/ecctl_user_list.html": "/docs/reference/ecctl/ecctl_user_list", "/en/ecctl/*/ecctl_user_show.html": "/docs/reference/ecctl/ecctl_user_show", "/en/ecctl/*/ecctl_user_update.html": "/docs/reference/ecctl/ecctl_user_update", + "/en/ecctl/*/ecctl_user.html": "/docs/reference/ecctl/ecctl_user", "/en/ecctl/*/ecctl_version.html": "/docs/reference/ecctl/ecctl_version", + "/en/ecctl/*/ecctl-authentication.html": "/docs/reference/ecctl/ecctl-authentication", + "/en/ecctl/*/ecctl-command-reference.html": "/docs/reference/ecctl/ecctl-command-reference", + "/en/ecctl/*/ecctl-configuring.html": "/docs/reference/ecctl/ecctl-configuring", + "/en/ecctl/*/ecctl-contributing.html": "/docs/reference/ecctl/ecctl-contributing", + "/en/ecctl/*/ecctl-custom-formatting.html": "/docs/reference/ecctl/ecctl-custom-formatting", + "/en/ecctl/*/ecctl-environment-variables.html": "/docs/reference/ecctl/ecctl-environment-variables", + "/en/ecctl/*/ecctl-example-create-deployment.html": "/docs/reference/ecctl/ecctl-example-create-deployment", + "/en/ecctl/*/ecctl-example-delete-deployment.html": "/docs/reference/ecctl/ecctl-example-delete-deployment", + "/en/ecctl/*/ecctl-example-list-deployments.html": "/docs/reference/ecctl/ecctl-example-list-deployments", + "/en/ecctl/*/ecctl-example-shared-configuration-file.html": "/docs/reference/ecctl/ecctl-example-shared-configuration-file", + "/en/ecctl/*/ecctl-example-update-deployment.html": "/docs/reference/ecctl/ecctl-example-update-deployment", + "/en/ecctl/*/ecctl-examples.html": "/docs/reference/ecctl/ecctl-examples", + "/en/ecctl/*/ecctl-installing.html": "/docs/reference/ecctl/ecctl-installing", + "/en/ecctl/*/ecctl-multiple-configuration-files.html": "/docs/reference/ecctl/ecctl-multiple-configuration-files", + "/en/ecctl/*/ecctl-output-format.html": "/docs/reference/ecctl/ecctl-output-format", + "/en/ecctl/*/ecctl-overview.html": "/docs/reference/ecctl", + "/en/ecctl/*/ecctl-release-notes-v1.0.0-beta1.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.0.0-beta2.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.0.0-beta3.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.0.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.1.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.10.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.11.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.12.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.13.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.14.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.14.1.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.14.2.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.14.3.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.2.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.3.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.3.1.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.4.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.5.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.6.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.7.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.8.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes-v1.9.0.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl-release-notes.html": "/docs/reference/ecctl/ecctl-release-notes", + "/en/ecctl/*/ecctl.html": "/docs/reference/ecctl/ecctl", "/en/ecctl/*/index.html": "/docs/reference/ecctl", "/en/ecs-logging/dotnet/*/_elasticsearch_security.html": "/docs/reference/ecs/logging/dotnet/_elasticsearch_security", "/en/ecs-logging/dotnet/*/_enrichers_2.html": "/docs/reference/ecs/logging/dotnet/_enrichers_2", @@ -4193,8 +3594,8 @@ "/en/ecs-logging/dotnet/*/ecs-ingest-channels.html": "/docs/reference/ecs/logging/dotnet/ecs-ingest-channels", "/en/ecs-logging/dotnet/*/extensions-logging-data-shipper.html": "/docs/reference/ecs/logging/dotnet/extensions-logging-data-shipper", "/en/ecs-logging/dotnet/*/index.html": "/docs/reference/ecs/logging/dotnet", - "/en/ecs-logging/dotnet/*/intro.html": "/docs/reference/ecs/logging/dotnet", "/en/ecs-logging/dotnet/*/intro_to_xyz.html": "/docs/reference/ecs/logging/dotnet/intro_to_xyz", + "/en/ecs-logging/dotnet/*/intro.html": "/docs/reference/ecs/logging/dotnet", "/en/ecs-logging/dotnet/*/log4net-formatter.html": "/docs/reference/ecs/logging/dotnet/log4net-formatter", "/en/ecs-logging/dotnet/*/nlog-formatter.html": "/docs/reference/ecs/logging/dotnet/nlog-formatter", "/en/ecs-logging/dotnet/*/serilog-data-shipper.html": "/docs/reference/ecs/logging/dotnet/serilog-data-shipper", @@ -4288,25 +3689,6 @@ "/en/ecs/*/ecs-reference.html": "/docs/reference/ecs", "/en/ecs/*/ecs-registry.html": "/docs/reference/ecs/ecs-registry", "/en/ecs/*/ecs-related.html": "/docs/reference/ecs/ecs-related", - "/en/ecs/*/ecs-release-notes-8.0.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.0.0.html", - "/en/ecs/*/ecs-release-notes-8.0.1.html": "/guide/en/ecs/8.17/ecs-release-notes-8.0.1.html", - "/en/ecs/*/ecs-release-notes-8.1.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.1.0.html", - "/en/ecs/*/ecs-release-notes-8.10.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.10.0.html", - "/en/ecs/*/ecs-release-notes-8.11.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.11.0.html", - "/en/ecs/*/ecs-release-notes-8.16.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.16.0.html", - "/en/ecs/*/ecs-release-notes-8.2.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.2.0.html", - "/en/ecs/*/ecs-release-notes-8.2.1.html": "/guide/en/ecs/8.17/ecs-release-notes-8.2.1.html", - "/en/ecs/*/ecs-release-notes-8.3.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.3.0.html", - "/en/ecs/*/ecs-release-notes-8.3.1.html": "/guide/en/ecs/8.17/ecs-release-notes-8.3.1.html", - "/en/ecs/*/ecs-release-notes-8.4.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.4.0.html", - "/en/ecs/*/ecs-release-notes-8.5.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.5.0.html", - "/en/ecs/*/ecs-release-notes-8.5.1.html": "/guide/en/ecs/8.17/ecs-release-notes-8.5.1.html", - "/en/ecs/*/ecs-release-notes-8.5.2.html": "/guide/en/ecs/8.17/ecs-release-notes-8.5.2.html", - "/en/ecs/*/ecs-release-notes-8.6.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.6.0.html", - "/en/ecs/*/ecs-release-notes-8.6.1.html": "/guide/en/ecs/8.17/ecs-release-notes-8.6.1.html", - "/en/ecs/*/ecs-release-notes-8.7.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.7.0.html", - "/en/ecs/*/ecs-release-notes-8.8.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.8.0.html", - "/en/ecs/*/ecs-release-notes-8.9.0.html": "/guide/en/ecs/8.17/ecs-release-notes-8.9.0.html", "/en/ecs/*/ecs-release-notes.html": "/docs/reference/ecs/ecs-release-notes", "/en/ecs/*/ecs-risk.html": "/docs/reference/ecs/ecs-risk", "/en/ecs/*/ecs-rule.html": "/docs/reference/ecs/ecs-rule", @@ -4319,9 +3701,9 @@ "/en/ecs/*/ecs-tls.html": "/docs/reference/ecs/ecs-tls", "/en/ecs/*/ecs-tracing.html": "/docs/reference/ecs/ecs-tracing", "/en/ecs/*/ecs-url.html": "/docs/reference/ecs/ecs-url", + "/en/ecs/*/ecs-user_agent.html": "/docs/reference/ecs/ecs-user_agent", "/en/ecs/*/ecs-user-usage.html": "/docs/reference/ecs/ecs-user-usage", "/en/ecs/*/ecs-user.html": "/docs/reference/ecs/ecs-user", - "/en/ecs/*/ecs-user_agent.html": "/docs/reference/ecs/ecs-user_agent", "/en/ecs/*/ecs-using-ecs.html": "/docs/reference/ecs/ecs-using-ecs", "/en/ecs/*/ecs-using-the-categorization-fields.html": "/docs/reference/ecs/ecs-using-categorization-fields", "/en/ecs/*/ecs-vlan.html": "/docs/reference/ecs/ecs-vlan", @@ -4343,13 +3725,11 @@ "/en/elastic-stack/*/elastic-stack-breaking-changes.html": "/docs/release-notes", "/en/elastic-stack/*/elastic-stack-highlights.html": "/docs/release-notes", "/en/elastic-stack/*/elasticsearch-breaking-changes.html": "/docs/release-notes/elasticsearch/breaking-changes", - "/en/elastic-stack/*/elasticsearch-hadoop-breaking-changes.html": "/guide/en/elasticsearch/hadoop/8.18/breaking-changes.html", "/en/elastic-stack/*/index.html": "/docs/deploy-manage", "/en/elastic-stack/*/install-stack-demo-secure.html": "/docs/deploy-manage/security/self-setup", "/en/elastic-stack/*/installing-elastic-stack.html": "/docs/deploy-manage/deploy/self-managed/installing-elasticsearch", "/en/elastic-stack/*/installing-stack-demo-self.html": "/docs/deploy-manage/deploy/self-managed", "/en/elastic-stack/*/kibana-breaking-changes.html": "/docs/release-notes/kibana", - "/en/elastic-stack/*/logstash-breaking-changes.html": "/guide/en/logstash/8.18/breaking-changes.html", "/en/elastic-stack/*/overview.html": "/docs/get-started/the-stack", "/en/elastic-stack/*/security-breaking-changes.html": "/docs/release-notes/security", "/en/elastic-stack/*/upgrade-elastic-stack-for-elastic-cloud.html": "/docs/deploy-manage/upgrade/deployment-or-cluster", @@ -4399,17 +3779,17 @@ "/en/elasticsearch/client/curator/*/ex_snapshot.html": "/docs/reference/elasticsearch/curator/ex_snapshot", "/en/elasticsearch/client/curator/*/examples.html": "/docs/reference/elasticsearch/curator/examples", "/en/elasticsearch/client/curator/*/exit-codes.html": "/docs/reference/elasticsearch/curator/exit-codes", - "/en/elasticsearch/client/curator/*/faq.html": "/docs/reference/elasticsearch/curator/faq", "/en/elasticsearch/client/curator/*/faq_doc_error.html": "/docs/reference/elasticsearch/curator/faq_doc_error", "/en/elasticsearch/client/curator/*/faq_partial_delete.html": "/docs/reference/elasticsearch/curator/faq_partial_delete", "/en/elasticsearch/client/curator/*/faq_strange_chars.html": "/docs/reference/elasticsearch/curator/faq_strange_chars", + "/en/elasticsearch/client/curator/*/faq.html": "/docs/reference/elasticsearch/curator/faq", "/en/elasticsearch/client/curator/*/fe_aliases.html": "/docs/reference/elasticsearch/curator/fe_aliases", "/en/elasticsearch/client/curator/*/fe_allocation_type.html": "/docs/reference/elasticsearch/curator/fe_allocation_type", "/en/elasticsearch/client/curator/*/fe_count.html": "/docs/reference/elasticsearch/curator/fe_count", - "/en/elasticsearch/client/curator/*/fe_date_from.html": "/docs/reference/elasticsearch/curator/fe_date_from", "/en/elasticsearch/client/curator/*/fe_date_from_format.html": "/docs/reference/elasticsearch/curator/fe_date_from_format", - "/en/elasticsearch/client/curator/*/fe_date_to.html": "/docs/reference/elasticsearch/curator/fe_date_to", + "/en/elasticsearch/client/curator/*/fe_date_from.html": "/docs/reference/elasticsearch/curator/fe_date_from", "/en/elasticsearch/client/curator/*/fe_date_to_format.html": "/docs/reference/elasticsearch/curator/fe_date_to_format", + "/en/elasticsearch/client/curator/*/fe_date_to.html": "/docs/reference/elasticsearch/curator/fe_date_to", "/en/elasticsearch/client/curator/*/fe_direction.html": "/docs/reference/elasticsearch/curator/fe_direction", "/en/elasticsearch/client/curator/*/fe_disk_space.html": "/docs/reference/elasticsearch/curator/fe_disk_space", "/en/elasticsearch/client/curator/*/fe_epoch.html": "/docs/reference/elasticsearch/curator/fe_epoch", @@ -4429,15 +3809,14 @@ "/en/elasticsearch/client/curator/*/fe_stats_result.html": "/docs/reference/elasticsearch/curator/fe_stats_result", "/en/elasticsearch/client/curator/*/fe_threshold_behavior.html": "/docs/reference/elasticsearch/curator/fe_threshold_behavior", "/en/elasticsearch/client/curator/*/fe_timestring.html": "/docs/reference/elasticsearch/curator/fe_timestring", - "/en/elasticsearch/client/curator/*/fe_unit.html": "/docs/reference/elasticsearch/curator/fe_unit", - "/en/elasticsearch/client/curator/*/fe_unit_count.html": "/docs/reference/elasticsearch/curator/fe_unit_count", "/en/elasticsearch/client/curator/*/fe_unit_count_pattern.html": "/docs/reference/elasticsearch/curator/fe_unit_count_pattern", + "/en/elasticsearch/client/curator/*/fe_unit_count.html": "/docs/reference/elasticsearch/curator/fe_unit_count", + "/en/elasticsearch/client/curator/*/fe_unit.html": "/docs/reference/elasticsearch/curator/fe_unit", "/en/elasticsearch/client/curator/*/fe_use_age.html": "/docs/reference/elasticsearch/curator/fe_use_age", "/en/elasticsearch/client/curator/*/fe_value.html": "/docs/reference/elasticsearch/curator/fe_value", "/en/elasticsearch/client/curator/*/fe_week_starts_on.html": "/docs/reference/elasticsearch/curator/fe_week_starts_on", "/en/elasticsearch/client/curator/*/filter_elements.html": "/docs/reference/elasticsearch/curator/filter_elements", "/en/elasticsearch/client/curator/*/filters.html": "/docs/reference/elasticsearch/curator/filters", - "/en/elasticsearch/client/curator/*/filtertype.html": "/docs/reference/elasticsearch/curator/filtertype", "/en/elasticsearch/client/curator/*/filtertype_age.html": "/docs/reference/elasticsearch/curator/filtertype_age", "/en/elasticsearch/client/curator/*/filtertype_alias.html": "/docs/reference/elasticsearch/curator/filtertype_alias", "/en/elasticsearch/client/curator/*/filtertype_allocated.html": "/docs/reference/elasticsearch/curator/filtertype_allocated", @@ -4452,13 +3831,14 @@ "/en/elasticsearch/client/curator/*/filtertype_period.html": "/docs/reference/elasticsearch/curator/filtertype_period", "/en/elasticsearch/client/curator/*/filtertype_space.html": "/docs/reference/elasticsearch/curator/filtertype_space", "/en/elasticsearch/client/curator/*/filtertype_state.html": "/docs/reference/elasticsearch/curator/filtertype_state", + "/en/elasticsearch/client/curator/*/filtertype.html": "/docs/reference/elasticsearch/curator/filtertype", "/en/elasticsearch/client/curator/*/forcemerge.html": "/docs/reference/elasticsearch/curator/forcemerge", "/en/elasticsearch/client/curator/*/ilm-actions.html": "/docs/reference/elasticsearch/curator/ilm-actions", "/en/elasticsearch/client/curator/*/ilm-and-curator.html": "/docs/reference/elasticsearch/curator/ilm-and-curator", "/en/elasticsearch/client/curator/*/ilm-or-curator.html": "/docs/reference/elasticsearch/curator/ilm-or-curator", "/en/elasticsearch/client/curator/*/ilm.html": "/docs/reference/elasticsearch/curator/curator-ilm", - "/en/elasticsearch/client/curator/*/index.html": "/docs/reference/elasticsearch/curator/curator-ilm", "/en/elasticsearch/client/curator/*/index_settings.html": "/docs/reference/elasticsearch/curator/index_settings", + "/en/elasticsearch/client/curator/*/index.html": "/docs/reference/elasticsearch/curator/curator-ilm", "/en/elasticsearch/client/curator/*/installation.html": "/docs/reference/elasticsearch/curator/installation", "/en/elasticsearch/client/curator/*/license.html": "/docs/reference/elasticsearch/curator/license", "/en/elasticsearch/client/curator/*/open.html": "/docs/reference/elasticsearch/curator/open", @@ -4472,8 +3852,8 @@ "/en/elasticsearch/client/curator/*/option_delete_aliases.html": "/docs/reference/elasticsearch/curator/option_delete_aliases", "/en/elasticsearch/client/curator/*/option_disable.html": "/docs/reference/elasticsearch/curator/option_disable", "/en/elasticsearch/client/curator/*/option_extra_settings.html": "/docs/reference/elasticsearch/curator/option_extra_settings", - "/en/elasticsearch/client/curator/*/option_ignore.html": "/docs/reference/elasticsearch/curator/option_ignore", "/en/elasticsearch/client/curator/*/option_ignore_empty.html": "/docs/reference/elasticsearch/curator/option_ignore_empty", + "/en/elasticsearch/client/curator/*/option_ignore.html": "/docs/reference/elasticsearch/curator/option_ignore", "/en/elasticsearch/client/curator/*/option_include_aliases.html": "/docs/reference/elasticsearch/curator/option_include_aliases", "/en/elasticsearch/client/curator/*/option_include_gs.html": "/docs/reference/elasticsearch/curator/option_include_gs", "/en/elasticsearch/client/curator/*/option_indices.html": "/docs/reference/elasticsearch/curator/option_indices", @@ -4515,8 +3895,8 @@ "/en/elasticsearch/client/curator/*/option_skip_flush.html": "/docs/reference/elasticsearch/curator/option_skip_flush", "/en/elasticsearch/client/curator/*/option_skip_fsck.html": "/docs/reference/elasticsearch/curator/option_skip_fsck", "/en/elasticsearch/client/curator/*/option_slices.html": "/docs/reference/elasticsearch/curator/option_slices", - "/en/elasticsearch/client/curator/*/option_timeout.html": "/docs/reference/elasticsearch/curator/option_timeout", "/en/elasticsearch/client/curator/*/option_timeout_override.html": "/docs/reference/elasticsearch/curator/option_timeout_override", + "/en/elasticsearch/client/curator/*/option_timeout.html": "/docs/reference/elasticsearch/curator/option_timeout", "/en/elasticsearch/client/curator/*/option_value.html": "/docs/reference/elasticsearch/curator/option_value", "/en/elasticsearch/client/curator/*/option_wait_for_active_shards.html": "/docs/reference/elasticsearch/curator/option_wait_for_active_shards", "/en/elasticsearch/client/curator/*/option_wait_for_rebalance.html": "/docs/reference/elasticsearch/curator/option_wait_for_rebalance", @@ -4602,8 +3982,8 @@ "/en/elasticsearch/client/java-api-client/*/opentelemetry.html": "/docs/reference/elasticsearch/clients/java/opentelemetry", "/en/elasticsearch/client/java-api-client/*/package-structure.html": "/docs/reference/elasticsearch/clients/java/package-structure", "/en/elasticsearch/client/java-api-client/*/reading.html": "/docs/reference/elasticsearch/clients/java/reading", - "/en/elasticsearch/client/java-api-client/*/release-highlights.html": "/docs/reference/elasticsearch/clients/java/release-highlights", "/en/elasticsearch/client/java-api-client/*/release_notes.html": "/docs/release-notes/elasticsearch/clients/java", + "/en/elasticsearch/client/java-api-client/*/release-highlights.html": "/docs/reference/elasticsearch/clients/java/release-highlights", "/en/elasticsearch/client/java-api-client/*/searching.html": "/docs/reference/elasticsearch/clients/java/searching", "/en/elasticsearch/client/java-api-client/*/serialize-without-typed-keys.html": "/docs/troubleshoot/elasticsearch/elasticsearch-client-java-api-client/typed-keys-serialization", "/en/elasticsearch/client/java-api-client/*/sniffer.html": "/docs/reference/elasticsearch/clients/java/sniffer", @@ -4615,7 +3995,6 @@ "/en/elasticsearch/client/javascript-api/*/as_stream_examples.html": "/docs/reference/elasticsearch/clients/javascript/as_stream_examples", "/en/elasticsearch/client/javascript-api/*/auth-reference.html": "/docs/reference/elasticsearch/clients/javascript/connecting", "/en/elasticsearch/client/javascript-api/*/basic-config.html": "/docs/reference/elasticsearch/clients/javascript/basic-config", - "/en/elasticsearch/client/javascript-api/*/breaking-changes.html": "/guide/en/elasticsearch/client/javascript-api/7.17/breaking-changes.html", "/en/elasticsearch/client/javascript-api/*/bulk_examples.html": "/docs/reference/elasticsearch/clients/javascript/bulk_examples", "/en/elasticsearch/client/javascript-api/*/changelog-client.html": "/docs/release-notes/elasticsearch/clients/javascript", "/en/elasticsearch/client/javascript-api/*/child.html": "/docs/reference/elasticsearch/clients/javascript/child", @@ -4640,8 +4019,8 @@ "/en/elasticsearch/client/javascript-api/*/sql_query_examples.html": "/docs/reference/elasticsearch/clients/javascript/sql_query_examples", "/en/elasticsearch/client/javascript-api/*/suggest_examples.html": "/docs/reference/elasticsearch/clients/javascript/suggest_examples", "/en/elasticsearch/client/javascript-api/*/timeout-best-practices.html": "/docs/troubleshoot/elasticsearch/elasticsearch-client-javascript-api/nodejs", - "/en/elasticsearch/client/javascript-api/*/transport.html": "/docs/reference/elasticsearch/clients/javascript/transport", "/en/elasticsearch/client/javascript-api/*/transport_request_examples.html": "/docs/reference/elasticsearch/clients/javascript/transport_request_examples", + "/en/elasticsearch/client/javascript-api/*/transport.html": "/docs/reference/elasticsearch/clients/javascript/transport", "/en/elasticsearch/client/javascript-api/*/typescript.html": "/docs/reference/elasticsearch/clients/javascript/typescript", "/en/elasticsearch/client/javascript-api/*/update_by_query_examples.html": "/docs/reference/elasticsearch/clients/javascript/update_by_query_examples", "/en/elasticsearch/client/javascript-api/*/update_examples.html": "/docs/reference/elasticsearch/clients/javascript/update_examples", @@ -4649,7 +4028,6 @@ "/en/elasticsearch/client/net-api/*/aggregations.html": "/docs/reference/elasticsearch/clients/dotnet/aggregations", "/en/elasticsearch/client/net-api/*/audit-trail.html": "/docs/troubleshoot/elasticsearch/elasticsearch-client-net-api/audit-trail", "/en/elasticsearch/client/net-api/*/breaking-changes-policy.html": "/docs/release-notes/elasticsearch/clients/dotnet/breaking-changes", - "/en/elasticsearch/client/net-api/*/bulkall-observable.html": "/guide/en/elasticsearch/client/net-api/8.18/bulkall-observable.html", "/en/elasticsearch/client/net-api/*/client-concepts.html": "/docs/reference/elasticsearch/clients/dotnet/client-concepts", "/en/elasticsearch/client/net-api/*/configuration-options.html": "/docs/reference/elasticsearch/clients/dotnet/configuration", "/en/elasticsearch/client/net-api/*/configuration.html": "/docs/reference/elasticsearch/clients/dotnet/configuration", @@ -4661,7 +4039,6 @@ "/en/elasticsearch/client/net-api/*/examples.html": "/docs/reference/elasticsearch/clients/dotnet/examples", "/en/elasticsearch/client/net-api/*/getting-started-net.html": "/docs/reference/elasticsearch/clients/dotnet/getting-started", "/en/elasticsearch/client/net-api/*/index.html": "/docs/reference/elasticsearch/clients/dotnet", - "/en/elasticsearch/client/net-api/*/indexing-documents.html": "/guide/en/elasticsearch/client/net-api/8.18/indexing-documents.html", "/en/elasticsearch/client/net-api/*/installation.html": "/docs/reference/elasticsearch/clients/dotnet/installation", "/en/elasticsearch/client/net-api/*/introduction.html": "/docs/reference/elasticsearch/clients/dotnet", "/en/elasticsearch/client/net-api/*/logging-with-fiddler.html": "/docs/troubleshoot/elasticsearch/elasticsearch-client-net-api/logging-with-fiddler", @@ -4669,38 +4046,14 @@ "/en/elasticsearch/client/net-api/*/logging.html": "/docs/troubleshoot/elasticsearch/elasticsearch-client-net-api/logging", "/en/elasticsearch/client/net-api/*/mappings.html": "/docs/reference/elasticsearch/clients/dotnet/mappings", "/en/elasticsearch/client/net-api/*/migration-guide.html": "/docs/reference/elasticsearch/clients/dotnet/migration-guide", - "/en/elasticsearch/client/net-api/*/nest.html": "/guide/en/elasticsearch/client/net-api/8.18/nest.html", "/en/elasticsearch/client/net-api/*/query.html": "/docs/reference/elasticsearch/clients/dotnet/query", "/en/elasticsearch/client/net-api/*/recommendations.html": "/docs/reference/elasticsearch/clients/dotnet/recommendations", - "/en/elasticsearch/client/net-api/*/redirects.html": "/guide/en/elasticsearch/client/net-api/8.18/redirects.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.0.0.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.0.0.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.0.1.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.0.1.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.0.10.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.0.10.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.0.2.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.0.2.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.0.3.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.0.3.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.0.4.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.0.4.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.0.5.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.0.5.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.0.6.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.0.6.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.0.7.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.0.7.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.0.8.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.0.8.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.0.9.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.0.9.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.1.0.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.1.0.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.1.1.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.1.1.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.1.2.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.1.2.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.1.3.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.1.3.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.10.0.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.10.0.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.11.0.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.11.0.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.9.0.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.9.0.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.9.1.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.9.1.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.9.2.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.9.2.html", - "/en/elasticsearch/client/net-api/*/release-notes-8.9.3.html": "/guide/en/elasticsearch/client/net-api/8.18/release-notes-8.9.3.html", "/en/elasticsearch/client/net-api/*/release-notes.html": "/docs/release-notes/elasticsearch/clients/dotnet", "/en/elasticsearch/client/net-api/*/serialization.html": "/docs/reference/elasticsearch/clients/dotnet/serialization", "/en/elasticsearch/client/net-api/*/source-serialization.html": "/docs/reference/elasticsearch/clients/dotnet/source-serialization", "/en/elasticsearch/client/net-api/*/transport.html": "/docs/reference/elasticsearch/clients/dotnet/transport", "/en/elasticsearch/client/net-api/*/troubleshooting.html": "/docs/troubleshoot/elasticsearch/elasticsearch-client-net-api/net", "/en/elasticsearch/client/net-api/*/usage.html": "/docs/reference/elasticsearch/clients/dotnet/using-net-client", - "/en/elasticsearch/client/php-api/*/ElasticsearchPHP_Endpoints.html": "/guide/en/elasticsearch/client/php-api/8.18/ElasticsearchPHP_Endpoints.html", "/en/elasticsearch/client/php-api/*/breaking_changes.html": "/docs/release-notes/elasticsearch/clients/php/breaking-changes", "/en/elasticsearch/client/php-api/*/client-helpers.html": "/docs/reference/elasticsearch/clients/php/client-helpers", "/en/elasticsearch/client/php-api/*/configuration.html": "/docs/reference/elasticsearch/clients/php/configuration", @@ -4708,14 +4061,13 @@ "/en/elasticsearch/client/php-api/*/deleting_documents.html": "/docs/reference/elasticsearch/clients/php/deleting_documents", "/en/elasticsearch/client/php-api/*/enabling_logger.html": "/docs/reference/elasticsearch/clients/php/enabling_logger", "/en/elasticsearch/client/php-api/*/esql.html": "/docs/reference/elasticsearch/clients/php/esql", - "/en/elasticsearch/client/php-api/*/experimental_and_beta_apis.html": "/guide/en/elasticsearch/client/php-api/8.18/experimental_and_beta_apis.html", - "/en/elasticsearch/client/php-api/*/getting-started-php.html": "/docs/reference/elasticsearch/clients/php/getting-started", "/en/elasticsearch/client/php-api/*/getting_documents.html": "/docs/reference/elasticsearch/clients/php/getting_documents", + "/en/elasticsearch/client/php-api/*/getting-started-php.html": "/docs/reference/elasticsearch/clients/php/getting-started", "/en/elasticsearch/client/php-api/*/host-config.html": "/docs/reference/elasticsearch/clients/php/host-config", "/en/elasticsearch/client/php-api/*/http-client.html": "/docs/reference/elasticsearch/clients/php/http-client", "/en/elasticsearch/client/php-api/*/http-meta-data.html": "/docs/reference/elasticsearch/clients/php/http-meta-data", - "/en/elasticsearch/client/php-api/*/index.html": "/docs/reference/elasticsearch/clients/php", "/en/elasticsearch/client/php-api/*/index_management.html": "/docs/reference/elasticsearch/clients/php/index_management", + "/en/elasticsearch/client/php-api/*/index.html": "/docs/reference/elasticsearch/clients/php", "/en/elasticsearch/client/php-api/*/indexing_documents.html": "/docs/reference/elasticsearch/clients/php/indexing_documents", "/en/elasticsearch/client/php-api/*/installation.html": "/docs/reference/elasticsearch/clients/php/installation", "/en/elasticsearch/client/php-api/*/iterators.html": "/docs/reference/elasticsearch/clients/php/iterators", @@ -4725,7 +4077,6 @@ "/en/elasticsearch/client/php-api/*/overview.html": "/docs/reference/elasticsearch/clients/php", "/en/elasticsearch/client/php-api/*/php_json_objects.html": "/docs/reference/elasticsearch/clients/php/php_json_objects", "/en/elasticsearch/client/php-api/*/quickstart.html": "/docs/reference/elasticsearch/clients/php/installation", - "/en/elasticsearch/client/php-api/*/redirects.html": "/guide/en/elasticsearch/client/php-api/8.18/redirects.html", "/en/elasticsearch/client/php-api/*/release-notes.html": "/docs/release-notes/elasticsearch/clients/php", "/en/elasticsearch/client/php-api/*/search_operations.html": "/docs/reference/elasticsearch/clients/php/search_operations", "/en/elasticsearch/client/php-api/*/security.html": "/docs/reference/elasticsearch/clients/php/connecting", @@ -4746,11 +4097,9 @@ "/en/elasticsearch/client/python-api/*/index.html": "/docs/reference/elasticsearch/clients/python", "/en/elasticsearch/client/python-api/*/installation.html": "/docs/reference/elasticsearch/clients/python/installation", "/en/elasticsearch/client/python-api/*/integrations.html": "/docs/reference/elasticsearch/clients/python/integrations", - "/en/elasticsearch/client/python-api/*/migration.html": "/guide/en/elasticsearch/client/python-api/8.18/migration.html", "/en/elasticsearch/client/python-api/*/opentelemetry.html": "/docs/reference/elasticsearch/clients/python/opentelemetry", "/en/elasticsearch/client/python-api/*/overview.html": "/docs/reference/elasticsearch/clients/python", "/en/elasticsearch/client/python-api/*/release-notes.html": "/docs/release-notes/elasticsearch/clients/python", - "/en/elasticsearch/client/ruby-api/*/Helpers.html": "/docs/reference/elasticsearch/clients/ruby/Helpers", "/en/elasticsearch/client/ruby-api/*/activemodel_activerecord.html": "/docs/reference/elasticsearch/clients/ruby/activemodel_activerecord", "/en/elasticsearch/client/ruby-api/*/advanced-config.html": "/docs/reference/elasticsearch/clients/ruby/advanced-config", "/en/elasticsearch/client/ruby-api/*/api.html": "/docs/reference/elasticsearch/clients/ruby/api", @@ -4762,130 +4111,27 @@ "/en/elasticsearch/client/ruby-api/*/esql.html": "/docs/reference/elasticsearch/clients/ruby/esql", "/en/elasticsearch/client/ruby-api/*/examples.html": "/docs/reference/elasticsearch/clients/ruby/examples", "/en/elasticsearch/client/ruby-api/*/getting-started-ruby.html": "/docs/reference/elasticsearch/clients/ruby/getting-started", + "/en/elasticsearch/client/ruby-api/*/Helpers.html": "/docs/reference/elasticsearch/clients/ruby/Helpers", "/en/elasticsearch/client/ruby-api/*/index.html": "/docs/reference/elasticsearch/clients/ruby", "/en/elasticsearch/client/ruby-api/*/integrations.html": "/docs/reference/elasticsearch/clients/ruby/integrations", "/en/elasticsearch/client/ruby-api/*/opentelemetry.html": "/docs/reference/elasticsearch/clients/ruby/opentelemetry", "/en/elasticsearch/client/ruby-api/*/persistence.html": "/docs/reference/elasticsearch/clients/ruby/persistence", "/en/elasticsearch/client/ruby-api/*/release_notes.html": "/docs/release-notes/elasticsearch/clients/ruby", - "/en/elasticsearch/client/ruby-api/*/release_notes_70.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_70.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_710.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_710.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_711.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_711.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_712.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_712.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_713.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_713.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_714.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_714.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_715.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_715.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_716.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_716.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_717.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_717.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_75.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_75.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_76.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_76.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_77.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_77.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_78.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_78.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_79.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_79.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_80.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_80.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_81.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_81.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_8100.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_8100.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_8110.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_8110.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_82.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_82.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_83.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_83.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_84.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_84.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_85.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_85.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_86.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_86.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_87.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_87.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_88.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_88.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_89.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_89.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_8_12.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_8_12.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_8_13.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_8_13.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_8_14.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_8_14.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_8_15.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_8_15.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_8_16.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_8_16.html", - "/en/elasticsearch/client/ruby-api/*/release_notes_8_17.html": "/guide/en/elasticsearch/client/ruby-api/8.18/release_notes_8_17.html", - "/en/elasticsearch/client/ruby-api/*/ruby-config.html": "/docs/reference/elasticsearch/clients/ruby/configuration", - "/en/elasticsearch/client/ruby-api/*/ruby-install.html": "/docs/reference/elasticsearch/clients/ruby/installation", "/en/elasticsearch/client/ruby-api/*/ruby_client.html": "/docs/reference/elasticsearch/clients/ruby", "/en/elasticsearch/client/ruby-api/*/ruby_on_rails.html": "/docs/reference/elasticsearch/clients/ruby/ruby_on_rails", + "/en/elasticsearch/client/ruby-api/*/ruby-config.html": "/docs/reference/elasticsearch/clients/ruby/configuration", + "/en/elasticsearch/client/ruby-api/*/ruby-install.html": "/docs/reference/elasticsearch/clients/ruby/installation", "/en/elasticsearch/client/ruby-api/*/transport.html": "/docs/reference/elasticsearch/clients/ruby/transport", "/en/elasticsearch/client/ruby-api/*/troubleshooting.html": "/docs/troubleshoot/elasticsearch/elasticsearch-client-ruby-api/ruby", "/en/elasticsearch/client/rust-api/*/index.html": "/docs/reference/elasticsearch/clients/rust", "/en/elasticsearch/client/rust-api/*/installation.html": "/docs/reference/elasticsearch/clients/rust/installation", "/en/elasticsearch/client/rust-api/*/overview.html": "/docs/reference/elasticsearch/clients/rust", "/en/elasticsearch/hadoop/*/arch.html": "/docs/reference/elasticsearch-hadoop/architecture", - "/en/elasticsearch/hadoop/*/breaking-changes.html": "/guide/en/elasticsearch/hadoop/8.18/breaking-changes.html", "/en/elasticsearch/hadoop/*/cloud.html": "/docs/reference/elasticsearch-hadoop/cloudrestricted-environments", "/en/elasticsearch/hadoop/*/configuration-runtime.html": "/docs/reference/elasticsearch-hadoop/runtime-options", "/en/elasticsearch/hadoop/*/configuration.html": "/docs/reference/elasticsearch-hadoop/configuration", "/en/elasticsearch/hadoop/*/doc-sections.html": "/docs/reference/elasticsearch-hadoop", "/en/elasticsearch/hadoop/*/errorhandlers.html": "/docs/reference/elasticsearch-hadoop/error-handlers", - "/en/elasticsearch/hadoop/*/eshadoop-8.0.0-alpha1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.0.0-alpha1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.0.0-alpha2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.0.0-alpha2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.0.0-beta1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.0.0-beta1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.0.0-rc1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.0.0-rc1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.0.0-rc2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.0.0-rc2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.0.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.0.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.0.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.0.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.1.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.1.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.1.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.1.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.1.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.1.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.1.3.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.1.3.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.10.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.10.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.10.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.10.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.10.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.10.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.10.3.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.10.3.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.10.4.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.10.4.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.11.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.11.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.11.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.11.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.11.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.11.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.11.3.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.11.3.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.11.4.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.11.4.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.12.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.12.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.12.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.12.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.12.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.12.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.13.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.13.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.13.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.13.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.13.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.13.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.13.3.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.13.3.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.13.4.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.13.4.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.14.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.14.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.14.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.14.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.14.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.14.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.14.3.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.14.3.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.15.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.15.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.15.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.15.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.15.3.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.15.3.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.15.4.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.15.4.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.15.5.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.15.5.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.16.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.16.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.16.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.16.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.16.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.16.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.16.3.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.16.3.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.17.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.17.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.17.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.17.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.2.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.2.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.2.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.2.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.2.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.2.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.2.3.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.2.3.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.3.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.3.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.3.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.3.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.3.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.3.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.3.3.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.3.3.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.4.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.4.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.4.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.4.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.4.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.4.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.4.3.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.4.3.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.5.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.5.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.5.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.5.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.5.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.5.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.5.3.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.5.3.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.6.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.6.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.6.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.6.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.6.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.6.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.7.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.7.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.7.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.7.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.8.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.8.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.8.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.8.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.8.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.8.2.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.9.0.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.9.0.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.9.1.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.9.1.html", - "/en/elasticsearch/hadoop/*/eshadoop-8.9.2.html": "/guide/en/elasticsearch/hadoop/8.18/eshadoop-8.9.2.html", "/en/elasticsearch/hadoop/*/features.html": "/docs/reference/elasticsearch-hadoop/key-features", "/en/elasticsearch/hadoop/*/float.html": "/docs/reference/elasticsearch-hadoop", "/en/elasticsearch/hadoop/*/hive.html": "/docs/reference/elasticsearch-hadoop/apache-hive-integration", @@ -4908,99 +4154,6 @@ "/en/elasticsearch/painless/*/index.html": "/docs/reference/scripting-languages/painless/painless", "/en/elasticsearch/painless/*/modules-scripting-painless-dispatch.html": "/docs/reference/scripting-languages/painless/how-painless-dispatches-function", "/en/elasticsearch/painless/*/painless-analysis-predicate-context.html": "/docs/reference/scripting-languages/painless/painless-analysis-predicate-context", - "/en/elasticsearch/painless/*/painless-api-reference-aggregation-selector-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggregation-selector-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggregation-selector-org-elasticsearch-xpack-sql-expression-literal-geo.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggregation-selector-org-elasticsearch-xpack-sql-expression-literal-geo.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggregation-selector-org-elasticsearch-xpack-sql-expression-literal-interval.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggregation-selector-org-elasticsearch-xpack-sql-expression-literal-interval.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggregation-selector.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggregation-selector.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggs-combine-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggs-combine-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggs-combine.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggs-combine.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggs-init-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggs-init-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggs-init.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggs-init.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggs-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggs-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggs-map-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggs-map-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggs-map.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggs-map.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggs-org-elasticsearch-xpack-sql-expression-literal-geo.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggs-org-elasticsearch-xpack-sql-expression-literal-geo.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggs-org-elasticsearch-xpack-sql-expression-literal-interval.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggs-org-elasticsearch-xpack-sql-expression-literal-interval.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggs-reduce-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggs-reduce-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggs-reduce.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggs-reduce.html", - "/en/elasticsearch/painless/*/painless-api-reference-aggs.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-aggs.html", - "/en/elasticsearch/painless/*/painless-api-reference-analysis-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-analysis-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-analysis-org-elasticsearch-analysis-common.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-analysis-org-elasticsearch-analysis-common.html", - "/en/elasticsearch/painless/*/painless-api-reference-analysis.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-analysis.html", - "/en/elasticsearch/painless/*/painless-api-reference-bucket-aggregation-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-bucket-aggregation-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-bucket-aggregation.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-bucket-aggregation.html", - "/en/elasticsearch/painless/*/painless-api-reference-field-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-field-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-field-org-elasticsearch-xpack-sql-expression-literal-geo.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-field-org-elasticsearch-xpack-sql-expression-literal-geo.html", - "/en/elasticsearch/painless/*/painless-api-reference-field-org-elasticsearch-xpack-sql-expression-literal-interval.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-field-org-elasticsearch-xpack-sql-expression-literal-interval.html", - "/en/elasticsearch/painless/*/painless-api-reference-field.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-field.html", - "/en/elasticsearch/painless/*/painless-api-reference-filter-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-filter-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-filter-org-elasticsearch-xpack-sql-expression-literal-geo.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-filter-org-elasticsearch-xpack-sql-expression-literal-geo.html", - "/en/elasticsearch/painless/*/painless-api-reference-filter-org-elasticsearch-xpack-sql-expression-literal-interval.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-filter-org-elasticsearch-xpack-sql-expression-literal-interval.html", - "/en/elasticsearch/painless/*/painless-api-reference-filter.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-filter.html", - "/en/elasticsearch/painless/*/painless-api-reference-ingest-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-ingest-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-ingest-org-elasticsearch-ingest-common.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-ingest-org-elasticsearch-ingest-common.html", - "/en/elasticsearch/painless/*/painless-api-reference-ingest.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-ingest.html", - "/en/elasticsearch/painless/*/painless-api-reference-interval-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-interval-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-interval.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-interval.html", - "/en/elasticsearch/painless/*/painless-api-reference-moving-function-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-moving-function-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-moving-function-org-elasticsearch-search-aggregations-pipeline.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-moving-function-org-elasticsearch-search-aggregations-pipeline.html", - "/en/elasticsearch/painless/*/painless-api-reference-moving-function.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-moving-function.html", - "/en/elasticsearch/painless/*/painless-api-reference-number-sort-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-number-sort-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-number-sort-org-elasticsearch-xpack-sql-expression-literal-geo.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-number-sort-org-elasticsearch-xpack-sql-expression-literal-geo.html", - "/en/elasticsearch/painless/*/painless-api-reference-number-sort-org-elasticsearch-xpack-sql-expression-literal-interval.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-number-sort-org-elasticsearch-xpack-sql-expression-literal-interval.html", - "/en/elasticsearch/painless/*/painless-api-reference-number-sort.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-number-sort.html", - "/en/elasticsearch/painless/*/painless-api-reference-painless-test-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-painless-test-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-painless-test.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-painless-test.html", - "/en/elasticsearch/painless/*/painless-api-reference-processor-conditional-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-processor-conditional-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-processor-conditional.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-processor-conditional.html", - "/en/elasticsearch/painless/*/painless-api-reference-score-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-score-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-score-org-elasticsearch-xpack-vectors-query.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-score-org-elasticsearch-xpack-vectors-query.html", - "/en/elasticsearch/painless/*/painless-api-reference-score.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-score.html", - "/en/elasticsearch/painless/*/painless-api-reference-script-heuristic-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-script-heuristic-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-script-heuristic.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-script-heuristic.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-java-math.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-java-math.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-java-text.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-java-text.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-java-time-chrono.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-java-time-chrono.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-java-time-format.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-java-time-format.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-java-time-temporal.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-java-time-temporal.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-java-time-zone.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-java-time-zone.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-java-time.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-java-time.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-java-util-function.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-java-util-function.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-java-util-regex.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-java-util-regex.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-java-util-stream.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-java-util-stream.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-java-util.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-java-util.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-org-apache-lucene-util.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-org-apache-lucene-util.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-org-elasticsearch-common-geo.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-org-elasticsearch-common-geo.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-org-elasticsearch-index-fielddata.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-org-elasticsearch-index-fielddata.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-org-elasticsearch-index-mapper.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-org-elasticsearch-index-mapper.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-org-elasticsearch-index-query.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-org-elasticsearch-index-query.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-org-elasticsearch-index-similarity.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-org-elasticsearch-index-similarity.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-org-elasticsearch-painless-api.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-org-elasticsearch-painless-api.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-org-elasticsearch-script.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-org-elasticsearch-script.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared-org-elasticsearch-search-lookup.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared-org-elasticsearch-search-lookup.html", - "/en/elasticsearch/painless/*/painless-api-reference-shared.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-shared.html", - "/en/elasticsearch/painless/*/painless-api-reference-similarity-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-similarity-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-similarity-weight-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-similarity-weight-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-similarity-weight.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-similarity-weight.html", - "/en/elasticsearch/painless/*/painless-api-reference-similarity.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-similarity.html", - "/en/elasticsearch/painless/*/painless-api-reference-string-sort-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-string-sort-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-string-sort-org-elasticsearch-xpack-sql-expression-literal-geo.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-string-sort-org-elasticsearch-xpack-sql-expression-literal-geo.html", - "/en/elasticsearch/painless/*/painless-api-reference-string-sort-org-elasticsearch-xpack-sql-expression-literal-interval.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-string-sort-org-elasticsearch-xpack-sql-expression-literal-interval.html", - "/en/elasticsearch/painless/*/painless-api-reference-string-sort.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-string-sort.html", - "/en/elasticsearch/painless/*/painless-api-reference-template-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-template-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-template.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-template.html", - "/en/elasticsearch/painless/*/painless-api-reference-terms-set-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-terms-set-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-terms-set.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-terms-set.html", - "/en/elasticsearch/painless/*/painless-api-reference-update-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-update-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-update.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-update.html", - "/en/elasticsearch/painless/*/painless-api-reference-watcher-condition-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-watcher-condition-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-watcher-condition.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-watcher-condition.html", - "/en/elasticsearch/painless/*/painless-api-reference-watcher-transform-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-watcher-transform-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-watcher-transform.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-watcher-transform.html", - "/en/elasticsearch/painless/*/painless-api-reference-xpack-template-java-lang.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-xpack-template-java-lang.html", - "/en/elasticsearch/painless/*/painless-api-reference-xpack-template.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference-xpack-template.html", - "/en/elasticsearch/painless/*/painless-api-reference.html": "/guide/en/elasticsearch/painless/8.18/painless-api-reference.html", "/en/elasticsearch/painless/*/painless-bucket-script-agg-context.html": "/docs/reference/scripting-languages/painless/painless-bucket-script-agg-context", "/en/elasticsearch/painless/*/painless-bucket-selector-agg-context.html": "/docs/reference/scripting-languages/painless/painless-bucket-selector-agg-context", "/en/elasticsearch/painless/*/painless-casting.html": "/docs/reference/scripting-languages/painless/painless-casting", @@ -5051,8 +4204,8 @@ "/en/elasticsearch/painless/*/painless-weight-context.html": "/docs/reference/scripting-languages/painless/painless-weight-context", "/en/elasticsearch/plugins/*/_other_command_line_parameters.html": "/docs/reference/elasticsearch/plugins/_other_command_line_parameters", "/en/elasticsearch/plugins/*/_plugins_directory.html": "/docs/reference/elasticsearch/plugins/_plugins_directory", - "/en/elasticsearch/plugins/*/_reimplementing_and_extending_the_analyzers.html": "/docs/reference/elasticsearch/plugins/_reimplementing_and_extending_the_analyzers", "/en/elasticsearch/plugins/*/_reimplementing_and_extending_the_analyzers_2.html": "/docs/reference/elasticsearch/plugins/_reimplementing_and_extending_the_analyzers_2", + "/en/elasticsearch/plugins/*/_reimplementing_and_extending_the_analyzers.html": "/docs/reference/elasticsearch/plugins/_reimplementing_and_extending_the_analyzers", "/en/elasticsearch/plugins/*/alerting.html": "/docs/explore-analyze/alerts-cases", "/en/elasticsearch/plugins/*/analysis-icu-analyzer.html": "/docs/reference/elasticsearch/plugins/analysis-icu-analyzer", "/en/elasticsearch/plugins/*/analysis-icu-collation-keyword-field.html": "/docs/reference/elasticsearch/plugins/analysis-icu-collation-keyword-field", @@ -5085,15 +4238,13 @@ "/en/elasticsearch/plugins/*/analysis-phonetic-token-filter.html": "/docs/reference/elasticsearch/plugins/analysis-phonetic-token-filter", "/en/elasticsearch/plugins/*/analysis-phonetic.html": "/docs/reference/elasticsearch/plugins/analysis-phonetic", "/en/elasticsearch/plugins/*/analysis-polish-stop.html": "/docs/reference/elasticsearch/plugins/analysis-polish-stop", - "/en/elasticsearch/plugins/*/analysis-smartcn.html": "/docs/reference/elasticsearch/plugins/analysis-smartcn", "/en/elasticsearch/plugins/*/analysis-smartcn_stop.html": "/docs/reference/elasticsearch/plugins/analysis-smartcn_stop", + "/en/elasticsearch/plugins/*/analysis-smartcn.html": "/docs/reference/elasticsearch/plugins/analysis-smartcn", "/en/elasticsearch/plugins/*/analysis-stempel.html": "/docs/reference/elasticsearch/plugins/analysis-stempel", "/en/elasticsearch/plugins/*/analysis-ukrainian.html": "/docs/reference/elasticsearch/plugins/analysis-ukrainian", "/en/elasticsearch/plugins/*/analysis.html": "/docs/reference/elasticsearch/plugins/analysis-plugins", "/en/elasticsearch/plugins/*/api.html": "/docs/reference/elasticsearch/plugins/api-extension-plugins", "/en/elasticsearch/plugins/*/cloud-aws-best-practices.html": "/docs/reference/elasticsearch/plugins/cloud-aws-best-practices", - "/en/elasticsearch/plugins/*/cloud-aws.html": "/guide/en/elasticsearch/plugins/8.18/cloud-aws.html", - "/en/elasticsearch/plugins/*/cloud-azure.html": "/guide/en/elasticsearch/plugins/8.18/cloud-azure.html", "/en/elasticsearch/plugins/*/cloud-gce.html": "/docs/reference/elasticsearch/plugins/discovery-gce", "/en/elasticsearch/plugins/*/creating-classic-plugins.html": "/docs/extend/elasticsearch/creating-classic-plugins", "/en/elasticsearch/plugins/*/creating-stable-plugins.html": "/docs/extend/elasticsearch/creating-stable-plugins", @@ -5113,7 +4264,6 @@ "/en/elasticsearch/plugins/*/discovery-gce-usage-zones.html": "/docs/reference/elasticsearch/plugins/discovery-gce-usage-zones", "/en/elasticsearch/plugins/*/discovery-gce-usage.html": "/docs/reference/elasticsearch/plugins/discovery-gce-usage", "/en/elasticsearch/plugins/*/discovery-gce.html": "/docs/reference/elasticsearch/plugins/discovery-gce", - "/en/elasticsearch/plugins/*/discovery-multicast.html": "/guide/en/elasticsearch/plugins/8.18/discovery-multicast.html", "/en/elasticsearch/plugins/*/discovery.html": "/docs/reference/elasticsearch/plugins/discovery-plugins", "/en/elasticsearch/plugins/*/example-text-analysis-plugin.html": "/docs/extend/elasticsearch/example-text-analysis-plugin", "/en/elasticsearch/plugins/*/index.html": "/docs/reference/elasticsearch/plugins", @@ -5172,17 +4322,16 @@ "/en/elasticsearch/reference/*/_advantages_of_using_this_endpoint_before_a_cross_cluster_search.html": "/docs/solutions/search/using-resolve-cluster-endpoint-before-cross-cluster-search", "/en/elasticsearch/reference/*/_api_usage.html": "/docs/explore-analyze/query-filter/languages/sql-jdbc-api-usage", "/en/elasticsearch/reference/*/_applying_a_policy_to_our_index.html": "/docs/manage-data/lifecycle/index-lifecycle-management/tutorial-automate-rollover", - "/en/elasticsearch/reference/*/_bug_fixes.html": "/docs/deploy-manage/deploy/elastic-cloud/edit-stack-settings", "/en/elasticsearch/reference/*/_bug_fixes_2.html": "/docs/deploy-manage/deploy/elastic-cloud/edit-stack-settings", + "/en/elasticsearch/reference/*/_bug_fixes.html": "/docs/deploy-manage/deploy/elastic-cloud/edit-stack-settings", "/en/elasticsearch/reference/*/_configure_privileges_for_cross_cluster_replication_2.html": "/docs/deploy-manage/tools/cross-cluster-replication/_configure_privileges_for_cross_cluster_replication_2", "/en/elasticsearch/reference/*/_connect_to_a_remote_cluster.html": "/docs/deploy-manage/tools/cross-cluster-replication/_connect_to_a_remote_cluster", "/en/elasticsearch/reference/*/_data_store_architecture.html": "/docs/deploy-manage/distributed-architecture", - "/en/elasticsearch/reference/*/_executing_searches.html": "/guide/en/starting-with-the-elasticsearch-platform-and-its-solutions/8.15/getting-started-general-purpose.html", "/en/elasticsearch/reference/*/_explain_analyze.html": "/docs/api/doc/elasticsearch/operation/operation-indices-analyze", - "/en/elasticsearch/reference/*/_failback_when_clustera_comes_back.html": "/docs/deploy-manage/tools/cross-cluster-replication/_failback_when_clustera_comes_back", "/en/elasticsearch/reference/*/_failback_when_clustera_comes_back_2.html": "/docs/deploy-manage/tools/cross-cluster-replication/_failback_when_clustera_comes_back_2", - "/en/elasticsearch/reference/*/_failover_when_clustera_is_down.html": "/docs/deploy-manage/tools/cross-cluster-replication/_failover_when_clustera_is_down", + "/en/elasticsearch/reference/*/_failback_when_clustera_comes_back.html": "/docs/deploy-manage/tools/cross-cluster-replication/_failback_when_clustera_comes_back", "/en/elasticsearch/reference/*/_failover_when_clustera_is_down_2.html": "/docs/deploy-manage/tools/cross-cluster-replication/_failover_when_clustera_is_down_2", + "/en/elasticsearch/reference/*/_failover_when_clustera_is_down.html": "/docs/deploy-manage/tools/cross-cluster-replication/_failover_when_clustera_is_down", "/en/elasticsearch/reference/*/_installation.html": "/docs/deploy-manage/deploy/self-managed/installing-elasticsearch", "/en/elasticsearch/reference/*/_mapping_concepts_across_sql_and_elasticsearch.html": "/docs/explore-analyze/query-filter/languages/sql-concepts", "/en/elasticsearch/reference/*/_notes_3.html": "/docs/reference/query-languages/query-dsl/joining-queries", @@ -5218,7 +4367,6 @@ "/en/elasticsearch/reference/*/agg-metadata.html": "/docs/explore-analyze/query-filter/aggregations", "/en/elasticsearch/reference/*/aggregate-metric-double.html": "/docs/reference/elasticsearch/mapping-reference/aggregate-metric-double", "/en/elasticsearch/reference/*/aggregations-tutorial.html": "/docs/explore-analyze/query-filter/aggregations/tutorial-analyze-ecommerce-data-with-aggregations-using-query-dsl", - "/en/elasticsearch/reference/*/alias.html": "/guide/en/elasticsearch/reference/8.18/alias.html", "/en/elasticsearch/reference/*/aliases.html": "/docs/manage-data/data-store/aliases", "/en/elasticsearch/reference/*/allocation-awareness.html": "/docs/reference/elasticsearch/configuration-reference/cluster-level-shard-allocation-routing-settings", "/en/elasticsearch/reference/*/allocation-filtering.html": "/docs/reference/elasticsearch/configuration-reference/cluster-level-shard-allocation-routing-settings", @@ -5235,7 +4383,6 @@ "/en/elasticsearch/reference/*/analysis-classic-tokenfilter.html": "/docs/reference/text-analysis/analysis-classic-tokenfilter", "/en/elasticsearch/reference/*/analysis-classic-tokenizer.html": "/docs/reference/text-analysis/analysis-classic-tokenizer", "/en/elasticsearch/reference/*/analysis-common-grams-tokenfilter.html": "/docs/reference/text-analysis/analysis-common-grams-tokenfilter", - "/en/elasticsearch/reference/*/analysis-compound-word-tokenfilter.html": "/guide/en/elasticsearch/reference/8.18/analysis-compound-word-tokenfilter.html", "/en/elasticsearch/reference/*/analysis-concepts.html": "/docs/manage-data/data-store/text-analysis/concepts", "/en/elasticsearch/reference/*/analysis-condition-tokenfilter.html": "/docs/reference/text-analysis/analysis-condition-tokenfilter", "/en/elasticsearch/reference/*/analysis-custom-analyzer.html": "/docs/manage-data/data-store/text-analysis/create-custom-analyzer", @@ -5275,11 +4422,11 @@ "/en/elasticsearch/reference/*/analysis-overview.html": "/docs/manage-data/data-store/text-analysis", "/en/elasticsearch/reference/*/analysis-pathhierarchy-tokenizer-examples.html": "/docs/reference/text-analysis/analysis-pathhierarchy-tokenizer", "/en/elasticsearch/reference/*/analysis-pathhierarchy-tokenizer.html": "/docs/reference/text-analysis/analysis-pathhierarchy-tokenizer", + "/en/elasticsearch/reference/*/analysis-pattern_replace-tokenfilter.html": "/docs/reference/text-analysis/analysis-pattern_replace-tokenfilter", "/en/elasticsearch/reference/*/analysis-pattern-analyzer.html": "/docs/reference/text-analysis/analysis-pattern-analyzer", "/en/elasticsearch/reference/*/analysis-pattern-capture-tokenfilter.html": "/docs/reference/text-analysis/analysis-pattern-capture-tokenfilter", "/en/elasticsearch/reference/*/analysis-pattern-replace-charfilter.html": "/docs/reference/text-analysis/analysis-pattern-replace-charfilter", "/en/elasticsearch/reference/*/analysis-pattern-tokenizer.html": "/docs/reference/text-analysis/analysis-pattern-tokenizer", - "/en/elasticsearch/reference/*/analysis-pattern_replace-tokenfilter.html": "/docs/reference/text-analysis/analysis-pattern_replace-tokenfilter", "/en/elasticsearch/reference/*/analysis-phonetic-tokenfilter.html": "/docs/reference/text-analysis/analysis-phonetic-tokenfilter", "/en/elasticsearch/reference/*/analysis-porterstem-tokenfilter.html": "/docs/reference/text-analysis/analysis-porterstem-tokenfilter", "/en/elasticsearch/reference/*/analysis-predicatefilter-tokenfilter.html": "/docs/reference/text-analysis/analysis-predicatefilter-tokenfilter", @@ -5321,7 +4468,6 @@ "/en/elasticsearch/reference/*/archive-indices.html": "/docs/deploy-manage/upgrade/deployment-or-cluster/reading-indices-from-older-elasticsearch-versions", "/en/elasticsearch/reference/*/archived-settings.html": "/docs/deploy-manage/upgrade/deployment-or-cluster/archived-settings", "/en/elasticsearch/reference/*/array.html": "/docs/reference/elasticsearch/mapping-reference/array", - "/en/elasticsearch/reference/*/assertions.html": "/guide/en/elasticsearch/reference/8.18/assertions.html", "/en/elasticsearch/reference/*/async-search-intro.html": "/docs/solutions/search/async-search-api", "/en/elasticsearch/reference/*/async-search.html": "/docs/api/doc/elasticsearch/operation/operation-async-search-submit", "/en/elasticsearch/reference/*/attachment.html": "/docs/reference/enrich-processor/attachment", @@ -5351,13 +4497,7 @@ "/en/elasticsearch/reference/*/backup-cluster-data.html": "/docs/deploy-manage/tools/snapshot-and-restore/create-snapshots", "/en/elasticsearch/reference/*/backup-cluster.html": "/docs/deploy-manage/tools/snapshot-and-restore/create-snapshots", "/en/elasticsearch/reference/*/beats.html": "/docs/reference/beats", - "/en/elasticsearch/reference/*/behavioral-analytics-api.html": "/guide/en/elasticsearch/reference/8.18/behavioral-analytics-api.html", "/en/elasticsearch/reference/*/behavioral-analytics-apis.html": "/docs/api/doc/elasticsearch/group/endpoint-analytics", - "/en/elasticsearch/reference/*/behavioral-analytics-cors.html": "/guide/en/elasticsearch/reference/8.18/behavioral-analytics-cors.html", - "/en/elasticsearch/reference/*/behavioral-analytics-event-reference.html": "/guide/en/elasticsearch/reference/8.18/behavioral-analytics-event-reference.html", - "/en/elasticsearch/reference/*/behavioral-analytics-event.html": "/guide/en/elasticsearch/reference/8.18/behavioral-analytics-event.html", - "/en/elasticsearch/reference/*/behavioral-analytics-overview.html": "/guide/en/elasticsearch/reference/8.18/behavioral-analytics-overview.html", - "/en/elasticsearch/reference/*/behavioral-analytics-start.html": "/guide/en/elasticsearch/reference/8.18/behavioral-analytics-start.html", "/en/elasticsearch/reference/*/best_practices.html": "/docs/api/doc/elasticsearch/operation/operation-indices-unfreeze", "/en/elasticsearch/reference/*/binary.html": "/docs/reference/elasticsearch/mapping-reference/binary", "/en/elasticsearch/reference/*/boolean.html": "/docs/reference/elasticsearch/mapping-reference/boolean", @@ -5450,7 +4590,6 @@ "/en/elasticsearch/reference/*/ccr-upgrading.html": "/docs/deploy-manage/tools/cross-cluster-replication/upgrading-clusters", "/en/elasticsearch/reference/*/ccs-clients-integrations.html": "/docs/deploy-manage/security/secure-clients-integrations", "/en/elasticsearch/reference/*/ccs-reduction.html": "/docs/solutions/search/cross-cluster-search", - "/en/elasticsearch/reference/*/ccs-works.html": "/guide/en/elasticsearch/reference/8.18/ccs-works.html", "/en/elasticsearch/reference/*/certgen.html": "/docs/reference/elasticsearch/command-line-tools/certgen", "/en/elasticsearch/reference/*/certutil.html": "/docs/reference/elasticsearch/command-line-tools/certutil", "/en/elasticsearch/reference/*/change-passwords-native-users.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/native", @@ -5564,11 +4703,11 @@ "/en/elasticsearch/reference/*/data-streams.html": "/docs/manage-data/data-store/data-streams", "/en/elasticsearch/reference/*/data-tier-shard-filtering.html": "/docs/reference/elasticsearch/index-settings/data-tier-allocation", "/en/elasticsearch/reference/*/data-tiers.html": "/docs/manage-data/lifecycle/data-tiers", + "/en/elasticsearch/reference/*/date_nanos.html": "/docs/reference/elasticsearch/mapping-reference/date_nanos", "/en/elasticsearch/reference/*/date-index-name-processor.html": "/docs/reference/enrich-processor/date-index-name-processor", "/en/elasticsearch/reference/*/date-math-index-names.html": "/docs/reference/elasticsearch/rest-apis/api-conventions", "/en/elasticsearch/reference/*/date-processor.html": "/docs/reference/enrich-processor/date-processor", "/en/elasticsearch/reference/*/date.html": "/docs/reference/elasticsearch/mapping-reference/date", - "/en/elasticsearch/reference/*/date_nanos.html": "/docs/reference/elasticsearch/mapping-reference/date_nanos", "/en/elasticsearch/reference/*/deb.html": "/docs/deploy-manage/deploy/self-managed/install-elasticsearch-with-debian-package", "/en/elasticsearch/reference/*/decrease-disk-usage-data-node.html": "/docs/troubleshoot/elasticsearch/decrease-disk-usage-data-node", "/en/elasticsearch/reference/*/defining-roles.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/defining-roles", @@ -5734,7 +4873,6 @@ "/en/elasticsearch/reference/*/es-dls-overview.html": "/docs/reference/search-connectors/es-dls-overview", "/en/elasticsearch/reference/*/es-dls.html": "/docs/reference/search-connectors/document-level-security", "/en/elasticsearch/reference/*/es-ingestion-overview.html": "/docs/manage-data/ingest", - "/en/elasticsearch/reference/*/es-mongodb-start.html": "/guide/en/elasticsearch/reference/8.18/es-mongodb-start.html", "/en/elasticsearch/reference/*/es-monitoring-collectors.html": "/docs/deploy-manage/monitor/stack-monitoring/es-monitoring-collectors", "/en/elasticsearch/reference/*/es-monitoring-exporters.html": "/docs/deploy-manage/monitor/stack-monitoring/es-monitoring-exporters", "/en/elasticsearch/reference/*/es-monitoring.html": "/docs/deploy-manage/monitor/cloud-health-perf", @@ -5743,7 +4881,6 @@ "/en/elasticsearch/reference/*/es-release-notes.html": "/docs/release-notes/elasticsearch", "/en/elasticsearch/reference/*/es-security-principles.html": "/docs/deploy-manage/security", "/en/elasticsearch/reference/*/es-sync-rules.html": "/docs/reference/search-connectors/es-sync-rules", - "/en/elasticsearch/reference/*/esms.html": "/guide/en/elasticsearch/reference/8.18/esms.html", "/en/elasticsearch/reference/*/esql-apis.html": "/docs/api/doc/elasticsearch/group/endpoint-esql", "/en/elasticsearch/reference/*/esql-async-query-api.html": "/docs/api/doc/elasticsearch/operation/operation-esql-async-query", "/en/elasticsearch/reference/*/esql-async-query-delete-api.html": "/docs/api/doc/elasticsearch/operation/operation-esql-async-query-delete", @@ -5803,7 +4940,6 @@ "/en/elasticsearch/reference/*/fleet-multi-search.html": "/docs/api/doc/elasticsearch/operation/operation-fleet-msearch", "/en/elasticsearch/reference/*/fleet-search.html": "/docs/api/doc/elasticsearch/operation/operation-fleet-search", "/en/elasticsearch/reference/*/foreach-processor.html": "/docs/reference/enrich-processor/foreach-processor", - "/en/elasticsearch/reference/*/freeze-index-api.html": "/blog/significantly-decrease-your-elasticsearch-heap-memory-usage", "/en/elasticsearch/reference/*/frozen-indices.html": "/docs/api/doc/elasticsearch/operation/operation-indices-unfreeze", "/en/elasticsearch/reference/*/full-text-filter-tutorial.html": "/docs/solutions/search/querydsl-full-text-filter-tutorial", "/en/elasticsearch/reference/*/full-text-queries.html": "/docs/reference/query-languages/query-dsl/full-text-queries", @@ -5866,16 +5002,11 @@ "/en/elasticsearch/reference/*/getting-started-cluster-health.html": "/docs/api/doc/elasticsearch/operation/operation-cat-health", "/en/elasticsearch/reference/*/getting-started-create-index.html": "/docs/api/doc/elasticsearch/operation/operation-indices-create", "/en/elasticsearch/reference/*/getting-started-delete-index.html": "/docs/api/doc/elasticsearch/operation/operation-indices-delete", - "/en/elasticsearch/reference/*/getting-started-explore-data.html": "/guide/en/starting-with-the-elasticsearch-platform-and-its-solutions/8.18/getting-started-general-purpose.html", "/en/elasticsearch/reference/*/getting-started-explore.html": "/docs/api/doc/elasticsearch/operation/operation-cat-indices", "/en/elasticsearch/reference/*/getting-started-index-lifecycle-management.html": "/docs/manage-data/lifecycle/index-lifecycle-management/tutorial-automate-rollover", - "/en/elasticsearch/reference/*/getting-started-index.html": "/guide/en/starting-with-the-elasticsearch-platform-and-its-solutions/8.18/getting-started-general-purpose.html", "/en/elasticsearch/reference/*/getting-started-install.html": "/docs/deploy-manage/deploy/self-managed/installing-elasticsearch", "/en/elasticsearch/reference/*/getting-started-list-indices.html": "/docs/api/doc/elasticsearch/operation/operation-cat-indices", "/en/elasticsearch/reference/*/getting-started-modify-data.html": "/docs/api/doc/elasticsearch/operation/operation-update", - "/en/elasticsearch/reference/*/getting-started-query-document.html": "/guide/en/starting-with-the-elasticsearch-platform-and-its-solutions/8.18/getting-started-general-purpose.html", - "/en/elasticsearch/reference/*/getting-started-search-API.html": "/guide/en/starting-with-the-elasticsearch-platform-and-its-solutions/8.18/getting-started-general-purpose.html", - "/en/elasticsearch/reference/*/getting-started-search.html": "/guide/en/starting-with-the-elasticsearch-platform-and-its-solutions/8.18/getting-started-general-purpose.html", "/en/elasticsearch/reference/*/getting-started-snapshot-lifecycle-management.html": "/docs/deploy-manage/tools/snapshot-and-restore/create-snapshots", "/en/elasticsearch/reference/*/getting-started.html": "/docs/solutions/search/get-started", "/en/elasticsearch/reference/*/glossary.html": "/docs/reference/glossary", @@ -5906,9 +5037,9 @@ "/en/elasticsearch/reference/*/htmlstrip-processor.html": "/docs/reference/enrich-processor/htmlstrip-processor", "/en/elasticsearch/reference/*/http-clients.html": "/docs/deploy-manage/security/httprest-clients-security", "/en/elasticsearch/reference/*/http-exporter.html": "/docs/deploy-manage/monitor/stack-monitoring/es-http-exporter", + "/en/elasticsearch/reference/*/ignore_missing_component_templates.html": "/docs/manage-data/data-store/templates/ignore-missing-component-templates", "/en/elasticsearch/reference/*/ignore-above.html": "/docs/reference/elasticsearch/mapping-reference/ignore-above", "/en/elasticsearch/reference/*/ignore-malformed.html": "/docs/reference/elasticsearch/mapping-reference/ignore-malformed", - "/en/elasticsearch/reference/*/ignore_missing_component_templates.html": "/docs/manage-data/data-store/templates/ignore-missing-component-templates", "/en/elasticsearch/reference/*/ilm-actions.html": "/docs/reference/elasticsearch/index-lifecycle-actions", "/en/elasticsearch/reference/*/ilm-allocate.html": "/docs/reference/elasticsearch/index-lifecycle-actions/ilm-allocate", "/en/elasticsearch/reference/*/ilm-concepts.html": "/docs/manage-data/lifecycle/index-lifecycle-management", @@ -5917,8 +5048,6 @@ "/en/elasticsearch/reference/*/ilm-downsample.html": "/docs/reference/elasticsearch/index-lifecycle-actions/ilm-downsample", "/en/elasticsearch/reference/*/ilm-explain-lifecycle.html": "/docs/api/doc/elasticsearch/operation/operation-ilm-explain-lifecycle", "/en/elasticsearch/reference/*/ilm-forcemerge.html": "/docs/reference/elasticsearch/index-lifecycle-actions/ilm-forcemerge", - "/en/elasticsearch/reference/*/ilm-freeze-action.html": "/blog/significantly-decrease-your-elasticsearch-heap-memory-usage", - "/en/elasticsearch/reference/*/ilm-freeze.html": "/blog/significantly-decrease-your-elasticsearch-heap-memory-usage", "/en/elasticsearch/reference/*/ilm-get-lifecycle.html": "/docs/api/doc/elasticsearch/operation/operation-ilm-get-lifecycle", "/en/elasticsearch/reference/*/ilm-get-status.html": "/docs/api/doc/elasticsearch/operation/operation-ilm-get-status", "/en/elasticsearch/reference/*/ilm-index-lifecycle.html": "/docs/manage-data/lifecycle/index-lifecycle-management/index-lifecycle", @@ -6026,7 +5155,6 @@ "/en/elasticsearch/reference/*/indices-simulate-template.html": "/docs/api/doc/elasticsearch/operation/operation-indices-simulate-template", "/en/elasticsearch/reference/*/indices-split-index.html": "/docs/api/doc/elasticsearch/operation/operation-indices-split", "/en/elasticsearch/reference/*/indices-stats.html": "/docs/api/doc/elasticsearch/operation/operation-indices-stats", - "/en/elasticsearch/reference/*/indices-status.html": "/guide/en/elasticsearch/reference/8.18/indices-status.html", "/en/elasticsearch/reference/*/indices-synced-flush-api.html": "/docs/api/doc/elasticsearch/operation/operation-indices-flush", "/en/elasticsearch/reference/*/indices-synced-flush.html": "/docs/api/doc/elasticsearch/operation/operation-indices-flush", "/en/elasticsearch/reference/*/indices-template-exists-v1.html": "/docs/api/doc/elasticsearch/operation/operation-indices-exists-template", @@ -6035,8 +5163,6 @@ "/en/elasticsearch/reference/*/indices-templates.html": "/docs/manage-data/data-store/templates", "/en/elasticsearch/reference/*/indices-types-exists.html": "/docs/manage-data/data-store/mapping/removal-of-mapping-types", "/en/elasticsearch/reference/*/indices-update-settings.html": "/docs/api/doc/elasticsearch/operation/operation-indices-put-settings", - "/en/elasticsearch/reference/*/indices-upgrade.html": "/guide/en/elasticsearch/reference/8.18/reindex-upgrade.html", - "/en/elasticsearch/reference/*/indices-warmers.html": "/guide/en/elasticsearch/reference/8.18/indices-warmers.html", "/en/elasticsearch/reference/*/indices.html": "/docs/api/doc/elasticsearch/group/endpoint-indices", "/en/elasticsearch/reference/*/infer-service-alibabacloud-ai-search.html": "/docs/api/doc/elasticsearch/operation/operation-inference-put", "/en/elasticsearch/reference/*/infer-service-amazon-bedrock.html": "/docs/api/doc/elasticsearch/operation/operation-inference-put", @@ -6077,12 +5203,10 @@ "/en/elasticsearch/reference/*/input-simple.html": "/docs/explore-analyze/alerts-cases/watcher/input-simple", "/en/elasticsearch/reference/*/input.html": "/docs/explore-analyze/alerts-cases/watcher/input", "/en/elasticsearch/reference/*/install-elasticsearch.html": "/docs/deploy-manage/deploy/self-managed/installing-elasticsearch", - "/en/elasticsearch/reference/*/integration-tests.html": "/guide/en/elasticsearch/reference/8.18/integration-tests.html", "/en/elasticsearch/reference/*/internal-users.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/internal-users", "/en/elasticsearch/reference/*/ip-filtering.html": "/docs/deploy-manage/security/ip-filtering-basic", "/en/elasticsearch/reference/*/ip-location-processor.html": "/docs/reference/enrich-processor/ip-location-processor", "/en/elasticsearch/reference/*/ip.html": "/docs/reference/elasticsearch/mapping-reference/ip", - "/en/elasticsearch/reference/*/java-clients.html": "/guide/en/elasticsearch/client/java-rest/7.15/java-rest-high.html", "/en/elasticsearch/reference/*/jdk-tls-versions.html": "/docs/deploy-manage/security/supported-ssltls-versions-by-jdk-version", "/en/elasticsearch/reference/*/join-processor.html": "/docs/reference/enrich-processor/join-processor", "/en/elasticsearch/reference/*/joining-queries.html": "/docs/reference/query-languages/query-dsl/joining-queries", @@ -6150,25 +5274,6 @@ "/en/elasticsearch/reference/*/max-number-threads-check.html": "/docs/deploy-manage/deploy/self-managed/bootstrap-checks", "/en/elasticsearch/reference/*/max-size-virtual-memory-check.html": "/docs/deploy-manage/deploy/self-managed/bootstrap-checks", "/en/elasticsearch/reference/*/migrate-index-allocation-filters.html": "/docs/manage-data/lifecycle/index-lifecycle-management/migrate-index-allocation-filters-to-node-roles", - "/en/elasticsearch/reference/*/migrate-to-java-time.html": "/guide/en/elasticsearch/reference/8.18/migrate-to-java-time.html", - "/en/elasticsearch/reference/*/migrating-8.0.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.0.html", - "/en/elasticsearch/reference/*/migrating-8.1.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.1.html", - "/en/elasticsearch/reference/*/migrating-8.10.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.10.html", - "/en/elasticsearch/reference/*/migrating-8.11.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.11.html", - "/en/elasticsearch/reference/*/migrating-8.12.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.12.html", - "/en/elasticsearch/reference/*/migrating-8.13.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.13.html", - "/en/elasticsearch/reference/*/migrating-8.14.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.14.html", - "/en/elasticsearch/reference/*/migrating-8.15.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.15.html", - "/en/elasticsearch/reference/*/migrating-8.16.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.16.html", - "/en/elasticsearch/reference/*/migrating-8.17.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.17.html", - "/en/elasticsearch/reference/*/migrating-8.2.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.2.html", - "/en/elasticsearch/reference/*/migrating-8.3.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.3.html", - "/en/elasticsearch/reference/*/migrating-8.4.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.4.html", - "/en/elasticsearch/reference/*/migrating-8.5.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.5.html", - "/en/elasticsearch/reference/*/migrating-8.6.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.6.html", - "/en/elasticsearch/reference/*/migrating-8.7.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.7.html", - "/en/elasticsearch/reference/*/migrating-8.8.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.8.html", - "/en/elasticsearch/reference/*/migrating-8.9.html": "/guide/en/elasticsearch/reference/8.18/migrating-8.9.html", "/en/elasticsearch/reference/*/migration-api-deprecation.html": "/docs/api/doc/elasticsearch/operation/operation-migration-deprecations", "/en/elasticsearch/reference/*/migration-api-feature-upgrade.html": "/docs/api/doc/elasticsearch/operation/operation-migration-get-feature-upgrade-status", "/en/elasticsearch/reference/*/migration-api.html": "/docs/api/doc/elasticsearch/group/endpoint-migration", @@ -6177,9 +5282,7 @@ "/en/elasticsearch/reference/*/mixing-exact-search-with-stemming.html": "/docs/solutions/search/full-text/search-relevance/mixing-exact-search-with-stemming", "/en/elasticsearch/reference/*/ml-ad-apis.html": "/docs/api/doc/elasticsearch/group/endpoint-ml-anomaly", "/en/elasticsearch/reference/*/ml-apis.html": "/docs/api/doc/elasticsearch/group/endpoint-ml", - "/en/elasticsearch/reference/*/ml-calendar-resource.html": "/guide/en/elasticsearch/reference/8.18/ml-calendar-resource.html", "/en/elasticsearch/reference/*/ml-close-job.html": "/docs/api/doc/elasticsearch/operation/operation-ml-close-job", - "/en/elasticsearch/reference/*/ml-datafeed-resource.html": "/guide/en/elasticsearch/reference/8.18/ml-datafeed-resource.html", "/en/elasticsearch/reference/*/ml-delete-calendar-event.html": "/docs/api/doc/elasticsearch/operation/operation-ml-delete-calendar-event", "/en/elasticsearch/reference/*/ml-delete-calendar-job.html": "/docs/api/doc/elasticsearch/operation/operation-ml-delete-calendar-job", "/en/elasticsearch/reference/*/ml-delete-calendar.html": "/docs/api/doc/elasticsearch/operation/operation-ml-delete-calendar", @@ -6194,8 +5297,6 @@ "/en/elasticsearch/reference/*/ml-dfa-analysis-objects.html": "/docs/api/doc/elasticsearch/operation/operation-ml-put-data-frame-analytics", "/en/elasticsearch/reference/*/ml-dfanalytics-resources.html": "/docs/api/doc/elasticsearch/operation/operation-ml-put-data-frame-analytics", "/en/elasticsearch/reference/*/ml-estimate-model-memory.html": "/docs/api/doc/elasticsearch/operation/operation-ml-estimate-model-memory", - "/en/elasticsearch/reference/*/ml-event-resource.html": "/guide/en/elasticsearch/reference/8.18/ml-event-resource.html", - "/en/elasticsearch/reference/*/ml-filter-resource.html": "/guide/en/elasticsearch/reference/8.18/ml-filter-resource.html", "/en/elasticsearch/reference/*/ml-flush-job.html": "/docs/api/doc/elasticsearch/operation/operation-ml-flush-job", "/en/elasticsearch/reference/*/ml-forecast.html": "/docs/api/doc/elasticsearch/operation/operation-ml-forecast", "/en/elasticsearch/reference/*/ml-get-bucket.html": "/docs/api/doc/elasticsearch/operation/operation-ml-get-buckets", @@ -6212,7 +5313,6 @@ "/en/elasticsearch/reference/*/ml-get-overall-buckets.html": "/docs/api/doc/elasticsearch/operation/operation-ml-get-overall-buckets", "/en/elasticsearch/reference/*/ml-get-record.html": "/docs/api/doc/elasticsearch/operation/operation-ml-get-records", "/en/elasticsearch/reference/*/ml-get-snapshot.html": "/docs/api/doc/elasticsearch/operation/operation-ml-get-model-snapshots", - "/en/elasticsearch/reference/*/ml-job-resource.html": "/guide/en/elasticsearch/reference/8.18/ml-job-resource.html", "/en/elasticsearch/reference/*/ml-jobstats.html": "/docs/api/doc/elasticsearch/operation/operation-ml-get-job-stats", "/en/elasticsearch/reference/*/ml-open-job.html": "/docs/api/doc/elasticsearch/operation/operation-ml-open-job", "/en/elasticsearch/reference/*/ml-post-calendar-event.html": "/docs/api/doc/elasticsearch/operation/operation-ml-post-calendar-events", @@ -6224,11 +5324,9 @@ "/en/elasticsearch/reference/*/ml-put-filter.html": "/docs/api/doc/elasticsearch/operation/operation-ml-put-filter", "/en/elasticsearch/reference/*/ml-put-job.html": "/docs/api/doc/elasticsearch/operation/operation-ml-put-job", "/en/elasticsearch/reference/*/ml-reset-job.html": "/docs/api/doc/elasticsearch/operation/operation-ml-reset-job", - "/en/elasticsearch/reference/*/ml-results-resource.html": "/guide/en/elasticsearch/reference/8.18/ml-results-resource.html", "/en/elasticsearch/reference/*/ml-revert-snapshot.html": "/docs/api/doc/elasticsearch/operation/operation-ml-revert-model-snapshot", "/en/elasticsearch/reference/*/ml-set-upgrade-mode.html": "/docs/api/doc/elasticsearch/operation/operation-ml-set-upgrade-mode", "/en/elasticsearch/reference/*/ml-settings.html": "/docs/reference/elasticsearch/configuration-reference/machine-learning-settings", - "/en/elasticsearch/reference/*/ml-snapshot-resource.html": "/guide/en/elasticsearch/reference/8.18/ml-snapshot-resource.html", "/en/elasticsearch/reference/*/ml-start-datafeed.html": "/docs/api/doc/elasticsearch/operation/operation-ml-start-datafeed", "/en/elasticsearch/reference/*/ml-stop-datafeed.html": "/docs/api/doc/elasticsearch/operation/operation-ml-stop-datafeed", "/en/elasticsearch/reference/*/ml-update-datafeed.html": "/docs/api/doc/elasticsearch/operation/operation-ml-update-datafeed", @@ -6251,7 +5349,6 @@ "/en/elasticsearch/reference/*/modules-gateway-dangling-indices.html": "/docs/reference/elasticsearch/configuration-reference/local-gateway", "/en/elasticsearch/reference/*/modules-gateway.html": "/docs/reference/elasticsearch/configuration-reference/local-gateway", "/en/elasticsearch/reference/*/modules-http.html": "/docs/reference/elasticsearch/configuration-reference/networking-settings", - "/en/elasticsearch/reference/*/modules-indices.html": "/guide/en/elasticsearch/reference/8.18/modules-indices.html", "/en/elasticsearch/reference/*/modules-network.html": "/docs/reference/elasticsearch/configuration-reference/networking-settings", "/en/elasticsearch/reference/*/modules-node.html": "/docs/reference/elasticsearch/configuration-reference/node-settings", "/en/elasticsearch/reference/*/modules-plugins.html": "/docs/deploy-manage/deploy/self-managed/plugins", @@ -6270,13 +5367,12 @@ "/en/elasticsearch/reference/*/modules-threadpool.html": "/docs/reference/elasticsearch/configuration-reference/thread-pool-settings", "/en/elasticsearch/reference/*/modules-transport.html": "/docs/reference/elasticsearch/configuration-reference/networking-settings", "/en/elasticsearch/reference/*/modules-tribe.html": "/docs/solutions/search/cross-cluster-search", - "/en/elasticsearch/reference/*/modules.html": "/guide/en/elasticsearch/reference/8.18/modules.html", "/en/elasticsearch/reference/*/monitor-elasticsearch-cluster.html": "/docs/deploy-manage/monitor/cloud-health-perf", + "/en/elasticsearch/reference/*/monitoring_frozen_indices.html": "/docs/api/doc/elasticsearch/operation/operation-indices-unfreeze", "/en/elasticsearch/reference/*/monitoring-overview.html": "/docs/deploy-manage/monitor/stack-monitoring", "/en/elasticsearch/reference/*/monitoring-production.html": "/docs/deploy-manage/monitor/stack-monitoring/elasticsearch-monitoring-self-managed", "/en/elasticsearch/reference/*/monitoring-settings.html": "/docs/reference/elasticsearch/configuration-reference/monitoring-settings", "/en/elasticsearch/reference/*/monitoring-troubleshooting.html": "/docs/troubleshoot/elasticsearch/monitoring-troubleshooting", - "/en/elasticsearch/reference/*/monitoring_frozen_indices.html": "/docs/api/doc/elasticsearch/operation/operation-indices-unfreeze", "/en/elasticsearch/reference/*/multi-fields.html": "/docs/reference/elasticsearch/mapping-reference/multi-fields", "/en/elasticsearch/reference/*/multi-index.html": "/docs/reference/elasticsearch/rest-apis/api-conventions", "/en/elasticsearch/reference/*/multi-search-template.html": "/docs/api/doc/elasticsearch/operation/operation-msearch-template", @@ -6419,7 +5515,6 @@ "/en/elasticsearch/reference/*/query-filter-context.html": "/docs/explore-analyze/query-filter/languages/querydsl", "/en/elasticsearch/reference/*/query-rules-apis.html": "/docs/api/doc/elasticsearch/group/endpoint-query_rules", "/en/elasticsearch/reference/*/quickstart.html": "/docs/solutions/search/api-quickstarts", - "/en/elasticsearch/reference/*/randomized-testing.html": "/guide/en/elasticsearch/reference/8.18/randomized-testing.html", "/en/elasticsearch/reference/*/range-enrich-policy-type.html": "/docs/manage-data/ingest/transform-enrich/example-enrich-data-by-matching-value-to-range", "/en/elasticsearch/reference/*/range.html": "/docs/reference/elasticsearch/mapping-reference/range", "/en/elasticsearch/reference/*/rank-feature.html": "/docs/reference/elasticsearch/mapping-reference/rank-feature", @@ -6435,84 +5530,7 @@ "/en/elasticsearch/reference/*/redact-processor.html": "/docs/reference/enrich-processor/redact-processor", "/en/elasticsearch/reference/*/regexp-syntax.html": "/docs/reference/query-languages/query-dsl/regexp-syntax", "/en/elasticsearch/reference/*/registered-domain-processor.html": "/docs/reference/enrich-processor/registered-domain-processor", - "/en/elasticsearch/reference/*/reindex-upgrade-inplace.html": "/guide/en/elasticsearch/reference/8.18/reindex-upgrade-inplace.html", - "/en/elasticsearch/reference/*/reindex-upgrade-remote.html": "/guide/en/elasticsearch/reference/8.18/reindex-upgrade-remote.html", - "/en/elasticsearch/reference/*/reindex-upgrade.html": "/guide/en/elasticsearch/reference/8.18/reindex-upgrade.html", "/en/elasticsearch/reference/*/rejected-requests.html": "/docs/troubleshoot/elasticsearch/rejected-requests", - "/en/elasticsearch/reference/*/release-highlights-7.0.0.html": "/guide/en/elasticsearch/reference/8.18/release-highlights.html", - "/en/elasticsearch/reference/*/release-highlights.html": "/guide/en/elasticsearch/reference/8.18/release-highlights.html", - "/en/elasticsearch/reference/*/release-notes-8.0.0-alpha1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.0.0-alpha1.html", - "/en/elasticsearch/reference/*/release-notes-8.0.0-alpha2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.0.0-alpha2.html", - "/en/elasticsearch/reference/*/release-notes-8.0.0-beta1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.0.0-beta1.html", - "/en/elasticsearch/reference/*/release-notes-8.0.0-rc1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.0.0-rc1.html", - "/en/elasticsearch/reference/*/release-notes-8.0.0-rc2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.0.0-rc2.html", - "/en/elasticsearch/reference/*/release-notes-8.0.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.0.0.html", - "/en/elasticsearch/reference/*/release-notes-8.0.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.0.1.html", - "/en/elasticsearch/reference/*/release-notes-8.1.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.1.0.html", - "/en/elasticsearch/reference/*/release-notes-8.1.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.1.1.html", - "/en/elasticsearch/reference/*/release-notes-8.1.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.1.2.html", - "/en/elasticsearch/reference/*/release-notes-8.1.3.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.1.3.html", - "/en/elasticsearch/reference/*/release-notes-8.10.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.10.0.html", - "/en/elasticsearch/reference/*/release-notes-8.10.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.10.1.html", - "/en/elasticsearch/reference/*/release-notes-8.10.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.10.2.html", - "/en/elasticsearch/reference/*/release-notes-8.10.3.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.10.3.html", - "/en/elasticsearch/reference/*/release-notes-8.10.4.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.10.4.html", - "/en/elasticsearch/reference/*/release-notes-8.11.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.11.0.html", - "/en/elasticsearch/reference/*/release-notes-8.11.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.11.1.html", - "/en/elasticsearch/reference/*/release-notes-8.11.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.11.2.html", - "/en/elasticsearch/reference/*/release-notes-8.11.3.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.11.3.html", - "/en/elasticsearch/reference/*/release-notes-8.11.4.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.11.4.html", - "/en/elasticsearch/reference/*/release-notes-8.12.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.12.0.html", - "/en/elasticsearch/reference/*/release-notes-8.12.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.12.1.html", - "/en/elasticsearch/reference/*/release-notes-8.12.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.12.2.html", - "/en/elasticsearch/reference/*/release-notes-8.13.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.13.0.html", - "/en/elasticsearch/reference/*/release-notes-8.13.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.13.1.html", - "/en/elasticsearch/reference/*/release-notes-8.13.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.13.2.html", - "/en/elasticsearch/reference/*/release-notes-8.13.3.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.13.3.html", - "/en/elasticsearch/reference/*/release-notes-8.13.4.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.13.4.html", - "/en/elasticsearch/reference/*/release-notes-8.14.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.14.0.html", - "/en/elasticsearch/reference/*/release-notes-8.14.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.14.1.html", - "/en/elasticsearch/reference/*/release-notes-8.14.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.14.2.html", - "/en/elasticsearch/reference/*/release-notes-8.14.3.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.14.3.html", - "/en/elasticsearch/reference/*/release-notes-8.15.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.15.0.html", - "/en/elasticsearch/reference/*/release-notes-8.15.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.15.1.html", - "/en/elasticsearch/reference/*/release-notes-8.15.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.15.2.html", - "/en/elasticsearch/reference/*/release-notes-8.15.3.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.15.3.html", - "/en/elasticsearch/reference/*/release-notes-8.15.4.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.15.4.html", - "/en/elasticsearch/reference/*/release-notes-8.15.5.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.15.5.html", - "/en/elasticsearch/reference/*/release-notes-8.16.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.16.0.html", - "/en/elasticsearch/reference/*/release-notes-8.16.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.16.1.html", - "/en/elasticsearch/reference/*/release-notes-8.16.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.16.2.html", - "/en/elasticsearch/reference/*/release-notes-8.16.3.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.16.3.html", - "/en/elasticsearch/reference/*/release-notes-8.17.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.17.0.html", - "/en/elasticsearch/reference/*/release-notes-8.17.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.17.1.html", - "/en/elasticsearch/reference/*/release-notes-8.2.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.2.0.html", - "/en/elasticsearch/reference/*/release-notes-8.2.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.2.1.html", - "/en/elasticsearch/reference/*/release-notes-8.2.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.2.2.html", - "/en/elasticsearch/reference/*/release-notes-8.2.3.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.2.3.html", - "/en/elasticsearch/reference/*/release-notes-8.3.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.3.0.html", - "/en/elasticsearch/reference/*/release-notes-8.3.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.3.1.html", - "/en/elasticsearch/reference/*/release-notes-8.3.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.3.2.html", - "/en/elasticsearch/reference/*/release-notes-8.3.3.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.3.3.html", - "/en/elasticsearch/reference/*/release-notes-8.4.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.4.0.html", - "/en/elasticsearch/reference/*/release-notes-8.4.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.4.1.html", - "/en/elasticsearch/reference/*/release-notes-8.4.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.4.2.html", - "/en/elasticsearch/reference/*/release-notes-8.4.3.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.4.3.html", - "/en/elasticsearch/reference/*/release-notes-8.5.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.5.0.html", - "/en/elasticsearch/reference/*/release-notes-8.5.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.5.1.html", - "/en/elasticsearch/reference/*/release-notes-8.5.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.5.2.html", - "/en/elasticsearch/reference/*/release-notes-8.5.3.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.5.3.html", - "/en/elasticsearch/reference/*/release-notes-8.6.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.6.0.html", - "/en/elasticsearch/reference/*/release-notes-8.6.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.6.1.html", - "/en/elasticsearch/reference/*/release-notes-8.6.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.6.2.html", - "/en/elasticsearch/reference/*/release-notes-8.7.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.7.0.html", - "/en/elasticsearch/reference/*/release-notes-8.7.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.7.1.html", - "/en/elasticsearch/reference/*/release-notes-8.8.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.8.0.html", - "/en/elasticsearch/reference/*/release-notes-8.8.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.8.1.html", - "/en/elasticsearch/reference/*/release-notes-8.8.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.8.2.html", - "/en/elasticsearch/reference/*/release-notes-8.9.0.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.9.0.html", - "/en/elasticsearch/reference/*/release-notes-8.9.1.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.9.1.html", - "/en/elasticsearch/reference/*/release-notes-8.9.2.html": "/guide/en/elasticsearch/reference/8.18/release-notes-8.9.2.html", "/en/elasticsearch/reference/*/remote-clusters-api-key.html": "/docs/deploy-manage/remote-clusters/remote-clusters-api-key", "/en/elasticsearch/reference/*/remote-clusters-cert.html": "/docs/deploy-manage/remote-clusters/remote-clusters-cert", "/en/elasticsearch/reference/*/remote-clusters-connect.html": "/docs/deploy-manage/remote-clusters/remote-clusters-self-managed", @@ -6706,30 +5724,6 @@ "/en/elasticsearch/reference/*/search-profile-queries.html": "/docs/reference/elasticsearch/rest-apis/search-profile#profiling-queries", "/en/elasticsearch/reference/*/search-profile.html": "/docs/reference/elasticsearch/rest-apis/search-profile", "/en/elasticsearch/reference/*/search-rank-eval.html": "/docs/api/doc/elasticsearch/operation/operation-rank-eval", - "/en/elasticsearch/reference/*/search-request-body.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-collapse.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-docvalue-fields.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-explain.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-from-size.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-highlighting.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-index-boost.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-inner-hits.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-min-score.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-named-queries-and-filters.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-post-filter.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-preference.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-query.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-rescore.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-script-fields.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-scroll.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-search-after.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-search-type.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-seq-no-primary-term.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-sort.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-source-filtering.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-stored-fields.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-track-total-hits.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", - "/en/elasticsearch/reference/*/search-request-version.html": "/guide/en/elasticsearch/reference/8.18/search-request-body.html", "/en/elasticsearch/reference/*/search-search.html": "/docs/api/doc/elasticsearch/operation/operation-search", "/en/elasticsearch/reference/*/search-settings.html": "/docs/reference/elasticsearch/configuration-reference/search-settings", "/en/elasticsearch/reference/*/search-shard-routing.html": "/docs/reference/elasticsearch/rest-apis/search-shard-routing", @@ -6829,7 +5823,6 @@ "/en/elasticsearch/reference/*/security-api-update-settings.html": "/docs/api/doc/elasticsearch/operation/operation-security-update-settings", "/en/elasticsearch/reference/*/security-api-update-user-profile-data.html": "/docs/api/doc/elasticsearch/operation/operation-security-update-user-profile-data", "/en/elasticsearch/reference/*/security-api.html": "/docs/api/doc/elasticsearch/group/endpoint-security", - "/en/elasticsearch/reference/*/security-backup.html": "/guide/en/elasticsearch/reference/8.18/security-backup.html", "/en/elasticsearch/reference/*/security-basic-setup-https.html": "/docs/deploy-manage/security/set-up-basic-security-plus-https", "/en/elasticsearch/reference/*/security-basic-setup.html": "/docs/deploy-manage/security/set-up-basic-security", "/en/elasticsearch/reference/*/security-clients-integrations.html": "/docs/deploy-manage/security/secure-clients-integrations", @@ -6938,7 +5931,6 @@ "/en/elasticsearch/reference/*/sql-client-apps-squirrel.html": "/docs/explore-analyze/query-filter/languages/sql-client-apps-squirrel", "/en/elasticsearch/reference/*/sql-client-apps-tableau-desktop.html": "/docs/explore-analyze/query-filter/languages/sql-client-apps-tableau-desktop", "/en/elasticsearch/reference/*/sql-client-apps-tableau-server.html": "/docs/explore-analyze/query-filter/languages/sql-client-apps-tableau-server", - "/en/elasticsearch/reference/*/sql-client-apps-tableau.html": "/guide/en/elasticsearch/reference/8.18/sql-client-apps-tableau.html", "/en/elasticsearch/reference/*/sql-client-apps-workbench.html": "/docs/explore-analyze/query-filter/languages/sql-client-apps-workbench", "/en/elasticsearch/reference/*/sql-client-apps.html": "/docs/explore-analyze/query-filter/languages/sql-client-apps", "/en/elasticsearch/reference/*/sql-commands.html": "/docs/reference/query-languages/sql/sql-commands", @@ -6972,7 +5964,7 @@ "/en/elasticsearch/reference/*/sql-overview.html": "/docs/explore-analyze/query-filter/languages/sql-overview", "/en/elasticsearch/reference/*/sql-pagination.html": "/docs/explore-analyze/query-filter/languages/sql-pagination", "/en/elasticsearch/reference/*/sql-rest-columnar.html": "/docs/explore-analyze/query-filter/languages/sql-rest-columnar", - "/en/elasticsearch/reference/*/sql-rest-fields.html": "/guide/en/elasticsearch/reference/current/sql-search-api.html#sql-search-api-request-body", + "/en/elasticsearch/reference/*/sql-rest-fields.html": "/docs/api/doc/elasticsearch/operation/operation-sql-query", "/en/elasticsearch/reference/*/sql-rest-filtering.html": "/docs/explore-analyze/query-filter/languages/sql-rest-filtering", "/en/elasticsearch/reference/*/sql-rest-format.html": "/docs/explore-analyze/query-filter/languages/sql-rest-format", "/en/elasticsearch/reference/*/sql-rest-overview.html": "/docs/explore-analyze/query-filter/languages/sql-rest-overview", @@ -6981,7 +5973,6 @@ "/en/elasticsearch/reference/*/sql-runtime-fields.html": "/docs/explore-analyze/query-filter/languages/sql-runtime-fields", "/en/elasticsearch/reference/*/sql-search-api.html": "/docs/api/doc/elasticsearch/operation/operation-sql-query", "/en/elasticsearch/reference/*/sql-security.html": "/docs/explore-analyze/query-filter/languages/sql-security", - "/en/elasticsearch/reference/*/sql-settings.html": "/guide/en/elasticsearch/reference/8.18/sql-settings.html", "/en/elasticsearch/reference/*/sql-spec.html": "/docs/reference/query-languages/sql/sql-spec", "/en/elasticsearch/reference/*/sql-syntax-describe-table.html": "/docs/reference/query-languages/sql/sql-syntax-describe-table", "/en/elasticsearch/reference/*/sql-syntax-reserved.html": "/docs/reference/query-languages/sql/sql-syntax-reserved", @@ -7027,8 +6018,6 @@ "/en/elasticsearch/reference/*/test-analyzer.html": "/docs/manage-data/data-store/text-analysis/test-an-analyzer", "/en/elasticsearch/reference/*/test-grok-pattern.html": "/docs/api/doc/elasticsearch/operation/operation-text-structure-test-grok-pattern", "/en/elasticsearch/reference/*/test-query-ruleset.html": "/docs/api/doc/elasticsearch/operation/operation-query-rules-test", - "/en/elasticsearch/reference/*/testing-framework.html": "/guide/en/elasticsearch/reference/8.18/testing-framework.html", - "/en/elasticsearch/reference/*/testing.html": "/guide/en/elasticsearch/reference/8.18/testing.html", "/en/elasticsearch/reference/*/text-structure-apis.html": "/docs/api/doc/elasticsearch/group/endpoint-text_structure", "/en/elasticsearch/reference/*/text.html": "/docs/reference/elasticsearch/mapping-reference/text", "/en/elasticsearch/reference/*/token-authentication-services.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/token-based-authentication-services", @@ -7053,7 +6042,6 @@ "/en/elasticsearch/reference/*/transform-usage.html": "/docs/explore-analyze/transforms/transform-usage", "/en/elasticsearch/reference/*/transform.html": "/docs/explore-analyze/alerts-cases/watcher/transform", "/en/elasticsearch/reference/*/transforms.html": "/docs/explore-analyze/transforms", - "/en/elasticsearch/reference/*/transient-settings-migration-guide.html": "/guide/en/elasticsearch/reference/8.18/transient-settings-migration-guide.html", "/en/elasticsearch/reference/*/trb-security-internalserver.html": "/docs/troubleshoot/elasticsearch/security/trb-security-internalserver", "/en/elasticsearch/reference/*/trb-security-kerberos.html": "/docs/troubleshoot/elasticsearch/security/trb-security-kerberos", "/en/elasticsearch/reference/*/trb-security-maccurl.html": "/docs/troubleshoot/elasticsearch/security/trb-security-maccurl", @@ -7084,7 +6072,6 @@ "/en/elasticsearch/reference/*/tutorial-manage-new-data-stream.html": "/docs/manage-data/lifecycle/data-stream/tutorial-create-data-stream-with-lifecycle", "/en/elasticsearch/reference/*/tutorial-migrate-data-stream-from-ilm-to-dsl.html": "/docs/manage-data/lifecycle/data-stream/tutorial-migrate-ilm-managed-data-stream-to-data-stream-lifecycle", "/en/elasticsearch/reference/*/unfreeze-index-api.html": "/docs/api/doc/elasticsearch/operation/operation-indices-unfreeze", - "/en/elasticsearch/reference/*/unit-tests.html": "/guide/en/elasticsearch/reference/8.18/unit-tests.html", "/en/elasticsearch/reference/*/unsigned-long.html": "/docs/reference/elasticsearch/mapping-reference/unsigned-long", "/en/elasticsearch/reference/*/update-connector-api-key-id-api.html": "/docs/api/doc/elasticsearch/operation/operation-connector-update-api-key-id", "/en/elasticsearch/reference/*/update-connector-configuration-api.html": "/docs/api/doc/elasticsearch/operation/operation-connector-update-configuration", @@ -7121,7 +6108,6 @@ "/en/elasticsearch/reference/*/user-lookup.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/looking-up-users-without-authentication", "/en/elasticsearch/reference/*/user-profile.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/user-profiles", "/en/elasticsearch/reference/*/users-command.html": "/docs/reference/elasticsearch/command-line-tools/users-command", - "/en/elasticsearch/reference/*/using-elasticsearch-test-classes.html": "/guide/en/elasticsearch/reference/8.18/using-elasticsearch-test-classes.html", "/en/elasticsearch/reference/*/using-policies-rollover.html": "/docs/manage-data/lifecycle/index-lifecycle-management/tutorial-automate-rollover", "/en/elasticsearch/reference/*/vector-queries.html": "/docs/reference/query-languages/query-dsl/vector-queries", "/en/elasticsearch/reference/*/verify-repo-integrity-api.html": "/docs/api/doc/elasticsearch/operation/operation-snapshot-repository-verify-integrity", @@ -7148,7 +6134,6 @@ "/en/elasticsearch/reference/*/watcher-limitations.html": "/docs/explore-analyze/alerts-cases/watcher/watcher-limitations", "/en/elasticsearch/reference/*/watcher-troubleshooting.html": "/docs/troubleshoot/elasticsearch/watcher-troubleshooting", "/en/elasticsearch/reference/*/watching-meetup-data.html": "/docs/explore-analyze/alerts-cases/watcher/example-watches", - "/en/elasticsearch/reference/*/why-randomized-testing.html": "/guide/en/elasticsearch/reference/8.18/why-randomized-testing.html", "/en/elasticsearch/reference/*/wildcard.html": "/docs/reference/elasticsearch/mapping-reference/keyword", "/en/elasticsearch/reference/*/xpack-alerting.html": "/docs/explore-analyze/alerts-cases/watcher", "/en/elasticsearch/reference/*/xpack-api.html": "/docs/reference/elasticsearch/rest-apis", @@ -7162,7 +6147,6 @@ "/en/elasticsearch/reference/master/_throttling.html": "/docs/explore-analyze/alerts-cases/watcher/throttling", "/en/elasticsearch/reference/master/data-stream-reindex-api.html": "/docs/reference/elasticsearch/rest-apis/reindex-data-stream", "/en/elasticsearch/reference/master/indices-create-index-from-source.html": "/docs/reference/elasticsearch/rest-apis/create-index-from-source", - "/en/elasticsearch/reference/master/infer-service-elastic.html": "/docs/explore-analyze/elastic-inference/inference-api/elastic-inference-service-eis", "/en/elasticsearch/reference/master/migrating-9.0.html": "/docs/release-notes/elasticsearch", "/en/elasticsearch/reference/master/rank-vectors.html": "/docs/reference/elasticsearch/mapping-reference/rank-vectors", "/en/elasticsearch/reference/master/release-notes-9.0.0.html": "/docs/release-notes/elasticsearch", @@ -7175,13 +6159,6 @@ "/en/esf/*/aws-serverless-troubleshooting.html": "/docs/troubleshoot/ingest/elastic-serverless-forwarder", "/en/esf/*/index.html": "/docs/reference/aws-forwarder", "/en/fleet/*/_elastic_agent_configuration_encryption.html": "/docs/reference/fleet/_agent_configuration_encryption", - "/en/fleet/*/add-a-fleet-server.html": "/docs/reference/fleet/deployment-models", - "/en/fleet/*/add-cloud-metadata-processor.html": "/docs/reference/fleet/add-cloud-metadata-processor", - "/en/fleet/*/add-fleet-server-cloud.html": "/docs/reference/fleet/add-fleet-server-cloud", - "/en/fleet/*/add-fleet-server-kubernetes.html": "/docs/reference/fleet/add-fleet-server-kubernetes", - "/en/fleet/*/add-fleet-server-mixed.html": "/docs/reference/fleet/add-fleet-server-mixed", - "/en/fleet/*/add-fleet-server-on-prem.html": "/docs/reference/fleet/add-fleet-server-on-prem", - "/en/fleet/*/add-integration-to-policy.html": "/docs/reference/fleet/add-integration-to-policy", "/en/fleet/*/add_cloudfoundry_metadata-processor.html": "/docs/reference/fleet/add_cloudfoundry_metadata-processor", "/en/fleet/*/add_docker_metadata-processor.html": "/docs/reference/fleet/add_docker_metadata-processor", "/en/fleet/*/add_fields-processor.html": "/docs/reference/fleet/add_fields-processor", @@ -7195,13 +6172,19 @@ "/en/fleet/*/add_observer_metadata-processor.html": "/docs/reference/fleet/add_observer_metadata-processor", "/en/fleet/*/add_process_metadata-processor.html": "/docs/reference/fleet/add_process_metadata-processor", "/en/fleet/*/add_tags-processor.html": "/docs/reference/fleet/add_tags-processor", + "/en/fleet/*/add-a-fleet-server.html": "/docs/reference/fleet/deployment-models", + "/en/fleet/*/add-cloud-metadata-processor.html": "/docs/reference/fleet/add-cloud-metadata-processor", + "/en/fleet/*/add-fleet-server-cloud.html": "/docs/reference/fleet/add-fleet-server-cloud", + "/en/fleet/*/add-fleet-server-kubernetes.html": "/docs/reference/fleet/add-fleet-server-kubernetes", + "/en/fleet/*/add-fleet-server-mixed.html": "/docs/reference/fleet/add-fleet-server-mixed", + "/en/fleet/*/add-fleet-server-on-prem.html": "/docs/reference/fleet/add-fleet-server-on-prem", + "/en/fleet/*/add-integration-to-policy.html": "/docs/reference/fleet/add-integration-to-policy", "/en/fleet/*/advanced-kubernetes-managed-by-fleet.html": "/docs/reference/fleet/advanced-kubernetes-managed-by-fleet", "/en/fleet/*/agent-environment-variables.html": "/docs/reference/fleet/agent-environment-variables", "/en/fleet/*/agent-health-status.html": "/docs/reference/fleet/agent-health-status", "/en/fleet/*/agent-policy.html": "/docs/reference/fleet/agent-policy", "/en/fleet/*/agent-provider.html": "/docs/reference/fleet/agent-provider", "/en/fleet/*/air-gapped.html": "/docs/reference/fleet/air-gapped", - "/en/fleet/*/apis.html": "/guide/en/fleet/8.18/apis.html", "/en/fleet/*/beats-agent-comparison.html": "/docs/manage-data/ingest/tools", "/en/fleet/*/certificates-rotation.html": "/docs/reference/fleet/certificates-rotation", "/en/fleet/*/community_id-processor.html": "/docs/reference/fleet/community_id-processor", @@ -7222,13 +6205,13 @@ "/en/fleet/*/data-streams-scenario3.html": "/docs/reference/fleet/data-streams-scenario3", "/en/fleet/*/data-streams.html": "/docs/reference/fleet/data-streams", "/en/fleet/*/debug-standalone-agents.html": "/docs/reference/fleet/debug-standalone-agents", - "/en/fleet/*/decode-json-fields.html": "/docs/reference/fleet/decode-json-fields", "/en/fleet/*/decode_base64_field-processor.html": "/docs/reference/fleet/decode_base64_field-processor", "/en/fleet/*/decode_cef-processor.html": "/docs/reference/fleet/decode_cef-processor", "/en/fleet/*/decode_csv_fields-processor.html": "/docs/reference/fleet/decode_csv_fields-processor", "/en/fleet/*/decode_duration-processor.html": "/docs/reference/fleet/decode_duration-processor", - "/en/fleet/*/decode_xml-processor.html": "/docs/reference/fleet/decode_xml-processor", "/en/fleet/*/decode_xml_wineventlog-processor.html": "/docs/reference/fleet/decode_xml_wineventlog-processor", + "/en/fleet/*/decode_xml-processor.html": "/docs/reference/fleet/decode_xml-processor", + "/en/fleet/*/decode-json-fields.html": "/docs/reference/fleet/decode-json-fields", "/en/fleet/*/decompress_gzip_field-processor.html": "/docs/reference/fleet/decompress_gzip_field-processor", "/en/fleet/*/detect_mime_type-processor.html": "/docs/reference/fleet/detect_mime_type-processor", "/en/fleet/*/dissect-processor.html": "/docs/reference/fleet/dissect-processor", @@ -7275,7 +6258,6 @@ "/en/fleet/*/fleet-agent-proxy-support.html": "/docs/reference/fleet/fleet-agent-proxy-support", "/en/fleet/*/fleet-agent-serverless-restrictions.html": "/docs/reference/fleet/fleet-agent-serverless-restrictions", "/en/fleet/*/fleet-api-docs.html": "/docs/reference/fleet/fleet-api-docs", - "/en/fleet/*/fleet-apis.html": "/guide/en/fleet/8.18/fleet-apis.html", "/en/fleet/*/fleet-deployment-models.html": "/docs/reference/fleet/deployment-models", "/en/fleet/*/fleet-elastic-agent-quick-start.html": "/docs/reference/fleet", "/en/fleet/*/fleet-enrollment-tokens.html": "/docs/reference/fleet/fleet-enrollment-tokens", @@ -7298,7 +6280,6 @@ "/en/fleet/*/ingest-pipeline-kubernetes.html": "/docs/reference/fleet/ingest-pipeline-kubernetes", "/en/fleet/*/install-agent-msi.html": "/docs/reference/fleet/install-agent-msi", "/en/fleet/*/install-elastic-agents-in-containers.html": "/docs/reference/fleet/install-elastic-agents-in-containers", - "/en/fleet/*/install-fleet-managed-agent.html": "/guide/en/fleet/8.18/install-fleet-managed-agent.html", "/en/fleet/*/install-fleet-managed-elastic-agent.html": "/docs/reference/fleet/install-fleet-managed-elastic-agent", "/en/fleet/*/install-on-kubernetes-using-helm.html": "/docs/reference/fleet/install-on-kubernetes-using-helm", "/en/fleet/*/install-standalone-elastic-agent.html": "/docs/reference/fleet/install-standalone-elastic-agent", @@ -7309,9 +6290,9 @@ "/en/fleet/*/integrations.html": "/docs/reference/fleet/manage-integrations", "/en/fleet/*/kafka-output-settings.html": "/docs/reference/fleet/kafka-output-settings", "/en/fleet/*/kafka-output.html": "/docs/reference/fleet/kafka-output", - "/en/fleet/*/kubernetes-provider.html": "/docs/reference/fleet/kubernetes-provider", "/en/fleet/*/kubernetes_leaderelection-provider.html": "/docs/reference/fleet/kubernetes_leaderelection-provider", "/en/fleet/*/kubernetes_secrets-provider.html": "/docs/reference/fleet/kubernetes_secrets-provider", + "/en/fleet/*/kubernetes-provider.html": "/docs/reference/fleet/kubernetes-provider", "/en/fleet/*/local-dynamic-provider.html": "/docs/reference/fleet/local-dynamic-provider", "/en/fleet/*/local-provider.html": "/docs/reference/fleet/local-provider", "/en/fleet/*/logstash-output.html": "/docs/reference/fleet/logstash-output", @@ -7438,21 +6419,24 @@ "/en/integrations/*/akamai.html": "/docs/reference/integrations/akamai", "/en/integrations/*/all_integrations.html": "/docs/reference/integrations/all_integrations", "/en/integrations/*/amazon_security_lake.html": "/docs/reference/integrations/amazon_security_lake", - "/en/integrations/*/apache-intro.html": "/docs/reference/integrations/apache-intro", - "/en/integrations/*/apache.html": "/docs/reference/integrations/apache", "/en/integrations/*/apache_spark.html": "/docs/reference/integrations/apache_spark", "/en/integrations/*/apache_tomcat.html": "/docs/reference/integrations/apache_tomcat", + "/en/integrations/*/apache-intro.html": "/docs/reference/integrations/apache-intro", + "/en/integrations/*/apache.html": "/docs/reference/integrations/apache", "/en/integrations/*/apm.html": "/docs/reference/integrations/apm", "/en/integrations/*/arista_ngfw.html": "/docs/reference/integrations/arista_ngfw", - "/en/integrations/*/atlassian-intro.html": "/docs/reference/integrations/atlassian-intro", "/en/integrations/*/atlassian_bitbucket.html": "/docs/reference/integrations/atlassian_bitbucket", "/en/integrations/*/atlassian_confluence.html": "/docs/reference/integrations/atlassian_confluence", "/en/integrations/*/atlassian_jira.html": "/docs/reference/integrations/atlassian_jira", + "/en/integrations/*/atlassian-intro.html": "/docs/reference/integrations/atlassian-intro", + "/en/integrations/*/auditd_manager.html": "/docs/reference/integrations/auditd_manager", "/en/integrations/*/auditd-intro.html": "/docs/reference/integrations/auditd-intro", "/en/integrations/*/auditd.html": "/docs/reference/integrations/auditd", - "/en/integrations/*/auditd_manager.html": "/docs/reference/integrations/auditd_manager", "/en/integrations/*/auth0.html": "/docs/reference/integrations/auth0", "/en/integrations/*/authentik.html": "/docs/reference/integrations/authentik", + "/en/integrations/*/aws_bedrock.html": "/docs/reference/integrations/aws_bedrock", + "/en/integrations/*/aws_logs.html": "/docs/reference/integrations/aws_logs", + "/en/integrations/*/aws_mq.html": "/docs/reference/integrations/aws_mq", "/en/integrations/*/aws-apigateway.html": "/docs/reference/integrations/aws/apigateway", "/en/integrations/*/aws-awshealth.html": "/docs/reference/integrations/aws/awshealth", "/en/integrations/*/aws-billing.html": "/docs/reference/integrations/aws/billing", @@ -7475,8 +6459,8 @@ "/en/integrations/*/aws-rds.html": "/docs/reference/integrations/aws/rds", "/en/integrations/*/aws-redshift.html": "/docs/reference/integrations/aws/redshift", "/en/integrations/*/aws-route53.html": "/docs/reference/integrations/aws/route53", - "/en/integrations/*/aws-s3.html": "/docs/reference/integrations/aws/s3", "/en/integrations/*/aws-s3_storage_lens.html": "/docs/reference/integrations/aws/s3_storage_lens", + "/en/integrations/*/aws-s3.html": "/docs/reference/integrations/aws/s3", "/en/integrations/*/aws-securityhub.html": "/docs/reference/integrations/aws/securityhub", "/en/integrations/*/aws-sns.html": "/docs/reference/integrations/aws/sns", "/en/integrations/*/aws-sqs.html": "/docs/reference/integrations/aws/sqs", @@ -7486,21 +6470,8 @@ "/en/integrations/*/aws-vpn.html": "/docs/reference/integrations/aws/vpn", "/en/integrations/*/aws-waf.html": "/docs/reference/integrations/aws/waf", "/en/integrations/*/aws.html": "/docs/reference/integrations/aws", - "/en/integrations/*/aws_bedrock.html": "/docs/reference/integrations/aws_bedrock", - "/en/integrations/*/aws_logs.html": "/docs/reference/integrations/aws_logs", - "/en/integrations/*/aws_mq.html": "/docs/reference/integrations/aws_mq", "/en/integrations/*/awsfargate.html": "/docs/reference/integrations/awsfargate", "/en/integrations/*/awsfirehose.html": "/docs/reference/integrations/awsfirehose", - "/en/integrations/*/azure-activitylogs.html": "/docs/reference/integrations/azure/activitylogs", - "/en/integrations/*/azure-adlogs.html": "/docs/reference/integrations/azure/adlogs", - "/en/integrations/*/azure-application_gateway.html": "/docs/reference/integrations/azure/application_gateway", - "/en/integrations/*/azure-eventhub.html": "/docs/reference/integrations/azure/eventhub", - "/en/integrations/*/azure-events.html": "/docs/reference/integrations/azure/events", - "/en/integrations/*/azure-firewall_logs.html": "/docs/reference/integrations/azure/firewall_logs", - "/en/integrations/*/azure-graphactivitylogs.html": "/docs/reference/integrations/azure/graphactivitylogs", - "/en/integrations/*/azure-platformlogs.html": "/docs/reference/integrations/azure/platformlogs", - "/en/integrations/*/azure-springcloudlogs.html": "/docs/reference/integrations/azure/springcloudlogs", - "/en/integrations/*/azure.html": "/docs/reference/integrations/azure", "/en/integrations/*/azure_app_service.html": "/docs/reference/integrations/azure_app_service", "/en/integrations/*/azure_application_insights-app_insights.html": "/docs/reference/integrations/azure_application_insights/app_insights", "/en/integrations/*/azure_application_insights-app_state.html": "/docs/reference/integrations/azure_application_insights/app_state", @@ -7510,8 +6481,8 @@ "/en/integrations/*/azure_frontdoor.html": "/docs/reference/integrations/azure_frontdoor", "/en/integrations/*/azure_functions.html": "/docs/reference/integrations/azure_functions", "/en/integrations/*/azure_logs.html": "/docs/reference/integrations/azure_logs", - "/en/integrations/*/azure_metrics-compute_vm.html": "/docs/reference/integrations/azure_metrics/compute_vm", "/en/integrations/*/azure_metrics-compute_vm_scaleset.html": "/docs/reference/integrations/azure_metrics/compute_vm_scaleset", + "/en/integrations/*/azure_metrics-compute_vm.html": "/docs/reference/integrations/azure_metrics/compute_vm", "/en/integrations/*/azure_metrics-container_instance.html": "/docs/reference/integrations/azure_metrics/container_instance", "/en/integrations/*/azure_metrics-container_registry.html": "/docs/reference/integrations/azure_metrics/container_registry", "/en/integrations/*/azure_metrics-container_service.html": "/docs/reference/integrations/azure_metrics/container_service", @@ -7522,9 +6493,19 @@ "/en/integrations/*/azure_network_watcher_nsg.html": "/docs/reference/integrations/azure_network_watcher_nsg", "/en/integrations/*/azure_network_watcher_vnet.html": "/docs/reference/integrations/azure_network_watcher_vnet", "/en/integrations/*/azure_openai.html": "/docs/reference/integrations/azure_openai", + "/en/integrations/*/azure-activitylogs.html": "/docs/reference/integrations/azure/activitylogs", + "/en/integrations/*/azure-adlogs.html": "/docs/reference/integrations/azure/adlogs", + "/en/integrations/*/azure-application_gateway.html": "/docs/reference/integrations/azure/application_gateway", + "/en/integrations/*/azure-eventhub.html": "/docs/reference/integrations/azure/eventhub", + "/en/integrations/*/azure-events.html": "/docs/reference/integrations/azure/events", + "/en/integrations/*/azure-firewall_logs.html": "/docs/reference/integrations/azure/firewall_logs", + "/en/integrations/*/azure-graphactivitylogs.html": "/docs/reference/integrations/azure/graphactivitylogs", + "/en/integrations/*/azure-platformlogs.html": "/docs/reference/integrations/azure/platformlogs", + "/en/integrations/*/azure-springcloudlogs.html": "/docs/reference/integrations/azure/springcloudlogs", + "/en/integrations/*/azure.html": "/docs/reference/integrations/azure", + "/en/integrations/*/barracuda_cloudgen_firewall.html": "/docs/reference/integrations/barracuda_cloudgen_firewall", "/en/integrations/*/barracuda-intro.html": "/docs/reference/integrations/barracuda-intro", "/en/integrations/*/barracuda.html": "/docs/reference/integrations/barracuda", - "/en/integrations/*/barracuda_cloudgen_firewall.html": "/docs/reference/integrations/barracuda_cloudgen_firewall", "/en/integrations/*/bbot.html": "/docs/reference/integrations/bbot", "/en/integrations/*/beaconing.html": "/docs/reference/integrations/beaconing", "/en/integrations/*/beat.html": "/docs/reference/integrations/beat", @@ -7540,27 +6521,27 @@ "/en/integrations/*/cef.html": "/docs/reference/integrations/cef", "/en/integrations/*/cel.html": "/docs/reference/integrations/cel", "/en/integrations/*/ceph.html": "/docs/reference/integrations/ceph", - "/en/integrations/*/checkpoint.html": "/docs/reference/integrations/checkpoint", "/en/integrations/*/checkpoint_email.html": "/docs/reference/integrations/checkpoint_email", "/en/integrations/*/checkpoint_harmony_endpoint.html": "/docs/reference/integrations/checkpoint_harmony_endpoint", + "/en/integrations/*/checkpoint.html": "/docs/reference/integrations/checkpoint", "/en/integrations/*/cilium_tetragon.html": "/docs/reference/integrations/cilium_tetragon", "/en/integrations/*/cisa_kevs.html": "/docs/reference/integrations/cisa_kevs", - "/en/integrations/*/cisco-intro.html": "/docs/reference/integrations/cisco-intro", "/en/integrations/*/cisco_aironet.html": "/docs/reference/integrations/cisco_aironet", "/en/integrations/*/cisco_asa.html": "/docs/reference/integrations/cisco_asa", "/en/integrations/*/cisco_duo.html": "/docs/reference/integrations/cisco_duo", "/en/integrations/*/cisco_ftd.html": "/docs/reference/integrations/cisco_ftd", "/en/integrations/*/cisco_ios.html": "/docs/reference/integrations/cisco_ios", "/en/integrations/*/cisco_ise.html": "/docs/reference/integrations/cisco_ise", - "/en/integrations/*/cisco_meraki.html": "/docs/reference/integrations/cisco_meraki", "/en/integrations/*/cisco_meraki_metrics.html": "/docs/reference/integrations/cisco_meraki_metrics", + "/en/integrations/*/cisco_meraki.html": "/docs/reference/integrations/cisco_meraki", "/en/integrations/*/cisco_nexus.html": "/docs/reference/integrations/cisco_nexus", "/en/integrations/*/cisco_secure_email_gateway.html": "/docs/reference/integrations/cisco_secure_email_gateway", "/en/integrations/*/cisco_secure_endpoint.html": "/docs/reference/integrations/cisco_secure_endpoint", "/en/integrations/*/cisco_umbrella.html": "/docs/reference/integrations/cisco_umbrella", - "/en/integrations/*/citrix-intro.html": "/docs/reference/integrations/citrix-intro", + "/en/integrations/*/cisco-intro.html": "/docs/reference/integrations/cisco-intro", "/en/integrations/*/citrix_adc.html": "/docs/reference/integrations/citrix_adc", "/en/integrations/*/citrix_waf.html": "/docs/reference/integrations/citrix_waf", + "/en/integrations/*/citrix-intro.html": "/docs/reference/integrations/citrix-intro", "/en/integrations/*/claroty_ctd.html": "/docs/reference/integrations/claroty_ctd", "/en/integrations/*/cloud_asset_inventory.html": "/docs/reference/integrations/cloud_asset_inventory", "/en/integrations/*/cloud_defend.html": "/docs/reference/integrations/cloud_defend", @@ -7568,9 +6549,9 @@ "/en/integrations/*/cloud_security_posture-kspm.html": "/docs/reference/integrations/cloud_security_posture/kspm", "/en/integrations/*/cloud_security_posture-vuln_mgmt.html": "/docs/reference/integrations/cloud_security_posture/vuln_mgmt", "/en/integrations/*/cloud_security_posture.html": "/docs/reference/integrations/cloud_security_posture", + "/en/integrations/*/cloudflare_logpush.html": "/docs/reference/integrations/cloudflare_logpush", "/en/integrations/*/cloudflare-intro.html": "/docs/reference/integrations/cloudflare-intro", "/en/integrations/*/cloudflare.html": "/docs/reference/integrations/cloudflare", - "/en/integrations/*/cloudflare_logpush.html": "/docs/reference/integrations/cloudflare_logpush", "/en/integrations/*/cockroachdb.html": "/docs/reference/integrations/cockroachdb", "/en/integrations/*/containerd.html": "/docs/reference/integrations/containerd", "/en/integrations/*/coredns.html": "/docs/reference/integrations/coredns", @@ -7580,9 +6561,9 @@ "/en/integrations/*/cribl.html": "/docs/reference/integrations/cribl", "/en/integrations/*/crowdstrike-intro.html": "/docs/reference/integrations/crowdstrike-intro", "/en/integrations/*/crowdstrike.html": "/docs/reference/integrations/crowdstrike", - "/en/integrations/*/cyberark-intro.html": "/docs/reference/integrations/cyberark-intro", "/en/integrations/*/cyberark_epm.html": "/docs/reference/integrations/cyberark_epm", "/en/integrations/*/cyberark_pta.html": "/docs/reference/integrations/cyberark_pta", + "/en/integrations/*/cyberark-intro.html": "/docs/reference/integrations/cyberark-intro", "/en/integrations/*/cyberarkpas.html": "/docs/reference/integrations/cyberarkpas", "/en/integrations/*/cybereason.html": "/docs/reference/integrations/cybereason", "/en/integrations/*/cylance.html": "/docs/reference/integrations/cylance", @@ -7591,10 +6572,10 @@ "/en/integrations/*/dga.html": "/docs/reference/integrations/dga", "/en/integrations/*/digital_guardian.html": "/docs/reference/integrations/digital_guardian", "/en/integrations/*/docker.html": "/docs/reference/integrations/docker", - "/en/integrations/*/elastic-security-intro.html": "/docs/reference/integrations/elastic-security-intro", - "/en/integrations/*/elastic-stack-monitoring-intro.html": "/docs/reference/integrations/elastic-stack-monitoring-intro", "/en/integrations/*/elastic_agent.html": "/docs/reference/integrations/elastic_agent", "/en/integrations/*/elastic_package_registry.html": "/docs/reference/integrations/elastic_package_registry", + "/en/integrations/*/elastic-security-intro.html": "/docs/reference/integrations/elastic-security-intro", + "/en/integrations/*/elastic-stack-monitoring-intro.html": "/docs/reference/integrations/elastic-stack-monitoring-intro", "/en/integrations/*/elasticsearch.html": "/docs/reference/integrations/elasticsearch", "/en/integrations/*/endpoint.html": "/docs/reference/integrations/endpoint", "/en/integrations/*/entityanalytics_ad.html": "/docs/reference/integrations/entityanalytics_ad", @@ -7604,8 +6585,8 @@ "/en/integrations/*/eset_protect.html": "/docs/reference/integrations/eset_protect", "/en/integrations/*/ess_billing.html": "/docs/reference/integrations/ess_billing", "/en/integrations/*/etcd.html": "/docs/reference/integrations/etcd", - "/en/integrations/*/f5-intro.html": "/docs/reference/integrations/f5-intro", "/en/integrations/*/f5_bigip.html": "/docs/reference/integrations/f5_bigip", + "/en/integrations/*/f5-intro.html": "/docs/reference/integrations/f5-intro", "/en/integrations/*/falco.html": "/docs/reference/integrations/falco", "/en/integrations/*/fim.html": "/docs/reference/integrations/fim", "/en/integrations/*/fireeye.html": "/docs/reference/integrations/fireeye", @@ -7613,12 +6594,15 @@ "/en/integrations/*/fleet_server.html": "/docs/reference/integrations/fleet_server", "/en/integrations/*/forcepoint_web.html": "/docs/reference/integrations/forcepoint_web", "/en/integrations/*/forgerock.html": "/docs/reference/integrations/forgerock", - "/en/integrations/*/fortinet-intro.html": "/docs/reference/integrations/fortinet-intro", "/en/integrations/*/fortinet_fortiedr.html": "/docs/reference/integrations/fortinet_fortiedr", "/en/integrations/*/fortinet_fortigate.html": "/docs/reference/integrations/fortinet_fortigate", "/en/integrations/*/fortinet_fortimail.html": "/docs/reference/integrations/fortinet_fortimail", "/en/integrations/*/fortinet_fortimanager.html": "/docs/reference/integrations/fortinet_fortimanager", "/en/integrations/*/fortinet_fortiproxy.html": "/docs/reference/integrations/fortinet_fortiproxy", + "/en/integrations/*/fortinet-intro.html": "/docs/reference/integrations/fortinet-intro", + "/en/integrations/*/gcp_metrics.html": "/docs/reference/integrations/gcp_metrics", + "/en/integrations/*/gcp_pubsub.html": "/docs/reference/integrations/gcp_pubsub", + "/en/integrations/*/gcp_vertexai.html": "/docs/reference/integrations/gcp_vertexai", "/en/integrations/*/gcp-audit.html": "/docs/reference/integrations/gcp/audit", "/en/integrations/*/gcp-billing.html": "/docs/reference/integrations/gcp/billing", "/en/integrations/*/gcp-cloudrun.html": "/docs/reference/integrations/gcp/cloudrun", @@ -7635,20 +6619,17 @@ "/en/integrations/*/gcp-storage.html": "/docs/reference/integrations/gcp/storage", "/en/integrations/*/gcp-vpcflow.html": "/docs/reference/integrations/gcp/vpcflow", "/en/integrations/*/gcp.html": "/docs/reference/integrations/gcp", - "/en/integrations/*/gcp_metrics.html": "/docs/reference/integrations/gcp_metrics", - "/en/integrations/*/gcp_pubsub.html": "/docs/reference/integrations/gcp_pubsub", - "/en/integrations/*/gcp_vertexai.html": "/docs/reference/integrations/gcp_vertexai", "/en/integrations/*/gigamon.html": "/docs/reference/integrations/gigamon", "/en/integrations/*/github.html": "/docs/reference/integrations/github", "/en/integrations/*/gitlab.html": "/docs/reference/integrations/gitlab", "/en/integrations/*/goflow2.html": "/docs/reference/integrations/goflow2", "/en/integrations/*/golang.html": "/docs/reference/integrations/golang", - "/en/integrations/*/google-cloud-intro.html": "/docs/reference/integrations/google-cloud-intro", - "/en/integrations/*/google-intro.html": "/docs/reference/integrations/google-intro", "/en/integrations/*/google_cloud_storage.html": "/docs/reference/integrations/google_cloud_storage", "/en/integrations/*/google_scc.html": "/docs/reference/integrations/google_scc", "/en/integrations/*/google_secops.html": "/docs/reference/integrations/google_secops", "/en/integrations/*/google_workspace.html": "/docs/reference/integrations/google_workspace", + "/en/integrations/*/google-cloud-intro.html": "/docs/reference/integrations/google-cloud-intro", + "/en/integrations/*/google-intro.html": "/docs/reference/integrations/google-intro", "/en/integrations/*/hadoop.html": "/docs/reference/integrations/hadoop", "/en/integrations/*/haproxy.html": "/docs/reference/integrations/haproxy", "/en/integrations/*/hashicorp_vault.html": "/docs/reference/integrations/hashicorp_vault", @@ -7658,13 +6639,13 @@ "/en/integrations/*/httpjson.html": "/docs/reference/integrations/httpjson", "/en/integrations/*/ibmmq.html": "/docs/reference/integrations/ibmmq", "/en/integrations/*/iis.html": "/docs/reference/integrations/iis", + "/en/integrations/*/imperva_cloud_waf.html": "/docs/reference/integrations/imperva_cloud_waf", "/en/integrations/*/imperva-intro.html": "/docs/reference/integrations/imperva-intro", "/en/integrations/*/imperva.html": "/docs/reference/integrations/imperva", - "/en/integrations/*/imperva_cloud_waf.html": "/docs/reference/integrations/imperva_cloud_waf", "/en/integrations/*/influxdb.html": "/docs/reference/integrations/influxdb", - "/en/integrations/*/infoblox-intro.html": "/docs/reference/integrations/infoblox-intro", "/en/integrations/*/infoblox_bloxone_ddi.html": "/docs/reference/integrations/infoblox_bloxone_ddi", "/en/integrations/*/infoblox_nios.html": "/docs/reference/integrations/infoblox_nios", + "/en/integrations/*/infoblox-intro.html": "/docs/reference/integrations/infoblox-intro", "/en/integrations/*/integration-1password.html": "/docs/reference/integrations/1password", "/en/integrations/*/introduction.html": "/docs/reference/integrations", "/en/integrations/*/iptables.html": "/docs/reference/integrations/iptables", @@ -7676,11 +6657,12 @@ "/en/integrations/*/journald.html": "/docs/reference/integrations/journald", "/en/integrations/*/jumpcloud.html": "/docs/reference/integrations/jumpcloud", "/en/integrations/*/juniper_srx.html": "/docs/reference/integrations/juniper_srx", + "/en/integrations/*/kafka_log.html": "/docs/reference/integrations/kafka_log", "/en/integrations/*/kafka-intro.html": "/docs/reference/integrations/kafka-intro", "/en/integrations/*/kafka.html": "/docs/reference/integrations/kafka", - "/en/integrations/*/kafka_log.html": "/docs/reference/integrations/kafka_log", "/en/integrations/*/keycloak.html": "/docs/reference/integrations/keycloak", "/en/integrations/*/kibana.html": "/docs/reference/integrations/kibana", + "/en/integrations/*/kubernetes_otel.html": "/docs/reference/integrations/kubernetes_otel", "/en/integrations/*/kubernetes-audit-logs.html": "/docs/reference/integrations/kubernetes/audit-logs", "/en/integrations/*/kubernetes-container-logs.html": "/docs/reference/integrations/kubernetes/container-logs", "/en/integrations/*/kubernetes-events.html": "/docs/reference/integrations/kubernetes/events", @@ -7692,7 +6674,6 @@ "/en/integrations/*/kubernetes-kube-state-metrics.html": "/docs/reference/integrations/kubernetes/kube-state-metrics", "/en/integrations/*/kubernetes-kubelet.html": "/docs/reference/integrations/kubernetes/kubelet", "/en/integrations/*/kubernetes.html": "/docs/reference/integrations/kubernetes", - "/en/integrations/*/kubernetes_otel.html": "/docs/reference/integrations/kubernetes_otel", "/en/integrations/*/lastpass.html": "/docs/reference/integrations/lastpass", "/en/integrations/*/linux.html": "/docs/reference/integrations/linux", "/en/integrations/*/lmd.html": "/docs/reference/integrations/lmd", @@ -7704,7 +6685,6 @@ "/en/integrations/*/mattermost.html": "/docs/reference/integrations/mattermost", "/en/integrations/*/memcached.html": "/docs/reference/integrations/memcached", "/en/integrations/*/menlo.html": "/docs/reference/integrations/menlo", - "/en/integrations/*/microsoft-intro.html": "/docs/reference/integrations/microsoft-intro", "/en/integrations/*/microsoft_defender_cloud.html": "/docs/reference/integrations/microsoft_defender_cloud", "/en/integrations/*/microsoft_defender_endpoint.html": "/docs/reference/integrations/microsoft_defender_endpoint", "/en/integrations/*/microsoft_dhcp.html": "/docs/reference/integrations/microsoft_dhcp", @@ -7713,39 +6693,40 @@ "/en/integrations/*/microsoft_exchange_server.html": "/docs/reference/integrations/microsoft_exchange_server", "/en/integrations/*/microsoft_sentinel.html": "/docs/reference/integrations/microsoft_sentinel", "/en/integrations/*/microsoft_sqlserver.html": "/docs/reference/integrations/microsoft_sqlserver", + "/en/integrations/*/microsoft-intro.html": "/docs/reference/integrations/microsoft-intro", "/en/integrations/*/mimecast.html": "/docs/reference/integrations/mimecast", "/en/integrations/*/modsecurity.html": "/docs/reference/integrations/modsecurity", - "/en/integrations/*/mongodb.html": "/docs/reference/integrations/mongodb", "/en/integrations/*/mongodb_atlas.html": "/docs/reference/integrations/mongodb_atlas", + "/en/integrations/*/mongodb.html": "/docs/reference/integrations/mongodb", + "/en/integrations/*/mysql_enterprise.html": "/docs/reference/integrations/mysql_enterprise", "/en/integrations/*/mysql-intro.html": "/docs/reference/integrations/mysql-intro", "/en/integrations/*/mysql.html": "/docs/reference/integrations/mysql", - "/en/integrations/*/mysql_enterprise.html": "/docs/reference/integrations/mysql_enterprise", "/en/integrations/*/nagios_xi.html": "/docs/reference/integrations/nagios_xi", "/en/integrations/*/nats.html": "/docs/reference/integrations/nats", "/en/integrations/*/netflow.html": "/docs/reference/integrations/netflow", "/en/integrations/*/netskope.html": "/docs/reference/integrations/netskope", "/en/integrations/*/network_traffic.html": "/docs/reference/integrations/network_traffic", + "/en/integrations/*/nginx_ingress_controller_otel.html": "/docs/reference/integrations/nginx_ingress_controller_otel", + "/en/integrations/*/nginx_ingress_controller.html": "/docs/reference/integrations/nginx_ingress_controller", "/en/integrations/*/nginx-intro.html": "/docs/reference/integrations/nginx-intro", "/en/integrations/*/nginx.html": "/docs/reference/integrations/nginx", - "/en/integrations/*/nginx_ingress_controller.html": "/docs/reference/integrations/nginx_ingress_controller", - "/en/integrations/*/nginx_ingress_controller_otel.html": "/docs/reference/integrations/nginx_ingress_controller_otel", - "/en/integrations/*/o365.html": "/docs/reference/integrations/o365", "/en/integrations/*/o365_metrics.html": "/docs/reference/integrations/o365_metrics", + "/en/integrations/*/o365.html": "/docs/reference/integrations/o365", "/en/integrations/*/okta-intro.html": "/docs/reference/integrations/okta-intro", "/en/integrations/*/okta.html": "/docs/reference/integrations/okta", "/en/integrations/*/openai.html": "/docs/reference/integrations/openai", "/en/integrations/*/opencanary.html": "/docs/reference/integrations/opencanary", + "/en/integrations/*/oracle_weblogic.html": "/docs/reference/integrations/oracle_weblogic", "/en/integrations/*/oracle-intro.html": "/docs/reference/integrations/oracle-intro", "/en/integrations/*/oracle.html": "/docs/reference/integrations/oracle", - "/en/integrations/*/oracle_weblogic.html": "/docs/reference/integrations/oracle_weblogic", + "/en/integrations/*/osquery_manager.html": "/docs/reference/integrations/osquery_manager", "/en/integrations/*/osquery-intro.html": "/docs/reference/integrations/osquery-intro", "/en/integrations/*/osquery.html": "/docs/reference/integrations/osquery", - "/en/integrations/*/osquery_manager.html": "/docs/reference/integrations/osquery_manager", "/en/integrations/*/pad.html": "/docs/reference/integrations/pad", "/en/integrations/*/palo-alto-intro.html": "/docs/reference/integrations/palo-alto-intro", - "/en/integrations/*/panw.html": "/docs/reference/integrations/panw", "/en/integrations/*/panw_cortex_xdr.html": "/docs/reference/integrations/panw_cortex_xdr", "/en/integrations/*/panw_metrics.html": "/docs/reference/integrations/panw_metrics", + "/en/integrations/*/panw.html": "/docs/reference/integrations/panw", "/en/integrations/*/pfsense.html": "/docs/reference/integrations/pfsense", "/en/integrations/*/php_fpm.html": "/docs/reference/integrations/php_fpm", "/en/integrations/*/ping_federate.html": "/docs/reference/integrations/ping_federate", @@ -7758,20 +6739,20 @@ "/en/integrations/*/profiler_agent.html": "/docs/reference/integrations/profiler_agent", "/en/integrations/*/profiler_collector.html": "/docs/reference/integrations/profiler_collector", "/en/integrations/*/profiler_symbolizer.html": "/docs/reference/integrations/profiler_symbolizer", + "/en/integrations/*/prometheus_input.html": "/docs/reference/integrations/prometheus_input", "/en/integrations/*/prometheus-intro.html": "/docs/reference/integrations/prometheus-intro", "/en/integrations/*/prometheus.html": "/docs/reference/integrations/prometheus", - "/en/integrations/*/prometheus_input.html": "/docs/reference/integrations/prometheus_input", - "/en/integrations/*/proofpoint-intro.html": "/docs/reference/integrations/proofpoint-intro", "/en/integrations/*/proofpoint_itm.html": "/docs/reference/integrations/proofpoint_itm", "/en/integrations/*/proofpoint_on_demand.html": "/docs/reference/integrations/proofpoint_on_demand", "/en/integrations/*/proofpoint_tap.html": "/docs/reference/integrations/proofpoint_tap", + "/en/integrations/*/proofpoint-intro.html": "/docs/reference/integrations/proofpoint-intro", "/en/integrations/*/proxysg.html": "/docs/reference/integrations/proxysg", "/en/integrations/*/pulse_connect_secure.html": "/docs/reference/integrations/pulse_connect_secure", "/en/integrations/*/qnap_nas.html": "/docs/reference/integrations/qnap_nas", "/en/integrations/*/qualys_vmdr.html": "/docs/reference/integrations/qualys_vmdr", "/en/integrations/*/rabbitmq.html": "/docs/reference/integrations/rabbitmq", - "/en/integrations/*/rapid7-intro.html": "/docs/reference/integrations/rapid7-intro", "/en/integrations/*/rapid7_insightvm.html": "/docs/reference/integrations/rapid7_insightvm", + "/en/integrations/*/rapid7-intro.html": "/docs/reference/integrations/rapid7-intro", "/en/integrations/*/redis-intro.html": "/docs/reference/integrations/redis-intro", "/en/integrations/*/redis.html": "/docs/reference/integrations/redis", "/en/integrations/*/redisenterprise.html": "/docs/reference/integrations/redisenterprise", @@ -7780,8 +6761,8 @@ "/en/integrations/*/salesforce.html": "/docs/reference/integrations/salesforce", "/en/integrations/*/santa.html": "/docs/reference/integrations/santa", "/en/integrations/*/security_detection_engine.html": "/docs/reference/integrations/security_detection_engine", - "/en/integrations/*/sentinel_one.html": "/docs/reference/integrations/sentinel_one", "/en/integrations/*/sentinel_one_cloud_funnel.html": "/docs/reference/integrations/sentinel_one_cloud_funnel", + "/en/integrations/*/sentinel_one.html": "/docs/reference/integrations/sentinel_one", "/en/integrations/*/sentinelone-intro.html": "/docs/reference/integrations/sentinelone-intro", "/en/integrations/*/serverless-support.html": "/docs/reference/integrations/serverless-support", "/en/integrations/*/servicenow.html": "/docs/reference/integrations/servicenow", @@ -7789,9 +6770,9 @@ "/en/integrations/*/snort.html": "/docs/reference/integrations/snort", "/en/integrations/*/snyk.html": "/docs/reference/integrations/snyk", "/en/integrations/*/sonicwall_firewall.html": "/docs/reference/integrations/sonicwall_firewall", + "/en/integrations/*/sophos_central.html": "/docs/reference/integrations/sophos_central", "/en/integrations/*/sophos-intro.html": "/docs/reference/integrations/sophos-intro", "/en/integrations/*/sophos.html": "/docs/reference/integrations/sophos", - "/en/integrations/*/sophos_central.html": "/docs/reference/integrations/sophos_central", "/en/integrations/*/spring_boot.html": "/docs/reference/integrations/spring_boot", "/en/integrations/*/spycloud.html": "/docs/reference/integrations/spycloud", "/en/integrations/*/sql.html": "/docs/reference/integrations/sql", @@ -7802,22 +6783,22 @@ "/en/integrations/*/sublime_security.html": "/docs/reference/integrations/sublime_security", "/en/integrations/*/support.html": "/docs/reference/integrations/level-of-support", "/en/integrations/*/suricata.html": "/docs/reference/integrations/suricata", - "/en/integrations/*/symantec-intro.html": "/docs/reference/integrations/symantec-intro", - "/en/integrations/*/symantec_endpoint.html": "/docs/reference/integrations/symantec_endpoint", "/en/integrations/*/symantec_endpoint_security.html": "/docs/reference/integrations/symantec_endpoint_security", + "/en/integrations/*/symantec_endpoint.html": "/docs/reference/integrations/symantec_endpoint", + "/en/integrations/*/symantec-intro.html": "/docs/reference/integrations/symantec-intro", "/en/integrations/*/sysdig.html": "/docs/reference/integrations/sysdig", "/en/integrations/*/syslog_router.html": "/docs/reference/integrations/syslog_router", "/en/integrations/*/sysmon_linux.html": "/docs/reference/integrations/sysmon_linux", - "/en/integrations/*/system.html": "/docs/reference/integrations/system", "/en/integrations/*/system_audit.html": "/docs/reference/integrations/system_audit", + "/en/integrations/*/system.html": "/docs/reference/integrations/system", "/en/integrations/*/tanium.html": "/docs/reference/integrations/tanium", "/en/integrations/*/tcp.html": "/docs/reference/integrations/tcp", "/en/integrations/*/teleport.html": "/docs/reference/integrations/teleport", - "/en/integrations/*/tenable-intro.html": "/docs/reference/integrations/tenable-intro", "/en/integrations/*/tenable_io.html": "/docs/reference/integrations/tenable_io", "/en/integrations/*/tenable_sc.html": "/docs/reference/integrations/tenable_sc", - "/en/integrations/*/threat-intelligence-intro.html": "/docs/reference/integrations/threat-intelligence-intro", + "/en/integrations/*/tenable-intro.html": "/docs/reference/integrations/tenable-intro", "/en/integrations/*/threat_map.html": "/docs/reference/integrations/threat_map", + "/en/integrations/*/threat-intelligence-intro.html": "/docs/reference/integrations/threat-intelligence-intro", "/en/integrations/*/thycotic_ss.html": "/docs/reference/integrations/thycotic_ss", "/en/integrations/*/ti_abusech.html": "/docs/reference/integrations/ti_abusech", "/en/integrations/*/ti_anomali.html": "/docs/reference/integrations/ti_anomali", @@ -7841,11 +6822,11 @@ "/en/integrations/*/tines.html": "/docs/reference/integrations/tines", "/en/integrations/*/tomcat.html": "/docs/reference/integrations/tomcat", "/en/integrations/*/traefik.html": "/docs/reference/integrations/traefik", - "/en/integrations/*/trellix-intro.html": "/docs/reference/integrations/trellix-intro", "/en/integrations/*/trellix_edr_cloud.html": "/docs/reference/integrations/trellix_edr_cloud", "/en/integrations/*/trellix_epo_cloud.html": "/docs/reference/integrations/trellix_epo_cloud", - "/en/integrations/*/trend-micro-intro.html": "/docs/reference/integrations/trend-micro-intro", + "/en/integrations/*/trellix-intro.html": "/docs/reference/integrations/trellix-intro", "/en/integrations/*/trend_micro_vision_one.html": "/docs/reference/integrations/trend_micro_vision_one", + "/en/integrations/*/trend-micro-intro.html": "/docs/reference/integrations/trend-micro-intro", "/en/integrations/*/trendmicro.html": "/docs/reference/integrations/trendmicro", "/en/integrations/*/tychon.html": "/docs/reference/integrations/tychon", "/en/integrations/*/udp.html": "/docs/reference/integrations/udp", @@ -7858,9 +6839,9 @@ "/en/integrations/*/watchguard_firebox.html": "/docs/reference/integrations/watchguard_firebox", "/en/integrations/*/websocket.html": "/docs/reference/integrations/websocket", "/en/integrations/*/websphere_application_server.html": "/docs/reference/integrations/websphere_application_server", + "/en/integrations/*/windows_etw.html": "/docs/reference/integrations/windows_etw", "/en/integrations/*/windows-intro.html": "/docs/reference/integrations/windows-intro", "/en/integrations/*/windows.html": "/docs/reference/integrations/windows", - "/en/integrations/*/windows_etw.html": "/docs/reference/integrations/windows_etw", "/en/integrations/*/winlog.html": "/docs/reference/integrations/winlog", "/en/integrations/*/wiz.html": "/docs/reference/integrations/wiz", "/en/integrations/*/zeek.html": "/docs/reference/integrations/zeek", @@ -7868,17 +6849,16 @@ "/en/integrations/*/zeronetworks.html": "/docs/reference/integrations/zeronetworks", "/en/integrations/*/zookeeper.html": "/docs/reference/integrations/zookeeper", "/en/integrations/*/zoom.html": "/docs/reference/integrations/zoom", - "/en/integrations/*/zscaler-intro.html": "/docs/reference/integrations/zscaler-intro", "/en/integrations/*/zscaler_zia.html": "/docs/reference/integrations/zscaler_zia", "/en/integrations/*/zscaler_zpa.html": "/docs/reference/integrations/zscaler_zpa", - "/en/kibana/*/Security-production-considerations.html": "/docs/deploy-manage/security/using-kibana-with-security", + "/en/integrations/*/zscaler-intro.html": "/docs/reference/integrations/zscaler-intro", "/en/kibana/*/_cli_configuration.html": "/docs/deploy-manage/monitor/logging-configuration/kib-advanced-logging", "/en/kibana/*/_import_dashboards.html": "/docs/explore-analyze/dashboards/import-dashboards", "/en/kibana/*/_manage_dashboards.html": "/docs/explore-analyze/dashboards/managing", "/en/kibana/*/_panels_and_visualizations.html": "/docs/explore-analyze/visualize", "/en/kibana/*/_tutorials.html": "/docs/explore-analyze/dashboards/tutorials", "/en/kibana/*/_use_and_filter_dashboards.html": "/docs/explore-analyze/dashboards/using", - "/en/kibana/*/_viewing_sessions_with_discover.html": "/docs/solutions/observability/apps/explore-mobile-sessions-with-discover", + "/en/kibana/*/_viewing_sessions_with_discover.html": "/docs/solutions/observability/apm/explore-mobile-sessions", "/en/kibana/*/access.html": "/docs/troubleshoot/kibana/access", "/en/kibana/*/accessibility.html": "/docs/explore-analyze", "/en/kibana/*/action-types.html": "/docs/reference/kibana/connectors-kibana", @@ -7895,11 +6875,11 @@ "/en/kibana/*/adding-policy-to-index.html": "/docs/manage-data/lifecycle/index-lifecycle-management/configure-lifecycle-policy", "/en/kibana/*/advanced-options.html": "/docs/reference/kibana/advanced-settings", "/en/kibana/*/advanced-osquery.html": "/docs/solutions/security/investigate/osquery", - "/en/kibana/*/advanced-queries.html": "/docs/solutions/observability/apps/use-advanced-queries-on-application-data", + "/en/kibana/*/advanced-queries.html": "/docs/solutions/observability/apm/advanced-queries", "/en/kibana/*/advanced.html": "/docs/extend/kibana/advanced", "/en/kibana/*/agent-config-api.html": "/docs/api/doc/kibana/operation/operation-getagentconfigurations", - "/en/kibana/*/agent-configuration.html": "/docs/solutions/observability/apps/apm-agent-central-configuration", - "/en/kibana/*/agent-explorer.html": "/docs/solutions/observability/apps/apm-agent-explorer", + "/en/kibana/*/agent-configuration.html": "/docs/solutions/observability/apm/apm-agent-central-configuration", + "/en/kibana/*/agent-explorer.html": "/docs/solutions/observability/apm/apm-agent-explorer", "/en/kibana/*/agent-key-api.html": "/docs/api/doc/kibana/operation/operation-createagentkey", "/en/kibana/*/ai-assistant-settings-kb.html": "/docs/reference/kibana/configuration-reference/ai-assistant-settings", "/en/kibana/*/alert-action-settings-kb.html": "/docs/reference/kibana/configuration-reference/alerting-settings", @@ -7913,22 +6893,22 @@ "/en/kibana/*/api-keys.html": "/docs/deploy-manage/api-keys/elasticsearch-api-keys", "/en/kibana/*/api.html": "/docs/api/doc/kibana/", "/en/kibana/*/apis.html": "/docs/api/doc/kibana/", - "/en/kibana/*/apm-alerts.html": "/docs/solutions/observability/apps/create-apm-rules-alerts", + "/en/kibana/*/apm-alerts.html": "/docs/solutions/observability/apm/create-apm-rules-alerts", "/en/kibana/*/apm-annotation-api.html": "/docs/api/doc/kibana/operation/operation-createannotation", - "/en/kibana/*/apm-api.html": "/docs/solutions/observability/apps/apm-server-api", - "/en/kibana/*/apm-app-annotation-user-create.html": "/docs/solutions/observability/apps/applications-ui-annotation-user", - "/en/kibana/*/apm-app-api-user.html": "/docs/solutions/observability/apps/applications-ui-api-user", - "/en/kibana/*/apm-app-central-config-user.html": "/docs/solutions/observability/apps/applications-ui-central-config-user", - "/en/kibana/*/apm-app-reader.html": "/docs/solutions/observability/apps/apm-reader-user", - "/en/kibana/*/apm-app-storage-explorer-user-create.html": "/docs/solutions/observability/apps/applications-ui-storage-explorer-user", - "/en/kibana/*/apm-app-users.html": "/docs/solutions/observability/apps/secure-access-to-applications-ui", - "/en/kibana/*/apm-getting-started.html": "/docs/solutions/observability/apps/application-performance-monitoring-apm", - "/en/kibana/*/apm-how-to.html": "/guide/en/observability/current/apm-view-and-analyze-data.html", - "/en/kibana/*/apm-lambda.html": "/docs/solutions/observability/apps/observe-lambda-functions", - "/en/kibana/*/apm-settings-in-kibana.html": "/docs/solutions/observability/apps/applications-ui-settings", + "/en/kibana/*/apm-api.html": "/docs/solutions/observability/apm/apm-server-api", + "/en/kibana/*/apm-app-annotation-user-create.html": "/docs/solutions/observability/apm/ui-user-annotation", + "/en/kibana/*/apm-app-api-user.html": "/docs/solutions/observability/apm/ui-user-api", + "/en/kibana/*/apm-app-central-config-user.html": "/docs/solutions/observability/apm/ui-user-central-config", + "/en/kibana/*/apm-app-reader.html": "/docs/solutions/observability/apm/ui-user-reader", + "/en/kibana/*/apm-app-storage-explorer-user-create.html": "/docs/solutions/observability/apm/ui-user-storage-explorer", + "/en/kibana/*/apm-app-users.html": "/docs/solutions/observability/apm/secure-access-to-applications-ui", + "/en/kibana/*/apm-getting-started.html": "/docs/solutions/observability/apm", + "/en/kibana/*/apm-how-to.html": "/docs/solutions/observability/apm/view-analyze-data", + "/en/kibana/*/apm-lambda.html": "/docs/solutions/observability/apm/observe-lambda-functions", + "/en/kibana/*/apm-settings-in-kibana.html": "/docs/solutions/observability/apm/applications-ui-settings", "/en/kibana/*/apm-settings-kb.html": "/docs/reference/kibana/configuration-reference/apm-settings", - "/en/kibana/*/apm-spaces.html": "/docs/solutions/observability/apps/control-access-to-apm-data", - "/en/kibana/*/apm-ui.html": "/docs/solutions/observability/apps/overviews", + "/en/kibana/*/apm-spaces.html": "/docs/solutions/observability/apm/control-access-to-apm-data", + "/en/kibana/*/apm-ui.html": "/docs/solutions/observability/apm/overviews", "/en/kibana/*/application-service.html": "/docs/extend/kibana/application-service", "/en/kibana/*/arrange-panels.html": "/docs/explore-analyze/dashboards/arrange-panels", "/en/kibana/*/asset-tracking-tutorial.html": "/docs/explore-analyze/visualize/maps/asset-tracking-tutorial", @@ -7985,7 +6965,7 @@ "/en/kibana/*/console-kibana.html": "/docs/explore-analyze/query-filter/tools/console", "/en/kibana/*/contributing.html": "/docs/extend/kibana/contributing", "/en/kibana/*/core-packages.html": "/docs/extend/kibana/core-packages", - "/en/kibana/*/correlations.html": "/docs/solutions/observability/apps/find-transaction-latency-failure-correlations", + "/en/kibana/*/correlations.html": "/docs/solutions/observability/apm/find-transaction-latency-failure-correlations", "/en/kibana/*/create-a-dashboard-of-panels-with-ecommerce-data.html": "/docs/explore-analyze/dashboards/create-dashboard-of-panels-with-ecommerce-data", "/en/kibana/*/create-a-dashboard-of-panels-with-web-server-data.html": "/docs/explore-analyze/dashboards/create-dashboard-of-panels-with-web-server-data", "/en/kibana/*/create-and-manage-rules.html": "/docs/explore-analyze/alerts-cases/alerts/create-manage-rules", @@ -7998,7 +6978,7 @@ "/en/kibana/*/create-rule-api.html": "/docs/api/doc/kibana/group/endpoint-alerting", "/en/kibana/*/creating-index-lifecycle-policies.html": "/docs/manage-data/lifecycle/index-lifecycle-management/configure-lifecycle-policy", "/en/kibana/*/crowdstrike-action-type.html": "/docs/reference/kibana/connectors-kibana/crowdstrike-action-type", - "/en/kibana/*/custom-links.html": "/docs/solutions/observability/apps/create-custom-links", + "/en/kibana/*/custom-links.html": "/docs/solutions/observability/apm/create-custom-links", "/en/kibana/*/d3security-action-type.html": "/docs/reference/kibana/connectors-kibana/d3security-action-type", "/en/kibana/*/dashboard-api-export.html": "/docs/api/doc/kibana/group/endpoint-dashboards", "/en/kibana/*/dashboard-api.html": "/docs/api/doc/kibana/group/endpoint-dashboards", @@ -8030,7 +7010,7 @@ "/en/kibana/*/delete-parameters-api.html": "/docs/api/doc/kibana/", "/en/kibana/*/delete-private-location-api.html": "/docs/api/doc/kibana/", "/en/kibana/*/delete-rule-api.html": "/docs/api/doc/kibana/group/endpoint-alerting", - "/en/kibana/*/dependencies.html": "/docs/solutions/observability/apps/dependencies", + "/en/kibana/*/dependencies.html": "/docs/solutions/observability/apm/dependencies", "/en/kibana/*/development-basepath.html": "/docs/extend/kibana/development-basepath", "/en/kibana/*/development-best-practices.html": "/docs/extend/kibana/development-best-practices", "/en/kibana/*/development-create-visualization.html": "/docs/extend/kibana/development-visualize-index", @@ -8065,40 +7045,15 @@ "/en/kibana/*/elasticsearch-mutual-tls.html": "/docs/deploy-manage/security/kibana-es-mutual-tls", "/en/kibana/*/elasticsearch-service.html": "/docs/extend/kibana/elasticsearch-service", "/en/kibana/*/email-action-type.html": "/docs/reference/kibana/connectors-kibana/email-action-type", - "/en/kibana/*/embedding.html": "/guide/en/kibana/8.18/embedding.html", "/en/kibana/*/enable-rule-api.html": "/docs/api/doc/kibana/group/endpoint-alerting", "/en/kibana/*/enhanced-embeddables-plugin.html": "/docs/extend/kibana/enhanced-embeddables-plugin", - "/en/kibana/*/enhancements-and-bug-fixes-v8.0.0-rc1.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.0.0-rc1.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.0.0-rc2.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.0.0-rc2.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.0.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.0.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.1.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.1.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.10.0-revised.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.10.0-revised.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.10.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.10.0-revised.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.11.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.11.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.12.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.12.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.13.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.13.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.14.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.14.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.15.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.15.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.16.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.16.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.17.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.17.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.2.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.2.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.3.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.3.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.4.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.4.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.5.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.5.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.6.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.6.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.7.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.7.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.8.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.8.0.html", - "/en/kibana/*/enhancements-and-bug-fixes-v8.9.0.html": "/guide/en/kibana/8.18/enhancements-and-bug-fixes-v8.9.0.html", - "/en/kibana/*/enterprise-search-settings-kb.html": "/guide/en/kibana/8.18/enterprise-search-settings-kb.html", - "/en/kibana/*/errors-alerts-with-watcher.html": "/guide/en/kibana/8.18/errors-alerts-with-watcher.html", - "/en/kibana/*/errors.html": "/docs/solutions/observability/apps/errors-2", + "/en/kibana/*/errors.html": "/docs/solutions/observability/apm/errors-ui", "/en/kibana/*/esql-visualizations.html": "/docs/explore-analyze/visualize/esorql", "/en/kibana/*/esql.html": "/docs/explore-analyze/query-filter/languages/esql", "/en/kibana/*/event-log-index.html": "/docs/explore-analyze/alerts-cases/alerts/event-log-index", "/en/kibana/*/execute-connector-api.html": "/docs/api/doc/kibana/group/endpoint-connectors", "/en/kibana/*/explain-log-rate-spikes.html": "/docs/explore-analyze/machine-learning/machine-learning-in-kibana/xpack-ml-aiops", "/en/kibana/*/exported-fields-osquery.html": "/docs/reference/kibana/osquery-exported-fields", - "/en/kibana/*/extend.html": "/guide/en/kibana/8.18/extend.html", "/en/kibana/*/external-plugin-development.html": "/docs/extend/kibana/external-plugin-development", "/en/kibana/*/external-plugin-functional-tests.html": "/docs/extend/kibana/external-plugin-functional-tests", "/en/kibana/*/external-plugin-localization.html": "/docs/extend/kibana/external-plugin-localization", @@ -8106,7 +7061,7 @@ "/en/kibana/*/field-filter.html": "/docs/explore-analyze/discover", "/en/kibana/*/field-formatters-string.html": "/docs/explore-analyze/find-and-organize/data-views", "/en/kibana/*/field-statistics-dashboard.html": "/docs/explore-analyze/visualize/field-statistics", - "/en/kibana/*/filters.html": "/docs/solutions/observability/apps/filter-application-data", + "/en/kibana/*/filters.html": "/docs/solutions/observability/apm/filter-data", "/en/kibana/*/find-monitors-api.html": "/docs/api/doc/kibana/", "/en/kibana/*/find-rules-api.html": "/docs/api/doc/kibana/group/endpoint-alerting", "/en/kibana/*/fleet-settings-kb.html": "/docs/reference/kibana/configuration-reference/fleet-settings", @@ -8152,7 +7107,7 @@ "/en/kibana/*/inference-endpoints.html": "/docs/explore-analyze/elastic-inference/inference-api", "/en/kibana/*/infra-read-only-access.html": "/docs/solutions/observability/infra-and-hosts/configure-settings", "/en/kibana/*/infrastructure-ui-settings-kb.html": "/docs/reference/kibana/configuration-reference/metrics-settings", - "/en/kibana/*/infrastructure.html": "/docs/solutions/observability/apps/infrastructure", + "/en/kibana/*/infrastructure.html": "/docs/solutions/observability/apm/infrastructure", "/en/kibana/*/ingest-node-pipelines.html": "/docs/manage-data/ingest/transform-enrich/ingest-pipelines", "/en/kibana/*/install.html": "/docs/deploy-manage/deploy/self-managed/install-kibana", "/en/kibana/*/interpreting-ci-failures.html": "/docs/extend/kibana/interpreting-ci-failures", @@ -8192,9 +7147,8 @@ "/en/kibana/*/logging-configuration.html": "/docs/deploy-manage/monitor/logging-configuration/kibana-logging", "/en/kibana/*/logging-service.html": "/docs/extend/kibana/logging-service", "/en/kibana/*/logging-settings.html": "/docs/reference/kibana/configuration-reference/logging-settings", - "/en/kibana/*/logs-read-only-access.html": "/guide/en/observability/8.18/configure-data-sources.html", "/en/kibana/*/logs-ui-settings-kb.html": "/docs/reference/kibana/configuration-reference/logs-settings", - "/en/kibana/*/logs.html": "/docs/solutions/observability/apps/logs", + "/en/kibana/*/logs.html": "/docs/solutions/observability/apm/logs", "/en/kibana/*/logstash-configuration-management-api-create.html": "/docs/api/doc/kibana/operation/operation-put-logstash-pipeline", "/en/kibana/*/logstash-configuration-management-api-delete.html": "/docs/api/doc/kibana/operation/operation-delete-logstash-pipeline", "/en/kibana/*/logstash-configuration-management-api-list.html": "/docs/api/doc/kibana/operation/operation-get-logstash-pipelines", @@ -8204,7 +7158,7 @@ "/en/kibana/*/lucene-query.html": "/docs/explore-analyze/query-filter/languages/lucene-query-syntax", "/en/kibana/*/machine-learning-api-sync.html": "/docs/api/doc/kibana/group/endpoint-ml", "/en/kibana/*/machine-learning-api.html": "/docs/api/doc/kibana/group/endpoint-ml", - "/en/kibana/*/machine-learning-integration.html": "/docs/solutions/observability/apps/integrate-with-machine-learning", + "/en/kibana/*/machine-learning-integration.html": "/docs/solutions/observability/apm/machine-learning", "/en/kibana/*/maintenance-windows.html": "/docs/explore-analyze/alerts-cases/alerts/maintenance-windows", "/en/kibana/*/manage-cases-settings.html": "/docs/explore-analyze/alerts-cases/cases/manage-cases-settings", "/en/kibana/*/manage-cases.html": "/docs/explore-analyze/alerts-cases/cases/manage-cases", @@ -8235,10 +7189,10 @@ "/en/kibana/*/maps-vector-style-properties.html": "/docs/explore-analyze/visualize/maps/maps-vector-style-properties", "/en/kibana/*/maps-visualizations.html": "/docs/explore-analyze/visualize/maps", "/en/kibana/*/maps.html": "/docs/explore-analyze/visualize/maps", - "/en/kibana/*/metrics.html": "/docs/solutions/observability/apps/metrics-2", + "/en/kibana/*/metrics.html": "/docs/solutions/observability/apm/metrics-ui", "/en/kibana/*/ml-sync.html": "/docs/api/doc/kibana/group/endpoint-ml", - "/en/kibana/*/mobile-service-overview.html": "/docs/solutions/observability/apps/mobile-service-overview", - "/en/kibana/*/mobile-session-explorer.html": "/docs/solutions/observability/apps/explore-mobile-sessions-with-discover", + "/en/kibana/*/mobile-service-overview.html": "/docs/solutions/observability/apm/mobile-service-overview", + "/en/kibana/*/mobile-session-explorer.html": "/docs/solutions/observability/apm/explore-mobile-sessions", "/en/kibana/*/monitor-troubleshooting.html": "/docs/troubleshoot/kibana/monitoring", "/en/kibana/*/monitoring-data.html": "/docs/deploy-manage/monitor/stack-monitoring/kibana-monitoring-data", "/en/kibana/*/monitoring-elastic-agent.html": "/docs/deploy-manage/monitor/stack-monitoring/kibana-monitoring-elastic-agent", @@ -8291,76 +7245,6 @@ "/en/kibana/*/profiler-complicated.html": "/docs/explore-analyze/query-filter/tools/search-profiler", "/en/kibana/*/profiler-getting-started.html": "/docs/explore-analyze/query-filter/tools/search-profiler", "/en/kibana/*/profiler-render.html": "/docs/explore-analyze/query-filter/tools/search-profiler", - "/en/kibana/*/redirects.html": "/guide/en/kibana/8.18/redirects.html", - "/en/kibana/*/release-notes-8.0.0-alpha1.html": "/guide/en/kibana/8.18/release-notes-8.0.0-alpha1.html", - "/en/kibana/*/release-notes-8.0.0-alpha2.html": "/guide/en/kibana/8.18/release-notes-8.0.0-alpha2.html", - "/en/kibana/*/release-notes-8.0.0-beta1.html": "/guide/en/kibana/8.18/release-notes-8.0.0-beta1.html", - "/en/kibana/*/release-notes-8.0.0-rc1.html": "/guide/en/kibana/8.18/release-notes-8.0.0-rc1.html", - "/en/kibana/*/release-notes-8.0.0-rc2.html": "/guide/en/kibana/8.18/release-notes-8.0.0-rc2.html", - "/en/kibana/*/release-notes-8.0.0.html": "/guide/en/kibana/8.18/release-notes-8.0.0.html", - "/en/kibana/*/release-notes-8.1.0.html": "/guide/en/kibana/8.18/release-notes-8.1.0.html", - "/en/kibana/*/release-notes-8.1.1.html": "/guide/en/kibana/8.18/release-notes-8.1.1.html", - "/en/kibana/*/release-notes-8.1.2.html": "/guide/en/kibana/8.18/release-notes-8.1.2.html", - "/en/kibana/*/release-notes-8.1.3.html": "/guide/en/kibana/8.18/release-notes-8.1.3.html", - "/en/kibana/*/release-notes-8.10.0.html": "/guide/en/kibana/8.18/release-notes-8.10.0.html", - "/en/kibana/*/release-notes-8.10.1.html": "/guide/en/kibana/8.18/release-notes-8.10.1.html", - "/en/kibana/*/release-notes-8.10.2.html": "/guide/en/kibana/8.18/release-notes-8.10.2.html", - "/en/kibana/*/release-notes-8.10.3.html": "/guide/en/kibana/8.18/release-notes-8.10.3.html", - "/en/kibana/*/release-notes-8.10.4.html": "/guide/en/kibana/8.18/release-notes-8.10.4.html", - "/en/kibana/*/release-notes-8.11.0.html": "/guide/en/kibana/8.18/release-notes-8.11.0.html", - "/en/kibana/*/release-notes-8.11.1.html": "/guide/en/kibana/8.18/release-notes-8.11.1.html", - "/en/kibana/*/release-notes-8.11.2.html": "/guide/en/kibana/8.18/release-notes-8.11.2.html", - "/en/kibana/*/release-notes-8.11.3.html": "/guide/en/kibana/8.18/release-notes-8.11.3.html", - "/en/kibana/*/release-notes-8.11.4.html": "/guide/en/kibana/8.18/release-notes-8.11.4.html", - "/en/kibana/*/release-notes-8.12.0.html": "/guide/en/kibana/8.18/release-notes-8.12.0.html", - "/en/kibana/*/release-notes-8.12.1.html": "/guide/en/kibana/8.18/release-notes-8.12.1.html", - "/en/kibana/*/release-notes-8.12.2.html": "/guide/en/kibana/8.18/release-notes-8.12.2.html", - "/en/kibana/*/release-notes-8.13.0.html": "/guide/en/kibana/8.18/release-notes-8.13.0.html", - "/en/kibana/*/release-notes-8.13.1.html": "/guide/en/kibana/8.18/release-notes-8.13.1.html", - "/en/kibana/*/release-notes-8.13.2.html": "/guide/en/kibana/8.18/release-notes-8.13.2.html", - "/en/kibana/*/release-notes-8.13.3.html": "/guide/en/kibana/8.18/release-notes-8.13.3.html", - "/en/kibana/*/release-notes-8.13.4.html": "/guide/en/kibana/8.18/release-notes-8.13.4.html", - "/en/kibana/*/release-notes-8.14.0.html": "/guide/en/kibana/8.18/release-notes-8.14.0.html", - "/en/kibana/*/release-notes-8.14.1.html": "/guide/en/kibana/8.18/release-notes-8.14.1.html", - "/en/kibana/*/release-notes-8.14.2.html": "/guide/en/kibana/8.18/release-notes-8.14.2.html", - "/en/kibana/*/release-notes-8.14.3.html": "/guide/en/kibana/8.18/release-notes-8.14.3.html", - "/en/kibana/*/release-notes-8.15.0.html": "/guide/en/kibana/8.18/release-notes-8.15.0.html", - "/en/kibana/*/release-notes-8.15.1.html": "/guide/en/kibana/8.18/release-notes-8.15.1.html", - "/en/kibana/*/release-notes-8.15.2.html": "/guide/en/kibana/8.18/release-notes-8.15.2.html", - "/en/kibana/*/release-notes-8.15.3.html": "/guide/en/kibana/8.18/release-notes-8.15.3.html", - "/en/kibana/*/release-notes-8.15.4.html": "/guide/en/kibana/8.18/release-notes-8.15.4.html", - "/en/kibana/*/release-notes-8.15.5.html": "/guide/en/kibana/8.18/release-notes-8.15.5.html", - "/en/kibana/*/release-notes-8.16.0.html": "/guide/en/kibana/8.18/release-notes-8.16.0.html", - "/en/kibana/*/release-notes-8.16.1.html": "/guide/en/kibana/8.18/release-notes-8.16.1.html", - "/en/kibana/*/release-notes-8.16.2.html": "/guide/en/kibana/8.18/release-notes-8.16.2.html", - "/en/kibana/*/release-notes-8.16.3.html": "/guide/en/kibana/8.18/release-notes-8.16.3.html", - "/en/kibana/*/release-notes-8.17.0.html": "/guide/en/kibana/8.18/release-notes-8.17.0.html", - "/en/kibana/*/release-notes-8.17.1.html": "/guide/en/kibana/8.18/release-notes-8.17.1.html", - "/en/kibana/*/release-notes-8.2.0.html": "/guide/en/kibana/8.18/release-notes-8.2.0.html", - "/en/kibana/*/release-notes-8.2.1.html": "/guide/en/kibana/8.18/release-notes-8.2.1.html", - "/en/kibana/*/release-notes-8.2.2.html": "/guide/en/kibana/8.18/release-notes-8.2.2.html", - "/en/kibana/*/release-notes-8.2.3.html": "/guide/en/kibana/8.18/release-notes-8.2.3.html", - "/en/kibana/*/release-notes-8.3.0.html": "/guide/en/kibana/8.18/release-notes-8.3.0.html", - "/en/kibana/*/release-notes-8.3.1.html": "/guide/en/kibana/8.18/release-notes-8.3.1.html", - "/en/kibana/*/release-notes-8.3.2.html": "/guide/en/kibana/8.18/release-notes-8.3.2.html", - "/en/kibana/*/release-notes-8.3.3.html": "/guide/en/kibana/8.18/release-notes-8.3.3.html", - "/en/kibana/*/release-notes-8.4.0.html": "/guide/en/kibana/8.18/release-notes-8.4.0.html", - "/en/kibana/*/release-notes-8.4.1.html": "/guide/en/kibana/8.18/release-notes-8.4.1.html", - "/en/kibana/*/release-notes-8.4.2.html": "/guide/en/kibana/8.18/release-notes-8.4.2.html", - "/en/kibana/*/release-notes-8.4.3.html": "/guide/en/kibana/8.18/release-notes-8.4.3.html", - "/en/kibana/*/release-notes-8.5.0.html": "/guide/en/kibana/8.18/release-notes-8.5.0.html", - "/en/kibana/*/release-notes-8.5.1.html": "/guide/en/kibana/8.18/release-notes-8.5.1.html", - "/en/kibana/*/release-notes-8.5.2.html": "/guide/en/kibana/8.18/release-notes-8.5.2.html", - "/en/kibana/*/release-notes-8.6.0.html": "/guide/en/kibana/8.18/release-notes-8.6.0.html", - "/en/kibana/*/release-notes-8.6.1.html": "/guide/en/kibana/8.18/release-notes-8.6.1.html", - "/en/kibana/*/release-notes-8.7.0.html": "/guide/en/kibana/8.18/release-notes-8.7.0.html", - "/en/kibana/*/release-notes-8.7.1.html": "/guide/en/kibana/8.18/release-notes-8.7.1.html", - "/en/kibana/*/release-notes-8.8.0.html": "/guide/en/kibana/8.18/release-notes-8.8.0.html", - "/en/kibana/*/release-notes-8.8.1.html": "/guide/en/kibana/8.18/release-notes-8.8.1.html", - "/en/kibana/*/release-notes-8.8.2.html": "/guide/en/kibana/8.18/release-notes-8.8.2.html", - "/en/kibana/*/release-notes-8.9.0.html": "/guide/en/kibana/8.18/release-notes-8.9.0.html", - "/en/kibana/*/release-notes-8.9.1.html": "/guide/en/kibana/8.18/release-notes-8.9.1.html", - "/en/kibana/*/release-notes-8.9.2.html": "/guide/en/kibana/8.18/release-notes-8.9.2.html", "/en/kibana/*/release-notes.html": "/docs/release-notes/kibana", "/en/kibana/*/reporting-getting-started.html": "/docs/explore-analyze/report-and-share", "/en/kibana/*/reporting-integration.html": "/docs/extend/kibana/reporting-integration", @@ -8419,15 +7303,16 @@ "/en/kibana/*/secure-reporting.html": "/docs/deploy-manage/kibana-reporting-configuration", "/en/kibana/*/secure-settings.html": "/docs/deploy-manage/security/secure-settings", "/en/kibana/*/security-best-practices.html": "/docs/extend/kibana/security-best-practices", + "/en/kibana/*/Security-production-considerations.html": "/docs/deploy-manage/security/using-kibana-with-security", "/en/kibana/*/security-settings-kb.html": "/docs/reference/kibana/configuration-reference/security-settings", "/en/kibana/*/sentinelone-action-type.html": "/docs/reference/kibana/connectors-kibana/sentinelone-action-type", "/en/kibana/*/server-log-action-type.html": "/docs/reference/kibana/connectors-kibana/server-log-action-type", - "/en/kibana/*/service-maps.html": "/docs/solutions/observability/apps/service-map", - "/en/kibana/*/service-overview.html": "/docs/solutions/observability/apps/service-overview", + "/en/kibana/*/service-maps.html": "/docs/solutions/observability/apm/service-map", + "/en/kibana/*/service-overview.html": "/docs/solutions/observability/apm/service-overview", "/en/kibana/*/servicenow-action-type.html": "/docs/reference/kibana/connectors-kibana/servicenow-action-type", "/en/kibana/*/servicenow-itom-action-type.html": "/docs/reference/kibana/connectors-kibana/servicenow-itom-action-type", "/en/kibana/*/servicenow-sir-action-type.html": "/docs/reference/kibana/connectors-kibana/servicenow-sir-action-type", - "/en/kibana/*/services.html": "/docs/solutions/observability/apps/services", + "/en/kibana/*/services.html": "/docs/solutions/observability/apm/services", "/en/kibana/*/session-management-api-invalidate.html": "/docs/api/doc/kibana/operation/operation-post-security-session-invalidate", "/en/kibana/*/session-management-api.html": "/docs/api/doc/kibana/group/endpoint-user-session", "/en/kibana/*/set-time-filter.html": "/docs/explore-analyze/query-filter/filtering", @@ -8458,11 +7343,11 @@ "/en/kibana/*/spaces-api-update-objects-spaces.html": "/docs/api/doc/kibana/operation/operation-post-spaces-update-objects-spaces", "/en/kibana/*/spaces-api.html": "/docs/api/doc/kibana/group/endpoint-spaces", "/en/kibana/*/spaces-settings-kb.html": "/docs/reference/kibana/configuration-reference/spaces-settings", - "/en/kibana/*/spans.html": "/docs/solutions/observability/apps/trace-sample-timeline", + "/en/kibana/*/spans.html": "/docs/solutions/observability/apm/trace-sample-timeline", "/en/kibana/*/stability.html": "/docs/extend/kibana/stability", "/en/kibana/*/start-resume-reindex.html": "/docs/api/doc/kibana/group/endpoint-upgrade", "/en/kibana/*/start-stop.html": "/docs/deploy-manage/maintenance/start-stop-services/start-stop-kibana", - "/en/kibana/*/storage-explorer.html": "/docs/solutions/observability/apps/storage-explorer", + "/en/kibana/*/storage-explorer.html": "/docs/solutions/observability/apm/storage-explorer", "/en/kibana/*/swimlane-action-type.html": "/docs/reference/kibana/connectors-kibana/swimlane-action-type", "/en/kibana/*/synthetics-apis.html": "/docs/api/doc/kibana/", "/en/kibana/*/targz.html": "/docs/deploy-manage/deploy/self-managed/install-kibana-from-archive-on-linux-macos", @@ -8481,13 +7366,13 @@ "/en/kibana/*/tilemap.html": "/docs/explore-analyze/visualize/maps", "/en/kibana/*/tines-action-type.html": "/docs/reference/kibana/connectors-kibana/tines-action-type", "/en/kibana/*/torq-action-type.html": "/docs/reference/kibana/connectors-kibana/torq-action-type", - "/en/kibana/*/traces.html": "/docs/solutions/observability/apps/traces-2", - "/en/kibana/*/transactions-annotations.html": "/docs/solutions/observability/apps/track-deployments-with-annotations", - "/en/kibana/*/transactions.html": "/docs/solutions/observability/apps/transactions-2", + "/en/kibana/*/traces.html": "/docs/solutions/observability/apm/traces-ui", + "/en/kibana/*/transactions-annotations.html": "/docs/solutions/observability/apm/track-deployments-with-annotations", + "/en/kibana/*/transactions.html": "/docs/solutions/observability/apm/transactions-ui", "/en/kibana/*/translations-plugin.html": "/docs/extend/kibana/translations-plugin", - "/en/kibana/*/troubleshooting.html": "/guide/en/observability/current/apm-common-problems.html", + "/en/kibana/*/troubleshooting.html": "/docs/troubleshoot/observability/apm/common-problems", "/en/kibana/*/try-esql.html": "/docs/explore-analyze/discover/try-esql", - "/en/kibana/*/tsvb.html": "/guide/en/kibana/current/legacy-editors.html#tsvb-panel", + "/en/kibana/*/tsvb.html": "/docs/explore-analyze/visualize/legacy-editors", "/en/kibana/*/tutorial-define-index.html": "/docs/explore-analyze", "/en/kibana/*/tutorial-secure-access-to-kibana.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/quickstart", "/en/kibana/*/typescript.html": "/docs/extend/kibana/typescript", @@ -8527,7 +7412,7 @@ "/en/kibana/*/windows.html": "/docs/deploy-manage/deploy/self-managed/install-kibana-on-windows", "/en/kibana/*/working-remote-clusters.html": "/docs/deploy-manage/remote-clusters/remote-clusters-self-managed", "/en/kibana/*/xmatters-action-type.html": "/docs/reference/kibana/connectors-kibana/xmatters-action-type", - "/en/kibana/*/xpack-apm.html": "/docs/solutions/observability/apps/overviews", + "/en/kibana/*/xpack-apm.html": "/docs/solutions/observability/apm/overviews", "/en/kibana/*/xpack-dashboard-only-mode.html": "/docs/deploy-manage/users-roles/cluster-or-deployment-auth/kibana-privileges", "/en/kibana/*/xpack-graph.html": "/docs/explore-analyze/visualize/graph", "/en/kibana/*/xpack-grokdebugger.html": "/docs/explore-analyze/query-filter/tools/grok-debugger", @@ -8558,14 +7443,14 @@ "/en/logstash-versioned-plugins/*/codec-compress_spooler-index.html": "/docs/reference/logstash/versioned-plugins/codec-compress_spooler-index", "/en/logstash-versioned-plugins/*/codec-csv-index.html": "/docs/reference/logstash/versioned-plugins/codec-csv-index", "/en/logstash-versioned-plugins/*/codec-dots-index.html": "/docs/reference/logstash/versioned-plugins/codec-dots-index", - "/en/logstash-versioned-plugins/*/codec-edn-index.html": "/docs/reference/logstash/versioned-plugins/codec-edn-index", "/en/logstash-versioned-plugins/*/codec-edn_lines-index.html": "/docs/reference/logstash/versioned-plugins/codec-edn_lines-index", + "/en/logstash-versioned-plugins/*/codec-edn-index.html": "/docs/reference/logstash/versioned-plugins/codec-edn-index", "/en/logstash-versioned-plugins/*/codec-es_bulk-index.html": "/docs/reference/logstash/versioned-plugins/codec-es_bulk-index", "/en/logstash-versioned-plugins/*/codec-fluent-index.html": "/docs/reference/logstash/versioned-plugins/codec-fluent-index", "/en/logstash-versioned-plugins/*/codec-graphite-index.html": "/docs/reference/logstash/versioned-plugins/codec-graphite-index", "/en/logstash-versioned-plugins/*/codec-gzip_lines-index.html": "/docs/reference/logstash/versioned-plugins/codec-gzip_lines-index", - "/en/logstash-versioned-plugins/*/codec-json-index.html": "/docs/reference/logstash/versioned-plugins/codec-json-index", "/en/logstash-versioned-plugins/*/codec-json_lines-index.html": "/docs/reference/logstash/versioned-plugins/codec-json_lines-index", + "/en/logstash-versioned-plugins/*/codec-json-index.html": "/docs/reference/logstash/versioned-plugins/codec-json-index", "/en/logstash-versioned-plugins/*/codec-line-index.html": "/docs/reference/logstash/versioned-plugins/codec-line-index", "/en/logstash-versioned-plugins/*/codec-msgpack-index.html": "/docs/reference/logstash/versioned-plugins/codec-msgpack-index", "/en/logstash-versioned-plugins/*/codec-multiline-index.html": "/docs/reference/logstash/versioned-plugins/codec-multiline-index", @@ -8607,8 +7492,8 @@ "/en/logstash-versioned-plugins/*/filter-i18n-index.html": "/docs/reference/logstash/versioned-plugins/filter-i18n-index", "/en/logstash-versioned-plugins/*/filter-jdbc_static-index.html": "/docs/reference/logstash/versioned-plugins/filter-jdbc_static-index", "/en/logstash-versioned-plugins/*/filter-jdbc_streaming-index.html": "/docs/reference/logstash/versioned-plugins/filter-jdbc_streaming-index", - "/en/logstash-versioned-plugins/*/filter-json-index.html": "/docs/reference/logstash/versioned-plugins/filter-json-index", "/en/logstash-versioned-plugins/*/filter-json_encode-index.html": "/docs/reference/logstash/versioned-plugins/filter-json_encode-index", + "/en/logstash-versioned-plugins/*/filter-json-index.html": "/docs/reference/logstash/versioned-plugins/filter-json-index", "/en/logstash-versioned-plugins/*/filter-kv-index.html": "/docs/reference/logstash/versioned-plugins/filter-kv-index", "/en/logstash-versioned-plugins/*/filter-math-index.html": "/docs/reference/logstash/versioned-plugins/filter-math-index", "/en/logstash-versioned-plugins/*/filter-memcached-index.html": "/docs/reference/logstash/versioned-plugins/filter-memcached-index", @@ -8660,8 +7545,8 @@ "/en/logstash-versioned-plugins/*/input-graphite-index.html": "/docs/reference/logstash/versioned-plugins/input-graphite-index", "/en/logstash-versioned-plugins/*/input-heartbeat-index.html": "/docs/reference/logstash/versioned-plugins/input-heartbeat-index", "/en/logstash-versioned-plugins/*/input-heroku-index.html": "/docs/reference/logstash/versioned-plugins/input-heroku-index", - "/en/logstash-versioned-plugins/*/input-http-index.html": "/docs/reference/logstash/versioned-plugins/input-http-index", "/en/logstash-versioned-plugins/*/input-http_poller-index.html": "/docs/reference/logstash/versioned-plugins/input-http_poller-index", + "/en/logstash-versioned-plugins/*/input-http-index.html": "/docs/reference/logstash/versioned-plugins/input-http-index", "/en/logstash-versioned-plugins/*/input-imap-index.html": "/docs/reference/logstash/versioned-plugins/input-imap-index", "/en/logstash-versioned-plugins/*/input-irc-index.html": "/docs/reference/logstash/versioned-plugins/input-irc-index", "/en/logstash-versioned-plugins/*/input-jdbc-index.html": "/docs/reference/logstash/versioned-plugins/input-jdbc-index", @@ -8715,12 +7600,12 @@ "/en/logstash-versioned-plugins/*/output-circonus-index.html": "/docs/reference/logstash/versioned-plugins/output-circonus-index", "/en/logstash-versioned-plugins/*/output-cloudwatch-index.html": "/docs/reference/logstash/versioned-plugins/output-cloudwatch-index", "/en/logstash-versioned-plugins/*/output-csv-index.html": "/docs/reference/logstash/versioned-plugins/output-csv-index", - "/en/logstash-versioned-plugins/*/output-datadog-index.html": "/docs/reference/logstash/versioned-plugins/output-datadog-index", "/en/logstash-versioned-plugins/*/output-datadog_metrics-index.html": "/docs/reference/logstash/versioned-plugins/output-datadog_metrics-index", + "/en/logstash-versioned-plugins/*/output-datadog-index.html": "/docs/reference/logstash/versioned-plugins/output-datadog-index", "/en/logstash-versioned-plugins/*/output-elastic_app_search-index.html": "/docs/reference/logstash/versioned-plugins/output-elastic_app_search-index", "/en/logstash-versioned-plugins/*/output-elastic_workplace_search-index.html": "/docs/reference/logstash/versioned-plugins/output-elastic_workplace_search-index", - "/en/logstash-versioned-plugins/*/output-elasticsearch-index.html": "/docs/reference/logstash/versioned-plugins/output-elasticsearch-index", "/en/logstash-versioned-plugins/*/output-elasticsearch_java-index.html": "/docs/reference/logstash/versioned-plugins/output-elasticsearch_java-index", + "/en/logstash-versioned-plugins/*/output-elasticsearch-index.html": "/docs/reference/logstash/versioned-plugins/output-elasticsearch-index", "/en/logstash-versioned-plugins/*/output-email-index.html": "/docs/reference/logstash/versioned-plugins/output-email-index", "/en/logstash-versioned-plugins/*/output-exec-index.html": "/docs/reference/logstash/versioned-plugins/output-exec-index", "/en/logstash-versioned-plugins/*/output-file-index.html": "/docs/reference/logstash/versioned-plugins/output-file-index", @@ -8747,8 +7632,8 @@ "/en/logstash-versioned-plugins/*/output-metriccatcher-index.html": "/docs/reference/logstash/versioned-plugins/output-metriccatcher-index", "/en/logstash-versioned-plugins/*/output-monasca_log_api-index.html": "/docs/reference/logstash/versioned-plugins/output-monasca_log_api-index", "/en/logstash-versioned-plugins/*/output-mongodb-index.html": "/docs/reference/logstash/versioned-plugins/output-mongodb-index", - "/en/logstash-versioned-plugins/*/output-nagios-index.html": "/docs/reference/logstash/versioned-plugins/output-nagios-index", "/en/logstash-versioned-plugins/*/output-nagios_nsca-index.html": "/docs/reference/logstash/versioned-plugins/output-nagios_nsca-index", + "/en/logstash-versioned-plugins/*/output-nagios-index.html": "/docs/reference/logstash/versioned-plugins/output-nagios-index", "/en/logstash-versioned-plugins/*/output-neo4j-index.html": "/docs/reference/logstash/versioned-plugins/output-neo4j-index", "/en/logstash-versioned-plugins/*/output-null-index.html": "/docs/reference/logstash/versioned-plugins/output-null-index", "/en/logstash-versioned-plugins/*/output-opentsdb-index.html": "/docs/reference/logstash/versioned-plugins/output-opentsdb-index", @@ -9377,8 +8262,8 @@ "/en/logstash-versioned-plugins/*/v3.0.1-plugins-inputs-wmi.html": "/docs/reference/logstash/versioned-plugins/v3-0-1-plugins-inputs-wmi", "/en/logstash-versioned-plugins/*/v3.0.1-plugins-integrations-elastic_enterprise_search.html": "/docs/reference/logstash/versioned-plugins/v3-0-1-plugins-integrations-elastic_enterprise_search", "/en/logstash-versioned-plugins/*/v3.0.1-plugins-outputs-circonus.html": "/docs/reference/logstash/versioned-plugins/v3-0-1-plugins-outputs-circonus", - "/en/logstash-versioned-plugins/*/v3.0.1-plugins-outputs-datadog.html": "/docs/reference/logstash/versioned-plugins/v3-0-1-plugins-outputs-datadog", "/en/logstash-versioned-plugins/*/v3.0.1-plugins-outputs-datadog_metrics.html": "/docs/reference/logstash/versioned-plugins/v3-0-1-plugins-outputs-datadog_metrics", + "/en/logstash-versioned-plugins/*/v3.0.1-plugins-outputs-datadog.html": "/docs/reference/logstash/versioned-plugins/v3-0-1-plugins-outputs-datadog", "/en/logstash-versioned-plugins/*/v3.0.1-plugins-outputs-elastic_app_search.html": "/docs/reference/logstash/versioned-plugins/v3-0-1-plugins-outputs-elastic_app_search", "/en/logstash-versioned-plugins/*/v3.0.1-plugins-outputs-elastic_workplace_search.html": "/docs/reference/logstash/versioned-plugins/v3-0-1-plugins-outputs-elastic_workplace_search", "/en/logstash-versioned-plugins/*/v3.0.1-plugins-outputs-graphtastic.html": "/docs/reference/logstash/versioned-plugins/v3-0-1-plugins-outputs-graphtastic", @@ -9444,12 +8329,12 @@ "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-cloudfront.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-cloudfront", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-cloudtrail.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-cloudtrail", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-dots.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-dots", - "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-edn.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-edn", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-edn_lines.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-edn_lines", + "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-edn.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-edn", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-graphite.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-graphite", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-gzip_lines.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-gzip_lines", - "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-json.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-json", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-json_lines.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-json_lines", + "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-json.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-json", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-line.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-line", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-msgpack.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-msgpack", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-codecs-plain.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-codecs-plain", @@ -9462,8 +8347,8 @@ "/en/logstash-versioned-plugins/*/v3.0.3-plugins-filters-environment.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-filters-environment", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-filters-extractnumbers.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-filters-extractnumbers", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-filters-i18n.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-filters-i18n", - "/en/logstash-versioned-plugins/*/v3.0.3-plugins-filters-json.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-filters-json", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-filters-json_encode.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-filters-json_encode", + "/en/logstash-versioned-plugins/*/v3.0.3-plugins-filters-json.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-filters-json", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-filters-metricize.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-filters-metricize", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-filters-multiline.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-filters-multiline", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-filters-prune.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-filters-prune", @@ -9505,8 +8390,8 @@ "/en/logstash-versioned-plugins/*/v3.0.3-plugins-outputs-juggernaut.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-outputs-juggernaut", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-outputs-loggly.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-outputs-loggly", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-outputs-metriccatcher.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-outputs-metriccatcher", - "/en/logstash-versioned-plugins/*/v3.0.3-plugins-outputs-nagios.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-outputs-nagios", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-outputs-nagios_nsca.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-outputs-nagios_nsca", + "/en/logstash-versioned-plugins/*/v3.0.3-plugins-outputs-nagios.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-outputs-nagios", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-outputs-null.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-outputs-null", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-outputs-pipe.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-outputs-pipe", "/en/logstash-versioned-plugins/*/v3.0.3-plugins-outputs-redmine.html": "/docs/reference/logstash/versioned-plugins/v3-0-3-plugins-outputs-redmine", @@ -9524,8 +8409,8 @@ "/en/logstash-versioned-plugins/*/v3.0.4-plugins-codecs-es_bulk.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-codecs-es_bulk", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-codecs-graphite.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-codecs-graphite", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-codecs-gzip_lines.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-codecs-gzip_lines", - "/en/logstash-versioned-plugins/*/v3.0.4-plugins-codecs-json.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-codecs-json", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-codecs-json_lines.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-codecs-json_lines", + "/en/logstash-versioned-plugins/*/v3.0.4-plugins-codecs-json.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-codecs-json", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-codecs-line.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-codecs-line", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-codecs-plain.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-codecs-plain", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-codecs-rubydebug.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-codecs-rubydebug", @@ -9571,8 +8456,8 @@ "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-boundary.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-boundary", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-circonus.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-circonus", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-csv.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-csv", - "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-datadog.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-datadog", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-datadog_metrics.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-datadog_metrics", + "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-datadog.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-datadog", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-ganglia.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-ganglia", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-google_cloud_storage.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-google_cloud_storage", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-graphtastic.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-graphtastic", @@ -9582,8 +8467,8 @@ "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-librato.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-librato", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-loggly.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-loggly", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-metriccatcher.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-metriccatcher", - "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-nagios.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-nagios", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-nagios_nsca.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-nagios_nsca", + "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-nagios.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-nagios", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-null.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-null", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-pagerduty.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-pagerduty", "/en/logstash-versioned-plugins/*/v3.0.4-plugins-outputs-pipe.html": "/docs/reference/logstash/versioned-plugins/v3-0-4-plugins-outputs-pipe", @@ -9601,12 +8486,12 @@ "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-cloudtrail.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-cloudtrail", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-collectd.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-collectd", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-dots.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-dots", - "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-edn.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-edn", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-edn_lines.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-edn_lines", + "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-edn.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-edn", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-es_bulk.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-es_bulk", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-graphite.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-graphite", - "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-json.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-json", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-json_lines.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-json_lines", + "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-json.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-json", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-line.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-line", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-msgpack.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-msgpack", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-codecs-multiline.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-codecs-multiline", @@ -9645,8 +8530,8 @@ "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-circonus.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-circonus", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-cloudwatch.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-cloudwatch", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-csv.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-csv", - "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-datadog.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-datadog", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-datadog_metrics.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-datadog_metrics", + "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-datadog.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-datadog", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-ganglia.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-ganglia", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-google_cloud_storage.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-google_cloud_storage", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-irc.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-irc", @@ -9655,8 +8540,8 @@ "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-juggernaut.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-juggernaut", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-librato.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-librato", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-loggly.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-loggly", - "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-nagios.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-nagios", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-nagios_nsca.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-nagios_nsca", + "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-nagios.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-nagios", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-null.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-null", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-pagerduty.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-pagerduty", "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-pipe.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-pipe", @@ -9672,8 +8557,8 @@ "/en/logstash-versioned-plugins/*/v3.0.5-plugins-outputs-zabbix.html": "/docs/reference/logstash/versioned-plugins/v3-0-5-plugins-outputs-zabbix", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-codecs-collectd.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-codecs-collectd", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-codecs-dots.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-codecs-dots", - "/en/logstash-versioned-plugins/*/v3.0.6-plugins-codecs-edn.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-codecs-edn", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-codecs-edn_lines.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-codecs-edn_lines", + "/en/logstash-versioned-plugins/*/v3.0.6-plugins-codecs-edn.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-codecs-edn", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-codecs-es_bulk.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-codecs-es_bulk", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-codecs-graphite.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-codecs-graphite", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-codecs-json_lines.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-codecs-json_lines", @@ -9711,14 +8596,14 @@ "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-circonus.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-circonus", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-cloudwatch.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-cloudwatch", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-csv.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-csv", - "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-datadog.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-datadog", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-datadog_metrics.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-datadog_metrics", + "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-datadog.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-datadog", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-ganglia.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-ganglia", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-irc.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-irc", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-juggernaut.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-juggernaut", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-librato.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-librato", - "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-nagios.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-nagios", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-nagios_nsca.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-nagios_nsca", + "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-nagios.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-nagios", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-pagerduty.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-pagerduty", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-pipe.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-pipe", "/en/logstash-versioned-plugins/*/v3.0.6-plugins-outputs-riemann.html": "/docs/reference/logstash/versioned-plugins/v3-0-6-plugins-outputs-riemann", @@ -9777,11 +8662,11 @@ "/en/logstash-versioned-plugins/*/v3.0.9-plugins-outputs-pagerduty.html": "/docs/reference/logstash/versioned-plugins/v3-0-9-plugins-outputs-pagerduty", "/en/logstash-versioned-plugins/*/v3.0.9-plugins-outputs-stomp.html": "/docs/reference/logstash/versioned-plugins/v3-0-9-plugins-outputs-stomp", "/en/logstash-versioned-plugins/*/v3.1.0-plugins-codecs-collectd.html": "/docs/reference/logstash/versioned-plugins/v3-1-0-plugins-codecs-collectd", - "/en/logstash-versioned-plugins/*/v3.1.0-plugins-codecs-edn.html": "/docs/reference/logstash/versioned-plugins/v3-1-0-plugins-codecs-edn", "/en/logstash-versioned-plugins/*/v3.1.0-plugins-codecs-edn_lines.html": "/docs/reference/logstash/versioned-plugins/v3-1-0-plugins-codecs-edn_lines", + "/en/logstash-versioned-plugins/*/v3.1.0-plugins-codecs-edn.html": "/docs/reference/logstash/versioned-plugins/v3-1-0-plugins-codecs-edn", "/en/logstash-versioned-plugins/*/v3.1.0-plugins-codecs-es_bulk.html": "/docs/reference/logstash/versioned-plugins/v3-1-0-plugins-codecs-es_bulk", - "/en/logstash-versioned-plugins/*/v3.1.0-plugins-codecs-json.html": "/docs/reference/logstash/versioned-plugins/v3-1-0-plugins-codecs-json", "/en/logstash-versioned-plugins/*/v3.1.0-plugins-codecs-json_lines.html": "/docs/reference/logstash/versioned-plugins/v3-1-0-plugins-codecs-json_lines", + "/en/logstash-versioned-plugins/*/v3.1.0-plugins-codecs-json.html": "/docs/reference/logstash/versioned-plugins/v3-1-0-plugins-codecs-json", "/en/logstash-versioned-plugins/*/v3.1.0-plugins-codecs-line.html": "/docs/reference/logstash/versioned-plugins/v3-1-0-plugins-codecs-line", "/en/logstash-versioned-plugins/*/v3.1.0-plugins-codecs-msgpack.html": "/docs/reference/logstash/versioned-plugins/v3-1-0-plugins-codecs-msgpack", "/en/logstash-versioned-plugins/*/v3.1.0-plugins-codecs-multiline.html": "/docs/reference/logstash/versioned-plugins/v3-1-0-plugins-codecs-multiline", @@ -10068,8 +8953,8 @@ "/en/logstash-versioned-plugins/*/v3.3.0-plugins-filters-translate.html": "/docs/reference/logstash/versioned-plugins/v3-3-0-plugins-filters-translate", "/en/logstash-versioned-plugins/*/v3.3.0-plugins-inputs-exec.html": "/docs/reference/logstash/versioned-plugins/v3-3-0-plugins-inputs-exec", "/en/logstash-versioned-plugins/*/v3.3.0-plugins-inputs-gelf.html": "/docs/reference/logstash/versioned-plugins/v3-3-0-plugins-inputs-gelf", - "/en/logstash-versioned-plugins/*/v3.3.0-plugins-inputs-http.html": "/docs/reference/logstash/versioned-plugins/v3-3-0-plugins-inputs-http", "/en/logstash-versioned-plugins/*/v3.3.0-plugins-inputs-http_poller.html": "/docs/reference/logstash/versioned-plugins/v3-3-0-plugins-inputs-http_poller", + "/en/logstash-versioned-plugins/*/v3.3.0-plugins-inputs-http.html": "/docs/reference/logstash/versioned-plugins/v3-3-0-plugins-inputs-http", "/en/logstash-versioned-plugins/*/v3.3.0-plugins-inputs-s3.html": "/docs/reference/logstash/versioned-plugins/v3-3-0-plugins-inputs-s3", "/en/logstash-versioned-plugins/*/v3.3.0-plugins-inputs-sqs.html": "/docs/reference/logstash/versioned-plugins/v3-3-0-plugins-inputs-sqs", "/en/logstash-versioned-plugins/*/v3.3.0-plugins-inputs-stdin.html": "/docs/reference/logstash/versioned-plugins/v3-3-0-plugins-inputs-stdin", @@ -10084,8 +8969,8 @@ "/en/logstash-versioned-plugins/*/v3.3.1-plugins-filters-useragent.html": "/docs/reference/logstash/versioned-plugins/v3-3-1-plugins-filters-useragent", "/en/logstash-versioned-plugins/*/v3.3.1-plugins-inputs-exec.html": "/docs/reference/logstash/versioned-plugins/v3-3-1-plugins-inputs-exec", "/en/logstash-versioned-plugins/*/v3.3.1-plugins-inputs-gelf.html": "/docs/reference/logstash/versioned-plugins/v3-3-1-plugins-inputs-gelf", - "/en/logstash-versioned-plugins/*/v3.3.1-plugins-inputs-http.html": "/docs/reference/logstash/versioned-plugins/v3-3-1-plugins-inputs-http", "/en/logstash-versioned-plugins/*/v3.3.1-plugins-inputs-http_poller.html": "/docs/reference/logstash/versioned-plugins/v3-3-1-plugins-inputs-http_poller", + "/en/logstash-versioned-plugins/*/v3.3.1-plugins-inputs-http.html": "/docs/reference/logstash/versioned-plugins/v3-3-1-plugins-inputs-http", "/en/logstash-versioned-plugins/*/v3.3.1-plugins-inputs-s3.html": "/docs/reference/logstash/versioned-plugins/v3-3-1-plugins-inputs-s3", "/en/logstash-versioned-plugins/*/v3.3.1-plugins-inputs-sqs.html": "/docs/reference/logstash/versioned-plugins/v3-3-1-plugins-inputs-sqs", "/en/logstash-versioned-plugins/*/v3.3.1-plugins-inputs-udp.html": "/docs/reference/logstash/versioned-plugins/v3-3-1-plugins-inputs-udp", @@ -10094,22 +8979,22 @@ "/en/logstash-versioned-plugins/*/v3.3.2-plugins-filters-useragent.html": "/docs/reference/logstash/versioned-plugins/v3-3-2-plugins-filters-useragent", "/en/logstash-versioned-plugins/*/v3.3.2-plugins-inputs-exec.html": "/docs/reference/logstash/versioned-plugins/v3-3-2-plugins-inputs-exec", "/en/logstash-versioned-plugins/*/v3.3.2-plugins-inputs-gelf.html": "/docs/reference/logstash/versioned-plugins/v3-3-2-plugins-inputs-gelf", - "/en/logstash-versioned-plugins/*/v3.3.2-plugins-inputs-http.html": "/docs/reference/logstash/versioned-plugins/v3-3-2-plugins-inputs-http", "/en/logstash-versioned-plugins/*/v3.3.2-plugins-inputs-http_poller.html": "/docs/reference/logstash/versioned-plugins/v3-3-2-plugins-inputs-http_poller", + "/en/logstash-versioned-plugins/*/v3.3.2-plugins-inputs-http.html": "/docs/reference/logstash/versioned-plugins/v3-3-2-plugins-inputs-http", "/en/logstash-versioned-plugins/*/v3.3.2-plugins-inputs-s3.html": "/docs/reference/logstash/versioned-plugins/v3-3-2-plugins-inputs-s3", "/en/logstash-versioned-plugins/*/v3.3.2-plugins-inputs-sqs.html": "/docs/reference/logstash/versioned-plugins/v3-3-2-plugins-inputs-sqs", "/en/logstash-versioned-plugins/*/v3.3.2-plugins-inputs-udp.html": "/docs/reference/logstash/versioned-plugins/v3-3-2-plugins-inputs-udp", "/en/logstash-versioned-plugins/*/v3.3.3-plugins-filters-mutate.html": "/docs/reference/logstash/versioned-plugins/v3-3-3-plugins-filters-mutate", "/en/logstash-versioned-plugins/*/v3.3.3-plugins-filters-useragent.html": "/docs/reference/logstash/versioned-plugins/v3-3-3-plugins-filters-useragent", "/en/logstash-versioned-plugins/*/v3.3.3-plugins-inputs-exec.html": "/docs/reference/logstash/versioned-plugins/v3-3-3-plugins-inputs-exec", - "/en/logstash-versioned-plugins/*/v3.3.3-plugins-inputs-http.html": "/docs/reference/logstash/versioned-plugins/v3-3-3-plugins-inputs-http", "/en/logstash-versioned-plugins/*/v3.3.3-plugins-inputs-http_poller.html": "/docs/reference/logstash/versioned-plugins/v3-3-3-plugins-inputs-http_poller", + "/en/logstash-versioned-plugins/*/v3.3.3-plugins-inputs-http.html": "/docs/reference/logstash/versioned-plugins/v3-3-3-plugins-inputs-http", "/en/logstash-versioned-plugins/*/v3.3.3-plugins-inputs-s3.html": "/docs/reference/logstash/versioned-plugins/v3-3-3-plugins-inputs-s3", "/en/logstash-versioned-plugins/*/v3.3.3-plugins-inputs-udp.html": "/docs/reference/logstash/versioned-plugins/v3-3-3-plugins-inputs-udp", "/en/logstash-versioned-plugins/*/v3.3.4-plugins-filters-mutate.html": "/docs/reference/logstash/versioned-plugins/v3-3-4-plugins-filters-mutate", "/en/logstash-versioned-plugins/*/v3.3.4-plugins-filters-useragent.html": "/docs/reference/logstash/versioned-plugins/v3-3-4-plugins-filters-useragent", - "/en/logstash-versioned-plugins/*/v3.3.4-plugins-inputs-http.html": "/docs/reference/logstash/versioned-plugins/v3-3-4-plugins-inputs-http", "/en/logstash-versioned-plugins/*/v3.3.4-plugins-inputs-http_poller.html": "/docs/reference/logstash/versioned-plugins/v3-3-4-plugins-inputs-http_poller", + "/en/logstash-versioned-plugins/*/v3.3.4-plugins-inputs-http.html": "/docs/reference/logstash/versioned-plugins/v3-3-4-plugins-inputs-http", "/en/logstash-versioned-plugins/*/v3.3.4-plugins-inputs-s3.html": "/docs/reference/logstash/versioned-plugins/v3-3-4-plugins-inputs-s3", "/en/logstash-versioned-plugins/*/v3.3.4-plugins-inputs-udp.html": "/docs/reference/logstash/versioned-plugins/v3-3-4-plugins-inputs-udp", "/en/logstash-versioned-plugins/*/v3.3.5-plugins-filters-useragent.html": "/docs/reference/logstash/versioned-plugins/v3-3-5-plugins-filters-useragent", @@ -10226,8 +9111,8 @@ "/en/logstash-versioned-plugins/*/v4.0.0-plugins-filters-clone.html": "/docs/reference/logstash/versioned-plugins/v4-0-0-plugins-filters-clone", "/en/logstash-versioned-plugins/*/v4.0.0-plugins-filters-elasticsearch.html": "/docs/reference/logstash/versioned-plugins/v4-0-0-plugins-filters-elasticsearch", "/en/logstash-versioned-plugins/*/v4.0.0-plugins-filters-grok.html": "/docs/reference/logstash/versioned-plugins/v4-0-0-plugins-filters-grok", - "/en/logstash-versioned-plugins/*/v4.0.0-plugins-inputs-http.html": "/docs/reference/logstash/versioned-plugins/v4-0-0-plugins-inputs-http", "/en/logstash-versioned-plugins/*/v4.0.0-plugins-inputs-http_poller.html": "/docs/reference/logstash/versioned-plugins/v4-0-0-plugins-inputs-http_poller", + "/en/logstash-versioned-plugins/*/v4.0.0-plugins-inputs-http.html": "/docs/reference/logstash/versioned-plugins/v4-0-0-plugins-inputs-http", "/en/logstash-versioned-plugins/*/v4.0.0-plugins-inputs-snmp.html": "/docs/reference/logstash/versioned-plugins/v4-0-0-plugins-inputs-snmp", "/en/logstash-versioned-plugins/*/v4.0.0-plugins-inputs-snmptrap.html": "/docs/reference/logstash/versioned-plugins/v4-0-0-plugins-inputs-snmptrap", "/en/logstash-versioned-plugins/*/v4.0.0-plugins-inputs-twitter.html": "/docs/reference/logstash/versioned-plugins/v4-0-0-plugins-inputs-twitter", @@ -11197,14 +10082,6 @@ "/en/logstash-versioned-plugins/*/v9.3.2-plugins-outputs-elasticsearch.html": "/docs/reference/logstash/versioned-plugins/v9-3-2-plugins-outputs-elasticsearch", "/en/logstash-versioned-plugins/*/v9.4.0-plugins-outputs-elasticsearch.html": "/docs/reference/logstash/versioned-plugins/v9-4-0-plugins-outputs-elasticsearch", "/en/logstash/*/advanced-pipeline.html": "/docs/reference/logstash/advanced-pipeline", - "/en/logstash/*/arcsight-module.html": "/guide/en/logstash/8.18/arcsight-module.html", - "/en/logstash/*/azure-module.html": "/guide/en/logstash/8.18/azure-module.html", - "/en/logstash/*/breaking-6.0.html": "/guide/en/logstash/8.18/breaking-6.0.html", - "/en/logstash/*/breaking-7.0.html": "/guide/en/logstash/8.18/breaking-7.0.html", - "/en/logstash/*/breaking-8.0.html": "/guide/en/logstash/8.18/breaking-8.0.html", - "/en/logstash/*/breaking-changes.html": "/guide/en/logstash/8.18/breaking-changes.html", - "/en/logstash/*/breaking-pq.html": "/guide/en/logstash/8.18/breaking-pq.html", - "/en/logstash/*/brew.html": "/guide/en/logstash/8.18/brew.html", "/en/logstash/*/codec-new-plugin.html": "/docs/extend/logstash/codec-new-plugin", "/en/logstash/*/codec-plugins.html": "/docs/reference/logstash/plugins/codec-plugins", "/en/logstash/*/community-maintainer.html": "/docs/extend/logstash/community-maintainer", @@ -11237,7 +10114,6 @@ "/en/logstash/*/event-dependent-configuration.html": "/docs/reference/logstash/event-dependent-configuration", "/en/logstash/*/execution-model.html": "/docs/reference/logstash/execution-model", "/en/logstash/*/field-extraction.html": "/docs/reference/logstash/field-extraction", - "/en/logstash/*/field-references-deepdive.html": "/guide/en/logstash/8.18/field-references-deepdive.html", "/en/logstash/*/filebeat-modules.html": "/docs/reference/logstash/working-with-filebeat-modules", "/en/logstash/*/filter-new-plugin.html": "/docs/extend/logstash/filter-new-plugin", "/en/logstash/*/filter-plugins.html": "/docs/reference/logstash/plugins/filter-plugins", @@ -11250,7 +10126,6 @@ "/en/logstash/*/health-report-pipeline-status.html": "/docs/troubleshoot/ingest/logstash/health-report-pipelines", "/en/logstash/*/hot-threads-api.html": "/docs/api/doc/logstash", "/en/logstash/*/index.html": "/docs/reference/logstash", - "/en/logstash/*/ingest-converter.html": "/guide/en/logstash/8.18/ingest-converter.html", "/en/logstash/*/input-new-plugin.html": "/docs/extend/logstash/input-new-plugin", "/en/logstash/*/input-plugins.html": "/docs/reference/logstash/plugins/input-plugins", "/en/logstash/*/installing-logstash.html": "/docs/reference/logstash/installing-logstash", @@ -11262,81 +10137,9 @@ "/en/logstash/*/jvm-settings.html": "/docs/reference/logstash/jvm-settings", "/en/logstash/*/keystore.html": "/docs/reference/logstash/keystore", "/en/logstash/*/logging.html": "/docs/reference/logstash/logging", - "/en/logstash/*/logstash-8-0-0-alpha1.html": "/guide/en/logstash/8.18/logstash-8-0-0-alpha1.html", - "/en/logstash/*/logstash-8-0-0-alpha2.html": "/guide/en/logstash/8.18/logstash-8-0-0-alpha2.html", - "/en/logstash/*/logstash-8-0-0-beta1.html": "/guide/en/logstash/8.18/logstash-8-0-0-beta1.html", - "/en/logstash/*/logstash-8-0-0-rc1.html": "/guide/en/logstash/8.18/logstash-8-0-0-rc1.html", - "/en/logstash/*/logstash-8-0-0-rc2.html": "/guide/en/logstash/8.18/logstash-8-0-0-rc2.html", - "/en/logstash/*/logstash-8-0-0.html": "/guide/en/logstash/8.18/logstash-8-0-0.html", - "/en/logstash/*/logstash-8-0-1.html": "/guide/en/logstash/8.18/logstash-8-0-1.html", - "/en/logstash/*/logstash-8-1-0.html": "/guide/en/logstash/8.18/logstash-8-1-0.html", - "/en/logstash/*/logstash-8-1-1.html": "/guide/en/logstash/8.18/logstash-8-1-1.html", - "/en/logstash/*/logstash-8-1-2.html": "/guide/en/logstash/8.18/logstash-8-1-2.html", - "/en/logstash/*/logstash-8-1-3.html": "/guide/en/logstash/8.18/logstash-8-1-3.html", - "/en/logstash/*/logstash-8-10-0.html": "/guide/en/logstash/8.18/logstash-8-10-0.html", - "/en/logstash/*/logstash-8-10-1.html": "/guide/en/logstash/8.18/logstash-8-10-1.html", - "/en/logstash/*/logstash-8-10-2.html": "/guide/en/logstash/8.18/logstash-8-10-2.html", - "/en/logstash/*/logstash-8-10-3.html": "/guide/en/logstash/8.18/logstash-8-10-3.html", - "/en/logstash/*/logstash-8-10-4.html": "/guide/en/logstash/8.18/logstash-8-10-4.html", - "/en/logstash/*/logstash-8-11-0.html": "/guide/en/logstash/8.18/logstash-8-11-0.html", - "/en/logstash/*/logstash-8-11-1.html": "/guide/en/logstash/8.18/logstash-8-11-1.html", - "/en/logstash/*/logstash-8-11-2.html": "/guide/en/logstash/8.18/logstash-8-11-2.html", - "/en/logstash/*/logstash-8-11-3.html": "/guide/en/logstash/8.18/logstash-8-11-3.html", - "/en/logstash/*/logstash-8-11-4.html": "/guide/en/logstash/8.18/logstash-8-11-4.html", - "/en/logstash/*/logstash-8-12-0.html": "/guide/en/logstash/8.18/logstash-8-12-0.html", - "/en/logstash/*/logstash-8-12-1.html": "/guide/en/logstash/8.18/logstash-8-12-1.html", - "/en/logstash/*/logstash-8-12-2.html": "/guide/en/logstash/8.18/logstash-8-12-2.html", - "/en/logstash/*/logstash-8-13-0.html": "/guide/en/logstash/8.18/logstash-8-13-0.html", - "/en/logstash/*/logstash-8-13-1.html": "/guide/en/logstash/8.18/logstash-8-13-1.html", - "/en/logstash/*/logstash-8-13-2.html": "/guide/en/logstash/8.18/logstash-8-13-2.html", - "/en/logstash/*/logstash-8-13-3.html": "/guide/en/logstash/8.18/logstash-8-13-3.html", - "/en/logstash/*/logstash-8-13-4.html": "/guide/en/logstash/8.18/logstash-8-13-4.html", - "/en/logstash/*/logstash-8-14-0.html": "/guide/en/logstash/8.18/logstash-8-14-0.html", - "/en/logstash/*/logstash-8-14-1.html": "/guide/en/logstash/8.18/logstash-8-14-1.html", - "/en/logstash/*/logstash-8-14-2.html": "/guide/en/logstash/8.18/logstash-8-14-2.html", - "/en/logstash/*/logstash-8-14-3.html": "/guide/en/logstash/8.18/logstash-8-14-3.html", - "/en/logstash/*/logstash-8-15-0.html": "/guide/en/logstash/8.18/logstash-8-15-0.html", - "/en/logstash/*/logstash-8-15-1.html": "/guide/en/logstash/8.18/logstash-8-15-1.html", - "/en/logstash/*/logstash-8-15-2.html": "/guide/en/logstash/8.18/logstash-8-15-2.html", - "/en/logstash/*/logstash-8-15-3.html": "/guide/en/logstash/8.18/logstash-8-15-3.html", - "/en/logstash/*/logstash-8-15-4.html": "/guide/en/logstash/8.18/logstash-8-15-4.html", - "/en/logstash/*/logstash-8-15-5.html": "/guide/en/logstash/8.18/logstash-8-15-5.html", - "/en/logstash/*/logstash-8-16-0.html": "/guide/en/logstash/8.18/logstash-8-16-0.html", - "/en/logstash/*/logstash-8-16-1.html": "/guide/en/logstash/8.18/logstash-8-16-1.html", - "/en/logstash/*/logstash-8-16-2.html": "/guide/en/logstash/8.18/logstash-8-16-2.html", - "/en/logstash/*/logstash-8-16-3.html": "/guide/en/logstash/8.18/logstash-8-16-3.html", - "/en/logstash/*/logstash-8-17-0.html": "/guide/en/logstash/8.18/logstash-8-17-0.html", - "/en/logstash/*/logstash-8-17-1.html": "/guide/en/logstash/8.18/logstash-8-17-1.html", - "/en/logstash/*/logstash-8-2-0.html": "/guide/en/logstash/8.18/logstash-8-2-0.html", - "/en/logstash/*/logstash-8-2-1.html": "/guide/en/logstash/8.18/logstash-8-2-1.html", - "/en/logstash/*/logstash-8-2-2.html": "/guide/en/logstash/8.18/logstash-8-2-2.html", - "/en/logstash/*/logstash-8-2-3.html": "/guide/en/logstash/8.18/logstash-8-2-3.html", - "/en/logstash/*/logstash-8-3-0.html": "/guide/en/logstash/8.18/logstash-8-3-0.html", - "/en/logstash/*/logstash-8-3-1.html": "/guide/en/logstash/8.18/logstash-8-3-1.html", - "/en/logstash/*/logstash-8-3-2.html": "/guide/en/logstash/8.18/logstash-8-3-2.html", - "/en/logstash/*/logstash-8-3-3.html": "/guide/en/logstash/8.18/logstash-8-3-3.html", - "/en/logstash/*/logstash-8-4-0.html": "/guide/en/logstash/8.18/logstash-8-4-0.html", - "/en/logstash/*/logstash-8-4-1.html": "/guide/en/logstash/8.18/logstash-8-4-1.html", - "/en/logstash/*/logstash-8-4-2.html": "/guide/en/logstash/8.18/logstash-8-4-2.html", - "/en/logstash/*/logstash-8-5-0.html": "/guide/en/logstash/8.18/logstash-8-5-0.html", - "/en/logstash/*/logstash-8-5-1.html": "/guide/en/logstash/8.18/logstash-8-5-1.html", - "/en/logstash/*/logstash-8-5-2.html": "/guide/en/logstash/8.18/logstash-8-5-2.html", - "/en/logstash/*/logstash-8-5-3.html": "/guide/en/logstash/8.18/logstash-8-5-3.html", - "/en/logstash/*/logstash-8-6-0.html": "/guide/en/logstash/8.18/logstash-8-6-0.html", - "/en/logstash/*/logstash-8-6-1.html": "/guide/en/logstash/8.18/logstash-8-6-1.html", - "/en/logstash/*/logstash-8-6-2.html": "/guide/en/logstash/8.18/logstash-8-6-2.html", - "/en/logstash/*/logstash-8-7-0.html": "/guide/en/logstash/8.18/logstash-8-7-0.html", - "/en/logstash/*/logstash-8-7-1.html": "/guide/en/logstash/8.18/logstash-8-7-1.html", - "/en/logstash/*/logstash-8-8-0.html": "/guide/en/logstash/8.18/logstash-8-8-0.html", - "/en/logstash/*/logstash-8-8-1.html": "/guide/en/logstash/8.18/logstash-8-8-1.html", - "/en/logstash/*/logstash-8-8-2.html": "/guide/en/logstash/8.18/logstash-8-8-2.html", - "/en/logstash/*/logstash-8-9-0.html": "/guide/en/logstash/8.18/logstash-8-9-0.html", - "/en/logstash/*/logstash-8-9-1.html": "/guide/en/logstash/8.18/logstash-8-9-1.html", - "/en/logstash/*/logstash-8-9-2.html": "/guide/en/logstash/8.18/logstash-8-9-2.html", "/en/logstash/*/logstash-centralized-pipeline-management.html": "/docs/reference/logstash/logstash-centralized-pipeline-management", "/en/logstash/*/logstash-geoip-database-management.html": "/docs/reference/logstash/logstash-geoip-database-management", "/en/logstash/*/logstash-health-report-api.html": "/docs/api/doc/logstash", - "/en/logstash/*/logstash-modules.html": "/guide/en/logstash/8.18/logstash-modules.html", "/en/logstash/*/logstash-monitoring-ui.html": "/docs/reference/logstash/logstash-monitoring-ui", "/en/logstash/*/logstash-pipeline-viewer.html": "/docs/reference/logstash/logstash-pipeline-viewer", "/en/logstash/*/logstash-settings-file.html": "/docs/reference/logstash/logstash-settings-file", @@ -11356,7 +10159,6 @@ "/en/logstash/*/multiline.html": "/docs/reference/logstash/multiline", "/en/logstash/*/multiple-input-output-plugins.html": "/docs/reference/logstash/multiple-input-output-plugins", "/en/logstash/*/multiple-pipelines.html": "/docs/reference/logstash/multiple-pipelines", - "/en/logstash/*/netflow-module.html": "/guide/en/logstash/8.18/netflow-module.html", "/en/logstash/*/node-info-api.html": "/docs/api/doc/logstash", "/en/logstash/*/node-stats-api.html": "/docs/api/doc/logstash", "/en/logstash/*/offline-plugins.html": "/docs/reference/logstash/offline-plugins", @@ -11380,8 +10182,8 @@ "/en/logstash/*/plugins-codecs-collectd.html": "/docs/reference/logstash/plugins/plugins-codecs-collectd", "/en/logstash/*/plugins-codecs-csv.html": "/docs/reference/logstash/plugins/plugins-codecs-csv", "/en/logstash/*/plugins-codecs-dots.html": "/docs/reference/logstash/plugins/plugins-codecs-dots", - "/en/logstash/*/plugins-codecs-edn.html": "/docs/reference/logstash/plugins/plugins-codecs-edn", "/en/logstash/*/plugins-codecs-edn_lines.html": "/docs/reference/logstash/plugins/plugins-codecs-edn_lines", + "/en/logstash/*/plugins-codecs-edn.html": "/docs/reference/logstash/plugins/plugins-codecs-edn", "/en/logstash/*/plugins-codecs-es_bulk.html": "/docs/reference/logstash/plugins/plugins-codecs-es_bulk", "/en/logstash/*/plugins-codecs-fluent.html": "/docs/reference/logstash/plugins/plugins-codecs-fluent", "/en/logstash/*/plugins-codecs-graphite.html": "/docs/reference/logstash/plugins/plugins-codecs-graphite", @@ -11389,8 +10191,8 @@ "/en/logstash/*/plugins-codecs-java_line.html": "/docs/reference/logstash/plugins/plugins-codecs-java_line", "/en/logstash/*/plugins-codecs-java_plain.html": "/docs/reference/logstash/plugins/plugins-codecs-java_plain", "/en/logstash/*/plugins-codecs-jdots.html": "/docs/reference/logstash/plugins/plugins-codecs-jdots", - "/en/logstash/*/plugins-codecs-json.html": "/docs/reference/logstash/plugins/plugins-codecs-json", "/en/logstash/*/plugins-codecs-json_lines.html": "/docs/reference/logstash/plugins/plugins-codecs-json_lines", + "/en/logstash/*/plugins-codecs-json.html": "/docs/reference/logstash/plugins/plugins-codecs-json", "/en/logstash/*/plugins-codecs-line.html": "/docs/reference/logstash/plugins/plugins-codecs-line", "/en/logstash/*/plugins-codecs-msgpack.html": "/docs/reference/logstash/plugins/plugins-codecs-msgpack", "/en/logstash/*/plugins-codecs-multiline.html": "/docs/reference/logstash/plugins/plugins-codecs-multiline", @@ -11425,13 +10227,12 @@ "/en/logstash/*/plugins-filters-java_uuid.html": "/docs/reference/logstash/plugins/plugins-filters-java_uuid", "/en/logstash/*/plugins-filters-jdbc_static.html": "/docs/reference/logstash/plugins/plugins-filters-jdbc_static", "/en/logstash/*/plugins-filters-jdbc_streaming.html": "/docs/reference/logstash/plugins/plugins-filters-jdbc_streaming", - "/en/logstash/*/plugins-filters-json.html": "/docs/reference/logstash/plugins/plugins-filters-json", "/en/logstash/*/plugins-filters-json_encode.html": "/docs/reference/logstash/plugins/plugins-filters-json_encode", + "/en/logstash/*/plugins-filters-json.html": "/docs/reference/logstash/plugins/plugins-filters-json", "/en/logstash/*/plugins-filters-kv.html": "/docs/reference/logstash/plugins/plugins-filters-kv", "/en/logstash/*/plugins-filters-memcached.html": "/docs/reference/logstash/plugins/plugins-filters-memcached", "/en/logstash/*/plugins-filters-metricize.html": "/docs/reference/logstash/plugins/plugins-filters-metricize", "/en/logstash/*/plugins-filters-metrics.html": "/docs/reference/logstash/plugins/plugins-filters-metrics", - "/en/logstash/*/plugins-filters-multiline.html": "/guide/en/logstash/8.18/plugins-filters-multiline.html", "/en/logstash/*/plugins-filters-mutate.html": "/docs/reference/logstash/plugins/plugins-filters-mutate", "/en/logstash/*/plugins-filters-prune.html": "/docs/reference/logstash/plugins/plugins-filters-prune", "/en/logstash/*/plugins-filters-range.html": "/docs/reference/logstash/plugins/plugins-filters-range", @@ -11467,8 +10268,8 @@ "/en/logstash/*/plugins-inputs-google_pubsub.html": "/docs/reference/logstash/plugins/plugins-inputs-google_pubsub", "/en/logstash/*/plugins-inputs-graphite.html": "/docs/reference/logstash/plugins/plugins-inputs-graphite", "/en/logstash/*/plugins-inputs-heartbeat.html": "/docs/reference/logstash/plugins/plugins-inputs-heartbeat", - "/en/logstash/*/plugins-inputs-http.html": "/docs/reference/logstash/plugins/plugins-inputs-http", "/en/logstash/*/plugins-inputs-http_poller.html": "/docs/reference/logstash/plugins/plugins-inputs-http_poller", + "/en/logstash/*/plugins-inputs-http.html": "/docs/reference/logstash/plugins/plugins-inputs-http", "/en/logstash/*/plugins-inputs-imap.html": "/docs/reference/logstash/plugins/plugins-inputs-imap", "/en/logstash/*/plugins-inputs-irc.html": "/docs/reference/logstash/plugins/plugins-inputs-irc", "/en/logstash/*/plugins-inputs-java_generator.html": "/docs/reference/logstash/plugins/plugins-inputs-java_generator", @@ -11517,8 +10318,8 @@ "/en/logstash/*/plugins-outputs-circonus.html": "/docs/reference/logstash/plugins/plugins-outputs-circonus", "/en/logstash/*/plugins-outputs-cloudwatch.html": "/docs/reference/logstash/plugins/plugins-outputs-cloudwatch", "/en/logstash/*/plugins-outputs-csv.html": "/docs/reference/logstash/plugins/plugins-outputs-csv", - "/en/logstash/*/plugins-outputs-datadog.html": "/docs/reference/logstash/plugins/plugins-outputs-datadog", "/en/logstash/*/plugins-outputs-datadog_metrics.html": "/docs/reference/logstash/plugins/plugins-outputs-datadog_metrics", + "/en/logstash/*/plugins-outputs-datadog.html": "/docs/reference/logstash/plugins/plugins-outputs-datadog", "/en/logstash/*/plugins-outputs-dynatrace.html": "/docs/reference/logstash/plugins/plugins-outputs-dynatrace", "/en/logstash/*/plugins-outputs-elastic_app_search.html": "/docs/reference/logstash/plugins/plugins-outputs-elastic_app_search", "/en/logstash/*/plugins-outputs-elastic_workplace_search.html": "/docs/reference/logstash/plugins/plugins-outputs-elastic_workplace_search", @@ -11545,8 +10346,8 @@ "/en/logstash/*/plugins-outputs-lumberjack.html": "/docs/reference/logstash/plugins/plugins-outputs-lumberjack", "/en/logstash/*/plugins-outputs-metriccatcher.html": "/docs/reference/logstash/plugins/plugins-outputs-metriccatcher", "/en/logstash/*/plugins-outputs-mongodb.html": "/docs/reference/logstash/plugins/plugins-outputs-mongodb", - "/en/logstash/*/plugins-outputs-nagios.html": "/docs/reference/logstash/plugins/plugins-outputs-nagios", "/en/logstash/*/plugins-outputs-nagios_nsca.html": "/docs/reference/logstash/plugins/plugins-outputs-nagios_nsca", + "/en/logstash/*/plugins-outputs-nagios.html": "/docs/reference/logstash/plugins/plugins-outputs-nagios", "/en/logstash/*/plugins-outputs-opentsdb.html": "/docs/reference/logstash/plugins/plugins-outputs-opentsdb", "/en/logstash/*/plugins-outputs-pagerduty.html": "/docs/reference/logstash/plugins/plugins-outputs-pagerduty", "/en/logstash/*/plugins-outputs-pipe.html": "/docs/reference/logstash/plugins/plugins-outputs-pipe", @@ -11591,8 +10392,6 @@ "/en/logstash/*/ts-plugins-general.html": "/docs/troubleshoot/ingest/logstash/plugins", "/en/logstash/*/ts-plugins.html": "/docs/troubleshoot/ingest/logstash/kafka", "/en/logstash/*/tuning-logstash.html": "/docs/reference/logstash/tuning-logstash", - "/en/logstash/*/upgrading-logstash-8.0.html": "/guide/en/logstash/8.18/upgrading-logstash-8.0.html", - "/en/logstash/*/upgrading-logstash-pqs.html": "/guide/en/logstash/8.18/upgrading-logstash-pqs.html", "/en/logstash/*/upgrading-logstash.html": "/docs/reference/logstash/upgrading-logstash", "/en/logstash/*/upgrading-minor-versions.html": "/docs/reference/logstash/upgrading-minor-versions", "/en/logstash/*/upgrading-using-direct-download.html": "/docs/reference/logstash/upgrading-using-direct-download", @@ -11634,8 +10433,8 @@ "/en/machine-learning/*/ml-configuring-alerts.html": "/docs/explore-analyze/machine-learning/anomaly-detection/ml-configuring-alerts", "/en/machine-learning/*/ml-configuring-categories.html": "/docs/explore-analyze/machine-learning/anomaly-detection/ml-configuring-categories", "/en/machine-learning/*/ml-configuring-detector-custom-rules.html": "/docs/explore-analyze/machine-learning/anomaly-detection/ml-configuring-detector-custom-rules", - "/en/machine-learning/*/ml-configuring-pop.html": "/guide/en/machine-learning/current/ml-anomaly-detection-job-types.html#population-jobs", - "/en/machine-learning/*/ml-configuring-populations.html": "/guide/en/machine-learning/current/ml-anomaly-detection-job-types.html#population-jobs", + "/en/machine-learning/*/ml-configuring-pop.html": "/docs/explore-analyze/machine-learning/anomaly-detection/ml-anomaly-detection-job-types", + "/en/machine-learning/*/ml-configuring-populations.html": "/docs/explore-analyze/machine-learning/anomaly-detection/ml-anomaly-detection-job-types", "/en/machine-learning/*/ml-configuring-transform.html": "/docs/explore-analyze/machine-learning/anomaly-detection/ml-configuring-transform", "/en/machine-learning/*/ml-configuring-url.html": "/docs/explore-analyze/machine-learning/anomaly-detection/ml-configuring-url", "/en/machine-learning/*/ml-count-functions.html": "/docs/reference/data-analysis/machine-learning/ml-count-functions", @@ -11722,280 +10521,248 @@ "/en/machine-learning/*/xpack-ml.html": "/docs/explore-analyze/machine-learning/anomaly-detection", "/en/machine-learning/master/ml-configuring-populations.html": "/docs/explore-analyze/machine-learning/anomaly-detection/ml-configuring-populations", "/en/observability/*/add-logs-service-name.html": "/docs/solutions/observability/logs/add-service-name-to-logs", - "/en/observability/*/agent-server-compatibility.html": "/docs/solutions/observability/apps/apm-agent-compatibility", - "/en/observability/*/agent-server-ssl.html": "/docs/solutions/observability/apps/ssltls-input-settings", - "/en/observability/*/agent-tls.html": "/docs/solutions/observability/apps/apm-agent-tls-communication", + "/en/observability/*/agent-server-compatibility.html": "/docs/solutions/observability/apm/apm-agent-compatibility", + "/en/observability/*/agent-server-ssl.html": "/docs/solutions/observability/apm/ssl-tls-input-settings", + "/en/observability/*/agent-tls.html": "/docs/solutions/observability/apm/apm-agent-tls-communication", "/en/observability/*/aggregation-options.html": "/docs/solutions/observability/incident-management/aggregation-options", "/en/observability/*/analyze-hosts.html": "/docs/solutions/observability/infra-and-hosts/analyze-compare-hosts", "/en/observability/*/analyze-metrics.html": "/docs/solutions/observability/infra-and-hosts/analyze-infrastructure-host-metrics", - "/en/observability/*/analyze-monitors.html": "/docs/solutions/observability/apps/analyze-monitors", - "/en/observability/*/anonymous-auth.html": "/docs/solutions/observability/apps/anonymous-authentication", - "/en/observability/*/api-config.html": "/docs/solutions/observability/apps/elastic-apm-agent-configuration-api", - "/en/observability/*/api-error.html": "/guide/en/observability/8.18/api-error.html", - "/en/observability/*/api-event-example.html": "/guide/en/observability/8.18/api-event-example.html", - "/en/observability/*/api-events.html": "/docs/solutions/observability/apps/elastic-apm-events-intake-api", - "/en/observability/*/api-info.html": "/docs/solutions/observability/apps/apm-server-information-api", - "/en/observability/*/api-jaeger.html": "/docs/solutions/observability/apps/jaeger-event-intake", - "/en/observability/*/api-key.html": "/docs/solutions/observability/apps/api-keys", - "/en/observability/*/api-metadata.html": "/guide/en/observability/current/apm-api-events.html#apm-api-metadata-overview", - "/en/observability/*/api-metricset.html": "/guide/en/observability/8.18/api-metricset.html", - "/en/observability/*/api-otlp.html": "/docs/solutions/observability/apps/opentelemetry-intake-api", - "/en/observability/*/api-span.html": "/guide/en/observability/8.18/api-span.html", - "/en/observability/*/api-transaction.html": "/guide/en/observability/8.18/api-transaction.html", - "/en/observability/*/api.html": "/docs/solutions/observability/apps/apm-server-api", - "/en/observability/*/apm-act-on-data.html": "/docs/solutions/observability/apps/act-on-data", - "/en/observability/*/apm-advanced-queries.html": "/docs/solutions/observability/apps/use-advanced-queries-on-application-data", - "/en/observability/*/apm-agent-auth.html": "/docs/solutions/observability/apps/apm-agent-authorization", + "/en/observability/*/analyze-monitors.html": "/docs/solutions/observability/uptime/analyze-monitors", + "/en/observability/*/anonymous-auth.html": "/docs/solutions/observability/apm/anonymous-authentication", + "/en/observability/*/api-config.html": "/docs/solutions/observability/apm/elastic-apm-agent-configuration-api", + "/en/observability/*/api-events.html": "/docs/solutions/observability/apm/elastic-apm-events-intake-api", + "/en/observability/*/api-info.html": "/docs/solutions/observability/apm/apm-server-information-api", + "/en/observability/*/api-jaeger.html": "/docs/solutions/observability/apm/jaeger-event-intake", + "/en/observability/*/api-key.html": "/docs/solutions/observability/apm/api-keys", + "/en/observability/*/api-metadata.html": "/docs/solutions/observability/apm/elastic-apm-events-intake-api", + "/en/observability/*/api-otlp.html": "/docs/solutions/observability/apm/opentelemetry-intake-api", + "/en/observability/*/api.html": "/docs/solutions/observability/apm/apm-server-api", + "/en/observability/*/apm-act-on-data.html": "/docs/solutions/observability/apm/act-on-data", + "/en/observability/*/apm-advanced-queries.html": "/docs/solutions/observability/apm/advanced-queries", + "/en/observability/*/apm-agent-auth.html": "/docs/solutions/observability/apm/apm-agent-authorization", "/en/observability/*/apm-agent-config-api.html": "/docs/api/doc/kibana/operation/operation-getagentconfigurations", - "/en/observability/*/apm-agent-configuration.html": "/docs/solutions/observability/apps/apm-agent-central-configuration", - "/en/observability/*/apm-agent-explorer.html": "/docs/solutions/observability/apps/apm-agent-explorer", + "/en/observability/*/apm-agent-configuration.html": "/docs/solutions/observability/apm/apm-agent-central-configuration", + "/en/observability/*/apm-agent-explorer.html": "/docs/solutions/observability/apm/apm-agent-explorer", "/en/observability/*/apm-agent-key-api.html": "/docs/api/doc/kibana/operation/operation-createagentkey", - "/en/observability/*/apm-agent-server-compatibility.html": "/docs/solutions/observability/apps/apm-agent-compatibility", - "/en/observability/*/apm-agent-server-ssl.html": "/docs/solutions/observability/apps/ssltls-input-settings", - "/en/observability/*/apm-agent-tls.html": "/docs/solutions/observability/apps/apm-agent-tls-communication", - "/en/observability/*/apm-agents.html": "/docs/solutions/observability/apps/elastic-apm-agents", - "/en/observability/*/apm-alerts.html": "/docs/solutions/observability/apps/create-apm-rules-alerts", + "/en/observability/*/apm-agent-server-compatibility.html": "/docs/solutions/observability/apm/apm-agent-compatibility", + "/en/observability/*/apm-agent-server-ssl.html": "/docs/solutions/observability/apm/ssl-tls-input-settings", + "/en/observability/*/apm-agent-tls.html": "/docs/solutions/observability/apm/apm-agent-tls-communication", + "/en/observability/*/apm-agents.html": "/docs/solutions/observability/apm/elastic-apm-agents", + "/en/observability/*/apm-alerts.html": "/docs/solutions/observability/apm/create-apm-rules-alerts", "/en/observability/*/apm-annotation-api.html": "/docs/api/doc/kibana/operation/operation-createannotation", "/en/observability/*/apm-anomaly-rule.html": "/docs/solutions/observability/incident-management/create-an-apm-anomaly-rule", - "/en/observability/*/apm-anonymous-auth.html": "/docs/solutions/observability/apps/anonymous-authentication", - "/en/observability/*/apm-api-config.html": "/docs/solutions/observability/apps/elastic-apm-agent-configuration-api", - "/en/observability/*/apm-api-events.html": "/docs/solutions/observability/apps/elastic-apm-events-intake-api", - "/en/observability/*/apm-api-info.html": "/docs/solutions/observability/apps/apm-server-information-api", - "/en/observability/*/apm-api-jaeger.html": "/docs/solutions/observability/apps/jaeger-event-intake", - "/en/observability/*/apm-api-key.html": "/docs/solutions/observability/apps/api-keys", - "/en/observability/*/apm-api-metadata.html": "/guide/en/observability/current/apm-api-events.html#apm-api-metadata-overview", - "/en/observability/*/apm-api-otlp.html": "/docs/solutions/observability/apps/opentelemetry-intake-api", - "/en/observability/*/apm-api.html": "/docs/solutions/observability/apps/apm-server-api", - "/en/observability/*/apm-apis.html": "/docs/solutions/observability/apps/apm-apis", - "/en/observability/*/apm-app-annotation-user-create.html": "/docs/solutions/observability/apps/applications-ui-annotation-user", - "/en/observability/*/apm-app-api-user.html": "/docs/solutions/observability/apps/applications-ui-api-user", - "/en/observability/*/apm-app-api.html": "/docs/solutions/observability/apps/apm-ui-api", - "/en/observability/*/apm-app-central-config-user.html": "/docs/solutions/observability/apps/applications-ui-central-config-user", - "/en/observability/*/apm-app-reader.html": "/docs/solutions/observability/apps/apm-reader-user", - "/en/observability/*/apm-app-storage-explorer-user-create.html": "/docs/solutions/observability/apps/applications-ui-storage-explorer-user", + "/en/observability/*/apm-anonymous-auth.html": "/docs/solutions/observability/apm/anonymous-authentication", + "/en/observability/*/apm-api-config.html": "/docs/solutions/observability/apm/elastic-apm-agent-configuration-api", + "/en/observability/*/apm-api-events.html": "/docs/solutions/observability/apm/elastic-apm-events-intake-api", + "/en/observability/*/apm-api-info.html": "/docs/solutions/observability/apm/apm-server-information-api", + "/en/observability/*/apm-api-jaeger.html": "/docs/solutions/observability/apm/jaeger-event-intake", + "/en/observability/*/apm-api-key.html": "/docs/solutions/observability/apm/api-keys", + "/en/observability/*/apm-api-metadata.html": "/docs/solutions/observability/apm/elastic-apm-events-intake-api", + "/en/observability/*/apm-api-otlp.html": "/docs/solutions/observability/apm/opentelemetry-intake-api", + "/en/observability/*/apm-api.html": "/docs/solutions/observability/apm/apm-server-api", + "/en/observability/*/apm-apis.html": "/docs/solutions/observability/apm/apis", + "/en/observability/*/apm-app-annotation-user-create.html": "/docs/solutions/observability/apm/ui-user-annotation", + "/en/observability/*/apm-app-api-user.html": "/docs/solutions/observability/apm/ui-user-api", + "/en/observability/*/apm-app-api.html": "/docs/solutions/observability/apm/apm-ui-api", + "/en/observability/*/apm-app-central-config-user.html": "/docs/solutions/observability/apm/ui-user-central-config", + "/en/observability/*/apm-app-reader.html": "/docs/solutions/observability/apm/ui-user-reader", + "/en/observability/*/apm-app-storage-explorer-user-create.html": "/docs/solutions/observability/apm/ui-user-storage-explorer", "/en/observability/*/apm-app-troubleshooting.html": "/docs/troubleshoot/observability/apm/common-problems", - "/en/observability/*/apm-app-users.html": "/docs/solutions/observability/apps/secure-access-to-applications-ui", - "/en/observability/*/apm-beats-api-keys.html": "/docs/solutions/observability/apps/grant-access-using-api-keys", + "/en/observability/*/apm-app-users.html": "/docs/solutions/observability/apm/secure-access-to-applications-ui", + "/en/observability/*/apm-beats-api-keys.html": "/docs/solutions/observability/apm/grant-access-using-api-keys", "/en/observability/*/apm-breaking.html": "/docs/release-notes/apm/breaking-changes", - "/en/observability/*/apm-collect-application-data.html": "/docs/solutions/observability/apps/collect-application-data", - "/en/observability/*/apm-command-line-options.html": "/docs/solutions/observability/apps/apm-server-command-reference", + "/en/observability/*/apm-collect-application-data.html": "/docs/solutions/observability/apm/collect-application-data", + "/en/observability/*/apm-command-line-options.html": "/docs/solutions/observability/apm/apm-server-command-reference", "/en/observability/*/apm-common-problems.html": "/docs/troubleshoot/observability/apm/common-problems", "/en/observability/*/apm-common-response-codes.html": "/docs/troubleshoot/observability/apm/apm-server-response-codes", - "/en/observability/*/apm-config-env.html": "/docs/solutions/observability/apps/use-environment-variables-in-configuration", - "/en/observability/*/apm-configuration-anonymous.html": "/docs/solutions/observability/apps/configure-anonymous-authentication", - "/en/observability/*/apm-configuration-instrumentation.html": "/docs/solutions/observability/apps/configure-apm-instrumentation", - "/en/observability/*/apm-configuration-logging.html": "/docs/solutions/observability/apps/configure-logging", - "/en/observability/*/apm-configuration-path.html": "/docs/solutions/observability/apps/configure-project-paths", - "/en/observability/*/apm-configuration-process.html": "/docs/solutions/observability/apps/general-configuration-options", - "/en/observability/*/apm-configuration-rum.html": "/docs/solutions/observability/apps/configure-real-user-monitoring-rum", - "/en/observability/*/apm-configuration-ssl-landing.html": "/docs/solutions/observability/apps/ssltls-settings", - "/en/observability/*/apm-configuration-ssl.html": "/docs/solutions/observability/apps/ssltls-output-settings", - "/en/observability/*/apm-configure-agent-config.html": "/docs/solutions/observability/apps/configure-apm-agent-central-configuration", - "/en/observability/*/apm-configure-cloud-id.html": "/docs/solutions/observability/apps/configure-output-for-elasticsearch-service-on-elastic-cloud", - "/en/observability/*/apm-configuring-howto-apm-server.html": "/docs/solutions/observability/apps/configure-apm-server", - "/en/observability/*/apm-configuring-output.html": "/docs/solutions/observability/apps/configure-output", - "/en/observability/*/apm-console-output.html": "/docs/solutions/observability/apps/configure-console-output", - "/en/observability/*/apm-correlations.html": "/docs/solutions/observability/apps/find-transaction-latency-failure-correlations", - "/en/observability/*/apm-cross-cluster-search.html": "/docs/solutions/observability/apps/cross-cluster-search-with-application-data", - "/en/observability/*/apm-custom-filter.html": "/docs/solutions/observability/apps/custom-filters", - "/en/observability/*/apm-custom-index-template.html": "/docs/solutions/observability/apps/view-elasticsearch-index-template", - "/en/observability/*/apm-custom-links.html": "/docs/solutions/observability/apps/create-custom-links", - "/en/observability/*/apm-data-model-errors.html": "/docs/solutions/observability/apps/errors", - "/en/observability/*/apm-data-model-metadata.html": "/docs/solutions/observability/apps/metadata", - "/en/observability/*/apm-data-model-metrics.html": "/docs/solutions/observability/apps/metrics", - "/en/observability/*/apm-data-model-spans.html": "/docs/solutions/observability/apps/spans", - "/en/observability/*/apm-data-model-traces.html": "/docs/solutions/observability/apps/traces", - "/en/observability/*/apm-data-model-transactions.html": "/docs/solutions/observability/apps/transactions", - "/en/observability/*/apm-data-model.html": "/docs/solutions/observability/apps/learn-about-application-data-types", - "/en/observability/*/apm-data-security-delete.html": "/docs/solutions/observability/apps/delete-sensitive-data", - "/en/observability/*/apm-data-security.html": "/docs/solutions/observability/apps/application-data-security", - "/en/observability/*/apm-data-streams.html": "/docs/solutions/observability/apps/data-streams", - "/en/observability/*/apm-dependencies.html": "/docs/solutions/observability/apps/dependencies", - "/en/observability/*/apm-directory-layout.html": "/docs/solutions/observability/apps/installation-layout", - "/en/observability/*/apm-elasticsearch-output.html": "/docs/solutions/observability/apps/configure-elasticsearch-output", + "/en/observability/*/apm-config-env.html": "/docs/solutions/observability/apm/use-environment-variables-in-configuration", + "/en/observability/*/apm-configuration-anonymous.html": "/docs/solutions/observability/apm/configure-anonymous-authentication", + "/en/observability/*/apm-configuration-instrumentation.html": "/docs/solutions/observability/apm/configure-apm-instrumentation", + "/en/observability/*/apm-configuration-logging.html": "/docs/solutions/observability/apm/configure-logging", + "/en/observability/*/apm-configuration-path.html": "/docs/solutions/observability/apm/configure-project-paths", + "/en/observability/*/apm-configuration-process.html": "/docs/solutions/observability/apm/general-configuration-options", + "/en/observability/*/apm-configuration-rum.html": "/docs/solutions/observability/apm/configure-real-user-monitoring-rum", + "/en/observability/*/apm-configuration-ssl-landing.html": "/docs/solutions/observability/apm/ssl-tls-settings", + "/en/observability/*/apm-configuration-ssl.html": "/docs/solutions/observability/apm/ssl-tls-output-settings", + "/en/observability/*/apm-configure-agent-config.html": "/docs/solutions/observability/apm/configure-apm-agent-central-configuration", + "/en/observability/*/apm-configure-cloud-id.html": "/docs/solutions/observability/apm/configure-output-for-elasticsearch-service-on-elastic-cloud", + "/en/observability/*/apm-configuring-howto-apm-server.html": "/docs/solutions/observability/apm/configure-apm-server", + "/en/observability/*/apm-configuring-output.html": "/docs/solutions/observability/apm/configure-output", + "/en/observability/*/apm-console-output.html": "/docs/solutions/observability/apm/configure-console-output", + "/en/observability/*/apm-correlations.html": "/docs/solutions/observability/apm/find-transaction-latency-failure-correlations", + "/en/observability/*/apm-cross-cluster-search.html": "/docs/solutions/observability/apm/cross-cluster-search", + "/en/observability/*/apm-custom-filter.html": "/docs/solutions/observability/apm/custom-filters", + "/en/observability/*/apm-custom-index-template.html": "/docs/solutions/observability/apm/view-elasticsearch-index-template", + "/en/observability/*/apm-custom-links.html": "/docs/solutions/observability/apm/create-custom-links", + "/en/observability/*/apm-data-model-errors.html": "/docs/solutions/observability/apm/errors", + "/en/observability/*/apm-data-model-metadata.html": "/docs/solutions/observability/apm/metadata", + "/en/observability/*/apm-data-model-metrics.html": "/docs/solutions/observability/apm/metrics", + "/en/observability/*/apm-data-model-spans.html": "/docs/solutions/observability/apm/spans", + "/en/observability/*/apm-data-model-traces.html": "/docs/solutions/observability/apm/traces", + "/en/observability/*/apm-data-model-transactions.html": "/docs/solutions/observability/apm/transactions", + "/en/observability/*/apm-data-model.html": "/docs/solutions/observability/apm/data-types", + "/en/observability/*/apm-data-security-delete.html": "/docs/solutions/observability/apm/delete-sensitive-data", + "/en/observability/*/apm-data-security.html": "/docs/solutions/observability/apm/secure-data", + "/en/observability/*/apm-data-streams.html": "/docs/solutions/observability/apm/data-streams", + "/en/observability/*/apm-dependencies.html": "/docs/solutions/observability/apm/dependencies", + "/en/observability/*/apm-directory-layout.html": "/docs/solutions/observability/apm/installation-layout", + "/en/observability/*/apm-elasticsearch-output.html": "/docs/solutions/observability/apm/configure-elasticsearch-output", "/en/observability/*/apm-enable-apm-server-debugging.html": "/docs/troubleshoot/observability/apm/enable-apm-server-binary-debugging", "/en/observability/*/apm-error-count-threshold-rule.html": "/docs/solutions/observability/incident-management/create-an-error-count-threshold-rule", - "/en/observability/*/apm-errors.html": "/docs/solutions/observability/apps/errors-2", - "/en/observability/*/apm-exploring-es-data.html": "/docs/solutions/observability/apps/explore-data-in-elasticsearch", + "/en/observability/*/apm-errors.html": "/docs/solutions/observability/apm/errors-ui", + "/en/observability/*/apm-exploring-es-data.html": "/docs/solutions/observability/apm/explore-data-in-elasticsearch", "/en/observability/*/apm-failed-transaction-rate-threshold-rule.html": "/docs/solutions/observability/incident-management/create-failed-transaction-rate-threshold-rule", - "/en/observability/*/apm-feature-roles.html": "/docs/solutions/observability/apps/create-assign-feature-roles-to-apm-server-users", - "/en/observability/*/apm-features.html": "/docs/solutions/observability/apps/application-performance-monitoring-apm", - "/en/observability/*/apm-filter-and-search-data.html": "/docs/solutions/observability/apps/filter-search-application-data", - "/en/observability/*/apm-filtering.html": "/docs/solutions/observability/apps/built-in-data-filters", - "/en/observability/*/apm-filters.html": "/docs/solutions/observability/apps/filter-application-data", - "/en/observability/*/apm-getting-started-apm-server.html": "/docs/solutions/observability/apps/get-started-with-apm", - "/en/observability/*/apm-high-availability.html": "/docs/solutions/observability/apps/high-availability", - "/en/observability/*/apm-how-to-guides.html": "/docs/solutions/observability/apps/view-analyze-data", - "/en/observability/*/apm-ilm-how-to.html": "/docs/solutions/observability/apps/index-lifecycle-management", - "/en/observability/*/apm-infrastructure.html": "/docs/solutions/observability/apps/infrastructure", - "/en/observability/*/apm-ingest-pipelines.html": "/docs/solutions/observability/apps/parse-data-using-ingest-pipelines", - "/en/observability/*/apm-integration-upgrade-steps-ess.html": "/docs/solutions/observability/apps/switch-an-elastic-cloud-cluster-to-apm-integration", - "/en/observability/*/apm-integration-upgrade-steps.html": "/docs/solutions/observability/apps/switch-self-installation-to-apm-integration", - "/en/observability/*/apm-interpret-data.html": "/docs/solutions/observability/apps/interpret-application-data", - "/en/observability/*/apm-jaeger-integration.html": "/docs/solutions/observability/apps/integrate-with-jaeger-deprecated", - "/en/observability/*/apm-k8s-attacher.html": "/docs/solutions/observability/apps/apm-k8s-attacher", - "/en/observability/*/apm-kafka-output.html": "/docs/solutions/observability/apps/configure-kafka-output", - "/en/observability/*/apm-keystore.html": "/docs/solutions/observability/apps/secrets-keystore-for-secure-settings", + "/en/observability/*/apm-feature-roles.html": "/docs/solutions/observability/apm/create-assign-feature-roles-to-apm-server-users", + "/en/observability/*/apm-features.html": "/docs/solutions/observability/apm", + "/en/observability/*/apm-filter-and-search-data.html": "/docs/solutions/observability/apm/filter-search-data", + "/en/observability/*/apm-filtering.html": "/docs/solutions/observability/apm/built-in-data-filters", + "/en/observability/*/apm-filters.html": "/docs/solutions/observability/apm/filter-data", + "/en/observability/*/apm-getting-started-apm-server.html": "/docs/solutions/observability/apm/get-started", + "/en/observability/*/apm-high-availability.html": "/docs/solutions/observability/apm/high-availability", + "/en/observability/*/apm-how-to-guides.html": "/docs/solutions/observability/apm/view-analyze-data", + "/en/observability/*/apm-ilm-how-to.html": "/docs/solutions/observability/apm/index-lifecycle-management", + "/en/observability/*/apm-infrastructure.html": "/docs/solutions/observability/apm/infrastructure", + "/en/observability/*/apm-ingest-pipelines.html": "/docs/solutions/observability/apm/parse-data-using-ingest-pipelines", + "/en/observability/*/apm-integration-upgrade-steps-ess.html": "/docs/solutions/observability/apm/switch-an-elastic-cloud-cluster-to-apm-integration", + "/en/observability/*/apm-integration-upgrade-steps.html": "/docs/solutions/observability/apm/switch-self-installation-to-apm-integration", + "/en/observability/*/apm-interpret-data.html": "/docs/solutions/observability/apm/interpret-data", + "/en/observability/*/apm-jaeger-integration.html": "/docs/solutions/observability/apm/jaeger", + "/en/observability/*/apm-k8s-attacher.html": "/docs/solutions/observability/apm/apm-k8s-attacher", + "/en/observability/*/apm-kafka-output.html": "/docs/solutions/observability/apm/configure-kafka-output", + "/en/observability/*/apm-keystore.html": "/docs/solutions/observability/apm/secrets-keystore-for-secure-settings", "/en/observability/*/apm-known-issues.html": "/docs/release-notes/apm/known-issues", - "/en/observability/*/apm-lambda.html": "/docs/solutions/observability/apps/observe-lambda-functions", + "/en/observability/*/apm-lambda.html": "/docs/solutions/observability/apm/observe-lambda-functions", "/en/observability/*/apm-latency-threshold-rule.html": "/docs/solutions/observability/incident-management/create-latency-threshold-rule", - "/en/observability/*/apm-log-correlation.html": "/docs/solutions/observability/apps/logs", - "/en/observability/*/apm-logs.html": "/docs/solutions/observability/apps/logs", - "/en/observability/*/apm-logstash-output.html": "/docs/solutions/observability/apps/configure-logstash-output", - "/en/observability/*/apm-machine-learning-integration.html": "/docs/solutions/observability/apps/integrate-with-machine-learning", - "/en/observability/*/apm-manage-storage.html": "/docs/solutions/observability/apps/manage-storage", - "/en/observability/*/apm-metrics.html": "/docs/solutions/observability/apps/metrics-2", - "/en/observability/*/apm-mobile-service-overview.html": "/docs/solutions/observability/apps/mobile-service-overview", - "/en/observability/*/apm-mobile-session-explorer.html": "/docs/solutions/observability/apps/explore-mobile-sessions-with-discover", - "/en/observability/*/apm-monitor-apm-self-install.html": "/docs/solutions/observability/apps/monitor-fleet-managed-apm-server", - "/en/observability/*/apm-monitor-apm.html": "/docs/solutions/observability/apps/monitor-apm-server", - "/en/observability/*/apm-monitoring-aws-lambda.html": "/docs/solutions/observability/apps/monitoring-aws-lambda-functions", - "/en/observability/*/apm-monitoring-internal-collection.html": "/docs/solutions/observability/apps/use-internal-collection-to-send-monitoring-data", - "/en/observability/*/apm-monitoring-local-collection.html": "/docs/solutions/observability/apps/use-select-metrics-emitted-directly-to-monitoring-cluster", - "/en/observability/*/apm-monitoring-metricbeat-collection.html": "/docs/solutions/observability/apps/use-metricbeat-to-send-monitoring-data", - "/en/observability/*/apm-monitoring.html": "/docs/solutions/observability/apps/monitor-apm-server-binary", - "/en/observability/*/apm-mutating-admission-webhook.html": "/docs/solutions/observability/apps/apm-k8s-attacher", - "/en/observability/*/apm-open-telemetry-collect-metrics.html": "/guide/en/observability/8.18/apm-open-telemetry-collect-metrics.html", - "/en/observability/*/apm-open-telemetry-direct.html": "/guide/en/observability/8.18/apm-open-telemetry-direct.html", - "/en/observability/*/apm-open-telemetry-known-limitations.html": "/guide/en/observability/8.18/apm-open-telemetry-known-limitations.html", - "/en/observability/*/apm-open-telemetry-other-env.html": "/guide/en/observability/current/apm-open-telemetry.html#apm-otel-lambda", - "/en/observability/*/apm-open-telemetry-resource-attributes.html": "/guide/en/observability/8.18/apm-open-telemetry-resource-attributes.html", - "/en/observability/*/apm-open-telemetry-with-elastic.html": "/guide/en/observability/current/apm-open-telemetry.html#apm-otel-api-sdk-elastic-agent", - "/en/observability/*/apm-open-telemetry.html": "/docs/solutions/observability/apps/use-opentelemetry-with-apm", + "/en/observability/*/apm-log-correlation.html": "/docs/solutions/observability/apm/logs", + "/en/observability/*/apm-logs.html": "/docs/solutions/observability/apm/logs", + "/en/observability/*/apm-logstash-output.html": "/docs/solutions/observability/apm/configure-logstash-output", + "/en/observability/*/apm-machine-learning-integration.html": "/docs/solutions/observability/apm/machine-learning", + "/en/observability/*/apm-manage-storage.html": "/docs/solutions/observability/apm/manage-storage", + "/en/observability/*/apm-metrics.html": "/docs/solutions/observability/apm/metrics-ui", + "/en/observability/*/apm-mobile-service-overview.html": "/docs/solutions/observability/apm/mobile-service-overview", + "/en/observability/*/apm-mobile-session-explorer.html": "/docs/solutions/observability/apm/explore-mobile-sessions", + "/en/observability/*/apm-monitor-apm-self-install.html": "/docs/solutions/observability/apm/monitor-fleet-managed-apm-server", + "/en/observability/*/apm-monitor-apm.html": "/docs/solutions/observability/apm/monitor-apm-server", + "/en/observability/*/apm-monitoring-aws-lambda.html": "/docs/solutions/observability/apm/monitor-aws-lambda-functions", + "/en/observability/*/apm-monitoring-internal-collection.html": "/docs/solutions/observability/apm/use-internal-collection-to-send-monitoring-data", + "/en/observability/*/apm-monitoring-local-collection.html": "/docs/solutions/observability/apm/use-select-metrics-emitted-directly-to-monitoring-cluster", + "/en/observability/*/apm-monitoring-metricbeat-collection.html": "/docs/solutions/observability/apm/use-metricbeat-to-send-monitoring-data", + "/en/observability/*/apm-monitoring.html": "/docs/solutions/observability/apm/monitor-apm-server-binary", + "/en/observability/*/apm-mutating-admission-webhook.html": "/docs/solutions/observability/apm/apm-k8s-attacher", + "/en/observability/*/apm-open-telemetry-other-env.html": "/docs/solutions/observability/apm/use-opentelemetry-with-apm", + "/en/observability/*/apm-open-telemetry-with-elastic.html": "/docs/solutions/observability/apm/use-opentelemetry-with-apm", + "/en/observability/*/apm-open-telemetry.html": "/docs/solutions/observability/apm/use-opentelemetry-with-apm", "/en/observability/*/apm-performance-diagnostic.html": "/docs/troubleshoot/observability/apm/apm-server-performance-diagnostic", - "/en/observability/*/apm-privileges-api-key.html": "/guide/en/observability/current/apm-command-line-options.html#apm-apikey-command", + "/en/observability/*/apm-privileges-api-key.html": "/docs/solutions/observability/apm/apm-server-command-reference", "/en/observability/*/apm-processing-and-performance.html": "/docs/troubleshoot/observability/apm/processing-performance", - "/en/observability/*/apm-redis-output.html": "/docs/solutions/observability/apps/configure-redis-output", - "/en/observability/*/apm-reduce-apm-storage.html": "/docs/solutions/observability/apps/reduce-storage", - "/en/observability/*/apm-release-notes-8.0.html": "/guide/en/observability/8.18/apm-release-notes-8.0.html", - "/en/observability/*/apm-release-notes-8.1.html": "/guide/en/observability/8.18/apm-release-notes-8.1.html", - "/en/observability/*/apm-release-notes-8.10.html": "/guide/en/observability/8.18/apm-release-notes-8.10.html", - "/en/observability/*/apm-release-notes-8.11.html": "/guide/en/observability/8.18/apm-release-notes-8.11.html", - "/en/observability/*/apm-release-notes-8.12.html": "/guide/en/observability/8.18/apm-release-notes-8.12.html", - "/en/observability/*/apm-release-notes-8.13.html": "/guide/en/observability/8.18/apm-release-notes-8.13.html", - "/en/observability/*/apm-release-notes-8.14.html": "/guide/en/observability/8.18/apm-release-notes-8.14.html", - "/en/observability/*/apm-release-notes-8.15.html": "/guide/en/observability/8.18/apm-release-notes-8.15.html", - "/en/observability/*/apm-release-notes-8.16.html": "/guide/en/observability/8.18/apm-release-notes-8.16.html", - "/en/observability/*/apm-release-notes-8.17.html": "/guide/en/observability/8.18/apm-release-notes-8.17.html", - "/en/observability/*/apm-release-notes-8.2.html": "/guide/en/observability/8.18/apm-release-notes-8.2.html", - "/en/observability/*/apm-release-notes-8.3.html": "/guide/en/observability/8.18/apm-release-notes-8.3.html", - "/en/observability/*/apm-release-notes-8.4.html": "/guide/en/observability/8.18/apm-release-notes-8.4.html", - "/en/observability/*/apm-release-notes-8.5.html": "/guide/en/observability/8.18/apm-release-notes-8.5.html", - "/en/observability/*/apm-release-notes-8.6.html": "/guide/en/observability/8.18/apm-release-notes-8.6.html", - "/en/observability/*/apm-release-notes-8.7.html": "/guide/en/observability/8.18/apm-release-notes-8.7.html", - "/en/observability/*/apm-release-notes-8.8.html": "/guide/en/observability/8.18/apm-release-notes-8.8.html", - "/en/observability/*/apm-release-notes-8.9.html": "/guide/en/observability/8.18/apm-release-notes-8.9.html", + "/en/observability/*/apm-redis-output.html": "/docs/solutions/observability/apm/configure-redis-output", + "/en/observability/*/apm-reduce-apm-storage.html": "/docs/solutions/observability/apm/reduce-storage", "/en/observability/*/apm-release-notes.html": "/docs/release-notes/apm", "/en/observability/*/apm-rum-sourcemap-api.html": "/docs/api/doc/kibana/operation/operation-getsourcemaps", - "/en/observability/*/apm-rum.html": "/docs/solutions/observability/apps/real-user-monitoring-rum", - "/en/observability/*/apm-running-with-systemd.html": "/docs/solutions/observability/apps/apm-server-systemd", - "/en/observability/*/apm-sampling.html": "/docs/solutions/observability/apps/transaction-sampling", - "/en/observability/*/apm-secret-token.html": "/docs/solutions/observability/apps/secret-token", - "/en/observability/*/apm-secure-agent-communication.html": "/docs/solutions/observability/apps/secure-communication-with-apm-agents", - "/en/observability/*/apm-secure-comms-stack.html": "/docs/solutions/observability/apps/secure-communication-with-elastic-stack", - "/en/observability/*/apm-securing-apm-server.html": "/docs/solutions/observability/apps/use-apm-securely", + "/en/observability/*/apm-rum.html": "/docs/solutions/observability/apm/real-user-monitoring-rum", + "/en/observability/*/apm-running-with-systemd.html": "/docs/solutions/observability/apm/apm-server-systemd", + "/en/observability/*/apm-sampling.html": "/docs/solutions/observability/apm/transaction-sampling", + "/en/observability/*/apm-secret-token.html": "/docs/solutions/observability/apm/secret-token", + "/en/observability/*/apm-secure-agent-communication.html": "/docs/solutions/observability/apm/secure-communication-with-apm-agents", + "/en/observability/*/apm-secure-comms-stack.html": "/docs/solutions/observability/apm/secure-communication-with-elastic-stack", + "/en/observability/*/apm-securing-apm-server.html": "/docs/solutions/observability/apm/use-apm-securely", "/en/observability/*/apm-server-es-down.html": "/docs/troubleshoot/observability/apm/what-happens-when-apm-server-elasticsearch-is-down", - "/en/observability/*/apm-service-maps.html": "/docs/solutions/observability/apps/service-map", - "/en/observability/*/apm-service-overview.html": "/docs/solutions/observability/apps/service-overview", - "/en/observability/*/apm-services.html": "/docs/solutions/observability/apps/services", - "/en/observability/*/apm-setting-up-and-running.html": "/docs/solutions/observability/apps/apm-server-advanced-setup", - "/en/observability/*/apm-settings-in-kibana.html": "/docs/solutions/observability/apps/applications-ui-settings", - "/en/observability/*/apm-setup-kibana-endpoint.html": "/docs/solutions/observability/apps/configure-kibana-endpoint", - "/en/observability/*/apm-source-map-how-to.html": "/docs/solutions/observability/apps/create-upload-source-maps-rum", - "/en/observability/*/apm-spaces.html": "/docs/solutions/observability/apps/control-access-to-apm-data", - "/en/observability/*/apm-span-compression.html": "/guide/en/observability/current/apm-data-model-spans.html#apm-spans-span-compression", - "/en/observability/*/apm-spans.html": "/docs/solutions/observability/apps/trace-sample-timeline", - "/en/observability/*/apm-storage-explorer.html": "/docs/solutions/observability/apps/storage-explorer", - "/en/observability/*/apm-storage-guide.html": "/docs/solutions/observability/apps/storage-sizing-guide", - "/en/observability/*/apm-tail-based-samling-config.html": "/docs/solutions/observability/apps/tail-based-sampling", - "/en/observability/*/apm-traces.html": "/docs/solutions/observability/apps/traces-2", - "/en/observability/*/apm-transactions-annotations.html": "/docs/solutions/observability/apps/track-deployments-with-annotations", - "/en/observability/*/apm-transactions.html": "/docs/solutions/observability/apps/transactions-2", + "/en/observability/*/apm-service-maps.html": "/docs/solutions/observability/apm/service-map", + "/en/observability/*/apm-service-overview.html": "/docs/solutions/observability/apm/service-overview", + "/en/observability/*/apm-services.html": "/docs/solutions/observability/apm/services", + "/en/observability/*/apm-setting-up-and-running.html": "/docs/solutions/observability/apm/apm-server-advanced-setup", + "/en/observability/*/apm-settings-in-kibana.html": "/docs/solutions/observability/apm/applications-ui-settings", + "/en/observability/*/apm-setup-kibana-endpoint.html": "/docs/solutions/observability/apm/configure-kibana-endpoint", + "/en/observability/*/apm-source-map-how-to.html": "/docs/solutions/observability/apm/create-upload-source-maps-rum", + "/en/observability/*/apm-spaces.html": "/docs/solutions/observability/apm/control-access-to-apm-data", + "/en/observability/*/apm-span-compression.html": "/docs/solutions/observability/apm/spans", + "/en/observability/*/apm-spans.html": "/docs/solutions/observability/apm/trace-sample-timeline", + "/en/observability/*/apm-storage-explorer.html": "/docs/solutions/observability/apm/storage-explorer", + "/en/observability/*/apm-storage-guide.html": "/docs/solutions/observability/apm/storage-sizing-guide", + "/en/observability/*/apm-tail-based-samling-config.html": "/docs/solutions/observability/apm/tail-based-sampling", + "/en/observability/*/apm-traces.html": "/docs/solutions/observability/apm/traces-ui", + "/en/observability/*/apm-transactions-annotations.html": "/docs/solutions/observability/apm/track-deployments-with-annotations", + "/en/observability/*/apm-transactions.html": "/docs/solutions/observability/apm/transactions-ui", "/en/observability/*/apm-troubleshoot-apm.html": "/docs/troubleshoot/observability/apm", - "/en/observability/*/apm-tune-data-ingestion.html": "/docs/solutions/observability/apps/tune-data-ingestion", - "/en/observability/*/apm-ui-drill-down.html": "/docs/solutions/observability/apps/drill-down-into-data", - "/en/observability/*/apm-ui.html": "/docs/solutions/observability/apps/overviews", - "/en/observability/*/apm-upgrade-8.0-cloud-integration.html": "/docs/solutions/observability/apps/upgrade-elastic-cloud-with-apm-integration-to-90", - "/en/observability/*/apm-upgrade-8.0-cloud-standalone.html": "/docs/solutions/observability/apps/upgrade-elastic-cloud-apm-server-standalone-to-90", - "/en/observability/*/apm-upgrade-8.0-self-integration.html": "/docs/solutions/observability/apps/upgrade-self-installation-of-apm-integration-to-90", - "/en/observability/*/apm-upgrade-8.0-self-standalone.html": "/docs/solutions/observability/apps/upgrade-self-installation-of-apm-server-standalone-to-90", - "/en/observability/*/apm-upgrade-to-apm-integration.html": "/docs/solutions/observability/apps/switch-to-elastic-apm-integration", - "/en/observability/*/apm-upgrade.html": "/docs/solutions/observability/apps/upgrade", - "/en/observability/*/apm-upgrading-to-8.x.html": "/docs/solutions/observability/apps/upgrade-to-version-90", - "/en/observability/*/apm-view-and-analyze-data.html": "/docs/solutions/observability/apps/view-analyze-data", - "/en/observability/*/apm.html": "/docs/solutions/observability/apps/application-performance-monitoring-apm", - "/en/observability/*/application-and-service-monitoring.html": "/docs/solutions/observability/apps", + "/en/observability/*/apm-tune-data-ingestion.html": "/docs/solutions/observability/apm/tune-data-ingestion", + "/en/observability/*/apm-ui-drill-down.html": "/docs/solutions/observability/apm/drill-down-into-data", + "/en/observability/*/apm-ui.html": "/docs/solutions/observability/apm/overviews", + "/en/observability/*/apm-upgrade-8.0-cloud-integration.html": "/docs/solutions/observability/apm/upgrade-elastic-cloud-with-apm-integration-to-9", + "/en/observability/*/apm-upgrade-8.0-cloud-standalone.html": "/docs/solutions/observability/apm/upgrade-elastic-cloud-apm-server-standalone-to-9", + "/en/observability/*/apm-upgrade-8.0-self-integration.html": "/docs/solutions/observability/apm/upgrade-self-installation-of-apm-integration-to-9", + "/en/observability/*/apm-upgrade-8.0-self-standalone.html": "/docs/solutions/observability/apm/upgrade-self-installation-of-apm-server-standalone-to-9", + "/en/observability/*/apm-upgrade-to-apm-integration.html": "/docs/solutions/observability/apm/switch-to-elastic-apm-integration", + "/en/observability/*/apm-upgrade.html": "/docs/solutions/observability/apm/upgrade", + "/en/observability/*/apm-upgrading-to-8.x.html": "/docs/solutions/observability/apm/upgrade-to-version-9", + "/en/observability/*/apm-view-and-analyze-data.html": "/docs/solutions/observability/apm/view-analyze-data", + "/en/observability/*/apm.html": "/docs/solutions/observability/apm", + "/en/observability/*/application-and-service-monitoring.html": "/docs/solutions/observability/applications", "/en/observability/*/application-logs.html": "/docs/solutions/observability/logs/stream-application-logs", - "/en/observability/*/aws-deploy-elastic-serverless-forwarder.html": "/guide/en/esf/master/aws-deploy-elastic-serverless-forwarder.html", - "/en/observability/*/aws-elastic-serverless-forwarder-configuration.html": "/guide/en/esf/master/aws-elastic-serverless-forwarder-configuration.html", "/en/observability/*/aws-metrics.html": "/docs/reference/data-analysis/observability/observability-aws-metrics", - "/en/observability/*/aws-serverless-troubleshooting.html": "/guide/en/esf/master/aws-serverless-troubleshooting.html", - "/en/observability/*/beats-api-keys.html": "/docs/solutions/observability/apps/grant-access-using-api-keys", + "/en/observability/*/beats-api-keys.html": "/docs/solutions/observability/apm/grant-access-using-api-keys", "/en/observability/*/categorize-logs.html": "/docs/solutions/observability/logs/categorize-log-entries", "/en/observability/*/ci-cd-observability.html": "/docs/solutions/observability/cicd", "/en/observability/*/cloud-monitoring.html": "/docs/solutions/observability/cloud", "/en/observability/*/collect-data-with-aws-firehose.html": "/docs/solutions/observability/get-started/quickstart-collect-data-with-aws-firehose", - "/en/observability/*/command-line-options.html": "/docs/solutions/observability/apps/apm-server-command-reference", + "/en/observability/*/command-line-options.html": "/docs/solutions/observability/apm/apm-server-command-reference", "/en/observability/*/common-problems.html": "/docs/troubleshoot/observability/apm/common-problems", "/en/observability/*/common-response-codes.html": "/docs/troubleshoot/observability/apm/apm-server-response-codes", - "/en/observability/*/config-env.html": "/docs/solutions/observability/apps/use-environment-variables-in-configuration", - "/en/observability/*/configuration-anonymous.html": "/docs/solutions/observability/apps/configure-anonymous-authentication", - "/en/observability/*/configuration-instrumentation.html": "/docs/solutions/observability/apps/configure-apm-instrumentation", - "/en/observability/*/configuration-logging.html": "/docs/solutions/observability/apps/configure-logging", - "/en/observability/*/configuration-path.html": "/docs/solutions/observability/apps/configure-project-paths", - "/en/observability/*/configuration-process.html": "/docs/solutions/observability/apps/general-configuration-options", - "/en/observability/*/configuration-rum.html": "/docs/solutions/observability/apps/configure-real-user-monitoring-rum", - "/en/observability/*/configuration-ssl-landing.html": "/docs/solutions/observability/apps/ssltls-settings", - "/en/observability/*/configuration-ssl.html": "/docs/solutions/observability/apps/ssltls-output-settings", - "/en/observability/*/configure-agent-config.html": "/docs/solutions/observability/apps/configure-apm-agent-central-configuration", - "/en/observability/*/configure-cloud-id.html": "/docs/solutions/observability/apps/configure-output-for-elasticsearch-service-on-elastic-cloud", - "/en/observability/*/configure-data-sources.html": "/guide/en/observability/8.18/configure-data-sources.html", - "/en/observability/*/configure-head-based-sampling.html": "/guide/en/observability/current/apm-sampling.html#apm-head-based-sampling", + "/en/observability/*/config-env.html": "/docs/solutions/observability/apm/use-environment-variables-in-configuration", + "/en/observability/*/configuration-anonymous.html": "/docs/solutions/observability/apm/configure-anonymous-authentication", + "/en/observability/*/configuration-instrumentation.html": "/docs/solutions/observability/apm/configure-apm-instrumentation", + "/en/observability/*/configuration-logging.html": "/docs/solutions/observability/apm/configure-logging", + "/en/observability/*/configuration-path.html": "/docs/solutions/observability/apm/configure-project-paths", + "/en/observability/*/configuration-process.html": "/docs/solutions/observability/apm/general-configuration-options", + "/en/observability/*/configuration-rum.html": "/docs/solutions/observability/apm/configure-real-user-monitoring-rum", + "/en/observability/*/configuration-ssl-landing.html": "/docs/solutions/observability/apm/ssl-tls-settings", + "/en/observability/*/configuration-ssl.html": "/docs/solutions/observability/apm/ssl-tls-output-settings", + "/en/observability/*/configure-agent-config.html": "/docs/solutions/observability/apm/configure-apm-agent-central-configuration", + "/en/observability/*/configure-cloud-id.html": "/docs/solutions/observability/apm/configure-output-for-elasticsearch-service-on-elastic-cloud", + "/en/observability/*/configure-head-based-sampling.html": "/docs/solutions/observability/apm/transaction-sampling", "/en/observability/*/configure-settings.html": "/docs/solutions/observability/infra-and-hosts/configure-settings", - "/en/observability/*/configure-tail-based-sampling.html": "/guide/en/observability/current/apm-sampling.html#apm-tail-based-sampling", - "/en/observability/*/configure-uptime-settings.html": "/docs/solutions/observability/apps/configure-settings", - "/en/observability/*/configuring-howto-apm-server.html": "/docs/solutions/observability/apps/configure-apm-server", - "/en/observability/*/configuring-output.html": "/docs/solutions/observability/apps/configure-output", - "/en/observability/*/console-output.html": "/docs/solutions/observability/apps/configure-console-output", + "/en/observability/*/configure-tail-based-sampling.html": "/docs/solutions/observability/apm/transaction-sampling", + "/en/observability/*/configure-uptime-settings.html": "/docs/solutions/observability/uptime/configure-settings", + "/en/observability/*/configuring-howto-apm-server.html": "/docs/solutions/observability/apm/configure-apm-server", + "/en/observability/*/configuring-output.html": "/docs/solutions/observability/apm/configure-output", + "/en/observability/*/console-output.html": "/docs/solutions/observability/apm/configure-console-output", "/en/observability/*/container-metrics.html": "/docs/reference/data-analysis/observability/observability-container-metrics", "/en/observability/*/create-alerts-rules.html": "/docs/solutions/observability/incident-management/create-manage-rules", "/en/observability/*/create-alerts.html": "/docs/solutions/observability/incident-management/alerting", "/en/observability/*/create-cases.html": "/docs/solutions/observability/incident-management/cases", - "/en/observability/*/cross-cluster-search.html": "/docs/solutions/observability/apps/cross-cluster-search-with-application-data", - "/en/observability/*/custom-filter.html": "/docs/solutions/observability/apps/custom-filters", - "/en/observability/*/custom-index-template.html": "/docs/solutions/observability/apps/view-elasticsearch-index-template", + "/en/observability/*/cross-cluster-search.html": "/docs/solutions/observability/apm/cross-cluster-search", + "/en/observability/*/custom-filter.html": "/docs/solutions/observability/apm/custom-filters", + "/en/observability/*/custom-index-template.html": "/docs/solutions/observability/apm/view-elasticsearch-index-template", "/en/observability/*/custom-threshold-alert.html": "/docs/solutions/observability/incident-management/create-custom-threshold-rule", - "/en/observability/*/data-model-errors.html": "/docs/solutions/observability/apps/errors", - "/en/observability/*/data-model-metadata.html": "/docs/solutions/observability/apps/metadata", - "/en/observability/*/data-model-metrics.html": "/docs/solutions/observability/apps/metrics", - "/en/observability/*/data-model-spans.html": "/docs/solutions/observability/apps/spans", - "/en/observability/*/data-model-transactions.html": "/docs/solutions/observability/apps/transactions", - "/en/observability/*/data-model.html": "/docs/solutions/observability/apps/learn-about-application-data-types", - "/en/observability/*/data-security-delete.html": "/docs/solutions/observability/apps/delete-sensitive-data", - "/en/observability/*/deploy-beats-to-send-data.html": "/guide/en/beats/libbeat/8.15/getting-started.html", - "/en/observability/*/directory-layout.html": "/docs/solutions/observability/apps/installation-layout", + "/en/observability/*/data-model-errors.html": "/docs/solutions/observability/apm/errors", + "/en/observability/*/data-model-metadata.html": "/docs/solutions/observability/apm/metadata", + "/en/observability/*/data-model-metrics.html": "/docs/solutions/observability/apm/metrics", + "/en/observability/*/data-model-spans.html": "/docs/solutions/observability/apm/spans", + "/en/observability/*/data-model-transactions.html": "/docs/solutions/observability/apm/transactions", + "/en/observability/*/data-model.html": "/docs/solutions/observability/apm/data-types", + "/en/observability/*/data-security-delete.html": "/docs/solutions/observability/apm/delete-sensitive-data", + "/en/observability/*/directory-layout.html": "/docs/solutions/observability/apm/installation-layout", "/en/observability/*/docker-container-metrics.html": "/docs/reference/data-analysis/observability/observability-container-metrics", "/en/observability/*/duration-anomaly-alert.html": "/docs/solutions/observability/incident-management/create-an-uptime-duration-anomaly-rule", "/en/observability/*/elastic-entity-model.html": "/docs/reference/observability/elastic-entity-model", - "/en/observability/*/elasticsearch-output.html": "/docs/solutions/observability/apps/configure-elasticsearch-output", + "/en/observability/*/elasticsearch-output.html": "/docs/solutions/observability/apm/configure-elasticsearch-output", "/en/observability/*/enable-apm-server-debugging.html": "/docs/troubleshoot/observability/apm/enable-apm-server-binary-debugging", "/en/observability/*/exploratory-data-visualizations.html": "/docs/troubleshoot/observability/explore-data", - "/en/observability/*/explore-logs.html": "/docs/solutions/observability/logs/logs-explorer", + "/en/observability/*/explore-logs.html": "/docs/solutions/observability/logs/discover-logs", "/en/observability/*/explore-metrics.html": "/docs/solutions/observability/infra-and-hosts/explore-infrastructure-metrics-over-time", - "/en/observability/*/exploring-es-data.html": "/docs/solutions/observability/apps/explore-data-in-elasticsearch", - "/en/observability/*/features.html": "/docs/solutions/observability/apps/application-performance-monitoring-apm", + "/en/observability/*/exploring-es-data.html": "/docs/solutions/observability/apm/explore-data-in-elasticsearch", + "/en/observability/*/features.html": "/docs/solutions/observability/apm", "/en/observability/*/fields-reference.html": "/docs/reference/observability/fields-and-object-schemas", - "/en/observability/*/filtering.html": "/docs/solutions/observability/apps/built-in-data-filters", + "/en/observability/*/filtering.html": "/docs/solutions/observability/apm/built-in-data-filters", "/en/observability/*/gcp-dataflow.html": "/docs/solutions/observability/cloud/gcp-dataflow-templates", - "/en/observability/*/get-started-with-apm-server-binary.html": "/docs/solutions/observability/apps/apm-server-binary", - "/en/observability/*/get-started-with-fleet-apm-server.html": "/docs/solutions/observability/apps/fleet-managed-apm-server", - "/en/observability/*/getting-started-apm-server.html": "/docs/solutions/observability/apps/get-started-with-apm", + "/en/observability/*/get-started-with-apm-server-binary.html": "/docs/solutions/observability/apm/get-started-apm-server-binary", + "/en/observability/*/get-started-with-fleet-apm-server.html": "/docs/solutions/observability/apm/get-started-fleet-managed-apm-server", + "/en/observability/*/getting-started-apm-server.html": "/docs/solutions/observability/apm/get-started", "/en/observability/*/grant-cases-access.html": "/docs/solutions/observability/incident-management/configure-access-to-cases", "/en/observability/*/handle-no-results-found-message.html": "/docs/troubleshoot/observability/troubleshooting-infrastructure-monitoring/understanding-no-results-found-message", - "/en/observability/*/high-availability.html": "/docs/solutions/observability/apps/high-availability", + "/en/observability/*/high-availability.html": "/docs/solutions/observability/apm/high-availability", "/en/observability/*/host-metrics.html": "/docs/reference/data-analysis/observability/observability-host-metrics", - "/en/observability/*/how-to-guides.html": "/docs/solutions/observability/apps/view-analyze-data", - "/en/observability/*/ilm-how-to.html": "/docs/solutions/observability/apps/index-lifecycle-management", + "/en/observability/*/how-to-guides.html": "/docs/solutions/observability/apm/view-analyze-data", + "/en/observability/*/ilm-how-to.html": "/docs/solutions/observability/apm/index-lifecycle-management", "/en/observability/*/incident-management.html": "/docs/solutions/observability/incident-management", "/en/observability/*/index.html": "/docs/solutions/observability/get-started", "/en/observability/*/infrastructure-and-host-monitoring-intro.html": "/docs/solutions/observability/infra-and-hosts", @@ -12004,22 +10771,21 @@ "/en/observability/*/ingest-aws-options.html": "/docs/solutions/observability/cloud/ingestion-options", "/en/observability/*/ingest-logs.html": "/docs/reference/beats/filebeat/filebeat-installation-configuration", "/en/observability/*/ingest-metrics.html": "/docs/reference/beats/metricbeat/metricbeat-installation-configuration", - "/en/observability/*/ingest-pipelines.html": "/docs/solutions/observability/apps/parse-data-using-ingest-pipelines", - "/en/observability/*/ingest-traces.html": "/docs/solutions/observability/apps/get-started-with-apm", + "/en/observability/*/ingest-pipelines.html": "/docs/solutions/observability/apm/parse-data-using-ingest-pipelines", + "/en/observability/*/ingest-traces.html": "/docs/solutions/observability/apm/get-started", "/en/observability/*/ingest-uptime.html": "/docs/reference/beats/heartbeat/heartbeat-installation-configuration", "/en/observability/*/inspect-log-anomalies.html": "/docs/solutions/observability/logs/inspect-log-anomalies", "/en/observability/*/inspect-metric-anomalies.html": "/docs/solutions/observability/infra-and-hosts/detect-metric-anomalies", - "/en/observability/*/inspect-uptime-duration-anomalies.html": "/docs/solutions/observability/apps/inspect-uptime-duration-anomalies", + "/en/observability/*/inspect-uptime-duration-anomalies.html": "/docs/solutions/observability/uptime/inspect-duration-anomalies", "/en/observability/*/inspect.html": "/docs/troubleshoot/observability/inspect", - "/en/observability/*/installing.html": "/docs/solutions/observability/apps/apm-server-binary", - "/en/observability/*/instrument-apps.html": "/docs/solutions/observability/apps/get-started-with-apm", - "/en/observability/*/inventory.html": "/docs/solutions/observability/apps/inventory", - "/en/observability/*/jaeger-integration.html": "/docs/solutions/observability/apps/integrate-with-jaeger-deprecated", - "/en/observability/*/kafka-output.html": "/docs/solutions/observability/apps/configure-kafka-output", - "/en/observability/*/keystore.html": "/docs/solutions/observability/apps/secrets-keystore-for-secure-settings", + "/en/observability/*/installing.html": "/docs/solutions/observability/apm/get-started-apm-server-binary", + "/en/observability/*/instrument-apps.html": "/docs/solutions/observability/apm/get-started", + "/en/observability/*/inventory.html": "/docs/solutions/observability/apm/inventory", + "/en/observability/*/jaeger-integration.html": "/docs/solutions/observability/apm/jaeger", + "/en/observability/*/kafka-output.html": "/docs/solutions/observability/apm/configure-kafka-output", + "/en/observability/*/keystore.html": "/docs/solutions/observability/apm/secrets-keystore-for-secure-settings", "/en/observability/*/kubernetes-pod-metrics.html": "/docs/reference/data-analysis/observability/observability-kubernetes-pod-metrics", "/en/observability/*/log-correlation.html": "/docs/solutions/observability/logs/stream-application-logs", - "/en/observability/*/logs-app-fields.html": "/docs/reference/observability/fields-and-object-schemas/logs-app-fields", "/en/observability/*/logs-checklist.html": "/docs/solutions/observability/logs", "/en/observability/*/logs-ecs-application.html": "/docs/solutions/observability/logs/ecs-formatted-application-logs", "/en/observability/*/logs-filter-and-aggregate.html": "/docs/solutions/observability/logs/filter-aggregate-logs", @@ -12032,10 +10798,10 @@ "/en/observability/*/logs-stream.html": "/docs/solutions/observability/logs/stream-any-log-file", "/en/observability/*/logs-threshold-alert.html": "/docs/solutions/observability/incident-management/create-log-threshold-rule", "/en/observability/*/logs-troubleshooting.html": "/docs/troubleshoot/observability/troubleshoot-logs", - "/en/observability/*/logstash-output.html": "/docs/solutions/observability/apps/configure-logstash-output", + "/en/observability/*/logstash-output.html": "/docs/solutions/observability/apm/configure-logstash-output", "/en/observability/*/manage-cases-settings.html": "/docs/solutions/observability/incident-management/configure-case-settings", "/en/observability/*/manage-cases.html": "/docs/solutions/observability/incident-management/create-manage-cases", - "/en/observability/*/manage-storage.html": "/docs/solutions/observability/apps/manage-storage", + "/en/observability/*/manage-storage.html": "/docs/solutions/observability/apm/manage-storage", "/en/observability/*/metrics-app-fields.html": "/docs/reference/observability/fields-and-object-schemas/metrics-app-fields", "/en/observability/*/metrics-reference.html": "/docs/reference/data-analysis/observability", "/en/observability/*/metrics-threshold-alert.html": "/docs/solutions/observability/incident-management/create-metric-threshold-rule", @@ -12045,8 +10811,8 @@ "/en/observability/*/monitor-amazon-sqs.html": "/docs/solutions/observability/cloud/monitor-amazon-simple-queue-service-sqs", "/en/observability/*/monitor-amazon-vpc-flow-logs.html": "/docs/solutions/observability/cloud/monitor-virtual-private-cloud-vpc-flow-logs", "/en/observability/*/monitor-amazon-web-services.html": "/docs/solutions/observability/cloud/amazon-web-services-aws-monitoring", - "/en/observability/*/monitor-apm-self-install.html": "/docs/solutions/observability/apps/monitor-fleet-managed-apm-server", - "/en/observability/*/monitor-apm.html": "/docs/solutions/observability/apps/monitor-apm-server", + "/en/observability/*/monitor-apm-self-install.html": "/docs/solutions/observability/apm/monitor-fleet-managed-apm-server", + "/en/observability/*/monitor-apm.html": "/docs/solutions/observability/apm/monitor-apm-server", "/en/observability/*/monitor-aws-cloudtrail-firehose.html": "/docs/solutions/observability/cloud/monitor-cloudtrail-logs", "/en/observability/*/monitor-aws-cloudwatch-firehose.html": "/docs/solutions/observability/cloud/monitor-cloudwatch-logs", "/en/observability/*/monitor-aws-elastic-agent.html": "/docs/solutions/observability/cloud/monitor-amazon-web-services-aws-with-elastic-agent", @@ -12063,37 +10829,31 @@ "/en/observability/*/monitor-datasets.html": "/docs/solutions/observability/data-set-quality-monitoring", "/en/observability/*/monitor-gcp.html": "/docs/solutions/observability/cloud/monitor-google-cloud-platform-gcp", "/en/observability/*/monitor-infrastructure-and-hosts.html": "/docs/solutions/observability/infra-and-hosts/analyze-infrastructure-host-metrics", - "/en/observability/*/monitor-java-app.html": "/docs/solutions/observability/apps/tutorial-monitor-java-application", + "/en/observability/*/monitor-java-app.html": "/docs/solutions/observability/applications/tutorial-monitor-java-application", "/en/observability/*/monitor-k8s-logs-metrics-with-elastic-agent.html": "/docs/solutions/observability/get-started/quickstart-monitor-kubernetes-cluster-with-elastic-agent", "/en/observability/*/monitor-k8s-otel-edot.html": "/docs/solutions/observability/get-started/quickstart-unified-kubernetes-observability-with-elastic-distributions-of-opentelemetry-edot", "/en/observability/*/monitor-kubernetes.html": "/docs/solutions/observability/infra-and-hosts/tutorial-observe-kubernetes-deployments", "/en/observability/*/monitor-logs.html": "/docs/solutions/observability/logs/explore-logs", "/en/observability/*/monitor-nginx.html": "/docs/solutions/observability/infra-and-hosts/tutorial-observe-nginx-instances", "/en/observability/*/monitor-status-alert.html": "/docs/solutions/observability/incident-management/create-monitor-status-rule", - "/en/observability/*/monitor-uptime-synthetics.html": "/docs/solutions/observability/apps/synthetic-monitoring", - "/en/observability/*/monitor-uptime.html": "/guide/en/observability/current/monitor-uptime-synthetics.html#monitoring-uptime", - "/en/observability/*/monitoring-aws-lambda.html": "/docs/solutions/observability/apps/monitoring-aws-lambda-functions", - "/en/observability/*/monitoring-internal-collection.html": "/docs/solutions/observability/apps/use-internal-collection-to-send-monitoring-data", - "/en/observability/*/monitoring-local-collection.html": "/docs/solutions/observability/apps/use-select-metrics-emitted-directly-to-monitoring-cluster", - "/en/observability/*/monitoring-metricbeat-collection.html": "/docs/solutions/observability/apps/use-metricbeat-to-send-monitoring-data", - "/en/observability/*/monitoring.html": "/docs/solutions/observability/apps/monitor-apm-server-binary", - "/en/observability/*/next-steps.html": "/guide/en/observability/8.18/next-steps.html", + "/en/observability/*/monitor-uptime-synthetics.html": "/docs/solutions/observability/synthetics", + "/en/observability/*/monitor-uptime.html": "/docs/solutions/observability/synthetics", + "/en/observability/*/monitoring-aws-lambda.html": "/docs/solutions/observability/apm/monitor-aws-lambda-functions", + "/en/observability/*/monitoring-internal-collection.html": "/docs/solutions/observability/apm/use-internal-collection-to-send-monitoring-data", + "/en/observability/*/monitoring-local-collection.html": "/docs/solutions/observability/apm/use-select-metrics-emitted-directly-to-monitoring-cluster", + "/en/observability/*/monitoring-metricbeat-collection.html": "/docs/solutions/observability/apm/use-metricbeat-to-send-monitoring-data", + "/en/observability/*/monitoring.html": "/docs/solutions/observability/apm/monitor-apm-server-binary", "/en/observability/*/obs-ai-assistant.html": "/docs/explore-analyze/ai-assistant", "/en/observability/*/observability-get-started.html": "/docs/solutions/observability/get-started", "/en/observability/*/observability-introduction.html": "/docs/solutions/observability/get-started/what-is-elastic-observability", - "/en/observability/*/observability-tutorials.html": "/guide/en/observability/current/observability-tutorials.html", - "/en/observability/*/open-telemetry-collect-metrics.html": "/guide/en/observability/8.18/apm-open-telemetry-collect-metrics.html", - "/en/observability/*/open-telemetry-direct.html": "/guide/en/observability/8.18/apm-open-telemetry-direct.html", - "/en/observability/*/open-telemetry-known-limitations.html": "/guide/en/observability/8.18/apm-open-telemetry-known-limitations.html", - "/en/observability/*/open-telemetry-other-env.html": "/guide/en/observability/current/apm-open-telemetry.html#apm-otel-lambda", - "/en/observability/*/open-telemetry-resource-attributes.html": "/guide/en/observability/8.18/apm-open-telemetry-resource-attributes.html", - "/en/observability/*/open-telemetry-with-elastic.html": "/guide/en/observability/current/apm-open-telemetry.html#apm-otel-api-sdk-elastic-agent", - "/en/observability/*/open-telemetry.html": "/docs/solutions/observability/apps/use-opentelemetry-with-apm", - "/en/observability/*/privileges-agent-central-config.html": "/guide/en/observability/current/apm-feature-roles.html#apm-privileges-agent-central-config", - "/en/observability/*/privileges-api-key.html": "/guide/en/observability/current/apm-command-line-options.html#apm-apikey-command", - "/en/observability/*/privileges-rum-source-map.html": "/guide/en/observability/current/apm-feature-roles.html#apm-privileges-rum-source-map", - "/en/observability/*/privileges-to-publish-events.html": "/guide/en/observability/current/apm-feature-roles.html#apm-privileges-to-publish-events", - "/en/observability/*/privileges-to-publish-monitoring.html": "/guide/en/observability/current/apm-feature-roles.html#apm-privileges-to-publish-monitoring", + "/en/observability/*/open-telemetry-other-env.html": "/docs/solutions/observability/apm/use-opentelemetry-with-apm", + "/en/observability/*/open-telemetry-with-elastic.html": "/docs/solutions/observability/apm/use-opentelemetry-with-apm", + "/en/observability/*/open-telemetry.html": "/docs/solutions/observability/apm/use-opentelemetry-with-apm", + "/en/observability/*/privileges-agent-central-config.html": "/docs/solutions/observability/apm/create-assign-feature-roles-to-apm-server-users", + "/en/observability/*/privileges-api-key.html": "/docs/solutions/observability/apm/apm-server-command-reference", + "/en/observability/*/privileges-rum-source-map.html": "/docs/solutions/observability/apm/create-assign-feature-roles-to-apm-server-users", + "/en/observability/*/privileges-to-publish-events.html": "/docs/solutions/observability/apm/create-assign-feature-roles-to-apm-server-users", + "/en/observability/*/privileges-to-publish-monitoring.html": "/docs/solutions/observability/apm/create-assign-feature-roles-to-apm-server-users", "/en/observability/*/processing-and-performance.html": "/docs/troubleshoot/observability/apm/processing-performance", "/en/observability/*/profiling-add-symbols.html": "/docs/solutions/observability/infra-and-hosts/add-symbols-for-native-frames", "/en/observability/*/profiling-advanced-configuration.html": "/docs/solutions/observability/infra-and-hosts/advanced-configuration", @@ -12121,110 +10881,93 @@ "/en/observability/*/quickstart-monitor-hosts-with-elastic-agent.html": "/docs/solutions/observability/get-started/quickstart-monitor-hosts-with-elastic-agent", "/en/observability/*/quickstart-monitor-hosts-with-otel.html": "/docs/solutions/observability/get-started/quickstart-monitor-hosts-with-opentelemetry", "/en/observability/*/rate-aggregation.html": "/docs/solutions/observability/incident-management/rate-aggregation", - "/en/observability/*/redirects.html": "/guide/en/observability/8.18/redirects.html", - "/en/observability/*/redis-output.html": "/docs/solutions/observability/apps/configure-redis-output", - "/en/observability/*/reduce-apm-storage.html": "/docs/solutions/observability/apps/reduce-storage", + "/en/observability/*/redis-output.html": "/docs/solutions/observability/apm/configure-redis-output", + "/en/observability/*/reduce-apm-storage.html": "/docs/solutions/observability/apm/reduce-storage", "/en/observability/*/reference.html": "/docs/reference/observability", - "/en/observability/*/release-notes-8.0.html": "/guide/en/observability/8.18/apm-release-notes-8.0.html", - "/en/observability/*/release-notes-8.1.html": "/guide/en/observability/8.18/apm-release-notes-8.1.html", - "/en/observability/*/release-notes-8.10.html": "/guide/en/observability/8.18/apm-release-notes-8.10.html", - "/en/observability/*/release-notes-8.11.html": "/guide/en/observability/8.18/apm-release-notes-8.11.html", - "/en/observability/*/release-notes-8.2.html": "/guide/en/observability/8.18/apm-release-notes-8.2.html", - "/en/observability/*/release-notes-8.3.html": "/guide/en/observability/8.18/apm-release-notes-8.3.html", - "/en/observability/*/release-notes-8.4.html": "/guide/en/observability/8.18/apm-release-notes-8.4.html", - "/en/observability/*/release-notes-8.5.html": "/guide/en/observability/8.18/apm-release-notes-8.5.html", - "/en/observability/*/release-notes-8.6.html": "/guide/en/observability/8.18/apm-release-notes-8.6.html", - "/en/observability/*/release-notes-8.7.html": "/guide/en/observability/8.18/apm-release-notes-8.7.html", - "/en/observability/*/release-notes-8.8.html": "/guide/en/observability/8.18/apm-release-notes-8.8.html", - "/en/observability/*/release-notes-8.9.html": "/guide/en/observability/8.18/apm-release-notes-8.9.html", "/en/observability/*/release-notes.html": "/docs/release-notes/apm", - "/en/observability/*/running-on-docker.html": "/guide/en/observability/8.18/running-on-docker.html", - "/en/observability/*/running-with-systemd.html": "/docs/solutions/observability/apps/apm-server-systemd", - "/en/observability/*/sampling.html": "/docs/solutions/observability/apps/transaction-sampling", - "/en/observability/*/secret-token.html": "/docs/solutions/observability/apps/secret-token", - "/en/observability/*/secure-agent-communication.html": "/docs/solutions/observability/apps/secure-communication-with-apm-agents", - "/en/observability/*/secure-comms-stack.html": "/docs/solutions/observability/apps/secure-communication-with-elastic-stack", - "/en/observability/*/securing-apm-server.html": "/docs/solutions/observability/apps/use-apm-securely", - "/en/observability/*/select-metrics.html": "/guide/en/observability/8.18/select-metrics.html", + "/en/observability/*/running-with-systemd.html": "/docs/solutions/observability/apm/apm-server-systemd", + "/en/observability/*/sampling.html": "/docs/solutions/observability/apm/transaction-sampling", + "/en/observability/*/secret-token.html": "/docs/solutions/observability/apm/secret-token", + "/en/observability/*/secure-agent-communication.html": "/docs/solutions/observability/apm/secure-communication-with-apm-agents", + "/en/observability/*/secure-comms-stack.html": "/docs/solutions/observability/apm/secure-communication-with-elastic-stack", + "/en/observability/*/securing-apm-server.html": "/docs/solutions/observability/apm/use-apm-securely", "/en/observability/*/server-es-down.html": "/docs/troubleshoot/observability/apm/what-happens-when-apm-server-elasticsearch-is-down", - "/en/observability/*/setting-up-and-running.html": "/docs/solutions/observability/apps/apm-server-advanced-setup", - "/en/observability/*/setup-kibana-endpoint.html": "/docs/solutions/observability/apps/configure-kibana-endpoint", - "/en/observability/*/setup-repositories.html": "/guide/en/observability/8.18/setup-repositories.html", + "/en/observability/*/setting-up-and-running.html": "/docs/solutions/observability/apm/apm-server-advanced-setup", + "/en/observability/*/setup-kibana-endpoint.html": "/docs/solutions/observability/apm/configure-kibana-endpoint", "/en/observability/*/slo-burn-rate-alert.html": "/docs/solutions/observability/incident-management/create-an-slo-burn-rate-rule", "/en/observability/*/slo-create.html": "/docs/solutions/observability/incident-management/create-an-slo", "/en/observability/*/slo-privileges.html": "/docs/solutions/observability/incident-management/configure-service-level-objective-slo-access", "/en/observability/*/slo-troubleshoot-slos.html": "/docs/troubleshoot/observability/troubleshoot-service-level-objectives-slos", "/en/observability/*/slo.html": "/docs/solutions/observability/incident-management/service-level-objectives-slos", - "/en/observability/*/source-map-how-to.html": "/docs/solutions/observability/apps/create-upload-source-maps-rum", - "/en/observability/*/span-compression.html": "/guide/en/observability/current/apm-data-model-spans.html#apm-spans-span-compression", + "/en/observability/*/source-map-how-to.html": "/docs/solutions/observability/apm/create-upload-source-maps-rum", + "/en/observability/*/span-compression.html": "/docs/solutions/observability/apm/spans", "/en/observability/*/spin-up-stack.html": "/docs/deploy-manage/deploy/self-managed/installing-elasticsearch", "/en/observability/*/splunk-get-started.html": "/docs/solutions/observability/get-started/add-data-from-splunk", - "/en/observability/*/storage-guide.html": "/docs/solutions/observability/apps/storage-sizing-guide", + "/en/observability/*/storage-guide.html": "/docs/solutions/observability/apm/storage-sizing-guide", "/en/observability/*/synthetic-monitoring-visualizations.html": "/docs/troubleshoot/observability/explore-data", - "/en/observability/*/synthetic-monitoring.html": "/guide/en/observability/current/monitor-uptime-synthetics.html#monitoring-synthetics", - "/en/observability/*/synthetic-run-tests.html": "/docs/solutions/observability/apps/create-monitors-with-project-monitors", - "/en/observability/*/synthetics-analyze.html": "/docs/solutions/observability/apps/analyze-data-from-synthetic-monitors", - "/en/observability/*/synthetics-command-reference.html": "/docs/solutions/observability/apps/use-synthetics-cli", - "/en/observability/*/synthetics-configuration.html": "/docs/solutions/observability/apps/configure-synthetics-projects", - "/en/observability/*/synthetics-create-test.html": "/docs/solutions/observability/apps/write-synthetic-test", - "/en/observability/*/synthetics-feature-roles.html": "/docs/solutions/observability/apps/grant-users-access-to-secured-resources", - "/en/observability/*/synthetics-get-started-heartbeat.html": "/docs/solutions/observability/apps/get-started-with-uptime", - "/en/observability/*/synthetics-get-started-project.html": "/docs/solutions/observability/apps/create-monitors-with-project-monitors", - "/en/observability/*/synthetics-get-started-ui.html": "/docs/solutions/observability/apps/create-monitors-in-synthetics-app", - "/en/observability/*/synthetics-get-started.html": "/docs/solutions/observability/apps/get-started", - "/en/observability/*/synthetics-journeys.html": "/docs/solutions/observability/apps/scripting-browser-monitors", - "/en/observability/*/synthetics-lightweight.html": "/docs/solutions/observability/apps/configure-lightweight-monitors", - "/en/observability/*/synthetics-manage-monitors.html": "/docs/solutions/observability/apps/manage-monitors", - "/en/observability/*/synthetics-manage-retention.html": "/docs/solutions/observability/apps/manage-data-retention", - "/en/observability/*/synthetics-mfa.html": "/docs/solutions/observability/apps/multi-factor-authentication-mfa-for-browser-monitors", - "/en/observability/*/synthetics-migrate-from-integration.html": "/docs/solutions/observability/apps/migrate-from-elastic-synthetics-integration", - "/en/observability/*/synthetics-monitor-use.html": "/docs/solutions/observability/apps/configure-individual-browser-monitors", - "/en/observability/*/synthetics-params-secrets.html": "/docs/solutions/observability/apps/work-with-params-secrets", - "/en/observability/*/synthetics-private-location.html": "/docs/solutions/observability/apps/monitor-resources-on-private-networks", - "/en/observability/*/synthetics-quickstart-fleet.html": "/docs/solutions/observability/apps/get-started", - "/en/observability/*/synthetics-quickstart.html": "/docs/solutions/observability/apps/get-started", - "/en/observability/*/synthetics-recorder.html": "/docs/solutions/observability/apps/use-synthetics-recorder", - "/en/observability/*/synthetics-role-read.html": "/docs/solutions/observability/apps/reader-role", - "/en/observability/*/synthetics-role-setup.html": "/docs/solutions/observability/apps/setup-role", - "/en/observability/*/synthetics-role-write.html": "/docs/solutions/observability/apps/writer-role", - "/en/observability/*/synthetics-scale-and-architect.html": "/docs/solutions/observability/apps/scale-architect-synthetics-deployment", - "/en/observability/*/synthetics-security-encryption.html": "/docs/solutions/observability/apps/synthetics-encryption-security", - "/en/observability/*/synthetics-settings.html": "/docs/solutions/observability/apps/configure-synthetics-settings", - "/en/observability/*/synthetics-support-matrix.html": "/docs/solutions/observability/apps/synthetics-support-matrix", - "/en/observability/*/synthetics-traffic-filters.html": "/docs/solutions/observability/apps/use-synthetics-with-traffic-filters", + "/en/observability/*/synthetic-monitoring.html": "/docs/solutions/observability/synthetics", + "/en/observability/*/synthetic-run-tests.html": "/docs/solutions/observability/synthetics/create-monitors-with-projects", + "/en/observability/*/synthetics-analyze.html": "/docs/solutions/observability/synthetics/analyze-data", + "/en/observability/*/synthetics-command-reference.html": "/docs/solutions/observability/synthetics/cli", + "/en/observability/*/synthetics-configuration.html": "/docs/solutions/observability/synthetics/configure-projects", + "/en/observability/*/synthetics-create-test.html": "/docs/solutions/observability/synthetics/write-synthetic-test", + "/en/observability/*/synthetics-feature-roles.html": "/docs/solutions/observability/synthetics/grant-access-to-secured-resources", + "/en/observability/*/synthetics-get-started-heartbeat.html": "/docs/solutions/observability/uptime/get-started", + "/en/observability/*/synthetics-get-started-project.html": "/docs/solutions/observability/synthetics/create-monitors-with-projects", + "/en/observability/*/synthetics-get-started-ui.html": "/docs/solutions/observability/synthetics/create-monitors-ui", + "/en/observability/*/synthetics-get-started.html": "/docs/solutions/observability/synthetics/get-started", + "/en/observability/*/synthetics-journeys.html": "/docs/solutions/observability/synthetics/scripting-browser-monitors", + "/en/observability/*/synthetics-lightweight.html": "/docs/solutions/observability/synthetics/configure-lightweight-monitors", + "/en/observability/*/synthetics-manage-monitors.html": "/docs/solutions/observability/synthetics/manage-monitors", + "/en/observability/*/synthetics-manage-retention.html": "/docs/solutions/observability/synthetics/manage-data-retention", + "/en/observability/*/synthetics-mfa.html": "/docs/solutions/observability/synthetics/mfa-for-browser-monitors", + "/en/observability/*/synthetics-migrate-from-integration.html": "/docs/solutions/observability/synthetics/migrate-from-elastic-synthetics-integration", + "/en/observability/*/synthetics-monitor-use.html": "/docs/solutions/observability/synthetics/configure-individual-browser-monitors", + "/en/observability/*/synthetics-params-secrets.html": "/docs/solutions/observability/synthetics/work-with-params-secrets", + "/en/observability/*/synthetics-private-location.html": "/docs/solutions/observability/synthetics/monitor-resources-on-private-networks", + "/en/observability/*/synthetics-quickstart-fleet.html": "/docs/solutions/observability/synthetics/get-started", + "/en/observability/*/synthetics-quickstart.html": "/docs/solutions/observability/synthetics/get-started", + "/en/observability/*/synthetics-recorder.html": "/docs/solutions/observability/synthetics/use-synthetics-recorder", + "/en/observability/*/synthetics-role-read.html": "/docs/solutions/observability/synthetics/reader-role", + "/en/observability/*/synthetics-role-setup.html": "/docs/solutions/observability/synthetics/setup-role", + "/en/observability/*/synthetics-role-write.html": "/docs/solutions/observability/synthetics/writer-role", + "/en/observability/*/synthetics-scale-and-architect.html": "/docs/solutions/observability/synthetics/scale-architect-synthetics-deployment", + "/en/observability/*/synthetics-security-encryption.html": "/docs/solutions/observability/synthetics/encryption-security", + "/en/observability/*/synthetics-settings.html": "/docs/solutions/observability/synthetics/configure-settings", + "/en/observability/*/synthetics-support-matrix.html": "/docs/solutions/observability/synthetics/support-matrix", + "/en/observability/*/synthetics-traffic-filters.html": "/docs/solutions/observability/synthetics/traffic-filters", "/en/observability/*/synthetics-troubleshooting.html": "/docs/troubleshoot/observability/troubleshooting-synthetics", - "/en/observability/*/synthetics-visualize.html": "/guide/en/observability/current/synthetics-analyze.html#synthetics-analyze-journeys", - "/en/observability/*/tail-based-samling-config.html": "/docs/solutions/observability/apps/tail-based-sampling", - "/en/observability/*/tail-logs.html": "/guide/en/observability/8.18/tail-logs.html", + "/en/observability/*/synthetics-visualize.html": "/docs/solutions/observability/synthetics/analyze-data", + "/en/observability/*/tail-based-samling-config.html": "/docs/solutions/observability/apm/tail-based-sampling", "/en/observability/*/threshold-alert.html": "/docs/solutions/observability/incident-management/create-custom-threshold-rule", "/en/observability/*/tls-certificate-alert.html": "/docs/solutions/observability/incident-management/create-tls-certificate-rule", - "/en/observability/*/traces-get-started.html": "/docs/solutions/observability/apps/get-started-with-apm", + "/en/observability/*/traces-get-started.html": "/docs/solutions/observability/apm/get-started", "/en/observability/*/triage-slo-burn-rate-breaches.html": "/docs/solutions/observability/incident-management/triage-slo-burn-rate-breaches", "/en/observability/*/triage-threshold-breaches.html": "/docs/solutions/observability/incident-management/triage-threshold-breaches", "/en/observability/*/troubleshoot-apm.html": "/docs/troubleshoot/observability/apm", "/en/observability/*/troubleshoot-uptime-mapping-issues.html": "/docs/troubleshoot/observability/troubleshoot-mapping-issues", "/en/observability/*/troubleshooting-infrastructure-monitoring.html": "/docs/troubleshoot/observability/troubleshooting-infrastructure-monitoring", "/en/observability/*/troubleshooting.html": "/docs/troubleshoot/observability", - "/en/observability/*/tune-data-ingestion.html": "/docs/solutions/observability/apps/tune-data-ingestion", + "/en/observability/*/tune-data-ingestion.html": "/docs/solutions/observability/apm/tune-data-ingestion", "/en/observability/*/universal-profiling.html": "/docs/solutions/observability/infra-and-hosts/universal-profiling", - "/en/observability/*/upgrade-8.0-cloud-integration.html": "/docs/solutions/observability/apps/upgrade-elastic-cloud-with-apm-integration-to-90", - "/en/observability/*/upgrade-8.0-cloud-standalone.html": "/docs/solutions/observability/apps/upgrade-elastic-cloud-apm-server-standalone-to-90", - "/en/observability/*/upgrade-8.0-self-integration.html": "/docs/solutions/observability/apps/upgrade-self-installation-of-apm-integration-to-90", - "/en/observability/*/upgrade-8.0-self-standalone.html": "/docs/solutions/observability/apps/upgrade-self-installation-of-apm-server-standalone-to-90", - "/en/observability/*/upgrade-to-apm-integration.html": "/docs/solutions/observability/apps/switch-to-elastic-apm-integration", - "/en/observability/*/upgrade.html": "/docs/solutions/observability/apps/upgrade", - "/en/observability/*/upgrading-to-8.x.html": "/docs/solutions/observability/apps/upgrade-to-version-90", - "/en/observability/*/uptime-analyze.html": "/docs/solutions/observability/apps/analyze", - "/en/observability/*/uptime-get-started.html": "/docs/solutions/observability/apps/get-started-with-uptime", - "/en/observability/*/uptime-intro.html": "/docs/solutions/observability/apps/uptime-monitoring-deprecated", - "/en/observability/*/uptime-set-up-choose-agent.html": "/docs/solutions/observability/apps/create-monitors-in-synthetics-app", - "/en/observability/*/uptime-set-up-choose-heartbeat.html": "/docs/solutions/observability/apps/get-started-with-uptime", - "/en/observability/*/uptime-set-up-choose-project-monitors.html": "/docs/solutions/observability/apps/create-monitors-with-project-monitors", - "/en/observability/*/uptime-set-up.html": "/docs/solutions/observability/apps/get-started", + "/en/observability/*/upgrade-8.0-cloud-integration.html": "/docs/solutions/observability/apm/upgrade-elastic-cloud-with-apm-integration-to-9", + "/en/observability/*/upgrade-8.0-cloud-standalone.html": "/docs/solutions/observability/apm/upgrade-elastic-cloud-apm-server-standalone-to-9", + "/en/observability/*/upgrade-8.0-self-integration.html": "/docs/solutions/observability/apm/upgrade-self-installation-of-apm-integration-to-9", + "/en/observability/*/upgrade-8.0-self-standalone.html": "/docs/solutions/observability/apm/upgrade-self-installation-of-apm-server-standalone-to-9", + "/en/observability/*/upgrade-to-apm-integration.html": "/docs/solutions/observability/apm/switch-to-elastic-apm-integration", + "/en/observability/*/upgrade.html": "/docs/solutions/observability/apm/upgrade", + "/en/observability/*/upgrading-to-8.x.html": "/docs/solutions/observability/apm/upgrade-to-version-9", + "/en/observability/*/uptime-analyze.html": "/docs/solutions/observability/uptime/analyze", + "/en/observability/*/uptime-get-started.html": "/docs/solutions/observability/uptime/get-started", + "/en/observability/*/uptime-intro.html": "/docs/solutions/observability/uptime", + "/en/observability/*/uptime-set-up-choose-agent.html": "/docs/solutions/observability/synthetics/create-monitors-ui", + "/en/observability/*/uptime-set-up-choose-heartbeat.html": "/docs/solutions/observability/uptime/get-started", + "/en/observability/*/uptime-set-up-choose-project-monitors.html": "/docs/solutions/observability/synthetics/create-monitors-with-projects", + "/en/observability/*/uptime-set-up.html": "/docs/solutions/observability/synthetics/get-started", "/en/observability/*/user-experience-visualizations.html": "/docs/troubleshoot/observability/explore-data", - "/en/observability/*/user-experience.html": "/docs/solutions/observability/apps/real-user-monitoring-user-experience", + "/en/observability/*/user-experience.html": "/docs/solutions/observability/applications/user-experience", "/en/observability/*/view-infrastructure-metrics.html": "/docs/solutions/observability/infra-and-hosts/view-infrastructure-metrics-by-resource-type", - "/en/observability/*/view-monitor-status.html": "/docs/solutions/observability/apps/view-monitor-status", + "/en/observability/*/view-monitor-status.html": "/docs/solutions/observability/uptime/view-monitor-status", "/en/observability/*/view-observability-alerts.html": "/docs/solutions/observability/incident-management/view-alerts", "/en/observability/*/whats-new.html": "/docs/release-notes/observability", "/en/observability/master/release-notes-head.html": "/docs/release-notes/apm", @@ -12382,6 +11125,7 @@ "/en/security/*/attempt-to-modify-an-okta-policy.html": "/docs/reference/security/prebuilt-rules/rules/integrations/okta/defense_evasion_okta_attempt_to_modify_okta_policy", "/en/security/*/attempt-to-mount-smb-share-via-command-line.html": "/docs/reference/security/prebuilt-rules/rules/macos/lateral_movement_mounting_smb_share", "/en/security/*/attempt-to-reset-mfa-factors-for-an-okta-user-account.html": "/docs/reference/security/prebuilt-rules/rules/integrations/okta/persistence_attempt_to_reset_mfa_factors_for_okta_user_account", + "/en/security/*/attempt-to-retrieve-user-data-from-aws-ec2-instance.html": "/docs/reference/security/prebuilt-rules/rules/integrations/aws/discovery_ec2_userdata_request_for_ec2_instance", "/en/security/*/attempt-to-revoke-okta-api-token.html": "/docs/reference/security/prebuilt-rules/rules/integrations/okta/impact_attempt_to_revoke_okta_api_token", "/en/security/*/attempt-to-unload-elastic-endpoint-security-kernel-extension.html": "/docs/reference/security/prebuilt-rules/rules/macos/defense_evasion_unload_endpointsecurity_kext", "/en/security/*/attempted-bypass-of-okta-mfa.html": "/docs/reference/security/prebuilt-rules/rules/integrations/okta/credential_access_attempted_bypass_of_okta_mfa", @@ -13157,9 +11901,6 @@ "/en/security/*/port-forwarding-rule-addition.html": "/docs/reference/security/prebuilt-rules/rules/windows/command_and_control_port_forwarding_added_registry", "/en/security/*/possible-fin7-dga-command-and-control-behavior.html": "/docs/reference/security/prebuilt-rules/rules/network/command_and_control_fin7_c2_behavior", "/en/security/*/possible-okta-dos-attack.html": "/docs/reference/security/prebuilt-rules/rules/integrations/okta/impact_possible_okta_dos_attack", - "/en/security/*/post-upgrade-deprecated-sn-connector.html": "/guide/en/security/8.18/post-upgrade-deprecated-sn-connector.html", - "/en/security/*/post-upgrade-intro.html": "/guide/en/security/8.18/post-upgrade-intro.html", - "/en/security/*/post-upgrade-req-cti-alerts.html": "/guide/en/security/8.18/post-upgrade-req-cti-alerts.html", "/en/security/*/potential-abuse-of-resources-by-high-token-count-and-large-response-sizes.html": "/docs/reference/security/prebuilt-rules/rules/integrations/aws_bedrock/aws_bedrock_high_resource_consumption_detection", "/en/security/*/potential-active-directory-replication-account-backdoor.html": "/docs/reference/security/prebuilt-rules/rules/windows/credential_access_dcsync_user_backdoor", "/en/security/*/potential-adidns-poisoning-via-wildcard-record-creation.html": "/docs/reference/security/prebuilt-rules/rules/windows/credential_access_adidns_wildcard", @@ -13351,3966 +12092,6 @@ "/en/security/*/powershell-suspicious-script-with-clipboard-retrieval-capabilities.html": "/docs/reference/security/prebuilt-rules/rules/windows/collection_posh_clipboard_capture", "/en/security/*/powershell-suspicious-script-with-screenshot-capabilities.html": "/docs/reference/security/prebuilt-rules/rules/windows/collection_posh_screen_grabber", "/en/security/*/prebuilt-ml-jobs.html": "/docs/reference/data-analysis/machine-learning/ootb-ml-jobs-siem", - "/en/security/*/prebuilt-rule-0-13-1-anomalous-process-for-a-linux-population.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-anomalous-process-for-a-linux-population.html", - "/en/security/*/prebuilt-rule-0-13-1-anomalous-process-for-a-windows-population.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-anomalous-process-for-a-windows-population.html", - "/en/security/*/prebuilt-rule-0-13-1-anomalous-windows-process-creation.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-anomalous-windows-process-creation.html", - "/en/security/*/prebuilt-rule-0-13-1-apple-script-execution-followed-by-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-apple-script-execution-followed-by-network-connection.html", - "/en/security/*/prebuilt-rule-0-13-1-attempts-to-brute-force-a-microsoft-365-user-account.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-attempts-to-brute-force-a-microsoft-365-user-account.html", - "/en/security/*/prebuilt-rule-0-13-1-attempts-to-brute-force-an-okta-user-account.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-attempts-to-brute-force-an-okta-user-account.html", - "/en/security/*/prebuilt-rule-0-13-1-aws-ec2-vm-export-failure.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-aws-ec2-vm-export-failure.html", - "/en/security/*/prebuilt-rule-0-13-1-command-prompt-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-command-prompt-network-connection.html", - "/en/security/*/prebuilt-rule-0-13-1-component-object-model-hijacking.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-component-object-model-hijacking.html", - "/en/security/*/prebuilt-rule-0-13-1-connection-to-external-network-via-telnet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-connection-to-external-network-via-telnet.html", - "/en/security/*/prebuilt-rule-0-13-1-connection-to-internal-network-via-telnet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-connection-to-internal-network-via-telnet.html", - "/en/security/*/prebuilt-rule-0-13-1-dns-activity-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-dns-activity-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-1-high-number-of-okta-user-password-reset-or-unlock-attempts.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-high-number-of-okta-user-password-reset-or-unlock-attempts.html", - "/en/security/*/prebuilt-rule-0-13-1-macos-installer-spawns-network-event.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-macos-installer-spawns-network-event.html", - "/en/security/*/prebuilt-rule-0-13-1-modification-of-amsienable-registry-key.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-modification-of-amsienable-registry-key.html", - "/en/security/*/prebuilt-rule-0-13-1-network-connection-via-certutil.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-network-connection-via-certutil.html", - "/en/security/*/prebuilt-rule-0-13-1-network-connection-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-network-connection-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-0-13-1-network-connection-via-msxsl.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-network-connection-via-msxsl.html", - "/en/security/*/prebuilt-rule-0-13-1-network-connection-via-registration-utility.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-network-connection-via-registration-utility.html", - "/en/security/*/prebuilt-rule-0-13-1-network-connection-via-signed-binary.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-network-connection-via-signed-binary.html", - "/en/security/*/prebuilt-rule-0-13-1-network-traffic-to-rare-destination-country.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-network-traffic-to-rare-destination-country.html", - "/en/security/*/prebuilt-rule-0-13-1-prebuilt-rules-0-13-1-appendix.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-prebuilt-rules-0-13-1-appendix.html", - "/en/security/*/prebuilt-rule-0-13-1-rdp-remote-desktop-protocol-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-rdp-remote-desktop-protocol-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-1-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-1-rpc-remote-procedure-call-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-rpc-remote-procedure-call-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-1-rpc-remote-procedure-call-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-rpc-remote-procedure-call-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-1-spike-in-firewall-denies.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-spike-in-firewall-denies.html", - "/en/security/*/prebuilt-rule-0-13-1-spike-in-network-traffic-to-a-country.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-spike-in-network-traffic-to-a-country.html", - "/en/security/*/prebuilt-rule-0-13-1-spike-in-network-traffic.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-spike-in-network-traffic.html", - "/en/security/*/prebuilt-rule-0-13-1-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html", - "/en/security/*/prebuilt-rule-0-13-1-suspicious-execution-from-a-mounted-device.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-suspicious-execution-from-a-mounted-device.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-linux-network-port-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-linux-network-port-activity.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-linux-process-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-linux-process-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-linux-user-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-linux-user-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-linux-username.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-linux-username.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-network-connection-via-dllhost.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-network-connection-via-dllhost.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-network-connection-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-network-connection-via-rundll32.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-process-for-a-linux-host.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-process-for-a-linux-host.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-windows-network-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-windows-network-activity.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-windows-path-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-windows-path-activity.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-windows-process-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-windows-process-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-windows-user-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-windows-user-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-0-13-1-unusual-windows-username.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-unusual-windows-username.html", - "/en/security/*/prebuilt-rule-0-13-1-vnc-virtual-network-computing-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-vnc-virtual-network-computing-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-1-vnc-virtual-network-computing-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-1-vnc-virtual-network-computing-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-2-attempts-to-brute-force-a-microsoft-365-user-account.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-attempts-to-brute-force-a-microsoft-365-user-account.html", - "/en/security/*/prebuilt-rule-0-13-2-aws-ec2-full-network-packet-capture-detected.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-aws-ec2-full-network-packet-capture-detected.html", - "/en/security/*/prebuilt-rule-0-13-2-aws-ec2-vm-export-failure.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-aws-ec2-vm-export-failure.html", - "/en/security/*/prebuilt-rule-0-13-2-aws-rds-instance-creation.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-aws-rds-instance-creation.html", - "/en/security/*/prebuilt-rule-0-13-2-aws-rds-security-group-creation.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-aws-rds-security-group-creation.html", - "/en/security/*/prebuilt-rule-0-13-2-aws-rds-security-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-aws-rds-security-group-deletion.html", - "/en/security/*/prebuilt-rule-0-13-2-aws-rds-snapshot-export.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-aws-rds-snapshot-export.html", - "/en/security/*/prebuilt-rule-0-13-2-aws-route-53-domain-transfer-lock-disabled.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-aws-route-53-domain-transfer-lock-disabled.html", - "/en/security/*/prebuilt-rule-0-13-2-aws-route-53-domain-transferred-to-another-account.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-aws-route-53-domain-transferred-to-another-account.html", - "/en/security/*/prebuilt-rule-0-13-2-azure-service-principal-credentials-added.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-azure-service-principal-credentials-added.html", - "/en/security/*/prebuilt-rule-0-13-2-disabling-windows-defender-security-settings-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-disabling-windows-defender-security-settings-via-powershell.html", - "/en/security/*/prebuilt-rule-0-13-2-enable-host-network-discovery-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-enable-host-network-discovery-via-netsh.html", - "/en/security/*/prebuilt-rule-0-13-2-persistence-via-folder-action-script.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-persistence-via-folder-action-script.html", - "/en/security/*/prebuilt-rule-0-13-2-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html", - "/en/security/*/prebuilt-rule-0-13-2-potential-password-spraying-of-microsoft-365-user-accounts.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-potential-password-spraying-of-microsoft-365-user-accounts.html", - "/en/security/*/prebuilt-rule-0-13-2-potential-printnightmare-exploit-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-potential-printnightmare-exploit-registry-modification.html", - "/en/security/*/prebuilt-rule-0-13-2-potential-printnightmare-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-potential-printnightmare-file-modification.html", - "/en/security/*/prebuilt-rule-0-13-2-prebuilt-rules-0-13-2-appendix.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-prebuilt-rules-0-13-2-appendix.html", - "/en/security/*/prebuilt-rule-0-13-2-shell-execution-via-apple-scripting.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-shell-execution-via-apple-scripting.html", - "/en/security/*/prebuilt-rule-0-13-2-smb-windows-file-sharing-activity-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-smb-windows-file-sharing-activity-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-2-suspicious-print-spooler-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-suspicious-print-spooler-file-deletion.html", - "/en/security/*/prebuilt-rule-0-13-2-unusual-print-spooler-child-process.html": "/guide/en/security/8.17/prebuilt-rule-0-13-2-unusual-print-spooler-child-process.html", - "/en/security/*/prebuilt-rule-0-13-3-cobalt-strike-command-and-control-beacon.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-cobalt-strike-command-and-control-beacon.html", - "/en/security/*/prebuilt-rule-0-13-3-default-cobalt-strike-team-server-certificate.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-default-cobalt-strike-team-server-certificate.html", - "/en/security/*/prebuilt-rule-0-13-3-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-0-13-3-dns-activity-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-dns-activity-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-3-execution-of-file-written-or-modified-by-microsoft-office.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-execution-of-file-written-or-modified-by-microsoft-office.html", - "/en/security/*/prebuilt-rule-0-13-3-execution-of-file-written-or-modified-by-pdf-reader.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-execution-of-file-written-or-modified-by-pdf-reader.html", - "/en/security/*/prebuilt-rule-0-13-3-external-alerts.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-external-alerts.html", - "/en/security/*/prebuilt-rule-0-13-3-external-ip-lookup-fron-non-browser-process.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-external-ip-lookup-fron-non-browser-process.html", - "/en/security/*/prebuilt-rule-0-13-3-google-workspace-mfa-enforcement-disabled.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-google-workspace-mfa-enforcement-disabled.html", - "/en/security/*/prebuilt-rule-0-13-3-google-workspace-password-policy-modified.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-google-workspace-password-policy-modified.html", - "/en/security/*/prebuilt-rule-0-13-3-halfbaked-command-and-control-beacon.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-halfbaked-command-and-control-beacon.html", - "/en/security/*/prebuilt-rule-0-13-3-inbound-connection-to-an-unsecure-elasticsearch-node.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-inbound-connection-to-an-unsecure-elasticsearch-node.html", - "/en/security/*/prebuilt-rule-0-13-3-ipsec-nat-traversal-port-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-ipsec-nat-traversal-port-activity.html", - "/en/security/*/prebuilt-rule-0-13-3-mfa-disabled-for-google-workspace-organization.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-mfa-disabled-for-google-workspace-organization.html", - "/en/security/*/prebuilt-rule-0-13-3-mshta-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-mshta-making-network-connections.html", - "/en/security/*/prebuilt-rule-0-13-3-o365-excessive-single-sign-on-logon-errors.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-o365-excessive-single-sign-on-logon-errors.html", - "/en/security/*/prebuilt-rule-0-13-3-parent-process-pid-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-parent-process-pid-spoofing.html", - "/en/security/*/prebuilt-rule-0-13-3-possible-fin7-dga-command-and-control-behavior.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-possible-fin7-dga-command-and-control-behavior.html", - "/en/security/*/prebuilt-rule-0-13-3-prebuilt-rules-0-13-3-appendix.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-prebuilt-rules-0-13-3-appendix.html", - "/en/security/*/prebuilt-rule-0-13-3-rare-aws-error-code.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-rare-aws-error-code.html", - "/en/security/*/prebuilt-rule-0-13-3-rdp-remote-desktop-protocol-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-rdp-remote-desktop-protocol-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-3-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-3-rpc-remote-procedure-call-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-rpc-remote-procedure-call-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-3-rpc-remote-procedure-call-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-rpc-remote-procedure-call-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-3-smb-windows-file-sharing-activity-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-smb-windows-file-sharing-activity-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-3-smtp-on-port-26-tcp.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-smtp-on-port-26-tcp.html", - "/en/security/*/prebuilt-rule-0-13-3-spike-in-aws-error-messages.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-spike-in-aws-error-messages.html", - "/en/security/*/prebuilt-rule-0-13-3-suspicious-certutil-commands.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-suspicious-certutil-commands.html", - "/en/security/*/prebuilt-rule-0-13-3-telnet-port-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-telnet-port-activity.html", - "/en/security/*/prebuilt-rule-0-13-3-unusual-aws-command-for-a-user.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-unusual-aws-command-for-a-user.html", - "/en/security/*/prebuilt-rule-0-13-3-unusual-child-processes-of-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-unusual-child-processes-of-rundll32.html", - "/en/security/*/prebuilt-rule-0-13-3-unusual-city-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-unusual-city-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-0-13-3-unusual-country-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-unusual-country-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-0-13-3-unusual-print-spooler-child-process.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-unusual-print-spooler-child-process.html", - "/en/security/*/prebuilt-rule-0-13-3-vnc-virtual-network-computing-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-vnc-virtual-network-computing-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-3-vnc-virtual-network-computing-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-vnc-virtual-network-computing-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-13-3-web-application-suspicious-activity-no-user-agent.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-web-application-suspicious-activity-no-user-agent.html", - "/en/security/*/prebuilt-rule-0-13-3-web-application-suspicious-activity-post-request-declined.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-web-application-suspicious-activity-post-request-declined.html", - "/en/security/*/prebuilt-rule-0-13-3-web-application-suspicious-activity-sqlmap-user-agent.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-web-application-suspicious-activity-sqlmap-user-agent.html", - "/en/security/*/prebuilt-rule-0-13-3-web-application-suspicious-activity-unauthorized-method.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-web-application-suspicious-activity-unauthorized-method.html", - "/en/security/*/prebuilt-rule-0-13-3-windows-defender-exclusions-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-13-3-windows-defender-exclusions-added-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-1-anomalous-kernel-module-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-anomalous-kernel-module-activity.html", - "/en/security/*/prebuilt-rule-0-14-1-anomalous-linux-compiler-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-anomalous-linux-compiler-activity.html", - "/en/security/*/prebuilt-rule-0-14-1-anomalous-process-for-a-linux-population.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-anomalous-process-for-a-linux-population.html", - "/en/security/*/prebuilt-rule-0-14-1-anomalous-process-for-a-windows-population.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-anomalous-process-for-a-windows-population.html", - "/en/security/*/prebuilt-rule-0-14-1-application-added-to-google-workspace-domain.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-application-added-to-google-workspace-domain.html", - "/en/security/*/prebuilt-rule-0-14-1-aws-ec2-full-network-packet-capture-detected.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-aws-ec2-full-network-packet-capture-detected.html", - "/en/security/*/prebuilt-rule-0-14-1-aws-rds-security-group-creation.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-aws-rds-security-group-creation.html", - "/en/security/*/prebuilt-rule-0-14-1-aws-rds-security-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-aws-rds-security-group-deletion.html", - "/en/security/*/prebuilt-rule-0-14-1-aws-security-group-configuration-change-detection.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-aws-security-group-configuration-change-detection.html", - "/en/security/*/prebuilt-rule-0-14-1-azure-active-directory-high-risk-sign-in.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-azure-active-directory-high-risk-sign-in.html", - "/en/security/*/prebuilt-rule-0-14-1-bash-shell-profile-modification.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-bash-shell-profile-modification.html", - "/en/security/*/prebuilt-rule-0-14-1-bypass-uac-via-event-viewer.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-bypass-uac-via-event-viewer.html", - "/en/security/*/prebuilt-rule-0-14-1-default-cobalt-strike-team-server-certificate.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-default-cobalt-strike-team-server-certificate.html", - "/en/security/*/prebuilt-rule-0-14-1-disabling-user-account-control-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-disabling-user-account-control-via-registry-modification.html", - "/en/security/*/prebuilt-rule-0-14-1-dns-activity-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-dns-activity-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-14-1-domain-added-to-google-workspace-trusted-domains.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-domain-added-to-google-workspace-trusted-domains.html", - "/en/security/*/prebuilt-rule-0-14-1-execution-of-file-written-or-modified-by-microsoft-office.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-execution-of-file-written-or-modified-by-microsoft-office.html", - "/en/security/*/prebuilt-rule-0-14-1-exporting-exchange-mailbox-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-exporting-exchange-mailbox-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-1-external-ip-lookup-from-non-browser-process.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-external-ip-lookup-from-non-browser-process.html", - "/en/security/*/prebuilt-rule-0-14-1-finder-sync-plugin-registered-and-enabled.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-finder-sync-plugin-registered-and-enabled.html", - "/en/security/*/prebuilt-rule-0-14-1-google-workspace-admin-role-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-google-workspace-admin-role-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-0-14-1-google-workspace-admin-role-deletion.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-google-workspace-admin-role-deletion.html", - "/en/security/*/prebuilt-rule-0-14-1-google-workspace-api-access-granted-via-domain-wide-delegation-of-authority.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-google-workspace-api-access-granted-via-domain-wide-delegation-of-authority.html", - "/en/security/*/prebuilt-rule-0-14-1-google-workspace-custom-admin-role-created.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-google-workspace-custom-admin-role-created.html", - "/en/security/*/prebuilt-rule-0-14-1-google-workspace-mfa-enforcement-disabled.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-google-workspace-mfa-enforcement-disabled.html", - "/en/security/*/prebuilt-rule-0-14-1-google-workspace-password-policy-modified.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-google-workspace-password-policy-modified.html", - "/en/security/*/prebuilt-rule-0-14-1-google-workspace-role-modified.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-google-workspace-role-modified.html", - "/en/security/*/prebuilt-rule-0-14-1-macos-installer-spawns-network-event.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-macos-installer-spawns-network-event.html", - "/en/security/*/prebuilt-rule-0-14-1-mfa-disabled-for-google-workspace-organization.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-mfa-disabled-for-google-workspace-organization.html", - "/en/security/*/prebuilt-rule-0-14-1-modification-of-amsienable-registry-key.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-modification-of-amsienable-registry-key.html", - "/en/security/*/prebuilt-rule-0-14-1-modification-of-dynamic-linker-preload-shared-object.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-modification-of-dynamic-linker-preload-shared-object.html", - "/en/security/*/prebuilt-rule-0-14-1-mshta-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-mshta-making-network-connections.html", - "/en/security/*/prebuilt-rule-0-14-1-new-activesyncalloweddeviceid-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-new-activesyncalloweddeviceid-added-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-1-ntds-or-sam-database-file-copied.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-ntds-or-sam-database-file-copied.html", - "/en/security/*/prebuilt-rule-0-14-1-o365-excessive-single-sign-on-logon-errors.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-o365-excessive-single-sign-on-logon-errors.html", - "/en/security/*/prebuilt-rule-0-14-1-persistence-via-docker-shortcut-modification.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-persistence-via-docker-shortcut-modification.html", - "/en/security/*/prebuilt-rule-0-14-1-potential-privacy-control-bypass-via-tccdb-modification.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-potential-privacy-control-bypass-via-tccdb-modification.html", - "/en/security/*/prebuilt-rule-0-14-1-prebuilt-rules-0-14-1-appendix.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-prebuilt-rules-0-14-1-appendix.html", - "/en/security/*/prebuilt-rule-0-14-1-rare-aws-error-code.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-rare-aws-error-code.html", - "/en/security/*/prebuilt-rule-0-14-1-rdp-remote-desktop-protocol-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-rdp-remote-desktop-protocol-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-14-1-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-14-1-rpc-remote-procedure-call-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-rpc-remote-procedure-call-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-14-1-rpc-remote-procedure-call-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-rpc-remote-procedure-call-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-14-1-smb-windows-file-sharing-activity-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-smb-windows-file-sharing-activity-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-14-1-spike-in-aws-error-messages.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-spike-in-aws-error-messages.html", - "/en/security/*/prebuilt-rule-0-14-1-spike-in-network-traffic.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-spike-in-network-traffic.html", - "/en/security/*/prebuilt-rule-0-14-1-suspicious-jar-child-process.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-suspicious-jar-child-process.html", - "/en/security/*/prebuilt-rule-0-14-1-suspicious-wmi-image-load-from-ms-office.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-suspicious-wmi-image-load-from-ms-office.html", - "/en/security/*/prebuilt-rule-0-14-1-telnet-port-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-telnet-port-activity.html", - "/en/security/*/prebuilt-rule-0-14-1-uac-bypass-attempt-via-elevated-com-internet-explorer-add-on-installer.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-uac-bypass-attempt-via-elevated-com-internet-explorer-add-on-installer.html", - "/en/security/*/prebuilt-rule-0-14-1-uac-bypass-attempt-via-privileged-ifileoperation-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-uac-bypass-attempt-via-privileged-ifileoperation-com-interface.html", - "/en/security/*/prebuilt-rule-0-14-1-uac-bypass-attempt-via-windows-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-uac-bypass-attempt-via-windows-directory-masquerading.html", - "/en/security/*/prebuilt-rule-0-14-1-uac-bypass-attempt-with-ieditionupgrademanager-elevated-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-uac-bypass-attempt-with-ieditionupgrademanager-elevated-com-interface.html", - "/en/security/*/prebuilt-rule-0-14-1-uac-bypass-via-diskcleanup-scheduled-task-hijack.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-uac-bypass-via-diskcleanup-scheduled-task-hijack.html", - "/en/security/*/prebuilt-rule-0-14-1-uac-bypass-via-icmluautil-elevated-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-uac-bypass-via-icmluautil-elevated-com-interface.html", - "/en/security/*/prebuilt-rule-0-14-1-uac-bypass-via-windows-firewall-snap-in-hijack.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-uac-bypass-via-windows-firewall-snap-in-hijack.html", - "/en/security/*/prebuilt-rule-0-14-1-unusual-aws-command-for-a-user.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-unusual-aws-command-for-a-user.html", - "/en/security/*/prebuilt-rule-0-14-1-unusual-city-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-unusual-city-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-0-14-1-unusual-country-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-unusual-country-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-0-14-1-unusual-linux-network-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-unusual-linux-network-activity.html", - "/en/security/*/prebuilt-rule-0-14-1-unusual-linux-username.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-unusual-linux-username.html", - "/en/security/*/prebuilt-rule-0-14-1-unusual-parent-child-relationship.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-unusual-parent-child-relationship.html", - "/en/security/*/prebuilt-rule-0-14-1-unusual-process-for-a-linux-host.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-unusual-process-for-a-linux-host.html", - "/en/security/*/prebuilt-rule-0-14-1-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-0-14-1-unusual-windows-network-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-unusual-windows-network-activity.html", - "/en/security/*/prebuilt-rule-0-14-1-unusual-windows-username.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-unusual-windows-username.html", - "/en/security/*/prebuilt-rule-0-14-1-vnc-virtual-network-computing-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-vnc-virtual-network-computing-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-14-1-vnc-virtual-network-computing-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-vnc-virtual-network-computing-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-14-1-web-application-suspicious-activity-post-request-declined.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-web-application-suspicious-activity-post-request-declined.html", - "/en/security/*/prebuilt-rule-0-14-1-web-application-suspicious-activity-unauthorized-method.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-web-application-suspicious-activity-unauthorized-method.html", - "/en/security/*/prebuilt-rule-0-14-1-webshell-detection-script-process-child-of-common-web-processes.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-webshell-detection-script-process-child-of-common-web-processes.html", - "/en/security/*/prebuilt-rule-0-14-1-whitespace-padding-in-process-command-line.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-whitespace-padding-in-process-command-line.html", - "/en/security/*/prebuilt-rule-0-14-1-windows-defender-disabled-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-windows-defender-disabled-via-registry-modification.html", - "/en/security/*/prebuilt-rule-0-14-1-windows-defender-exclusions-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-windows-defender-exclusions-added-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-1-windows-network-enumeration.html": "/guide/en/security/8.17/prebuilt-rule-0-14-1-windows-network-enumeration.html", - "/en/security/*/prebuilt-rule-0-14-2-abnormally-large-dns-response.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-abnormally-large-dns-response.html", - "/en/security/*/prebuilt-rule-0-14-2-adfind-command-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-adfind-command-activity.html", - "/en/security/*/prebuilt-rule-0-14-2-aws-elasticache-security-group-created.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-aws-elasticache-security-group-created.html", - "/en/security/*/prebuilt-rule-0-14-2-aws-elasticache-security-group-modified-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-aws-elasticache-security-group-modified-or-deleted.html", - "/en/security/*/prebuilt-rule-0-14-2-aws-rds-instance-creation.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-aws-rds-instance-creation.html", - "/en/security/*/prebuilt-rule-0-14-2-aws-rds-snapshot-export.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-aws-rds-snapshot-export.html", - "/en/security/*/prebuilt-rule-0-14-2-aws-route-table-modified-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-aws-route-table-modified-or-deleted.html", - "/en/security/*/prebuilt-rule-0-14-2-aws-security-group-configuration-change-detection.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-aws-security-group-configuration-change-detection.html", - "/en/security/*/prebuilt-rule-0-14-2-aws-sts-getsessiontoken-abuse.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-aws-sts-getsessiontoken-abuse.html", - "/en/security/*/prebuilt-rule-0-14-2-azure-frontdoor-web-application-firewall-waf-policy-deleted.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-azure-frontdoor-web-application-firewall-waf-policy-deleted.html", - "/en/security/*/prebuilt-rule-0-14-2-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-0-14-2-connection-to-commonly-abused-web-services.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-connection-to-commonly-abused-web-services.html", - "/en/security/*/prebuilt-rule-0-14-2-control-panel-process-with-unusual-arguments.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-control-panel-process-with-unusual-arguments.html", - "/en/security/*/prebuilt-rule-0-14-2-creation-of-a-hidden-local-user-account.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-creation-of-a-hidden-local-user-account.html", - "/en/security/*/prebuilt-rule-0-14-2-creation-or-modification-of-a-new-gpo-scheduled-task-or-service.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-creation-or-modification-of-a-new-gpo-scheduled-task-or-service.html", - "/en/security/*/prebuilt-rule-0-14-2-creation-or-modification-of-domain-backup-dpapi-private-key.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-creation-or-modification-of-domain-backup-dpapi-private-key.html", - "/en/security/*/prebuilt-rule-0-14-2-credential-acquisition-via-registry-hive-dumping.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-credential-acquisition-via-registry-hive-dumping.html", - "/en/security/*/prebuilt-rule-0-14-2-deleting-backup-catalogs-with-wbadmin.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-deleting-backup-catalogs-with-wbadmin.html", - "/en/security/*/prebuilt-rule-0-14-2-direct-outbound-smb-connection.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-direct-outbound-smb-connection.html", - "/en/security/*/prebuilt-rule-0-14-2-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-0-14-2-disable-windows-firewall-rules-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-disable-windows-firewall-rules-via-netsh.html", - "/en/security/*/prebuilt-rule-0-14-2-dns-activity-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-dns-activity-to-the-internet.html", - "/en/security/*/prebuilt-rule-0-14-2-enable-host-network-discovery-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-enable-host-network-discovery-via-netsh.html", - "/en/security/*/prebuilt-rule-0-14-2-encoded-executable-stored-in-the-registry.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-encoded-executable-stored-in-the-registry.html", - "/en/security/*/prebuilt-rule-0-14-2-encrypting-files-with-winrar-or-7z.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-encrypting-files-with-winrar-or-7z.html", - "/en/security/*/prebuilt-rule-0-14-2-enumeration-command-spawned-via-wmiprvse.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-enumeration-command-spawned-via-wmiprvse.html", - "/en/security/*/prebuilt-rule-0-14-2-enumeration-of-administrator-accounts.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-enumeration-of-administrator-accounts.html", - "/en/security/*/prebuilt-rule-0-14-2-executable-file-creation-with-multiple-extensions.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-executable-file-creation-with-multiple-extensions.html", - "/en/security/*/prebuilt-rule-0-14-2-exporting-exchange-mailbox-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-exporting-exchange-mailbox-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-2-high-number-of-process-and-or-service-terminations.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-high-number-of-process-and-or-service-terminations.html", - "/en/security/*/prebuilt-rule-0-14-2-iis-http-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-iis-http-logging-disabled.html", - "/en/security/*/prebuilt-rule-0-14-2-incoming-dcom-lateral-movement-via-mshta.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-incoming-dcom-lateral-movement-via-mshta.html", - "/en/security/*/prebuilt-rule-0-14-2-incoming-dcom-lateral-movement-with-mmc.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-incoming-dcom-lateral-movement-with-mmc.html", - "/en/security/*/prebuilt-rule-0-14-2-incoming-dcom-lateral-movement-with-shellbrowserwindow-or-shellwindows.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-incoming-dcom-lateral-movement-with-shellbrowserwindow-or-shellwindows.html", - "/en/security/*/prebuilt-rule-0-14-2-kerberos-cached-credentials-dumping.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-kerberos-cached-credentials-dumping.html", - "/en/security/*/prebuilt-rule-0-14-2-lsass-memory-dump-creation.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-lsass-memory-dump-creation.html", - "/en/security/*/prebuilt-rule-0-14-2-microsoft-365-potential-ransomware-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-microsoft-365-potential-ransomware-activity.html", - "/en/security/*/prebuilt-rule-0-14-2-microsoft-365-unusual-volume-of-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-microsoft-365-unusual-volume-of-file-deletion.html", - "/en/security/*/prebuilt-rule-0-14-2-microsoft-365-user-restricted-from-sending-email.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-microsoft-365-user-restricted-from-sending-email.html", - "/en/security/*/prebuilt-rule-0-14-2-microsoft-build-engine-started-by-a-script-process.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-microsoft-build-engine-started-by-a-script-process.html", - "/en/security/*/prebuilt-rule-0-14-2-microsoft-build-engine-started-by-a-system-process.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-microsoft-build-engine-started-by-a-system-process.html", - "/en/security/*/prebuilt-rule-0-14-2-microsoft-build-engine-started-by-an-office-application.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-microsoft-build-engine-started-by-an-office-application.html", - "/en/security/*/prebuilt-rule-0-14-2-microsoft-build-engine-using-an-alternate-name.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-microsoft-build-engine-using-an-alternate-name.html", - "/en/security/*/prebuilt-rule-0-14-2-modification-of-boot-configuration.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-modification-of-boot-configuration.html", - "/en/security/*/prebuilt-rule-0-14-2-msbuild-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-msbuild-making-network-connections.html", - "/en/security/*/prebuilt-rule-0-14-2-net-command-via-system-account.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-net-command-via-system-account.html", - "/en/security/*/prebuilt-rule-0-14-2-network-connection-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-network-connection-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-0-14-2-new-activesyncalloweddeviceid-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-new-activesyncalloweddeviceid-added-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-2-new-or-modified-federation-domain.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-new-or-modified-federation-domain.html", - "/en/security/*/prebuilt-rule-0-14-2-ntds-or-sam-database-file-copied.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-ntds-or-sam-database-file-copied.html", - "/en/security/*/prebuilt-rule-0-14-2-o365-exchange-suspicious-mailbox-right-delegation.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-o365-exchange-suspicious-mailbox-right-delegation.html", - "/en/security/*/prebuilt-rule-0-14-2-outbound-scheduled-task-activity-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-outbound-scheduled-task-activity-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-2-persistence-via-scheduled-job-creation.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-persistence-via-scheduled-job-creation.html", - "/en/security/*/prebuilt-rule-0-14-2-persistence-via-telemetrycontroller-scheduled-task-hijack.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-persistence-via-telemetrycontroller-scheduled-task-hijack.html", - "/en/security/*/prebuilt-rule-0-14-2-persistence-via-wmi-event-subscription.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-persistence-via-wmi-event-subscription.html", - "/en/security/*/prebuilt-rule-0-14-2-port-forwarding-rule-addition.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-port-forwarding-rule-addition.html", - "/en/security/*/prebuilt-rule-0-14-2-potential-command-and-control-via-internet-explorer.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-potential-command-and-control-via-internet-explorer.html", - "/en/security/*/prebuilt-rule-0-14-2-potential-credential-access-via-duplicatehandle-in-lsass.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-potential-credential-access-via-duplicatehandle-in-lsass.html", - "/en/security/*/prebuilt-rule-0-14-2-potential-credential-access-via-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-potential-credential-access-via-windows-utilities.html", - "/en/security/*/prebuilt-rule-0-14-2-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html", - "/en/security/*/prebuilt-rule-0-14-2-potential-dns-tunneling-via-nslookup.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-potential-dns-tunneling-via-nslookup.html", - "/en/security/*/prebuilt-rule-0-14-2-potential-evasion-via-filter-manager.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-potential-evasion-via-filter-manager.html", - "/en/security/*/prebuilt-rule-0-14-2-potential-kerberos-attack-via-bifrost.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-potential-kerberos-attack-via-bifrost.html", - "/en/security/*/prebuilt-rule-0-14-2-potential-remote-desktop-tunneling-detected.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-potential-remote-desktop-tunneling-detected.html", - "/en/security/*/prebuilt-rule-0-14-2-potential-sharprdp-behavior.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-potential-sharprdp-behavior.html", - "/en/security/*/prebuilt-rule-0-14-2-prebuilt-rules-0-14-2-appendix.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-prebuilt-rules-0-14-2-appendix.html", - "/en/security/*/prebuilt-rule-0-14-2-process-activity-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-process-activity-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-0-14-2-process-termination-followed-by-deletion.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-process-termination-followed-by-deletion.html", - "/en/security/*/prebuilt-rule-0-14-2-program-files-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-program-files-directory-masquerading.html", - "/en/security/*/prebuilt-rule-0-14-2-rare-aws-error-code.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-rare-aws-error-code.html", - "/en/security/*/prebuilt-rule-0-14-2-rare-user-logon.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-rare-user-logon.html", - "/en/security/*/prebuilt-rule-0-14-2-rdp-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-rdp-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-0-14-2-remote-desktop-enabled-in-windows-firewall.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-remote-desktop-enabled-in-windows-firewall.html", - "/en/security/*/prebuilt-rule-0-14-2-remote-file-copy-via-teamviewer.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-remote-file-copy-via-teamviewer.html", - "/en/security/*/prebuilt-rule-0-14-2-remote-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-remote-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-0-14-2-renamed-autoit-scripts-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-renamed-autoit-scripts-interpreter.html", - "/en/security/*/prebuilt-rule-0-14-2-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-14-2-scheduled-task-created-by-a-windows-script.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-scheduled-task-created-by-a-windows-script.html", - "/en/security/*/prebuilt-rule-0-14-2-screensaver-plist-file-modified-by-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-screensaver-plist-file-modified-by-unexpected-process.html", - "/en/security/*/prebuilt-rule-0-14-2-searching-for-saved-credentials-via-vaultcmd.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-searching-for-saved-credentials-via-vaultcmd.html", - "/en/security/*/prebuilt-rule-0-14-2-security-software-discovery-using-wmic.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-security-software-discovery-using-wmic.html", - "/en/security/*/prebuilt-rule-0-14-2-spike-in-aws-error-messages.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-spike-in-aws-error-messages.html", - "/en/security/*/prebuilt-rule-0-14-2-spike-in-logon-events-from-a-source-ip.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-spike-in-logon-events-from-a-source-ip.html", - "/en/security/*/prebuilt-rule-0-14-2-suspicious-execution-via-scheduled-task.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-suspicious-execution-via-scheduled-task.html", - "/en/security/*/prebuilt-rule-0-14-2-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-0-14-2-suspicious-net-code-compilation.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-suspicious-net-code-compilation.html", - "/en/security/*/prebuilt-rule-0-14-2-suspicious-startup-shell-folder-modification.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-suspicious-startup-shell-folder-modification.html", - "/en/security/*/prebuilt-rule-0-14-2-third-party-backup-files-deleted-via-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-third-party-backup-files-deleted-via-unexpected-process.html", - "/en/security/*/prebuilt-rule-0-14-2-threat-intel-filebeat-module-indicator-match.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-threat-intel-filebeat-module-indicator-match.html", - "/en/security/*/prebuilt-rule-0-14-2-unauthorized-access-to-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-unauthorized-access-to-an-okta-application.html", - "/en/security/*/prebuilt-rule-0-14-2-uncommon-registry-persistence-change.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-uncommon-registry-persistence-change.html", - "/en/security/*/prebuilt-rule-0-14-2-unexpected-child-process-of-macos-screensaver-engine.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-unexpected-child-process-of-macos-screensaver-engine.html", - "/en/security/*/prebuilt-rule-0-14-2-unusual-aws-command-for-a-user.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-unusual-aws-command-for-a-user.html", - "/en/security/*/prebuilt-rule-0-14-2-unusual-city-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-unusual-city-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-0-14-2-unusual-country-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-unusual-country-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-0-14-2-unusual-parent-child-relationship.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-unusual-parent-child-relationship.html", - "/en/security/*/prebuilt-rule-0-14-2-unusual-process-execution-path-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-unusual-process-execution-path-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-0-14-2-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-0-14-2-user-account-creation.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-user-account-creation.html", - "/en/security/*/prebuilt-rule-0-14-2-user-added-to-privileged-group-in-active-directory.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-user-added-to-privileged-group-in-active-directory.html", - "/en/security/*/prebuilt-rule-0-14-2-virtual-machine-fingerprinting-via-grep.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-virtual-machine-fingerprinting-via-grep.html", - "/en/security/*/prebuilt-rule-0-14-2-volume-shadow-copy-deleted-or-resized-via-vssadmin.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-volume-shadow-copy-deleted-or-resized-via-vssadmin.html", - "/en/security/*/prebuilt-rule-0-14-2-volume-shadow-copy-deletion-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-volume-shadow-copy-deletion-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-2-volume-shadow-copy-deletion-via-wmic.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-volume-shadow-copy-deletion-via-wmic.html", - "/en/security/*/prebuilt-rule-0-14-2-webshell-detection-script-process-child-of-common-web-processes.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-webshell-detection-script-process-child-of-common-web-processes.html", - "/en/security/*/prebuilt-rule-0-14-2-whitespace-padding-in-process-command-line.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-whitespace-padding-in-process-command-line.html", - "/en/security/*/prebuilt-rule-0-14-2-windows-defender-exclusions-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-windows-defender-exclusions-added-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-2-windows-event-logs-cleared.html": "/guide/en/security/8.17/prebuilt-rule-0-14-2-windows-event-logs-cleared.html", - "/en/security/*/prebuilt-rule-0-14-3-account-password-reset-remotely.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-account-password-reset-remotely.html", - "/en/security/*/prebuilt-rule-0-14-3-aws-efs-file-system-or-mount-deleted.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-aws-efs-file-system-or-mount-deleted.html", - "/en/security/*/prebuilt-rule-0-14-3-aws-eventbridge-rule-disabled-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-aws-eventbridge-rule-disabled-or-deleted.html", - "/en/security/*/prebuilt-rule-0-14-3-aws-rds-snapshot-export.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-aws-rds-snapshot-export.html", - "/en/security/*/prebuilt-rule-0-14-3-aws-rds-snapshot-restored.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-aws-rds-snapshot-restored.html", - "/en/security/*/prebuilt-rule-0-14-3-aws-route-table-created.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-aws-route-table-created.html", - "/en/security/*/prebuilt-rule-0-14-3-aws-route53-private-hosted-zone-associated-with-a-vpc.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-aws-route53-private-hosted-zone-associated-with-a-vpc.html", - "/en/security/*/prebuilt-rule-0-14-3-aws-saml-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-aws-saml-activity.html", - "/en/security/*/prebuilt-rule-0-14-3-aws-security-token-service-sts-assumerole-usage.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-aws-security-token-service-sts-assumerole-usage.html", - "/en/security/*/prebuilt-rule-0-14-3-azure-active-directory-high-risk-user-sign-in-heuristic.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-azure-active-directory-high-risk-user-sign-in-heuristic.html", - "/en/security/*/prebuilt-rule-0-14-3-azure-blob-permissions-modification.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-azure-blob-permissions-modification.html", - "/en/security/*/prebuilt-rule-0-14-3-azure-full-network-packet-capture-detected.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-azure-full-network-packet-capture-detected.html", - "/en/security/*/prebuilt-rule-0-14-3-azure-kubernetes-events-deleted.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-azure-kubernetes-events-deleted.html", - "/en/security/*/prebuilt-rule-0-14-3-azure-kubernetes-pods-deleted.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-azure-kubernetes-pods-deleted.html", - "/en/security/*/prebuilt-rule-0-14-3-azure-kubernetes-rolebindings-created.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-azure-kubernetes-rolebindings-created.html", - "/en/security/*/prebuilt-rule-0-14-3-azure-virtual-network-device-modified-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-azure-virtual-network-device-modified-or-deleted.html", - "/en/security/*/prebuilt-rule-0-14-3-clearing-windows-console-history.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-clearing-windows-console-history.html", - "/en/security/*/prebuilt-rule-0-14-3-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-0-14-3-component-object-model-hijacking.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-component-object-model-hijacking.html", - "/en/security/*/prebuilt-rule-0-14-3-control-panel-process-with-unusual-arguments.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-control-panel-process-with-unusual-arguments.html", - "/en/security/*/prebuilt-rule-0-14-3-disabling-windows-defender-security-settings-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-disabling-windows-defender-security-settings-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-3-dns-over-https-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-dns-over-https-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-0-14-3-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-0-14-3-exporting-exchange-mailbox-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-exporting-exchange-mailbox-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-3-gcp-kubernetes-rolebindings-created-or-patched.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-gcp-kubernetes-rolebindings-created-or-patched.html", - "/en/security/*/prebuilt-rule-0-14-3-gcp-virtual-private-cloud-route-creation.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-gcp-virtual-private-cloud-route-creation.html", - "/en/security/*/prebuilt-rule-0-14-3-hosts-file-modified.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-hosts-file-modified.html", - "/en/security/*/prebuilt-rule-0-14-3-incoming-dcom-lateral-movement-via-mshta.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-incoming-dcom-lateral-movement-via-mshta.html", - "/en/security/*/prebuilt-rule-0-14-3-incoming-dcom-lateral-movement-with-mmc.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-incoming-dcom-lateral-movement-with-mmc.html", - "/en/security/*/prebuilt-rule-0-14-3-incoming-dcom-lateral-movement-with-shellbrowserwindow-or-shellwindows.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-incoming-dcom-lateral-movement-with-shellbrowserwindow-or-shellwindows.html", - "/en/security/*/prebuilt-rule-0-14-3-incoming-execution-via-powershell-remoting.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-incoming-execution-via-powershell-remoting.html", - "/en/security/*/prebuilt-rule-0-14-3-incoming-execution-via-winrm-remote-shell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-incoming-execution-via-winrm-remote-shell.html", - "/en/security/*/prebuilt-rule-0-14-3-installutil-process-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-installutil-process-making-network-connections.html", - "/en/security/*/prebuilt-rule-0-14-3-kerberos-traffic-from-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-kerberos-traffic-from-unusual-process.html", - "/en/security/*/prebuilt-rule-0-14-3-lateral-tool-transfer.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-lateral-tool-transfer.html", - "/en/security/*/prebuilt-rule-0-14-3-local-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-local-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-0-14-3-microsoft-365-potential-ransomware-activity.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-microsoft-365-potential-ransomware-activity.html", - "/en/security/*/prebuilt-rule-0-14-3-microsoft-build-engine-started-by-a-script-process.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-microsoft-build-engine-started-by-a-script-process.html", - "/en/security/*/prebuilt-rule-0-14-3-microsoft-exchange-worker-spawning-suspicious-processes.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-microsoft-exchange-worker-spawning-suspicious-processes.html", - "/en/security/*/prebuilt-rule-0-14-3-network-connection-via-mshta.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-network-connection-via-mshta.html", - "/en/security/*/prebuilt-rule-0-14-3-network-connection-via-signed-binary.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-network-connection-via-signed-binary.html", - "/en/security/*/prebuilt-rule-0-14-3-new-activesyncalloweddeviceid-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-new-activesyncalloweddeviceid-added-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-3-outbound-scheduled-task-activity-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-outbound-scheduled-task-activity-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-3-potential-credential-access-via-duplicatehandle-in-lsass.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-potential-credential-access-via-duplicatehandle-in-lsass.html", - "/en/security/*/prebuilt-rule-0-14-3-potential-credential-access-via-lsass-memory-dump.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-potential-credential-access-via-lsass-memory-dump.html", - "/en/security/*/prebuilt-rule-0-14-3-potential-credential-access-via-renamed-com-services-dll.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-potential-credential-access-via-renamed-com-services-dll.html", - "/en/security/*/prebuilt-rule-0-14-3-potential-lsass-clone-creation-via-psscapturesnapshot.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-potential-lsass-clone-creation-via-psscapturesnapshot.html", - "/en/security/*/prebuilt-rule-0-14-3-potential-lsass-memory-dump-via-psscapturesnapshot.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-potential-lsass-memory-dump-via-psscapturesnapshot.html", - "/en/security/*/prebuilt-rule-0-14-3-potential-process-injection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-potential-process-injection-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-3-potential-sharprdp-behavior.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-potential-sharprdp-behavior.html", - "/en/security/*/prebuilt-rule-0-14-3-potential-windows-error-manager-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-potential-windows-error-manager-masquerading.html", - "/en/security/*/prebuilt-rule-0-14-3-powershell-keylogging-script.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-powershell-keylogging-script.html", - "/en/security/*/prebuilt-rule-0-14-3-powershell-minidump-script.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-powershell-minidump-script.html", - "/en/security/*/prebuilt-rule-0-14-3-powershell-suspicious-discovery-related-windows-api-functions.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-powershell-suspicious-discovery-related-windows-api-functions.html", - "/en/security/*/prebuilt-rule-0-14-3-powershell-suspicious-script-with-audio-capture-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-powershell-suspicious-script-with-audio-capture-capabilities.html", - "/en/security/*/prebuilt-rule-0-14-3-prebuilt-rules-0-14-3-appendix.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-prebuilt-rules-0-14-3-appendix.html", - "/en/security/*/prebuilt-rule-0-14-3-privilege-escalation-via-rogue-named-pipe-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-privilege-escalation-via-rogue-named-pipe-impersonation.html", - "/en/security/*/prebuilt-rule-0-14-3-process-activity-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-process-activity-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-0-14-3-ransomware-detected-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-ransomware-detected-elastic-endgame.html", - "/en/security/*/prebuilt-rule-0-14-3-ransomware-prevented-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-ransomware-prevented-elastic-endgame.html", - "/en/security/*/prebuilt-rule-0-14-3-remote-file-download-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-remote-file-download-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-3-remote-file-download-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-remote-file-download-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-0-14-3-remote-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-remote-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-0-14-3-remotely-started-services-via-rpc.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-remotely-started-services-via-rpc.html", - "/en/security/*/prebuilt-rule-0-14-3-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html", - "/en/security/*/prebuilt-rule-0-14-3-scheduled-task-created-by-a-windows-script.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-scheduled-task-created-by-a-windows-script.html", - "/en/security/*/prebuilt-rule-0-14-3-suspicious-certutil-commands.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-suspicious-certutil-commands.html", - "/en/security/*/prebuilt-rule-0-14-3-suspicious-java-child-process.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-suspicious-java-child-process.html", - "/en/security/*/prebuilt-rule-0-14-3-suspicious-net-reflection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-suspicious-net-reflection-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-3-suspicious-portable-executable-encoded-in-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-suspicious-portable-executable-encoded-in-powershell-script.html", - "/en/security/*/prebuilt-rule-0-14-3-suspicious-process-access-via-direct-system-call.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-suspicious-process-access-via-direct-system-call.html", - "/en/security/*/prebuilt-rule-0-14-3-suspicious-process-creation-calltrace.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-suspicious-process-creation-calltrace.html", - "/en/security/*/prebuilt-rule-0-14-3-suspicious-zoom-child-process.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-suspicious-zoom-child-process.html", - "/en/security/*/prebuilt-rule-0-14-3-system-shells-via-services.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-system-shells-via-services.html", - "/en/security/*/prebuilt-rule-0-14-3-third-party-backup-files-deleted-via-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-third-party-backup-files-deleted-via-unexpected-process.html", - "/en/security/*/prebuilt-rule-0-14-3-threat-intel-filebeat-module-v7-x-indicator-match.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-threat-intel-filebeat-module-v7-x-indicator-match.html", - "/en/security/*/prebuilt-rule-0-14-3-volume-shadow-copy-deletion-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-volume-shadow-copy-deletion-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-3-webshell-detection-script-process-child-of-common-web-processes.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-webshell-detection-script-process-child-of-common-web-processes.html", - "/en/security/*/prebuilt-rule-0-14-3-whitespace-padding-in-process-command-line.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-whitespace-padding-in-process-command-line.html", - "/en/security/*/prebuilt-rule-0-14-3-windows-defender-exclusions-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-windows-defender-exclusions-added-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-3-windows-firewall-disabled-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-windows-firewall-disabled-via-powershell.html", - "/en/security/*/prebuilt-rule-0-14-3-wmi-incoming-lateral-movement.html": "/guide/en/security/8.17/prebuilt-rule-0-14-3-wmi-incoming-lateral-movement.html", - "/en/security/*/prebuilt-rule-1-0-2-abnormally-large-dns-response.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-abnormally-large-dns-response.html", - "/en/security/*/prebuilt-rule-1-0-2-access-of-stored-browser-credentials.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-access-of-stored-browser-credentials.html", - "/en/security/*/prebuilt-rule-1-0-2-access-to-keychain-credentials-directories.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-access-to-keychain-credentials-directories.html", - "/en/security/*/prebuilt-rule-1-0-2-account-configured-with-never-expiring-password.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-account-configured-with-never-expiring-password.html", - "/en/security/*/prebuilt-rule-1-0-2-account-discovery-command-via-system-account.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-account-discovery-command-via-system-account.html", - "/en/security/*/prebuilt-rule-1-0-2-account-password-reset-remotely.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-account-password-reset-remotely.html", - "/en/security/*/prebuilt-rule-1-0-2-adding-hidden-file-attribute-via-attrib.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-adding-hidden-file-attribute-via-attrib.html", - "/en/security/*/prebuilt-rule-1-0-2-adfind-command-activity.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-adfind-command-activity.html", - "/en/security/*/prebuilt-rule-1-0-2-adminsdholder-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-adminsdholder-backdoor.html", - "/en/security/*/prebuilt-rule-1-0-2-adminsdholder-sdprop-exclusion-added.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-adminsdholder-sdprop-exclusion-added.html", - "/en/security/*/prebuilt-rule-1-0-2-adobe-hijack-persistence.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-adobe-hijack-persistence.html", - "/en/security/*/prebuilt-rule-1-0-2-agent-spoofing-mismatched-agent-id.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-agent-spoofing-mismatched-agent-id.html", - "/en/security/*/prebuilt-rule-1-0-2-agent-spoofing-multiple-hosts-using-same-agent.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-agent-spoofing-multiple-hosts-using-same-agent.html", - "/en/security/*/prebuilt-rule-1-0-2-apple-scripting-execution-with-administrator-privileges.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-apple-scripting-execution-with-administrator-privileges.html", - "/en/security/*/prebuilt-rule-1-0-2-attempt-to-mount-smb-share-via-command-line.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-attempt-to-mount-smb-share-via-command-line.html", - "/en/security/*/prebuilt-rule-1-0-2-attempt-to-remove-file-quarantine-attribute.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-attempt-to-remove-file-quarantine-attribute.html", - "/en/security/*/prebuilt-rule-1-0-2-attempts-to-brute-force-a-microsoft-365-user-account.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-attempts-to-brute-force-a-microsoft-365-user-account.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-cloudtrail-log-created.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-cloudtrail-log-created.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-cloudtrail-log-deleted.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-cloudtrail-log-deleted.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-cloudwatch-alarm-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-cloudwatch-alarm-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-cloudwatch-log-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-cloudwatch-log-group-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-cloudwatch-log-stream-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-cloudwatch-log-stream-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-deletion-of-rds-instance-or-cluster.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-deletion-of-rds-instance-or-cluster.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-ec2-flow-log-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-ec2-flow-log-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-ec2-network-access-control-list-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-ec2-network-access-control-list-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-ec2-network-access-control-list-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-ec2-network-access-control-list-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-efs-file-system-or-mount-deleted.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-efs-file-system-or-mount-deleted.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-elasticache-security-group-created.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-elasticache-security-group-created.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-elasticache-security-group-modified-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-elasticache-security-group-modified-or-deleted.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-eventbridge-rule-disabled-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-eventbridge-rule-disabled-or-deleted.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-guardduty-detector-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-guardduty-detector-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-iam-group-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-iam-group-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-iam-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-iam-group-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-rds-cluster-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-rds-cluster-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-rds-instance-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-rds-instance-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-rds-security-group-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-rds-security-group-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-rds-security-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-rds-security-group-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-rds-snapshot-restored.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-rds-snapshot-restored.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-route-table-created.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-route-table-created.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-route-table-modified-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-route-table-modified-or-deleted.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-s3-bucket-configuration-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-s3-bucket-configuration-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-saml-activity.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-saml-activity.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-security-group-configuration-change-detection.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-security-group-configuration-change-detection.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-security-token-service-sts-assumerole-usage.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-security-token-service-sts-assumerole-usage.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-waf-access-control-list-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-waf-access-control-list-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-aws-waf-rule-or-rule-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-aws-waf-rule-or-rule-group-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-azure-ad-global-administrator-role-assigned.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-azure-ad-global-administrator-role-assigned.html", - "/en/security/*/prebuilt-rule-1-0-2-azure-alert-suppression-rule-created-or-modified.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-azure-alert-suppression-rule-created-or-modified.html", - "/en/security/*/prebuilt-rule-1-0-2-azure-conditional-access-policy-modified.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-azure-conditional-access-policy-modified.html", - "/en/security/*/prebuilt-rule-1-0-2-azure-event-hub-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-azure-event-hub-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-azure-firewall-policy-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-azure-firewall-policy-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-azure-frontdoor-web-application-firewall-waf-policy-deleted.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-azure-frontdoor-web-application-firewall-waf-policy-deleted.html", - "/en/security/*/prebuilt-rule-1-0-2-azure-kubernetes-events-deleted.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-azure-kubernetes-events-deleted.html", - "/en/security/*/prebuilt-rule-1-0-2-azure-kubernetes-pods-deleted.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-azure-kubernetes-pods-deleted.html", - "/en/security/*/prebuilt-rule-1-0-2-azure-network-watcher-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-azure-network-watcher-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-azure-service-principal-credentials-added.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-azure-service-principal-credentials-added.html", - "/en/security/*/prebuilt-rule-1-0-2-azure-virtual-network-device-modified-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-azure-virtual-network-device-modified-or-deleted.html", - "/en/security/*/prebuilt-rule-1-0-2-bypass-uac-via-event-viewer.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-bypass-uac-via-event-viewer.html", - "/en/security/*/prebuilt-rule-1-0-2-clearing-windows-console-history.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-clearing-windows-console-history.html", - "/en/security/*/prebuilt-rule-1-0-2-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-1-0-2-command-execution-via-solarwinds-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-command-execution-via-solarwinds-process.html", - "/en/security/*/prebuilt-rule-1-0-2-command-shell-activity-started-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-command-shell-activity-started-via-rundll32.html", - "/en/security/*/prebuilt-rule-1-0-2-component-object-model-hijacking.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-component-object-model-hijacking.html", - "/en/security/*/prebuilt-rule-1-0-2-conhost-spawned-by-suspicious-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-conhost-spawned-by-suspicious-parent-process.html", - "/en/security/*/prebuilt-rule-1-0-2-connection-to-commonly-abused-free-ssl-certificate-providers.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-connection-to-commonly-abused-free-ssl-certificate-providers.html", - "/en/security/*/prebuilt-rule-1-0-2-connection-to-commonly-abused-web-services.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-connection-to-commonly-abused-web-services.html", - "/en/security/*/prebuilt-rule-1-0-2-control-panel-process-with-unusual-arguments.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-control-panel-process-with-unusual-arguments.html", - "/en/security/*/prebuilt-rule-1-0-2-creation-of-a-hidden-local-user-account.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-creation-of-a-hidden-local-user-account.html", - "/en/security/*/prebuilt-rule-1-0-2-creation-of-hidden-files-and-directories.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-creation-of-hidden-files-and-directories.html", - "/en/security/*/prebuilt-rule-1-0-2-creation-of-hidden-launch-agent-or-daemon.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-creation-of-hidden-launch-agent-or-daemon.html", - "/en/security/*/prebuilt-rule-1-0-2-creation-of-hidden-login-item-via-apple-script.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-creation-of-hidden-login-item-via-apple-script.html", - "/en/security/*/prebuilt-rule-1-0-2-creation-or-modification-of-a-new-gpo-scheduled-task-or-service.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-creation-or-modification-of-a-new-gpo-scheduled-task-or-service.html", - "/en/security/*/prebuilt-rule-1-0-2-creation-or-modification-of-domain-backup-dpapi-private-key.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-creation-or-modification-of-domain-backup-dpapi-private-key.html", - "/en/security/*/prebuilt-rule-1-0-2-creation-or-modification-of-root-certificate.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-creation-or-modification-of-root-certificate.html", - "/en/security/*/prebuilt-rule-1-0-2-credential-acquisition-via-registry-hive-dumping.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-credential-acquisition-via-registry-hive-dumping.html", - "/en/security/*/prebuilt-rule-1-0-2-delete-volume-usn-journal-with-fsutil.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-delete-volume-usn-journal-with-fsutil.html", - "/en/security/*/prebuilt-rule-1-0-2-deleting-backup-catalogs-with-wbadmin.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-deleting-backup-catalogs-with-wbadmin.html", - "/en/security/*/prebuilt-rule-1-0-2-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-1-0-2-disable-windows-firewall-rules-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-disable-windows-firewall-rules-via-netsh.html", - "/en/security/*/prebuilt-rule-1-0-2-disabling-user-account-control-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-disabling-user-account-control-via-registry-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-disabling-windows-defender-security-settings-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-disabling-windows-defender-security-settings-via-powershell.html", - "/en/security/*/prebuilt-rule-1-0-2-dns-over-https-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-dns-over-https-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-1-0-2-dumping-of-keychain-content-via-security-command.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-dumping-of-keychain-content-via-security-command.html", - "/en/security/*/prebuilt-rule-1-0-2-emond-rules-creation-or-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-emond-rules-creation-or-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-enable-host-network-discovery-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-enable-host-network-discovery-via-netsh.html", - "/en/security/*/prebuilt-rule-1-0-2-encoded-executable-stored-in-the-registry.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-encoded-executable-stored-in-the-registry.html", - "/en/security/*/prebuilt-rule-1-0-2-encrypting-files-with-winrar-or-7z.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-encrypting-files-with-winrar-or-7z.html", - "/en/security/*/prebuilt-rule-1-0-2-enumeration-command-spawned-via-wmiprvse.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-enumeration-command-spawned-via-wmiprvse.html", - "/en/security/*/prebuilt-rule-1-0-2-enumeration-of-administrator-accounts.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-enumeration-of-administrator-accounts.html", - "/en/security/*/prebuilt-rule-1-0-2-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-1-0-2-enumeration-of-users-or-groups-via-built-in-commands.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-enumeration-of-users-or-groups-via-built-in-commands.html", - "/en/security/*/prebuilt-rule-1-0-2-executable-file-creation-with-multiple-extensions.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-executable-file-creation-with-multiple-extensions.html", - "/en/security/*/prebuilt-rule-1-0-2-execution-from-unusual-directory-command-line.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-execution-from-unusual-directory-command-line.html", - "/en/security/*/prebuilt-rule-1-0-2-execution-of-com-object-via-xwizard.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-execution-of-com-object-via-xwizard.html", - "/en/security/*/prebuilt-rule-1-0-2-execution-via-local-sxs-shared-module.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-execution-via-local-sxs-shared-module.html", - "/en/security/*/prebuilt-rule-1-0-2-execution-via-mssql-xp-cmdshell-stored-procedure.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-execution-via-mssql-xp-cmdshell-stored-procedure.html", - "/en/security/*/prebuilt-rule-1-0-2-execution-via-tsclient-mountpoint.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-execution-via-tsclient-mountpoint.html", - "/en/security/*/prebuilt-rule-1-0-2-exporting-exchange-mailbox-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-exporting-exchange-mailbox-via-powershell.html", - "/en/security/*/prebuilt-rule-1-0-2-external-ip-lookup-from-non-browser-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-external-ip-lookup-from-non-browser-process.html", - "/en/security/*/prebuilt-rule-1-0-2-file-and-directory-discovery.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-file-and-directory-discovery.html", - "/en/security/*/prebuilt-rule-1-0-2-gcp-iam-custom-role-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-gcp-iam-custom-role-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-gcp-iam-role-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-gcp-iam-role-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-gcp-iam-service-account-key-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-gcp-iam-service-account-key-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-gcp-kubernetes-rolebindings-created-or-patched.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-gcp-kubernetes-rolebindings-created-or-patched.html", - "/en/security/*/prebuilt-rule-1-0-2-gcp-logging-bucket-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-gcp-logging-bucket-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-gcp-logging-sink-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-gcp-logging-sink-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-gcp-pub-sub-subscription-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-gcp-pub-sub-subscription-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-gcp-pub-sub-subscription-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-gcp-pub-sub-subscription-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-gcp-pub-sub-topic-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-gcp-pub-sub-topic-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-gcp-pub-sub-topic-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-gcp-pub-sub-topic-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-gcp-storage-bucket-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-gcp-storage-bucket-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-gcp-virtual-private-cloud-route-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-gcp-virtual-private-cloud-route-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-group-policy-abuse-for-privilege-addition.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-group-policy-abuse-for-privilege-addition.html", - "/en/security/*/prebuilt-rule-1-0-2-high-number-of-process-and-or-service-terminations.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-high-number-of-process-and-or-service-terminations.html", - "/en/security/*/prebuilt-rule-1-0-2-hosts-file-modified.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-hosts-file-modified.html", - "/en/security/*/prebuilt-rule-1-0-2-iis-http-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-iis-http-logging-disabled.html", - "/en/security/*/prebuilt-rule-1-0-2-image-file-execution-options-injection.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-image-file-execution-options-injection.html", - "/en/security/*/prebuilt-rule-1-0-2-imageload-via-windows-update-auto-update-client.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-imageload-via-windows-update-auto-update-client.html", - "/en/security/*/prebuilt-rule-1-0-2-incoming-dcom-lateral-movement-via-mshta.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-incoming-dcom-lateral-movement-via-mshta.html", - "/en/security/*/prebuilt-rule-1-0-2-incoming-execution-via-powershell-remoting.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-incoming-execution-via-powershell-remoting.html", - "/en/security/*/prebuilt-rule-1-0-2-installation-of-security-support-provider.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-installation-of-security-support-provider.html", - "/en/security/*/prebuilt-rule-1-0-2-kerberos-pre-authentication-disabled-for-user.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-kerberos-pre-authentication-disabled-for-user.html", - "/en/security/*/prebuilt-rule-1-0-2-kerberos-traffic-from-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-kerberos-traffic-from-unusual-process.html", - "/en/security/*/prebuilt-rule-1-0-2-keychain-password-retrieval-via-command-line.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-keychain-password-retrieval-via-command-line.html", - "/en/security/*/prebuilt-rule-1-0-2-krbtgt-delegation-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-krbtgt-delegation-backdoor.html", - "/en/security/*/prebuilt-rule-1-0-2-lateral-movement-via-startup-folder.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-lateral-movement-via-startup-folder.html", - "/en/security/*/prebuilt-rule-1-0-2-launchdaemon-creation-or-modification-and-immediate-loading.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-launchdaemon-creation-or-modification-and-immediate-loading.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-apt-apt-get-changelog-escape.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-apt-apt-get-changelog-escape.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-awk-commands.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-awk-commands.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-busybox-shell-evasion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-busybox-shell-evasion.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-c89-c99-shell-evasion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-c89-c99-shell-evasion.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-cpulimit-shell-evasion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-cpulimit-shell-evasion.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-crash-shell-evasion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-crash-shell-evasion.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-env-shell-evasion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-env-shell-evasion.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-flock-shell-evasion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-flock-shell-evasion.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-the-expect-command.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-the-expect-command.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-the-find-command.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-the-find-command.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-the-gcc-command.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-the-gcc-command.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-the-mysql-command.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-the-mysql-command.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-the-ssh-command.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-the-ssh-command.html", - "/en/security/*/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-the-vi-command.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-linux-restricted-shell-breakout-via-the-vi-command.html", - "/en/security/*/prebuilt-rule-1-0-2-local-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-local-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-lsass-memory-dump-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-lsass-memory-dump-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-lsass-memory-dump-handle-access.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-lsass-memory-dump-handle-access.html", - "/en/security/*/prebuilt-rule-1-0-2-macos-installer-spawns-network-event.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-macos-installer-spawns-network-event.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-exchange-anti-phish-policy-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-exchange-anti-phish-policy-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-exchange-anti-phish-rule-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-exchange-anti-phish-rule-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-exchange-dkim-signing-configuration-disabled.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-exchange-dkim-signing-configuration-disabled.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-exchange-dlp-policy-removed.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-exchange-dlp-policy-removed.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-exchange-malware-filter-policy-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-exchange-malware-filter-policy-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-exchange-malware-filter-rule-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-exchange-malware-filter-rule-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-exchange-management-group-role-assignment.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-exchange-management-group-role-assignment.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-exchange-safe-attachment-rule-disabled.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-exchange-safe-attachment-rule-disabled.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-exchange-safe-link-policy-disabled.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-exchange-safe-link-policy-disabled.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-exchange-transport-rule-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-exchange-transport-rule-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-exchange-transport-rule-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-exchange-transport-rule-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-global-administrator-role-assigned.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-global-administrator-role-assigned.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-inbox-forwarding-rule-created.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-inbox-forwarding-rule-created.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-potential-ransomware-activity.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-potential-ransomware-activity.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-teams-custom-application-interaction-allowed.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-teams-custom-application-interaction-allowed.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-teams-external-access-enabled.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-teams-external-access-enabled.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-teams-guest-access-enabled.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-teams-guest-access-enabled.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-unusual-volume-of-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-unusual-volume-of-file-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-365-user-restricted-from-sending-email.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-365-user-restricted-from-sending-email.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-build-engine-loading-windows-credential-libraries.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-build-engine-loading-windows-credential-libraries.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-build-engine-started-an-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-build-engine-started-an-unusual-process.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-build-engine-started-by-a-script-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-build-engine-started-by-a-script-process.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-build-engine-started-by-a-system-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-build-engine-started-by-a-system-process.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-build-engine-started-by-an-office-application.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-build-engine-started-by-an-office-application.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-build-engine-using-an-alternate-name.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-build-engine-using-an-alternate-name.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-exchange-server-um-spawning-suspicious-processes.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-exchange-server-um-spawning-suspicious-processes.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-exchange-server-um-writing-suspicious-files.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-exchange-server-um-writing-suspicious-files.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-exchange-worker-spawning-suspicious-processes.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-exchange-worker-spawning-suspicious-processes.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-iis-connection-strings-decryption.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-iis-connection-strings-decryption.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-iis-service-account-password-dumped.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-iis-service-account-password-dumped.html", - "/en/security/*/prebuilt-rule-1-0-2-microsoft-windows-defender-tampering.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-microsoft-windows-defender-tampering.html", - "/en/security/*/prebuilt-rule-1-0-2-mimikatz-memssp-log-file-detected.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-mimikatz-memssp-log-file-detected.html", - "/en/security/*/prebuilt-rule-1-0-2-modification-of-amsienable-registry-key.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-modification-of-amsienable-registry-key.html", - "/en/security/*/prebuilt-rule-1-0-2-modification-of-boot-configuration.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-modification-of-boot-configuration.html", - "/en/security/*/prebuilt-rule-1-0-2-modification-of-wdigest-security-provider.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-modification-of-wdigest-security-provider.html", - "/en/security/*/prebuilt-rule-1-0-2-mounting-hidden-or-webdav-remote-shares.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-mounting-hidden-or-webdav-remote-shares.html", - "/en/security/*/prebuilt-rule-1-0-2-ms-office-macro-security-registry-modifications.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-ms-office-macro-security-registry-modifications.html", - "/en/security/*/prebuilt-rule-1-0-2-network-connection-via-certutil.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-network-connection-via-certutil.html", - "/en/security/*/prebuilt-rule-1-0-2-network-connection-via-registration-utility.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-network-connection-via-registration-utility.html", - "/en/security/*/prebuilt-rule-1-0-2-network-logon-provider-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-network-logon-provider-registry-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-new-activesyncalloweddeviceid-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-new-activesyncalloweddeviceid-added-via-powershell.html", - "/en/security/*/prebuilt-rule-1-0-2-new-or-modified-federation-domain.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-new-or-modified-federation-domain.html", - "/en/security/*/prebuilt-rule-1-0-2-ntds-or-sam-database-file-copied.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-ntds-or-sam-database-file-copied.html", - "/en/security/*/prebuilt-rule-1-0-2-nullsessionpipe-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-nullsessionpipe-registry-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-o365-email-reported-by-user-as-malware-or-phish.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-o365-email-reported-by-user-as-malware-or-phish.html", - "/en/security/*/prebuilt-rule-1-0-2-o365-excessive-single-sign-on-logon-errors.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-o365-excessive-single-sign-on-logon-errors.html", - "/en/security/*/prebuilt-rule-1-0-2-o365-exchange-suspicious-mailbox-right-delegation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-o365-exchange-suspicious-mailbox-right-delegation.html", - "/en/security/*/prebuilt-rule-1-0-2-o365-mailbox-audit-logging-bypass.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-o365-mailbox-audit-logging-bypass.html", - "/en/security/*/prebuilt-rule-1-0-2-okta-user-session-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-okta-user-session-impersonation.html", - "/en/security/*/prebuilt-rule-1-0-2-onedrive-malware-file-upload.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-onedrive-malware-file-upload.html", - "/en/security/*/prebuilt-rule-1-0-2-peripheral-device-discovery.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-peripheral-device-discovery.html", - "/en/security/*/prebuilt-rule-1-0-2-persistence-via-bits-job-notify-cmdline.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistence-via-bits-job-notify-cmdline.html", - "/en/security/*/prebuilt-rule-1-0-2-persistence-via-folder-action-script.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistence-via-folder-action-script.html", - "/en/security/*/prebuilt-rule-1-0-2-persistence-via-hidden-run-key-detected.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistence-via-hidden-run-key-detected.html", - "/en/security/*/prebuilt-rule-1-0-2-persistence-via-kde-autostart-script-or-desktop-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistence-via-kde-autostart-script-or-desktop-file-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-persistence-via-login-or-logout-hook.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistence-via-login-or-logout-hook.html", - "/en/security/*/prebuilt-rule-1-0-2-persistence-via-microsoft-office-addins.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistence-via-microsoft-office-addins.html", - "/en/security/*/prebuilt-rule-1-0-2-persistence-via-microsoft-outlook-vba.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistence-via-microsoft-outlook-vba.html", - "/en/security/*/prebuilt-rule-1-0-2-persistence-via-scheduled-job-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistence-via-scheduled-job-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-persistence-via-telemetrycontroller-scheduled-task-hijack.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistence-via-telemetrycontroller-scheduled-task-hijack.html", - "/en/security/*/prebuilt-rule-1-0-2-persistence-via-update-orchestrator-service-hijack.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistence-via-update-orchestrator-service-hijack.html", - "/en/security/*/prebuilt-rule-1-0-2-persistence-via-wmi-event-subscription.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistence-via-wmi-event-subscription.html", - "/en/security/*/prebuilt-rule-1-0-2-persistence-via-wmi-standard-registry-provider.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistence-via-wmi-standard-registry-provider.html", - "/en/security/*/prebuilt-rule-1-0-2-persistent-scripts-in-the-startup-directory.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-persistent-scripts-in-the-startup-directory.html", - "/en/security/*/prebuilt-rule-1-0-2-port-forwarding-rule-addition.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-port-forwarding-rule-addition.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-abuse-of-repeated-mfa-push-notifications.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-abuse-of-repeated-mfa-push-notifications.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-application-shimming-via-sdbinst.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-application-shimming-via-sdbinst.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-command-and-control-via-internet-explorer.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-command-and-control-via-internet-explorer.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-cookies-theft-via-browser-debugging.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-cookies-theft-via-browser-debugging.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-credential-access-via-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-credential-access-via-dcsync.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-credential-access-via-duplicatehandle-in-lsass.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-credential-access-via-duplicatehandle-in-lsass.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-credential-access-via-lsass-memory-dump.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-credential-access-via-lsass-memory-dump.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-credential-access-via-renamed-com-services-dll.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-credential-access-via-renamed-com-services-dll.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-credential-access-via-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-credential-access-via-windows-utilities.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-dll-sideloading-via-trusted-microsoft-programs.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-dll-sideloading-via-trusted-microsoft-programs.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-dns-tunneling-via-nslookup.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-dns-tunneling-via-nslookup.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-evasion-via-filter-manager.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-evasion-via-filter-manager.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-java-jndi-exploitation-attempt.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-java-jndi-exploitation-attempt.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-lsa-authentication-package-abuse.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-lsa-authentication-package-abuse.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-lsass-clone-creation-via-psscapturesnapshot.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-lsass-clone-creation-via-psscapturesnapshot.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-lsass-memory-dump-via-psscapturesnapshot.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-lsass-memory-dump-via-psscapturesnapshot.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-modification-of-accessibility-binaries.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-modification-of-accessibility-binaries.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-openssh-backdoor-logging-activity.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-openssh-backdoor-logging-activity.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-password-spraying-of-microsoft-365-user-accounts.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-password-spraying-of-microsoft-365-user-accounts.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-persistence-via-time-provider-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-persistence-via-time-provider-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-port-monitor-or-print-processor-registration-abuse.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-port-monitor-or-print-processor-registration-abuse.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-printnightmare-exploit-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-printnightmare-exploit-registry-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-printnightmare-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-printnightmare-file-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-privacy-control-bypass-via-localhost-secure-copy.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-privacy-control-bypass-via-localhost-secure-copy.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-privacy-control-bypass-via-tccdb-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-privacy-control-bypass-via-tccdb-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-privilege-escalation-via-installerfiletakeover.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-privilege-escalation-via-installerfiletakeover.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-privilege-escalation-via-pkexec.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-privilege-escalation-via-pkexec.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-privileged-escalation-via-samaccountname-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-privileged-escalation-via-samaccountname-spoofing.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-process-injection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-process-injection-via-powershell.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-protocol-tunneling-via-earthworm.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-protocol-tunneling-via-earthworm.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-remote-credential-access-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-remote-credential-access-via-registry.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-remote-desktop-shadowing-activity.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-remote-desktop-shadowing-activity.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-remote-desktop-tunneling-detected.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-remote-desktop-tunneling-detected.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-reverse-shell-activity-via-terminal.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-reverse-shell-activity-via-terminal.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-secure-file-deletion-via-sdelete-utility.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-secure-file-deletion-via-sdelete-utility.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-shadow-credentials-added-to-ad-object.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-shadow-credentials-added-to-ad-object.html", - "/en/security/*/prebuilt-rule-1-0-2-potential-sharprdp-behavior.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-potential-sharprdp-behavior.html", - "/en/security/*/prebuilt-rule-1-0-2-powershell-kerberos-ticket-request.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-powershell-kerberos-ticket-request.html", - "/en/security/*/prebuilt-rule-1-0-2-powershell-keylogging-script.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-powershell-keylogging-script.html", - "/en/security/*/prebuilt-rule-1-0-2-powershell-minidump-script.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-powershell-minidump-script.html", - "/en/security/*/prebuilt-rule-1-0-2-powershell-psreflect-script.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-powershell-psreflect-script.html", - "/en/security/*/prebuilt-rule-1-0-2-powershell-script-block-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-powershell-script-block-logging-disabled.html", - "/en/security/*/prebuilt-rule-1-0-2-powershell-suspicious-discovery-related-windows-api-functions.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-powershell-suspicious-discovery-related-windows-api-functions.html", - "/en/security/*/prebuilt-rule-1-0-2-powershell-suspicious-payload-encoded-and-compressed.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-powershell-suspicious-payload-encoded-and-compressed.html", - "/en/security/*/prebuilt-rule-1-0-2-powershell-suspicious-script-with-audio-capture-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-powershell-suspicious-script-with-audio-capture-capabilities.html", - "/en/security/*/prebuilt-rule-1-0-2-powershell-suspicious-script-with-screenshot-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-powershell-suspicious-script-with-screenshot-capabilities.html", - "/en/security/*/prebuilt-rule-1-0-2-prebuilt-rules-1-0-2-appendix.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-prebuilt-rules-1-0-2-appendix.html", - "/en/security/*/prebuilt-rule-1-0-2-privilege-escalation-via-named-pipe-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-privilege-escalation-via-named-pipe-impersonation.html", - "/en/security/*/prebuilt-rule-1-0-2-privilege-escalation-via-rogue-named-pipe-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-privilege-escalation-via-rogue-named-pipe-impersonation.html", - "/en/security/*/prebuilt-rule-1-0-2-privilege-escalation-via-windir-environment-variable.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-privilege-escalation-via-windir-environment-variable.html", - "/en/security/*/prebuilt-rule-1-0-2-process-activity-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-process-activity-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-1-0-2-process-execution-from-an-unusual-directory.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-process-execution-from-an-unusual-directory.html", - "/en/security/*/prebuilt-rule-1-0-2-program-files-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-program-files-directory-masquerading.html", - "/en/security/*/prebuilt-rule-1-0-2-prompt-for-credentials-with-osascript.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-prompt-for-credentials-with-osascript.html", - "/en/security/*/prebuilt-rule-1-0-2-rdp-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-rdp-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-1-0-2-registry-persistence-via-appcert-dll.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-registry-persistence-via-appcert-dll.html", - "/en/security/*/prebuilt-rule-1-0-2-registry-persistence-via-appinit-dll.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-registry-persistence-via-appinit-dll.html", - "/en/security/*/prebuilt-rule-1-0-2-remote-desktop-enabled-in-windows-firewall-by-netsh.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-remote-desktop-enabled-in-windows-firewall-by-netsh.html", - "/en/security/*/prebuilt-rule-1-0-2-remote-file-copy-to-a-hidden-share.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-remote-file-copy-to-a-hidden-share.html", - "/en/security/*/prebuilt-rule-1-0-2-remote-file-copy-via-teamviewer.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-remote-file-copy-via-teamviewer.html", - "/en/security/*/prebuilt-rule-1-0-2-remote-file-download-via-desktopimgdownldr-utility.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-remote-file-download-via-desktopimgdownldr-utility.html", - "/en/security/*/prebuilt-rule-1-0-2-remote-file-download-via-mpcmdrun.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-remote-file-download-via-mpcmdrun.html", - "/en/security/*/prebuilt-rule-1-0-2-remote-file-download-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-remote-file-download-via-powershell.html", - "/en/security/*/prebuilt-rule-1-0-2-remote-file-download-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-remote-file-download-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-1-0-2-remote-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-remote-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-remote-system-discovery-commands.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-remote-system-discovery-commands.html", - "/en/security/*/prebuilt-rule-1-0-2-renamed-autoit-scripts-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-renamed-autoit-scripts-interpreter.html", - "/en/security/*/prebuilt-rule-1-0-2-scheduled-task-execution-at-scale-via-gpo.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-scheduled-task-execution-at-scale-via-gpo.html", - "/en/security/*/prebuilt-rule-1-0-2-scheduled-tasks-at-command-enabled.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-scheduled-tasks-at-command-enabled.html", - "/en/security/*/prebuilt-rule-1-0-2-screensaver-plist-file-modified-by-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-screensaver-plist-file-modified-by-unexpected-process.html", - "/en/security/*/prebuilt-rule-1-0-2-searching-for-saved-credentials-via-vaultcmd.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-searching-for-saved-credentials-via-vaultcmd.html", - "/en/security/*/prebuilt-rule-1-0-2-security-software-discovery-using-wmic.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-security-software-discovery-using-wmic.html", - "/en/security/*/prebuilt-rule-1-0-2-security-software-discovery-via-grep.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-security-software-discovery-via-grep.html", - "/en/security/*/prebuilt-rule-1-0-2-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-1-0-2-service-control-spawned-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-service-control-spawned-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-1-0-2-sharepoint-malware-file-upload.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-sharepoint-malware-file-upload.html", - "/en/security/*/prebuilt-rule-1-0-2-signed-proxy-execution-via-ms-workfolders.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-signed-proxy-execution-via-ms-workfolders.html", - "/en/security/*/prebuilt-rule-1-0-2-sip-provider-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-sip-provider-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-solarwinds-process-disabling-services-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-solarwinds-process-disabling-services-via-registry.html", - "/en/security/*/prebuilt-rule-1-0-2-spike-in-aws-error-messages.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-spike-in-aws-error-messages.html", - "/en/security/*/prebuilt-rule-1-0-2-startup-folder-persistence-via-unsigned-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-startup-folder-persistence-via-unsigned-process.html", - "/en/security/*/prebuilt-rule-1-0-2-startup-logon-script-added-to-group-policy-object.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-startup-logon-script-added-to-group-policy-object.html", - "/en/security/*/prebuilt-rule-1-0-2-startup-or-run-key-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-startup-or-run-key-registry-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-startup-persistence-by-a-suspicious-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-startup-persistence-by-a-suspicious-process.html", - "/en/security/*/prebuilt-rule-1-0-2-sublime-plugin-or-application-script-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-sublime-plugin-or-application-script-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-sunburst-command-and-control-activity.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-sunburst-command-and-control-activity.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-certutil-commands.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-certutil-commands.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-cmd-execution-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-cmd-execution-via-wmi.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-endpoint-security-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-endpoint-security-parent-process.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-execution-from-a-mounted-device.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-execution-from-a-mounted-device.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-execution-short-program-name.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-execution-short-program-name.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-execution-via-scheduled-task.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-execution-via-scheduled-task.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-explorer-child-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-explorer-child-process.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-image-load-taskschd-dll-from-ms-office.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-image-load-taskschd-dll-from-ms-office.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-imagepath-service-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-imagepath-service-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-java-child-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-java-child-process.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-managed-code-hosting-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-managed-code-hosting-process.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-ms-outlook-child-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-ms-outlook-child-process.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-net-code-compilation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-net-code-compilation.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-net-reflection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-net-reflection-via-powershell.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-pdf-reader-child-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-pdf-reader-child-process.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-portable-executable-encoded-in-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-portable-executable-encoded-in-powershell-script.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-powershell-engine-imageload.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-powershell-engine-imageload.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-print-spooler-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-print-spooler-file-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-print-spooler-point-and-print-dll.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-print-spooler-point-and-print-dll.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-printspooler-service-executable-file-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-printspooler-service-executable-file-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-printspooler-spl-file-created.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-printspooler-spl-file-created.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-process-access-via-direct-system-call.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-process-access-via-direct-system-call.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-process-creation-calltrace.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-process-creation-calltrace.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-process-execution-via-renamed-psexec-executable.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-process-execution-via-renamed-psexec-executable.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-process-from-conhost.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-process-from-conhost.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-rdp-activex-client-loaded.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-rdp-activex-client-loaded.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-remote-registry-access-via-sebackupprivilege.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-remote-registry-access-via-sebackupprivilege.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-solarwinds-child-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-solarwinds-child-process.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-startup-shell-folder-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-startup-shell-folder-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-werfault-child-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-werfault-child-process.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-wmi-image-load-from-ms-office.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-wmi-image-load-from-ms-office.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-wmic-xsl-script-execution.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-wmic-xsl-script-execution.html", - "/en/security/*/prebuilt-rule-1-0-2-suspicious-zoom-child-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-suspicious-zoom-child-process.html", - "/en/security/*/prebuilt-rule-1-0-2-svchost-spawning-cmd.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-svchost-spawning-cmd.html", - "/en/security/*/prebuilt-rule-1-0-2-symbolic-link-to-shadow-copy-created.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-symbolic-link-to-shadow-copy-created.html", - "/en/security/*/prebuilt-rule-1-0-2-system-log-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-system-log-file-deletion.html", - "/en/security/*/prebuilt-rule-1-0-2-system-shells-via-services.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-system-shells-via-services.html", - "/en/security/*/prebuilt-rule-1-0-2-systemkey-access-via-command-line.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-systemkey-access-via-command-line.html", - "/en/security/*/prebuilt-rule-1-0-2-tampering-of-bash-command-line-history.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-tampering-of-bash-command-line-history.html", - "/en/security/*/prebuilt-rule-1-0-2-third-party-backup-files-deleted-via-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-third-party-backup-files-deleted-via-unexpected-process.html", - "/en/security/*/prebuilt-rule-1-0-2-threat-intel-filebeat-module-v8-x-indicator-match.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-threat-intel-filebeat-module-v8-x-indicator-match.html", - "/en/security/*/prebuilt-rule-1-0-2-threat-intel-indicator-match.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-threat-intel-indicator-match.html", - "/en/security/*/prebuilt-rule-1-0-2-timestomping-using-touch-command.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-timestomping-using-touch-command.html", - "/en/security/*/prebuilt-rule-1-0-2-uac-bypass-attempt-via-elevated-com-internet-explorer-add-on-installer.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-uac-bypass-attempt-via-elevated-com-internet-explorer-add-on-installer.html", - "/en/security/*/prebuilt-rule-1-0-2-uac-bypass-attempt-via-privileged-ifileoperation-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-uac-bypass-attempt-via-privileged-ifileoperation-com-interface.html", - "/en/security/*/prebuilt-rule-1-0-2-uac-bypass-attempt-via-windows-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-uac-bypass-attempt-via-windows-directory-masquerading.html", - "/en/security/*/prebuilt-rule-1-0-2-uac-bypass-attempt-with-ieditionupgrademanager-elevated-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-uac-bypass-attempt-with-ieditionupgrademanager-elevated-com-interface.html", - "/en/security/*/prebuilt-rule-1-0-2-uac-bypass-via-diskcleanup-scheduled-task-hijack.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-uac-bypass-via-diskcleanup-scheduled-task-hijack.html", - "/en/security/*/prebuilt-rule-1-0-2-uac-bypass-via-icmluautil-elevated-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-uac-bypass-via-icmluautil-elevated-com-interface.html", - "/en/security/*/prebuilt-rule-1-0-2-uac-bypass-via-windows-firewall-snap-in-hijack.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-uac-bypass-via-windows-firewall-snap-in-hijack.html", - "/en/security/*/prebuilt-rule-1-0-2-unauthorized-access-to-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unauthorized-access-to-an-okta-application.html", - "/en/security/*/prebuilt-rule-1-0-2-uncommon-registry-persistence-change.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-uncommon-registry-persistence-change.html", - "/en/security/*/prebuilt-rule-1-0-2-unexpected-child-process-of-macos-screensaver-engine.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unexpected-child-process-of-macos-screensaver-engine.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-child-process-from-a-system-virtual-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-child-process-from-a-system-virtual-process.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-child-process-of-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-child-process-of-dns-exe.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-country-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-country-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-executable-file-creation-by-a-system-critical-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-executable-file-creation-by-a-system-critical-process.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-file-creation-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-file-creation-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-file-modification-by-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-file-modification-by-dns-exe.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-network-connection-via-dllhost.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-network-connection-via-dllhost.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-parent-child-relationship.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-parent-child-relationship.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-parent-process-for-cmd-exe.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-parent-process-for-cmd-exe.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-persistence-via-services-registry.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-persistence-via-services-registry.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-print-spooler-child-process.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-print-spooler-child-process.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-process-execution-path-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-process-execution-path-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-1-0-2-unusual-service-host-child-process-childless-service.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-unusual-service-host-child-process-childless-service.html", - "/en/security/*/prebuilt-rule-1-0-2-user-account-creation.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-user-account-creation.html", - "/en/security/*/prebuilt-rule-1-0-2-user-account-exposed-to-kerberoasting.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-user-account-exposed-to-kerberoasting.html", - "/en/security/*/prebuilt-rule-1-0-2-user-added-to-privileged-group-in-active-directory.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-user-added-to-privileged-group-in-active-directory.html", - "/en/security/*/prebuilt-rule-1-0-2-virtual-machine-fingerprinting-via-grep.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-virtual-machine-fingerprinting-via-grep.html", - "/en/security/*/prebuilt-rule-1-0-2-virtual-private-network-connection-attempt.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-virtual-private-network-connection-attempt.html", - "/en/security/*/prebuilt-rule-1-0-2-volume-shadow-copy-deleted-or-resized-via-vssadmin.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-volume-shadow-copy-deleted-or-resized-via-vssadmin.html", - "/en/security/*/prebuilt-rule-1-0-2-volume-shadow-copy-deletion-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-volume-shadow-copy-deletion-via-powershell.html", - "/en/security/*/prebuilt-rule-1-0-2-volume-shadow-copy-deletion-via-wmic.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-volume-shadow-copy-deletion-via-wmic.html", - "/en/security/*/prebuilt-rule-1-0-2-webserver-access-logs-deleted.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-webserver-access-logs-deleted.html", - "/en/security/*/prebuilt-rule-1-0-2-webshell-detection-script-process-child-of-common-web-processes.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-webshell-detection-script-process-child-of-common-web-processes.html", - "/en/security/*/prebuilt-rule-1-0-2-whitespace-padding-in-process-command-line.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-whitespace-padding-in-process-command-line.html", - "/en/security/*/prebuilt-rule-1-0-2-whoami-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-whoami-process-activity.html", - "/en/security/*/prebuilt-rule-1-0-2-windows-defender-disabled-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-windows-defender-disabled-via-registry-modification.html", - "/en/security/*/prebuilt-rule-1-0-2-windows-defender-exclusions-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-windows-defender-exclusions-added-via-powershell.html", - "/en/security/*/prebuilt-rule-1-0-2-windows-event-logs-cleared.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-windows-event-logs-cleared.html", - "/en/security/*/prebuilt-rule-1-0-2-windows-firewall-disabled-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-windows-firewall-disabled-via-powershell.html", - "/en/security/*/prebuilt-rule-1-0-2-windows-network-enumeration.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-windows-network-enumeration.html", - "/en/security/*/prebuilt-rule-1-0-2-windows-registry-file-creation-in-smb-share.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-windows-registry-file-creation-in-smb-share.html", - "/en/security/*/prebuilt-rule-1-0-2-windows-script-executing-powershell.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-windows-script-executing-powershell.html", - "/en/security/*/prebuilt-rule-1-0-2-windows-service-installed-via-an-unusual-client.html": "/guide/en/security/8.17/prebuilt-rule-1-0-2-windows-service-installed-via-an-unusual-client.html", - "/en/security/*/prebuilt-rule-8-1-1-abnormal-process-id-or-lock-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-abnormal-process-id-or-lock-file-created.html", - "/en/security/*/prebuilt-rule-8-1-1-account-configured-with-never-expiring-password.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-account-configured-with-never-expiring-password.html", - "/en/security/*/prebuilt-rule-8-1-1-account-discovery-command-via-system-account.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-account-discovery-command-via-system-account.html", - "/en/security/*/prebuilt-rule-8-1-1-adding-hidden-file-attribute-via-attrib.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-adding-hidden-file-attribute-via-attrib.html", - "/en/security/*/prebuilt-rule-8-1-1-adfind-command-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-adfind-command-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-adminsdholder-sdprop-exclusion-added.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-adminsdholder-sdprop-exclusion-added.html", - "/en/security/*/prebuilt-rule-8-1-1-adobe-hijack-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-adobe-hijack-persistence.html", - "/en/security/*/prebuilt-rule-8-1-1-anomalous-linux-compiler-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-anomalous-linux-compiler-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-anomalous-process-for-a-linux-population.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-anomalous-process-for-a-linux-population.html", - "/en/security/*/prebuilt-rule-8-1-1-anomalous-process-for-a-windows-population.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-anomalous-process-for-a-windows-population.html", - "/en/security/*/prebuilt-rule-8-1-1-anomalous-windows-process-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-anomalous-windows-process-creation.html", - "/en/security/*/prebuilt-rule-8-1-1-attempt-to-disable-gatekeeper.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-attempt-to-disable-gatekeeper.html", - "/en/security/*/prebuilt-rule-8-1-1-attempts-to-brute-force-a-microsoft-365-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-attempts-to-brute-force-a-microsoft-365-user-account.html", - "/en/security/*/prebuilt-rule-8-1-1-aws-iam-password-recovery-requested.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-aws-iam-password-recovery-requested.html", - "/en/security/*/prebuilt-rule-8-1-1-aws-redshift-cluster-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-aws-redshift-cluster-creation.html", - "/en/security/*/prebuilt-rule-8-1-1-aws-route-table-created.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-aws-route-table-created.html", - "/en/security/*/prebuilt-rule-8-1-1-aws-route-table-modified-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-aws-route-table-modified-or-deleted.html", - "/en/security/*/prebuilt-rule-8-1-1-binary-executed-from-shared-memory-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-binary-executed-from-shared-memory-directory.html", - "/en/security/*/prebuilt-rule-8-1-1-clearing-windows-console-history.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-clearing-windows-console-history.html", - "/en/security/*/prebuilt-rule-8-1-1-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-8-1-1-command-execution-via-solarwinds-process.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-command-execution-via-solarwinds-process.html", - "/en/security/*/prebuilt-rule-8-1-1-component-object-model-hijacking.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-component-object-model-hijacking.html", - "/en/security/*/prebuilt-rule-8-1-1-conhost-spawned-by-suspicious-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-conhost-spawned-by-suspicious-parent-process.html", - "/en/security/*/prebuilt-rule-8-1-1-connection-to-commonly-abused-web-services.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-connection-to-commonly-abused-web-services.html", - "/en/security/*/prebuilt-rule-8-1-1-creation-of-a-hidden-local-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-creation-of-a-hidden-local-user-account.html", - "/en/security/*/prebuilt-rule-8-1-1-creation-or-modification-of-domain-backup-dpapi-private-key.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-creation-or-modification-of-domain-backup-dpapi-private-key.html", - "/en/security/*/prebuilt-rule-8-1-1-credential-acquisition-via-registry-hive-dumping.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-credential-acquisition-via-registry-hive-dumping.html", - "/en/security/*/prebuilt-rule-8-1-1-deleting-backup-catalogs-with-wbadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-deleting-backup-catalogs-with-wbadmin.html", - "/en/security/*/prebuilt-rule-8-1-1-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-1-1-disable-windows-firewall-rules-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-disable-windows-firewall-rules-via-netsh.html", - "/en/security/*/prebuilt-rule-8-1-1-disabling-windows-defender-security-settings-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-disabling-windows-defender-security-settings-via-powershell.html", - "/en/security/*/prebuilt-rule-8-1-1-elastic-agent-service-terminated.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-elastic-agent-service-terminated.html", - "/en/security/*/prebuilt-rule-8-1-1-emond-rules-creation-or-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-emond-rules-creation-or-modification.html", - "/en/security/*/prebuilt-rule-8-1-1-enable-host-network-discovery-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-enable-host-network-discovery-via-netsh.html", - "/en/security/*/prebuilt-rule-8-1-1-encrypting-files-with-winrar-or-7z.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-encrypting-files-with-winrar-or-7z.html", - "/en/security/*/prebuilt-rule-8-1-1-enumeration-of-administrator-accounts.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-enumeration-of-administrator-accounts.html", - "/en/security/*/prebuilt-rule-8-1-1-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-8-1-1-execution-of-file-written-or-modified-by-microsoft-office.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-execution-of-file-written-or-modified-by-microsoft-office.html", - "/en/security/*/prebuilt-rule-8-1-1-execution-of-file-written-or-modified-by-pdf-reader.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-execution-of-file-written-or-modified-by-pdf-reader.html", - "/en/security/*/prebuilt-rule-8-1-1-exporting-exchange-mailbox-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-exporting-exchange-mailbox-via-powershell.html", - "/en/security/*/prebuilt-rule-8-1-1-external-ip-lookup-from-non-browser-process.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-external-ip-lookup-from-non-browser-process.html", - "/en/security/*/prebuilt-rule-8-1-1-file-and-directory-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-file-and-directory-discovery.html", - "/en/security/*/prebuilt-rule-8-1-1-group-policy-abuse-for-privilege-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-group-policy-abuse-for-privilege-addition.html", - "/en/security/*/prebuilt-rule-8-1-1-high-number-of-process-and-or-service-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-high-number-of-process-and-or-service-terminations.html", - "/en/security/*/prebuilt-rule-8-1-1-hosts-file-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-hosts-file-modified.html", - "/en/security/*/prebuilt-rule-8-1-1-hping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-hping-process-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-imageload-via-windows-update-auto-update-client.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-imageload-via-windows-update-auto-update-client.html", - "/en/security/*/prebuilt-rule-8-1-1-interactive-terminal-spawned-via-python.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-interactive-terminal-spawned-via-python.html", - "/en/security/*/prebuilt-rule-8-1-1-kerberos-pre-authentication-disabled-for-user.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-kerberos-pre-authentication-disabled-for-user.html", - "/en/security/*/prebuilt-rule-8-1-1-kerberos-traffic-from-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-kerberos-traffic-from-unusual-process.html", - "/en/security/*/prebuilt-rule-8-1-1-kubernetes-user-exec-into-pod.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-kubernetes-user-exec-into-pod.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-apt-apt-get-changelog-escape.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-apt-apt-get-changelog-escape.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-awk-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-awk-commands.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-busybox-shell-evasion.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-busybox-shell-evasion.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-c89-c99-shell-evasion.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-c89-c99-shell-evasion.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-cpulimit-shell-evasion.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-cpulimit-shell-evasion.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-crash-shell-evasion.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-crash-shell-evasion.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-env-shell-evasion.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-env-shell-evasion.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-flock-shell-evasion.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-flock-shell-evasion.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-linux-binary-s.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-linux-binary-s.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-the-expect-command.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-the-expect-command.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-the-find-command.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-the-find-command.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-the-gcc-command.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-the-gcc-command.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-the-mysql-command.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-the-mysql-command.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-the-ssh-command.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-the-ssh-command.html", - "/en/security/*/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-the-vi-command.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-linux-restricted-shell-breakout-via-the-vi-command.html", - "/en/security/*/prebuilt-rule-8-1-1-lsass-memory-dump-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-lsass-memory-dump-creation.html", - "/en/security/*/prebuilt-rule-8-1-1-lsass-memory-dump-handle-access.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-lsass-memory-dump-handle-access.html", - "/en/security/*/prebuilt-rule-8-1-1-microsoft-365-inbox-forwarding-rule-created.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-microsoft-365-inbox-forwarding-rule-created.html", - "/en/security/*/prebuilt-rule-8-1-1-microsoft-windows-defender-tampering.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-microsoft-windows-defender-tampering.html", - "/en/security/*/prebuilt-rule-8-1-1-mimikatz-memssp-log-file-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-mimikatz-memssp-log-file-detected.html", - "/en/security/*/prebuilt-rule-8-1-1-modification-of-amsienable-registry-key.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-modification-of-amsienable-registry-key.html", - "/en/security/*/prebuilt-rule-8-1-1-modification-of-boot-configuration.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-modification-of-boot-configuration.html", - "/en/security/*/prebuilt-rule-8-1-1-modification-of-wdigest-security-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-modification-of-wdigest-security-provider.html", - "/en/security/*/prebuilt-rule-8-1-1-ms-office-macro-security-registry-modifications.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-ms-office-macro-security-registry-modifications.html", - "/en/security/*/prebuilt-rule-8-1-1-network-connection-via-certutil.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-network-connection-via-certutil.html", - "/en/security/*/prebuilt-rule-8-1-1-peripheral-device-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-peripheral-device-discovery.html", - "/en/security/*/prebuilt-rule-8-1-1-persistent-scripts-in-the-startup-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-persistent-scripts-in-the-startup-directory.html", - "/en/security/*/prebuilt-rule-8-1-1-port-forwarding-rule-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-port-forwarding-rule-addition.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-credential-access-via-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-credential-access-via-dcsync.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-dns-tunneling-via-nslookup.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-dns-tunneling-via-nslookup.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-invoke-mimikatz-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-invoke-mimikatz-powershell-script.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-lateral-tool-transfer-via-smb-share.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-lateral-tool-transfer-via-smb-share.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-local-ntlm-relay-via-http.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-local-ntlm-relay-via-http.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-modification-of-accessibility-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-modification-of-accessibility-binaries.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-password-spraying-of-microsoft-365-user-accounts.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-password-spraying-of-microsoft-365-user-accounts.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-privacy-control-bypass-via-localhost-secure-copy.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-privacy-control-bypass-via-localhost-secure-copy.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-privilege-escalation-via-installerfiletakeover.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-privilege-escalation-via-installerfiletakeover.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-privilege-escalation-via-local-kerberos-relay-over-ldap.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-privilege-escalation-via-local-kerberos-relay-over-ldap.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-process-injection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-process-injection-via-powershell.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-remote-credential-access-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-remote-credential-access-via-registry.html", - "/en/security/*/prebuilt-rule-8-1-1-potential-remote-desktop-tunneling-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-potential-remote-desktop-tunneling-detected.html", - "/en/security/*/prebuilt-rule-8-1-1-powershell-kerberos-ticket-request.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-powershell-kerberos-ticket-request.html", - "/en/security/*/prebuilt-rule-8-1-1-powershell-keylogging-script.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-powershell-keylogging-script.html", - "/en/security/*/prebuilt-rule-8-1-1-powershell-minidump-script.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-powershell-minidump-script.html", - "/en/security/*/prebuilt-rule-8-1-1-powershell-psreflect-script.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-powershell-psreflect-script.html", - "/en/security/*/prebuilt-rule-8-1-1-powershell-script-block-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-powershell-script-block-logging-disabled.html", - "/en/security/*/prebuilt-rule-8-1-1-powershell-suspicious-discovery-related-windows-api-functions.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-powershell-suspicious-discovery-related-windows-api-functions.html", - "/en/security/*/prebuilt-rule-8-1-1-powershell-suspicious-payload-encoded-and-compressed.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-powershell-suspicious-payload-encoded-and-compressed.html", - "/en/security/*/prebuilt-rule-8-1-1-powershell-suspicious-script-with-audio-capture-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-powershell-suspicious-script-with-audio-capture-capabilities.html", - "/en/security/*/prebuilt-rule-8-1-1-powershell-suspicious-script-with-screenshot-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-powershell-suspicious-script-with-screenshot-capabilities.html", - "/en/security/*/prebuilt-rule-8-1-1-prebuilt-rules-8-1-1-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-prebuilt-rules-8-1-1-appendix.html", - "/en/security/*/prebuilt-rule-8-1-1-process-started-from-process-id-pid-file.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-process-started-from-process-id-pid-file.html", - "/en/security/*/prebuilt-rule-8-1-1-rdp-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-rdp-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-8-1-1-rdp-remote-desktop-protocol-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-rdp-remote-desktop-protocol-from-the-internet.html", - "/en/security/*/prebuilt-rule-8-1-1-remote-computer-account-dnshostname-update.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-remote-computer-account-dnshostname-update.html", - "/en/security/*/prebuilt-rule-8-1-1-remote-desktop-enabled-in-windows-firewall-by-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-remote-desktop-enabled-in-windows-firewall-by-netsh.html", - "/en/security/*/prebuilt-rule-8-1-1-remote-file-copy-via-teamviewer.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-remote-file-copy-via-teamviewer.html", - "/en/security/*/prebuilt-rule-8-1-1-remote-file-download-via-desktopimgdownldr-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-remote-file-download-via-desktopimgdownldr-utility.html", - "/en/security/*/prebuilt-rule-8-1-1-remote-file-download-via-mpcmdrun.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-remote-file-download-via-mpcmdrun.html", - "/en/security/*/prebuilt-rule-8-1-1-remote-file-download-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-remote-file-download-via-powershell.html", - "/en/security/*/prebuilt-rule-8-1-1-remote-file-download-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-remote-file-download-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-8-1-1-remote-system-discovery-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-remote-system-discovery-commands.html", - "/en/security/*/prebuilt-rule-8-1-1-scheduled-task-execution-at-scale-via-gpo.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-scheduled-task-execution-at-scale-via-gpo.html", - "/en/security/*/prebuilt-rule-8-1-1-searching-for-saved-credentials-via-vaultcmd.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-searching-for-saved-credentials-via-vaultcmd.html", - "/en/security/*/prebuilt-rule-8-1-1-security-software-discovery-using-wmic.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-security-software-discovery-using-wmic.html", - "/en/security/*/prebuilt-rule-8-1-1-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-8-1-1-service-creation-via-local-kerberos-authentication.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-service-creation-via-local-kerberos-authentication.html", - "/en/security/*/prebuilt-rule-8-1-1-signed-proxy-execution-via-ms-work-folders.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-signed-proxy-execution-via-ms-work-folders.html", - "/en/security/*/prebuilt-rule-8-1-1-ssh-authorized-keys-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-ssh-authorized-keys-file-modification.html", - "/en/security/*/prebuilt-rule-8-1-1-startup-folder-persistence-via-unsigned-process.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-startup-folder-persistence-via-unsigned-process.html", - "/en/security/*/prebuilt-rule-8-1-1-startup-logon-script-added-to-group-policy-object.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-startup-logon-script-added-to-group-policy-object.html", - "/en/security/*/prebuilt-rule-8-1-1-startup-or-run-key-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-startup-or-run-key-registry-modification.html", - "/en/security/*/prebuilt-rule-8-1-1-startup-persistence-by-a-suspicious-process.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-startup-persistence-by-a-suspicious-process.html", - "/en/security/*/prebuilt-rule-8-1-1-strace-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-strace-process-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-sunburst-command-and-control-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-sunburst-command-and-control-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-certutil-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-certutil-commands.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-crontab-creation-or-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-crontab-creation-or-modification.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-microsoft-diagnostics-wizard-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-microsoft-diagnostics-wizard-execution.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-net-reflection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-net-reflection-via-powershell.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-network-connection-attempt-by-root.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-network-connection-attempt-by-root.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-pdf-reader-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-pdf-reader-child-process.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-portable-executable-encoded-in-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-portable-executable-encoded-in-powershell-script.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-powershell-engine-imageload.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-powershell-engine-imageload.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-powershell-script.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-print-spooler-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-print-spooler-file-deletion.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-process-from-conhost.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-process-from-conhost.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-remote-registry-access-via-sebackupprivilege.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-remote-registry-access-via-sebackupprivilege.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-solarwinds-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-solarwinds-child-process.html", - "/en/security/*/prebuilt-rule-8-1-1-suspicious-startup-shell-folder-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-suspicious-startup-shell-folder-modification.html", - "/en/security/*/prebuilt-rule-8-1-1-svchost-spawning-cmd.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-svchost-spawning-cmd.html", - "/en/security/*/prebuilt-rule-8-1-1-symbolic-link-to-shadow-copy-created.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-symbolic-link-to-shadow-copy-created.html", - "/en/security/*/prebuilt-rule-8-1-1-system-shells-via-services.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-system-shells-via-services.html", - "/en/security/*/prebuilt-rule-8-1-1-tampering-of-bash-command-line-history.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-tampering-of-bash-command-line-history.html", - "/en/security/*/prebuilt-rule-8-1-1-telnet-port-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-telnet-port-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-third-party-backup-files-deleted-via-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-third-party-backup-files-deleted-via-unexpected-process.html", - "/en/security/*/prebuilt-rule-8-1-1-uncommon-registry-persistence-change.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-uncommon-registry-persistence-change.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-linux-network-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-linux-network-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-linux-network-connection-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-linux-network-connection-discovery.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-linux-network-port-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-linux-network-port-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-linux-process-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-linux-process-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-linux-process-discovery-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-linux-process-discovery-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-linux-system-information-discovery-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-linux-system-information-discovery-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-linux-system-network-configuration-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-linux-system-network-configuration-discovery.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-linux-system-owner-or-user-discovery-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-linux-system-owner-or-user-discovery-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-linux-user-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-linux-user-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-linux-username.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-linux-username.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-login-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-login-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-print-spooler-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-print-spooler-child-process.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-process-execution-temp.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-process-execution-temp.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-process-for-a-linux-host.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-process-for-a-linux-host.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-sudo-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-sudo-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-windows-network-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-windows-network-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-windows-path-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-windows-path-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-windows-process-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-windows-process-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-windows-remote-user.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-windows-remote-user.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-windows-service.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-windows-service.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-windows-user-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-windows-user-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-windows-user-privilege-elevation-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-windows-user-privilege-elevation-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-unusual-windows-username.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-unusual-windows-username.html", - "/en/security/*/prebuilt-rule-8-1-1-user-account-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-user-account-creation.html", - "/en/security/*/prebuilt-rule-8-1-1-user-account-exposed-to-kerberoasting.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-user-account-exposed-to-kerberoasting.html", - "/en/security/*/prebuilt-rule-8-1-1-user-added-to-privileged-group-in-active-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-user-added-to-privileged-group-in-active-directory.html", - "/en/security/*/prebuilt-rule-8-1-1-volume-shadow-copy-deleted-or-resized-via-vssadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-volume-shadow-copy-deleted-or-resized-via-vssadmin.html", - "/en/security/*/prebuilt-rule-8-1-1-volume-shadow-copy-deletion-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-volume-shadow-copy-deletion-via-powershell.html", - "/en/security/*/prebuilt-rule-8-1-1-volume-shadow-copy-deletion-via-wmic.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-volume-shadow-copy-deletion-via-wmic.html", - "/en/security/*/prebuilt-rule-8-1-1-whitespace-padding-in-process-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-whitespace-padding-in-process-command-line.html", - "/en/security/*/prebuilt-rule-8-1-1-whoami-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-whoami-process-activity.html", - "/en/security/*/prebuilt-rule-8-1-1-windows-defender-disabled-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-windows-defender-disabled-via-registry-modification.html", - "/en/security/*/prebuilt-rule-8-1-1-windows-defender-exclusions-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-windows-defender-exclusions-added-via-powershell.html", - "/en/security/*/prebuilt-rule-8-1-1-windows-event-logs-cleared.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-windows-event-logs-cleared.html", - "/en/security/*/prebuilt-rule-8-1-1-windows-firewall-disabled-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-windows-firewall-disabled-via-powershell.html", - "/en/security/*/prebuilt-rule-8-1-1-windows-network-enumeration.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-windows-network-enumeration.html", - "/en/security/*/prebuilt-rule-8-1-1-windows-registry-file-creation-in-smb-share.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-windows-registry-file-creation-in-smb-share.html", - "/en/security/*/prebuilt-rule-8-1-1-windows-script-executing-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-1-1-windows-script-executing-powershell.html", - "/en/security/*/prebuilt-rule-8-17-1-aws-bedrock-invocations-without-guardrails-detected-by-a-single-user-over-a-session.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-aws-bedrock-invocations-without-guardrails-detected-by-a-single-user-over-a-session.html", - "/en/security/*/prebuilt-rule-8-17-1-aws-iam-login-profile-added-for-root.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-aws-iam-login-profile-added-for-root.html", - "/en/security/*/prebuilt-rule-8-17-1-aws-iam-user-created-access-keys-for-another-user.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-aws-iam-user-created-access-keys-for-another-user.html", - "/en/security/*/prebuilt-rule-8-17-1-github-protected-branch-settings-changed.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-github-protected-branch-settings-changed.html", - "/en/security/*/prebuilt-rule-8-17-1-github-repository-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-github-repository-deleted.html", - "/en/security/*/prebuilt-rule-8-17-1-high-number-of-cloned-github-repos-from-pat.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-high-number-of-cloned-github-repos-from-pat.html", - "/en/security/*/prebuilt-rule-8-17-1-possible-consent-grant-attack-via-azure-registered-application.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-possible-consent-grant-attack-via-azure-registered-application.html", - "/en/security/*/prebuilt-rule-8-17-1-prebuilt-rules-8-17-1-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-prebuilt-rules-8-17-1-appendix.html", - "/en/security/*/prebuilt-rule-8-17-1-prebuilt-rules-8-17-1-summary.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-prebuilt-rules-8-17-1-summary.html", - "/en/security/*/prebuilt-rule-8-17-1-unusual-high-confidence-content-filter-blocks-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-unusual-high-confidence-content-filter-blocks-detected.html", - "/en/security/*/prebuilt-rule-8-17-1-unusual-high-denied-sensitive-information-policy-blocks-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-unusual-high-denied-sensitive-information-policy-blocks-detected.html", - "/en/security/*/prebuilt-rule-8-17-1-unusual-high-denied-topic-blocks-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-unusual-high-denied-topic-blocks-detected.html", - "/en/security/*/prebuilt-rule-8-17-1-unusual-high-word-policy-blocks-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-17-1-unusual-high-word-policy-blocks-detected.html", - "/en/security/*/prebuilt-rule-8-17-2-azure-entra-mfa-totp-brute-force-attempts.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-azure-entra-mfa-totp-brute-force-attempts.html", - "/en/security/*/prebuilt-rule-8-17-2-behavior-detected-elastic-defend.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-behavior-detected-elastic-defend.html", - "/en/security/*/prebuilt-rule-8-17-2-behavior-prevented-elastic-defend.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-behavior-prevented-elastic-defend.html", - "/en/security/*/prebuilt-rule-8-17-2-creation-or-modification-of-pluggable-authentication-module-or-configuration.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-creation-or-modification-of-pluggable-authentication-module-or-configuration.html", - "/en/security/*/prebuilt-rule-8-17-2-dynamic-linker-ld-so-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-dynamic-linker-ld-so-creation.html", - "/en/security/*/prebuilt-rule-8-17-2-endpoint-security-elastic-defend.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-endpoint-security-elastic-defend.html", - "/en/security/*/prebuilt-rule-8-17-2-kernel-object-file-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-kernel-object-file-creation.html", - "/en/security/*/prebuilt-rule-8-17-2-loadable-kernel-module-configuration-file-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-loadable-kernel-module-configuration-file-creation.html", - "/en/security/*/prebuilt-rule-8-17-2-login-via-unusual-system-user.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-login-via-unusual-system-user.html", - "/en/security/*/prebuilt-rule-8-17-2-malicious-file-detected-elastic-defend.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-malicious-file-detected-elastic-defend.html", - "/en/security/*/prebuilt-rule-8-17-2-malicious-file-prevented-elastic-defend.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-malicious-file-prevented-elastic-defend.html", - "/en/security/*/prebuilt-rule-8-17-2-memory-threat-detected-elastic-defend.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-memory-threat-detected-elastic-defend.html", - "/en/security/*/prebuilt-rule-8-17-2-memory-threat-prevented-elastic-defend.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-memory-threat-prevented-elastic-defend.html", - "/en/security/*/prebuilt-rule-8-17-2-multiple-okta-sessions-detected-for-a-single-user.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-multiple-okta-sessions-detected-for-a-single-user.html", - "/en/security/*/prebuilt-rule-8-17-2-my-first-rule.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-my-first-rule.html", - "/en/security/*/prebuilt-rule-8-17-2-pluggable-authentication-module-pam-creation-in-unusual-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-pluggable-authentication-module-pam-creation-in-unusual-directory.html", - "/en/security/*/prebuilt-rule-8-17-2-pluggable-authentication-module-pam-source-download.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-pluggable-authentication-module-pam-source-download.html", - "/en/security/*/prebuilt-rule-8-17-2-pluggable-authentication-module-pam-version-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-pluggable-authentication-module-pam-version-discovery.html", - "/en/security/*/prebuilt-rule-8-17-2-potential-persistence-via-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-potential-persistence-via-file-modification.html", - "/en/security/*/prebuilt-rule-8-17-2-prebuilt-rules-8-17-2-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-prebuilt-rules-8-17-2-appendix.html", - "/en/security/*/prebuilt-rule-8-17-2-prebuilt-rules-8-17-2-summary.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-prebuilt-rules-8-17-2-summary.html", - "/en/security/*/prebuilt-rule-8-17-2-ransomware-detected-elastic-defend.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-ransomware-detected-elastic-defend.html", - "/en/security/*/prebuilt-rule-8-17-2-ransomware-prevented-elastic-defend.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-ransomware-prevented-elastic-defend.html", - "/en/security/*/prebuilt-rule-8-17-2-rapid-secret-retrieval-attempts-from-aws-secretsmanager.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-rapid-secret-retrieval-attempts-from-aws-secretsmanager.html", - "/en/security/*/prebuilt-rule-8-17-2-remote-execution-via-file-shares.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-remote-execution-via-file-shares.html", - "/en/security/*/prebuilt-rule-8-17-2-simple-http-web-server-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-simple-http-web-server-connection.html", - "/en/security/*/prebuilt-rule-8-17-2-simple-http-web-server-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-simple-http-web-server-creation.html", - "/en/security/*/prebuilt-rule-8-17-2-suspicious-antimalware-scan-interface-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-suspicious-antimalware-scan-interface-dll.html", - "/en/security/*/prebuilt-rule-8-17-2-suspicious-wmi-event-subscription-created.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-suspicious-wmi-event-subscription-created.html", - "/en/security/*/prebuilt-rule-8-17-2-uncommon-registry-persistence-change.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-uncommon-registry-persistence-change.html", - "/en/security/*/prebuilt-rule-8-17-2-unusual-preload-environment-variable-process-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-unusual-preload-environment-variable-process-execution.html", - "/en/security/*/prebuilt-rule-8-17-2-unusual-sshd-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-17-2-unusual-sshd-child-process.html", - "/en/security/*/prebuilt-rule-8-17-3-access-control-list-modification-via-setfacl.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-access-control-list-modification-via-setfacl.html", - "/en/security/*/prebuilt-rule-8-17-3-attempt-to-clear-kernel-ring-buffer.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-attempt-to-clear-kernel-ring-buffer.html", - "/en/security/*/prebuilt-rule-8-17-3-attempt-to-disable-auditd-service.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-attempt-to-disable-auditd-service.html", - "/en/security/*/prebuilt-rule-8-17-3-attempt-to-disable-iptables-or-firewall.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-attempt-to-disable-iptables-or-firewall.html", - "/en/security/*/prebuilt-rule-8-17-3-attempt-to-disable-syslog-service.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-attempt-to-disable-syslog-service.html", - "/en/security/*/prebuilt-rule-8-17-3-aws-ec2-deprecated-ami-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-aws-ec2-deprecated-ami-discovery.html", - "/en/security/*/prebuilt-rule-8-17-3-aws-ec2-ebs-snapshot-shared-or-made-public.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-aws-ec2-ebs-snapshot-shared-or-made-public.html", - "/en/security/*/prebuilt-rule-8-17-3-aws-ec2-instance-connect-ssh-public-key-uploaded.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-aws-ec2-instance-connect-ssh-public-key-uploaded.html", - "/en/security/*/prebuilt-rule-8-17-3-aws-s3-unauthenticated-bucket-access-by-rare-source.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-aws-s3-unauthenticated-bucket-access-by-rare-source.html", - "/en/security/*/prebuilt-rule-8-17-3-aws-sqs-queue-purge.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-aws-sqs-queue-purge.html", - "/en/security/*/prebuilt-rule-8-17-3-azure-blob-permissions-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-azure-blob-permissions-modification.html", - "/en/security/*/prebuilt-rule-8-17-3-base16-or-base32-encoding-decoding-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-base16-or-base32-encoding-decoding-activity.html", - "/en/security/*/prebuilt-rule-8-17-3-boot-file-copy.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-boot-file-copy.html", - "/en/security/*/prebuilt-rule-8-17-3-bpf-filter-applied-using-tc.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-bpf-filter-applied-using-tc.html", - "/en/security/*/prebuilt-rule-8-17-3-chkconfig-service-add.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-chkconfig-service-add.html", - "/en/security/*/prebuilt-rule-8-17-3-connection-to-external-network-via-telnet.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-connection-to-external-network-via-telnet.html", - "/en/security/*/prebuilt-rule-8-17-3-connection-to-internal-network-via-telnet.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-connection-to-internal-network-via-telnet.html", - "/en/security/*/prebuilt-rule-8-17-3-creation-of-hidden-shared-object-file.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-creation-of-hidden-shared-object-file.html", - "/en/security/*/prebuilt-rule-8-17-3-cupsd-or-foomatic-rip-shell-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-cupsd-or-foomatic-rip-shell-execution.html", - "/en/security/*/prebuilt-rule-8-17-3-d-bus-service-created.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-d-bus-service-created.html", - "/en/security/*/prebuilt-rule-8-17-3-directory-creation-in-bin-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-directory-creation-in-bin-directory.html", - "/en/security/*/prebuilt-rule-8-17-3-dnf-package-manager-plugin-file-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-dnf-package-manager-plugin-file-creation.html", - "/en/security/*/prebuilt-rule-8-17-3-dracut-module-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-dracut-module-creation.html", - "/en/security/*/prebuilt-rule-8-17-3-dynamic-linker-copy.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-dynamic-linker-copy.html", - "/en/security/*/prebuilt-rule-8-17-3-dynamic-linker-ld-so-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-dynamic-linker-ld-so-creation.html", - "/en/security/*/prebuilt-rule-8-17-3-esxi-discovery-via-find.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-esxi-discovery-via-find.html", - "/en/security/*/prebuilt-rule-8-17-3-esxi-discovery-via-grep.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-esxi-discovery-via-grep.html", - "/en/security/*/prebuilt-rule-8-17-3-esxi-timestomping-using-touch-command.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-esxi-timestomping-using-touch-command.html", - "/en/security/*/prebuilt-rule-8-17-3-excessive-aws-s3-object-encryption-with-sse-c.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-excessive-aws-s3-object-encryption-with-sse-c.html", - "/en/security/*/prebuilt-rule-8-17-3-executable-bit-set-for-potential-persistence-script.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-executable-bit-set-for-potential-persistence-script.html", - "/en/security/*/prebuilt-rule-8-17-3-executable-masquerading-as-kernel-process.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-executable-masquerading-as-kernel-process.html", - "/en/security/*/prebuilt-rule-8-17-3-file-creation-by-cups-or-foomatic-rip-child.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-file-creation-by-cups-or-foomatic-rip-child.html", - "/en/security/*/prebuilt-rule-8-17-3-file-deletion-via-shred.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-file-deletion-via-shred.html", - "/en/security/*/prebuilt-rule-8-17-3-file-made-immutable-by-chattr.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-file-made-immutable-by-chattr.html", - "/en/security/*/prebuilt-rule-8-17-3-file-transfer-or-listener-established-via-netcat.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-file-transfer-or-listener-established-via-netcat.html", - "/en/security/*/prebuilt-rule-8-17-3-git-hook-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-git-hook-child-process.html", - "/en/security/*/prebuilt-rule-8-17-3-git-hook-command-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-git-hook-command-execution.html", - "/en/security/*/prebuilt-rule-8-17-3-git-hook-created-or-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-git-hook-created-or-modified.html", - "/en/security/*/prebuilt-rule-8-17-3-grub-configuration-file-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-grub-configuration-file-creation.html", - "/en/security/*/prebuilt-rule-8-17-3-grub-configuration-generation-through-built-in-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-grub-configuration-generation-through-built-in-utilities.html", - "/en/security/*/prebuilt-rule-8-17-3-hidden-directory-creation-via-unusual-parent.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-hidden-directory-creation-via-unusual-parent.html", - "/en/security/*/prebuilt-rule-8-17-3-hidden-files-and-directories-via-hidden-flag.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-hidden-files-and-directories-via-hidden-flag.html", - "/en/security/*/prebuilt-rule-8-17-3-hping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-hping-process-activity.html", - "/en/security/*/prebuilt-rule-8-17-3-initramfs-extraction-via-cpio.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-initramfs-extraction-via-cpio.html", - "/en/security/*/prebuilt-rule-8-17-3-initramfs-unpacking-via-unmkinitramfs.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-initramfs-unpacking-via-unmkinitramfs.html", - "/en/security/*/prebuilt-rule-8-17-3-interactive-terminal-spawned-via-python.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-interactive-terminal-spawned-via-python.html", - "/en/security/*/prebuilt-rule-8-17-3-ipv4-ipv6-forwarding-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-ipv4-ipv6-forwarding-activity.html", - "/en/security/*/prebuilt-rule-8-17-3-kernel-load-or-unload-via-kexec-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-kernel-load-or-unload-via-kexec-detected.html", - "/en/security/*/prebuilt-rule-8-17-3-kernel-module-load-via-insmod.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-kernel-module-load-via-insmod.html", - "/en/security/*/prebuilt-rule-8-17-3-kernel-module-removal.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-kernel-module-removal.html", - "/en/security/*/prebuilt-rule-8-17-3-kernel-seeking-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-kernel-seeking-activity.html", - "/en/security/*/prebuilt-rule-8-17-3-kernel-unpacking-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-kernel-unpacking-activity.html", - "/en/security/*/prebuilt-rule-8-17-3-linux-init-pid-1-secret-dump-via-gdb.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-linux-init-pid-1-secret-dump-via-gdb.html", - "/en/security/*/prebuilt-rule-8-17-3-linux-process-hooking-via-gdb.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-linux-process-hooking-via-gdb.html", - "/en/security/*/prebuilt-rule-8-17-3-linux-ssh-x11-forwarding.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-linux-ssh-x11-forwarding.html", - "/en/security/*/prebuilt-rule-8-17-3-linux-user-added-to-privileged-group.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-linux-user-added-to-privileged-group.html", - "/en/security/*/prebuilt-rule-8-17-3-manual-dracut-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-manual-dracut-execution.html", - "/en/security/*/prebuilt-rule-8-17-3-memory-swap-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-memory-swap-modification.html", - "/en/security/*/prebuilt-rule-8-17-3-namespace-manipulation-using-unshare.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-namespace-manipulation-using-unshare.html", - "/en/security/*/prebuilt-rule-8-17-3-netcat-listener-established-via-rlwrap.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-netcat-listener-established-via-rlwrap.html", - "/en/security/*/prebuilt-rule-8-17-3-networkmanager-dispatcher-script-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-networkmanager-dispatcher-script-creation.html", - "/en/security/*/prebuilt-rule-8-17-3-nping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-nping-process-activity.html", - "/en/security/*/prebuilt-rule-8-17-3-openssl-client-or-server-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-openssl-client-or-server-activity.html", - "/en/security/*/prebuilt-rule-8-17-3-openssl-password-hash-generation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-openssl-password-hash-generation.html", - "/en/security/*/prebuilt-rule-8-17-3-persistence-via-kde-autostart-script-or-desktop-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-persistence-via-kde-autostart-script-or-desktop-file-modification.html", - "/en/security/*/prebuilt-rule-8-17-3-pluggable-authentication-module-pam-creation-in-unusual-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-pluggable-authentication-module-pam-creation-in-unusual-directory.html", - "/en/security/*/prebuilt-rule-8-17-3-pluggable-authentication-module-pam-version-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-pluggable-authentication-module-pam-version-discovery.html", - "/en/security/*/prebuilt-rule-8-17-3-polkit-policy-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-polkit-policy-creation.html", - "/en/security/*/prebuilt-rule-8-17-3-polkit-version-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-polkit-version-discovery.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-antimalware-scan-interface-bypass-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-antimalware-scan-interface-bypass-via-powershell.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-chroot-container-escape-via-mount.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-chroot-container-escape-via-mount.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-data-splitting-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-data-splitting-detected.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-defense-evasion-via-doas.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-defense-evasion-via-doas.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-defense-evasion-via-proot.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-defense-evasion-via-proot.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-disabling-of-apparmor.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-disabling-of-apparmor.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-disabling-of-selinux.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-disabling-of-selinux.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-hex-payload-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-hex-payload-execution.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-hidden-process-via-mount-hidepid.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-hidden-process-via-mount-hidepid.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-linux-backdoor-user-account-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-linux-backdoor-user-account-creation.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-linux-credential-dumping-via-proc-filesystem.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-linux-credential-dumping-via-proc-filesystem.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-linux-credential-dumping-via-unshadow.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-linux-credential-dumping-via-unshadow.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-linux-hack-tool-launched.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-linux-hack-tool-launched.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-linux-tunneling-and-or-port-forwarding.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-linux-tunneling-and-or-port-forwarding.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-openssh-backdoor-logging-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-openssh-backdoor-logging-activity.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-persistence-via-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-persistence-via-file-modification.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-powershell-obfuscated-script.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-powershell-obfuscated-script.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-privilege-escalation-via-pkexec.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-privilege-escalation-via-pkexec.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-privilege-escalation-via-uid-int-max-bug-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-privilege-escalation-via-uid-int-max-bug-detected.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-process-name-stomping-with-prctl.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-process-name-stomping-with-prctl.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-protocol-tunneling-via-earthworm.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-protocol-tunneling-via-earthworm.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-remote-code-execution-via-web-server.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-remote-code-execution-via-web-server.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-reverse-shell-via-background-process.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-reverse-shell-via-background-process.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-shell-via-wildcard-injection-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-shell-via-wildcard-injection-detected.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-ssh-it-ssh-worm-downloaded.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-ssh-it-ssh-worm-downloaded.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-sudo-privilege-escalation-via-cve-2019-14287.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-sudo-privilege-escalation-via-cve-2019-14287.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-suspicious-file-edit.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-suspicious-file-edit.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-syn-based-port-scan-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-syn-based-port-scan-detected.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-unauthorized-access-via-wildcard-injection-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-unauthorized-access-via-wildcard-injection-detected.html", - "/en/security/*/prebuilt-rule-8-17-3-potential-upgrade-of-non-interactive-shell.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potential-upgrade-of-non-interactive-shell.html", - "/en/security/*/prebuilt-rule-8-17-3-potentially-suspicious-process-started-via-tmux-or-screen.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-potentially-suspicious-process-started-via-tmux-or-screen.html", - "/en/security/*/prebuilt-rule-8-17-3-prebuilt-rules-8-17-3-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-prebuilt-rules-8-17-3-appendix.html", - "/en/security/*/prebuilt-rule-8-17-3-prebuilt-rules-8-17-3-summary.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-prebuilt-rules-8-17-3-summary.html", - "/en/security/*/prebuilt-rule-8-17-3-printer-user-lp-shell-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-printer-user-lp-shell-execution.html", - "/en/security/*/prebuilt-rule-8-17-3-private-key-searching-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-private-key-searching-activity.html", - "/en/security/*/prebuilt-rule-8-17-3-process-capability-enumeration.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-process-capability-enumeration.html", - "/en/security/*/prebuilt-rule-8-17-3-process-capability-set-via-setcap-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-process-capability-set-via-setcap-utility.html", - "/en/security/*/prebuilt-rule-8-17-3-process-spawned-from-message-of-the-day-motd.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-process-spawned-from-message-of-the-day-motd.html", - "/en/security/*/prebuilt-rule-8-17-3-process-started-from-process-id-pid-file.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-process-started-from-process-id-pid-file.html", - "/en/security/*/prebuilt-rule-8-17-3-process-started-with-executable-stack.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-process-started-with-executable-stack.html", - "/en/security/*/prebuilt-rule-8-17-3-proxychains-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-proxychains-activity.html", - "/en/security/*/prebuilt-rule-8-17-3-root-certificate-installation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-root-certificate-installation.html", - "/en/security/*/prebuilt-rule-8-17-3-security-file-access-via-common-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-security-file-access-via-common-utilities.html", - "/en/security/*/prebuilt-rule-8-17-3-selinux-configuration-creation-or-renaming.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-selinux-configuration-creation-or-renaming.html", - "/en/security/*/prebuilt-rule-8-17-3-sensitive-audit-policy-sub-category-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-sensitive-audit-policy-sub-category-disabled.html", - "/en/security/*/prebuilt-rule-8-17-3-setcap-setuid-setgid-capability-set.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-setcap-setuid-setgid-capability-set.html", - "/en/security/*/prebuilt-rule-8-17-3-simple-http-web-server-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-simple-http-web-server-creation.html", - "/en/security/*/prebuilt-rule-8-17-3-sns-topic-message-publish-by-rare-user.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-sns-topic-message-publish-by-rare-user.html", - "/en/security/*/prebuilt-rule-8-17-3-ssh-key-generated-via-ssh-keygen.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-ssh-key-generated-via-ssh-keygen.html", - "/en/security/*/prebuilt-rule-8-17-3-ssl-certificate-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-ssl-certificate-deletion.html", - "/en/security/*/prebuilt-rule-8-17-3-sudo-command-enumeration-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-sudo-command-enumeration-detected.html", - "/en/security/*/prebuilt-rule-8-17-3-suspicious-apt-package-manager-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-suspicious-apt-package-manager-execution.html", - "/en/security/*/prebuilt-rule-8-17-3-suspicious-communication-app-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-suspicious-communication-app-child-process.html", - "/en/security/*/prebuilt-rule-8-17-3-suspicious-content-extracted-or-decompressed-via-funzip.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-suspicious-content-extracted-or-decompressed-via-funzip.html", - "/en/security/*/prebuilt-rule-8-17-3-suspicious-dynamic-linker-discovery-via-od.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-suspicious-dynamic-linker-discovery-via-od.html", - "/en/security/*/prebuilt-rule-8-17-3-suspicious-execution-from-foomatic-rip-or-cupsd-parent.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-suspicious-execution-from-foomatic-rip-or-cupsd-parent.html", - "/en/security/*/prebuilt-rule-8-17-3-suspicious-file-creation-via-kworker.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-suspicious-file-creation-via-kworker.html", - "/en/security/*/prebuilt-rule-8-17-3-suspicious-memory-grep-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-suspicious-memory-grep-activity.html", - "/en/security/*/prebuilt-rule-8-17-3-suspicious-mining-process-creation-event.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-suspicious-mining-process-creation-event.html", - "/en/security/*/prebuilt-rule-8-17-3-suspicious-path-invocation-from-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-suspicious-path-invocation-from-command-line.html", - "/en/security/*/prebuilt-rule-8-17-3-suspicious-utility-launched-via-proxychains.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-suspicious-utility-launched-via-proxychains.html", - "/en/security/*/prebuilt-rule-8-17-3-suspicious-which-enumeration.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-suspicious-which-enumeration.html", - "/en/security/*/prebuilt-rule-8-17-3-system-binary-path-file-permission-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-system-binary-path-file-permission-modification.html", - "/en/security/*/prebuilt-rule-8-17-3-system-log-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-system-log-file-deletion.html", - "/en/security/*/prebuilt-rule-8-17-3-system-v-init-script-created.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-system-v-init-script-created.html", - "/en/security/*/prebuilt-rule-8-17-3-systemd-shell-execution-during-boot.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-systemd-shell-execution-during-boot.html", - "/en/security/*/prebuilt-rule-8-17-3-unix-socket-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-unix-socket-connection.html", - "/en/security/*/prebuilt-rule-8-17-3-unusual-aws-s3-object-encryption-with-sse-c.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-unusual-aws-s3-object-encryption-with-sse-c.html", - "/en/security/*/prebuilt-rule-8-17-3-unusual-d-bus-daemon-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-unusual-d-bus-daemon-child-process.html", - "/en/security/*/prebuilt-rule-8-17-3-unusual-pkexec-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-unusual-pkexec-execution.html", - "/en/security/*/prebuilt-rule-8-17-3-web-server-spawned-via-python.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-web-server-spawned-via-python.html", - "/en/security/*/prebuilt-rule-8-17-3-yum-dnf-plugin-status-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-17-3-yum-dnf-plugin-status-discovery.html", - "/en/security/*/prebuilt-rule-8-2-1-access-of-stored-browser-credentials.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-access-of-stored-browser-credentials.html", - "/en/security/*/prebuilt-rule-8-2-1-access-to-keychain-credentials-directories.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-access-to-keychain-credentials-directories.html", - "/en/security/*/prebuilt-rule-8-2-1-account-discovery-command-via-system-account.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-account-discovery-command-via-system-account.html", - "/en/security/*/prebuilt-rule-8-2-1-account-password-reset-remotely.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-account-password-reset-remotely.html", - "/en/security/*/prebuilt-rule-8-2-1-adding-hidden-file-attribute-via-attrib.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-adding-hidden-file-attribute-via-attrib.html", - "/en/security/*/prebuilt-rule-8-2-1-adfind-command-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-adfind-command-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-administrator-privileges-assigned-to-an-okta-group.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-administrator-privileges-assigned-to-an-okta-group.html", - "/en/security/*/prebuilt-rule-8-2-1-administrator-role-assigned-to-an-okta-user.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-administrator-role-assigned-to-an-okta-user.html", - "/en/security/*/prebuilt-rule-8-2-1-adminsdholder-sdprop-exclusion-added.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-adminsdholder-sdprop-exclusion-added.html", - "/en/security/*/prebuilt-rule-8-2-1-adobe-hijack-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-adobe-hijack-persistence.html", - "/en/security/*/prebuilt-rule-8-2-1-anomalous-linux-compiler-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-anomalous-linux-compiler-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-anomalous-process-for-a-linux-population.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-anomalous-process-for-a-linux-population.html", - "/en/security/*/prebuilt-rule-8-2-1-anomalous-process-for-a-windows-population.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-anomalous-process-for-a-windows-population.html", - "/en/security/*/prebuilt-rule-8-2-1-anomalous-windows-process-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-anomalous-windows-process-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-apple-script-execution-followed-by-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-apple-script-execution-followed-by-network-connection.html", - "/en/security/*/prebuilt-rule-8-2-1-apple-scripting-execution-with-administrator-privileges.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-apple-scripting-execution-with-administrator-privileges.html", - "/en/security/*/prebuilt-rule-8-2-1-application-added-to-google-workspace-domain.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-application-added-to-google-workspace-domain.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-create-okta-api-token.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-create-okta-api-token.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-deactivate-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-deactivate-an-okta-application.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-deactivate-an-okta-network-zone.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-deactivate-an-okta-network-zone.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-deactivate-an-okta-policy-rule.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-deactivate-an-okta-policy-rule.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-deactivate-an-okta-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-deactivate-an-okta-policy.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-deactivate-mfa-for-an-okta-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-deactivate-mfa-for-an-okta-user-account.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-delete-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-delete-an-okta-application.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-delete-an-okta-network-zone.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-delete-an-okta-network-zone.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-delete-an-okta-policy-rule.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-delete-an-okta-policy-rule.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-delete-an-okta-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-delete-an-okta-policy.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-disable-iptables-or-firewall.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-disable-iptables-or-firewall.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-install-root-certificate.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-install-root-certificate.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-modify-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-modify-an-okta-application.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-modify-an-okta-network-zone.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-modify-an-okta-network-zone.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-modify-an-okta-policy-rule.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-modify-an-okta-policy-rule.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-modify-an-okta-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-modify-an-okta-policy.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-mount-smb-share-via-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-mount-smb-share-via-command-line.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-remove-file-quarantine-attribute.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-remove-file-quarantine-attribute.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-reset-mfa-factors-for-an-okta-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-reset-mfa-factors-for-an-okta-user-account.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-revoke-okta-api-token.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-revoke-okta-api-token.html", - "/en/security/*/prebuilt-rule-8-2-1-attempt-to-unload-elastic-endpoint-security-kernel-extension.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempt-to-unload-elastic-endpoint-security-kernel-extension.html", - "/en/security/*/prebuilt-rule-8-2-1-attempted-bypass-of-okta-mfa.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempted-bypass-of-okta-mfa.html", - "/en/security/*/prebuilt-rule-8-2-1-attempts-to-brute-force-a-microsoft-365-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempts-to-brute-force-a-microsoft-365-user-account.html", - "/en/security/*/prebuilt-rule-8-2-1-attempts-to-brute-force-an-okta-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-attempts-to-brute-force-an-okta-user-account.html", - "/en/security/*/prebuilt-rule-8-2-1-auditd-login-attempt-at-forbidden-time.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-auditd-login-attempt-at-forbidden-time.html", - "/en/security/*/prebuilt-rule-8-2-1-auditd-login-from-forbidden-location.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-auditd-login-from-forbidden-location.html", - "/en/security/*/prebuilt-rule-8-2-1-auditd-max-failed-login-attempts.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-auditd-max-failed-login-attempts.html", - "/en/security/*/prebuilt-rule-8-2-1-auditd-max-login-sessions.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-auditd-max-login-sessions.html", - "/en/security/*/prebuilt-rule-8-2-1-authorization-plugin-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-authorization-plugin-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-access-secret-in-secrets-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-access-secret-in-secrets-manager.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-cloudtrail-log-created.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-cloudtrail-log-created.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-cloudtrail-log-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-cloudtrail-log-deleted.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-cloudtrail-log-suspended.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-cloudtrail-log-suspended.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-cloudtrail-log-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-cloudtrail-log-updated.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-cloudwatch-alarm-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-cloudwatch-alarm-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-cloudwatch-log-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-cloudwatch-log-group-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-cloudwatch-log-stream-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-cloudwatch-log-stream-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-config-resource-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-config-resource-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-configuration-recorder-stopped.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-configuration-recorder-stopped.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-deletion-of-rds-instance-or-cluster.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-deletion-of-rds-instance-or-cluster.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-ec2-encryption-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-ec2-encryption-disabled.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-ec2-full-network-packet-capture-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-ec2-full-network-packet-capture-detected.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-ec2-network-access-control-list-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-ec2-network-access-control-list-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-ec2-network-access-control-list-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-ec2-network-access-control-list-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-ec2-snapshot-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-ec2-snapshot-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-ec2-vm-export-failure.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-ec2-vm-export-failure.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-efs-file-system-or-mount-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-efs-file-system-or-mount-deleted.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-elasticache-security-group-created.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-elasticache-security-group-created.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-elasticache-security-group-modified-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-elasticache-security-group-modified-or-deleted.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-eventbridge-rule-disabled-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-eventbridge-rule-disabled-or-deleted.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-execution-via-system-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-execution-via-system-manager.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-guardduty-detector-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-guardduty-detector-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-iam-assume-role-policy-update.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-iam-assume-role-policy-update.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-iam-brute-force-of-assume-role-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-iam-brute-force-of-assume-role-policy.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-iam-deactivation-of-mfa-device.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-iam-deactivation-of-mfa-device.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-iam-group-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-iam-group-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-iam-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-iam-group-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-iam-password-recovery-requested.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-iam-password-recovery-requested.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-iam-user-addition-to-group.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-iam-user-addition-to-group.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-management-console-brute-force-of-root-user-identity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-management-console-brute-force-of-root-user-identity.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-management-console-root-login.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-management-console-root-login.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-rds-cluster-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-rds-cluster-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-rds-instance-cluster-stoppage.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-rds-instance-cluster-stoppage.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-rds-instance-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-rds-instance-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-rds-security-group-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-rds-security-group-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-rds-security-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-rds-security-group-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-rds-snapshot-export.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-rds-snapshot-export.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-rds-snapshot-restored.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-rds-snapshot-restored.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-redshift-cluster-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-redshift-cluster-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-root-login-without-mfa.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-root-login-without-mfa.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-route-53-domain-transfer-lock-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-route-53-domain-transfer-lock-disabled.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-route-53-domain-transferred-to-another-account.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-route-53-domain-transferred-to-another-account.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-route-table-created.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-route-table-created.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-route-table-modified-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-route-table-modified-or-deleted.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-route53-private-hosted-zone-associated-with-a-vpc.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-route53-private-hosted-zone-associated-with-a-vpc.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-s3-bucket-configuration-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-s3-bucket-configuration-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-saml-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-saml-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-security-group-configuration-change-detection.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-security-group-configuration-change-detection.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-security-token-service-sts-assumerole-usage.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-security-token-service-sts-assumerole-usage.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-sts-getsessiontoken-abuse.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-sts-getsessiontoken-abuse.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-vpc-flow-logs-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-vpc-flow-logs-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-waf-access-control-list-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-waf-access-control-list-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-aws-waf-rule-or-rule-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-aws-waf-rule-or-rule-group-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-active-directory-high-risk-sign-in.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-active-directory-high-risk-sign-in.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-active-directory-high-risk-user-sign-in-heuristic.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-active-directory-high-risk-user-sign-in-heuristic.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-active-directory-powershell-sign-in.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-active-directory-powershell-sign-in.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-ad-global-administrator-role-assigned.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-ad-global-administrator-role-assigned.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-alert-suppression-rule-created-or-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-alert-suppression-rule-created-or-modified.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-application-credential-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-application-credential-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-automation-account-created.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-automation-account-created.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-automation-runbook-created-or-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-automation-runbook-created-or-modified.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-automation-runbook-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-automation-runbook-deleted.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-automation-webhook-created.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-automation-webhook-created.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-blob-container-access-level-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-blob-container-access-level-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-blob-permissions-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-blob-permissions-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-command-execution-on-virtual-machine.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-command-execution-on-virtual-machine.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-conditional-access-policy-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-conditional-access-policy-modified.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-diagnostic-settings-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-diagnostic-settings-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-event-hub-authorization-rule-created-or-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-event-hub-authorization-rule-created-or-updated.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-event-hub-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-event-hub-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-external-guest-user-invitation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-external-guest-user-invitation.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-firewall-policy-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-firewall-policy-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-frontdoor-web-application-firewall-waf-policy-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-frontdoor-web-application-firewall-waf-policy-deleted.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-full-network-packet-capture-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-full-network-packet-capture-detected.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-global-administrator-role-addition-to-pim-user.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-global-administrator-role-addition-to-pim-user.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-key-vault-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-key-vault-modified.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-kubernetes-events-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-kubernetes-events-deleted.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-kubernetes-pods-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-kubernetes-pods-deleted.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-kubernetes-rolebindings-created.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-kubernetes-rolebindings-created.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-network-watcher-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-network-watcher-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-privilege-identity-management-role-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-privilege-identity-management-role-modified.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-resource-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-resource-group-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-service-principal-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-service-principal-addition.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-service-principal-credentials-added.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-service-principal-credentials-added.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-storage-account-key-regenerated.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-storage-account-key-regenerated.html", - "/en/security/*/prebuilt-rule-8-2-1-azure-virtual-network-device-modified-or-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-azure-virtual-network-device-modified-or-deleted.html", - "/en/security/*/prebuilt-rule-8-2-1-binary-executed-from-shared-memory-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-binary-executed-from-shared-memory-directory.html", - "/en/security/*/prebuilt-rule-8-2-1-bpf-filter-applied-using-tc.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-bpf-filter-applied-using-tc.html", - "/en/security/*/prebuilt-rule-8-2-1-bypass-uac-via-event-viewer.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-bypass-uac-via-event-viewer.html", - "/en/security/*/prebuilt-rule-8-2-1-chkconfig-service-add.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-chkconfig-service-add.html", - "/en/security/*/prebuilt-rule-8-2-1-clearing-windows-console-history.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-clearing-windows-console-history.html", - "/en/security/*/prebuilt-rule-8-2-1-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-8-2-1-command-execution-via-solarwinds-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-command-execution-via-solarwinds-process.html", - "/en/security/*/prebuilt-rule-8-2-1-command-shell-activity-started-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-command-shell-activity-started-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-2-1-component-object-model-hijacking.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-component-object-model-hijacking.html", - "/en/security/*/prebuilt-rule-8-2-1-conhost-spawned-by-suspicious-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-conhost-spawned-by-suspicious-parent-process.html", - "/en/security/*/prebuilt-rule-8-2-1-connection-to-commonly-abused-free-ssl-certificate-providers.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-connection-to-commonly-abused-free-ssl-certificate-providers.html", - "/en/security/*/prebuilt-rule-8-2-1-control-panel-process-with-unusual-arguments.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-control-panel-process-with-unusual-arguments.html", - "/en/security/*/prebuilt-rule-8-2-1-creation-of-a-hidden-local-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-creation-of-a-hidden-local-user-account.html", - "/en/security/*/prebuilt-rule-8-2-1-creation-of-hidden-files-and-directories-via-commandline.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-creation-of-hidden-files-and-directories-via-commandline.html", - "/en/security/*/prebuilt-rule-8-2-1-creation-of-hidden-launch-agent-or-daemon.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-creation-of-hidden-launch-agent-or-daemon.html", - "/en/security/*/prebuilt-rule-8-2-1-creation-of-hidden-login-item-via-apple-script.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-creation-of-hidden-login-item-via-apple-script.html", - "/en/security/*/prebuilt-rule-8-2-1-creation-of-hidden-shared-object-file.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-creation-of-hidden-shared-object-file.html", - "/en/security/*/prebuilt-rule-8-2-1-creation-or-modification-of-a-new-gpo-scheduled-task-or-service.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-creation-or-modification-of-a-new-gpo-scheduled-task-or-service.html", - "/en/security/*/prebuilt-rule-8-2-1-creation-or-modification-of-domain-backup-dpapi-private-key.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-creation-or-modification-of-domain-backup-dpapi-private-key.html", - "/en/security/*/prebuilt-rule-8-2-1-creation-or-modification-of-root-certificate.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-creation-or-modification-of-root-certificate.html", - "/en/security/*/prebuilt-rule-8-2-1-credential-acquisition-via-registry-hive-dumping.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-credential-acquisition-via-registry-hive-dumping.html", - "/en/security/*/prebuilt-rule-8-2-1-credential-dumping-detected-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-credential-dumping-detected-elastic-endgame.html", - "/en/security/*/prebuilt-rule-8-2-1-credential-dumping-prevented-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-credential-dumping-prevented-elastic-endgame.html", - "/en/security/*/prebuilt-rule-8-2-1-credential-manipulation-detected-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-credential-manipulation-detected-elastic-endgame.html", - "/en/security/*/prebuilt-rule-8-2-1-credential-manipulation-prevented-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-credential-manipulation-prevented-elastic-endgame.html", - "/en/security/*/prebuilt-rule-8-2-1-cyberark-privileged-access-security-error.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-cyberark-privileged-access-security-error.html", - "/en/security/*/prebuilt-rule-8-2-1-cyberark-privileged-access-security-recommended-monitor.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-cyberark-privileged-access-security-recommended-monitor.html", - "/en/security/*/prebuilt-rule-8-2-1-delete-volume-usn-journal-with-fsutil.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-delete-volume-usn-journal-with-fsutil.html", - "/en/security/*/prebuilt-rule-8-2-1-deleting-backup-catalogs-with-wbadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-deleting-backup-catalogs-with-wbadmin.html", - "/en/security/*/prebuilt-rule-8-2-1-direct-outbound-smb-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-direct-outbound-smb-connection.html", - "/en/security/*/prebuilt-rule-8-2-1-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-2-1-disable-windows-firewall-rules-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-disable-windows-firewall-rules-via-netsh.html", - "/en/security/*/prebuilt-rule-8-2-1-disabling-user-account-control-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-disabling-user-account-control-via-registry-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-disabling-windows-defender-security-settings-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-disabling-windows-defender-security-settings-via-powershell.html", - "/en/security/*/prebuilt-rule-8-2-1-dns-activity-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-dns-activity-to-the-internet.html", - "/en/security/*/prebuilt-rule-8-2-1-dns-over-https-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-dns-over-https-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-8-2-1-dns-tunneling.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-dns-tunneling.html", - "/en/security/*/prebuilt-rule-8-2-1-domain-added-to-google-workspace-trusted-domains.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-domain-added-to-google-workspace-trusted-domains.html", - "/en/security/*/prebuilt-rule-8-2-1-dumping-of-keychain-content-via-security-command.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-dumping-of-keychain-content-via-security-command.html", - "/en/security/*/prebuilt-rule-8-2-1-dynamic-linker-copy.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-dynamic-linker-copy.html", - "/en/security/*/prebuilt-rule-8-2-1-eggshell-backdoor-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-eggshell-backdoor-execution.html", - "/en/security/*/prebuilt-rule-8-2-1-elastic-agent-service-terminated.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-elastic-agent-service-terminated.html", - "/en/security/*/prebuilt-rule-8-2-1-emond-rules-creation-or-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-emond-rules-creation-or-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-enable-host-network-discovery-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-enable-host-network-discovery-via-netsh.html", - "/en/security/*/prebuilt-rule-8-2-1-encrypting-files-with-winrar-or-7z.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-encrypting-files-with-winrar-or-7z.html", - "/en/security/*/prebuilt-rule-8-2-1-enumerating-domain-trusts-via-nltest-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-enumerating-domain-trusts-via-nltest-exe.html", - "/en/security/*/prebuilt-rule-8-2-1-enumeration-command-spawned-via-wmiprvse.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-enumeration-command-spawned-via-wmiprvse.html", - "/en/security/*/prebuilt-rule-8-2-1-enumeration-of-administrator-accounts.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-enumeration-of-administrator-accounts.html", - "/en/security/*/prebuilt-rule-8-2-1-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-8-2-1-enumeration-of-users-or-groups-via-built-in-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-enumeration-of-users-or-groups-via-built-in-commands.html", - "/en/security/*/prebuilt-rule-8-2-1-executable-file-creation-with-multiple-extensions.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-executable-file-creation-with-multiple-extensions.html", - "/en/security/*/prebuilt-rule-8-2-1-execution-from-unusual-directory-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-execution-from-unusual-directory-command-line.html", - "/en/security/*/prebuilt-rule-8-2-1-execution-of-com-object-via-xwizard.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-execution-of-com-object-via-xwizard.html", - "/en/security/*/prebuilt-rule-8-2-1-execution-via-local-sxs-shared-module.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-execution-via-local-sxs-shared-module.html", - "/en/security/*/prebuilt-rule-8-2-1-execution-via-mssql-xp-cmdshell-stored-procedure.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-execution-via-mssql-xp-cmdshell-stored-procedure.html", - "/en/security/*/prebuilt-rule-8-2-1-execution-via-tsclient-mountpoint.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-execution-via-tsclient-mountpoint.html", - "/en/security/*/prebuilt-rule-8-2-1-execution-with-explicit-credentials-via-scripting.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-execution-with-explicit-credentials-via-scripting.html", - "/en/security/*/prebuilt-rule-8-2-1-exploit-detected-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-exploit-detected-elastic-endgame.html", - "/en/security/*/prebuilt-rule-8-2-1-exploit-prevented-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-exploit-prevented-elastic-endgame.html", - "/en/security/*/prebuilt-rule-8-2-1-exporting-exchange-mailbox-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-exporting-exchange-mailbox-via-powershell.html", - "/en/security/*/prebuilt-rule-8-2-1-external-ip-lookup-from-non-browser-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-external-ip-lookup-from-non-browser-process.html", - "/en/security/*/prebuilt-rule-8-2-1-file-and-directory-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-file-and-directory-discovery.html", - "/en/security/*/prebuilt-rule-8-2-1-file-made-immutable-by-chattr.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-file-made-immutable-by-chattr.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-firewall-rule-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-firewall-rule-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-firewall-rule-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-firewall-rule-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-firewall-rule-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-firewall-rule-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-iam-custom-role-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-iam-custom-role-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-iam-role-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-iam-role-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-iam-service-account-key-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-iam-service-account-key-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-kubernetes-rolebindings-created-or-patched.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-kubernetes-rolebindings-created-or-patched.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-logging-bucket-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-logging-bucket-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-logging-sink-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-logging-sink-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-logging-sink-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-logging-sink-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-pub-sub-subscription-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-pub-sub-subscription-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-pub-sub-subscription-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-pub-sub-subscription-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-pub-sub-topic-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-pub-sub-topic-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-pub-sub-topic-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-pub-sub-topic-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-service-account-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-service-account-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-service-account-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-service-account-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-service-account-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-service-account-disabled.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-service-account-key-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-service-account-key-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-storage-bucket-configuration-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-storage-bucket-configuration-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-storage-bucket-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-storage-bucket-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-storage-bucket-permissions-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-storage-bucket-permissions-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-virtual-private-cloud-network-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-virtual-private-cloud-network-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-virtual-private-cloud-route-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-virtual-private-cloud-route-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-gcp-virtual-private-cloud-route-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-gcp-virtual-private-cloud-route-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-google-workspace-admin-role-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-google-workspace-admin-role-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-8-2-1-google-workspace-admin-role-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-google-workspace-admin-role-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-google-workspace-api-access-granted-via-domain-wide-delegation-of-authority.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-google-workspace-api-access-granted-via-domain-wide-delegation-of-authority.html", - "/en/security/*/prebuilt-rule-8-2-1-google-workspace-custom-admin-role-created.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-google-workspace-custom-admin-role-created.html", - "/en/security/*/prebuilt-rule-8-2-1-google-workspace-mfa-enforcement-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-google-workspace-mfa-enforcement-disabled.html", - "/en/security/*/prebuilt-rule-8-2-1-google-workspace-password-policy-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-google-workspace-password-policy-modified.html", - "/en/security/*/prebuilt-rule-8-2-1-google-workspace-role-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-google-workspace-role-modified.html", - "/en/security/*/prebuilt-rule-8-2-1-group-policy-abuse-for-privilege-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-group-policy-abuse-for-privilege-addition.html", - "/en/security/*/prebuilt-rule-8-2-1-high-number-of-okta-user-password-reset-or-unlock-attempts.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-high-number-of-okta-user-password-reset-or-unlock-attempts.html", - "/en/security/*/prebuilt-rule-8-2-1-high-number-of-process-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-high-number-of-process-terminations.html", - "/en/security/*/prebuilt-rule-8-2-1-hosts-file-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-hosts-file-modified.html", - "/en/security/*/prebuilt-rule-8-2-1-iis-http-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-iis-http-logging-disabled.html", - "/en/security/*/prebuilt-rule-8-2-1-imageload-via-windows-update-auto-update-client.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-imageload-via-windows-update-auto-update-client.html", - "/en/security/*/prebuilt-rule-8-2-1-inbound-connection-to-an-unsecure-elasticsearch-node.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-inbound-connection-to-an-unsecure-elasticsearch-node.html", - "/en/security/*/prebuilt-rule-8-2-1-incoming-dcom-lateral-movement-via-mshta.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-incoming-dcom-lateral-movement-via-mshta.html", - "/en/security/*/prebuilt-rule-8-2-1-installation-of-security-support-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-installation-of-security-support-provider.html", - "/en/security/*/prebuilt-rule-8-2-1-installutil-process-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-installutil-process-making-network-connections.html", - "/en/security/*/prebuilt-rule-8-2-1-kerberos-cached-credentials-dumping.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-kerberos-cached-credentials-dumping.html", - "/en/security/*/prebuilt-rule-8-2-1-kerberos-pre-authentication-disabled-for-user.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-kerberos-pre-authentication-disabled-for-user.html", - "/en/security/*/prebuilt-rule-8-2-1-kerberos-traffic-from-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-kerberos-traffic-from-unusual-process.html", - "/en/security/*/prebuilt-rule-8-2-1-kernel-module-load-via-insmod.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-kernel-module-load-via-insmod.html", - "/en/security/*/prebuilt-rule-8-2-1-keychain-password-retrieval-via-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-keychain-password-retrieval-via-command-line.html", - "/en/security/*/prebuilt-rule-8-2-1-krbtgt-delegation-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-krbtgt-delegation-backdoor.html", - "/en/security/*/prebuilt-rule-8-2-1-kubernetes-exposed-service-created-with-type-nodeport.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-kubernetes-exposed-service-created-with-type-nodeport.html", - "/en/security/*/prebuilt-rule-8-2-1-kubernetes-pod-created-with-a-sensitive-hostpath-volume.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-kubernetes-pod-created-with-a-sensitive-hostpath-volume.html", - "/en/security/*/prebuilt-rule-8-2-1-kubernetes-pod-created-with-hostipc.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-kubernetes-pod-created-with-hostipc.html", - "/en/security/*/prebuilt-rule-8-2-1-kubernetes-pod-created-with-hostnetwork.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-kubernetes-pod-created-with-hostnetwork.html", - "/en/security/*/prebuilt-rule-8-2-1-kubernetes-pod-created-with-hostpid.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-kubernetes-pod-created-with-hostpid.html", - "/en/security/*/prebuilt-rule-8-2-1-kubernetes-privileged-pod-created.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-kubernetes-privileged-pod-created.html", - "/en/security/*/prebuilt-rule-8-2-1-kubernetes-suspicious-self-subject-review.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-kubernetes-suspicious-self-subject-review.html", - "/en/security/*/prebuilt-rule-8-2-1-kubernetes-user-exec-into-pod.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-kubernetes-user-exec-into-pod.html", - "/en/security/*/prebuilt-rule-8-2-1-lateral-movement-via-startup-folder.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-lateral-movement-via-startup-folder.html", - "/en/security/*/prebuilt-rule-8-2-1-launchdaemon-creation-or-modification-and-immediate-loading.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-launchdaemon-creation-or-modification-and-immediate-loading.html", - "/en/security/*/prebuilt-rule-8-2-1-linux-restricted-shell-breakout-via-linux-binary-s.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-linux-restricted-shell-breakout-via-linux-binary-s.html", - "/en/security/*/prebuilt-rule-8-2-1-lsass-memory-dump-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-lsass-memory-dump-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-lsass-memory-dump-handle-access.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-lsass-memory-dump-handle-access.html", - "/en/security/*/prebuilt-rule-8-2-1-macos-installer-package-spawns-network-event.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-macos-installer-package-spawns-network-event.html", - "/en/security/*/prebuilt-rule-8-2-1-mfa-disabled-for-google-workspace-organization.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-mfa-disabled-for-google-workspace-organization.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-exchange-anti-phish-policy-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-exchange-anti-phish-policy-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-exchange-anti-phish-rule-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-exchange-anti-phish-rule-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-exchange-dkim-signing-configuration-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-exchange-dkim-signing-configuration-disabled.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-exchange-dlp-policy-removed.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-exchange-dlp-policy-removed.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-exchange-malware-filter-policy-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-exchange-malware-filter-policy-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-exchange-malware-filter-rule-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-exchange-malware-filter-rule-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-exchange-management-group-role-assignment.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-exchange-management-group-role-assignment.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-exchange-safe-attachment-rule-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-exchange-safe-attachment-rule-disabled.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-exchange-safe-link-policy-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-exchange-safe-link-policy-disabled.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-exchange-transport-rule-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-exchange-transport-rule-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-exchange-transport-rule-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-exchange-transport-rule-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-global-administrator-role-assigned.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-global-administrator-role-assigned.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-inbox-forwarding-rule-created.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-inbox-forwarding-rule-created.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-potential-ransomware-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-potential-ransomware-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-teams-custom-application-interaction-allowed.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-teams-custom-application-interaction-allowed.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-teams-external-access-enabled.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-teams-external-access-enabled.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-teams-guest-access-enabled.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-teams-guest-access-enabled.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-unusual-volume-of-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-unusual-volume-of-file-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-365-user-restricted-from-sending-email.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-365-user-restricted-from-sending-email.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-build-engine-started-an-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-build-engine-started-an-unusual-process.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-build-engine-started-by-a-script-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-build-engine-started-by-a-script-process.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-build-engine-started-by-a-system-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-build-engine-started-by-a-system-process.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-build-engine-started-by-an-office-application.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-build-engine-started-by-an-office-application.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-build-engine-using-an-alternate-name.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-build-engine-using-an-alternate-name.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-exchange-server-um-spawning-suspicious-processes.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-exchange-server-um-spawning-suspicious-processes.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-exchange-server-um-writing-suspicious-files.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-exchange-server-um-writing-suspicious-files.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-exchange-worker-spawning-suspicious-processes.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-exchange-worker-spawning-suspicious-processes.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-iis-connection-strings-decryption.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-iis-connection-strings-decryption.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-iis-service-account-password-dumped.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-iis-service-account-password-dumped.html", - "/en/security/*/prebuilt-rule-8-2-1-microsoft-windows-defender-tampering.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-microsoft-windows-defender-tampering.html", - "/en/security/*/prebuilt-rule-8-2-1-mimikatz-memssp-log-file-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-mimikatz-memssp-log-file-detected.html", - "/en/security/*/prebuilt-rule-8-2-1-modification-of-amsienable-registry-key.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-modification-of-amsienable-registry-key.html", - "/en/security/*/prebuilt-rule-8-2-1-modification-of-boot-configuration.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-modification-of-boot-configuration.html", - "/en/security/*/prebuilt-rule-8-2-1-modification-of-environment-variable-via-launchctl.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-modification-of-environment-variable-via-launchctl.html", - "/en/security/*/prebuilt-rule-8-2-1-modification-of-openssh-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-modification-of-openssh-binaries.html", - "/en/security/*/prebuilt-rule-8-2-1-modification-of-wdigest-security-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-modification-of-wdigest-security-provider.html", - "/en/security/*/prebuilt-rule-8-2-1-modification-or-removal-of-an-okta-application-sign-on-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-modification-or-removal-of-an-okta-application-sign-on-policy.html", - "/en/security/*/prebuilt-rule-8-2-1-mounting-hidden-or-webdav-remote-shares.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-mounting-hidden-or-webdav-remote-shares.html", - "/en/security/*/prebuilt-rule-8-2-1-ms-office-macro-security-registry-modifications.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-ms-office-macro-security-registry-modifications.html", - "/en/security/*/prebuilt-rule-8-2-1-mshta-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-mshta-making-network-connections.html", - "/en/security/*/prebuilt-rule-8-2-1-multi-factor-authentication-disabled-for-an-azure-user.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-multi-factor-authentication-disabled-for-an-azure-user.html", - "/en/security/*/prebuilt-rule-8-2-1-netcat-network-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-netcat-network-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-network-connection-via-certutil.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-network-connection-via-certutil.html", - "/en/security/*/prebuilt-rule-8-2-1-network-connection-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-network-connection-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-8-2-1-network-connection-via-registration-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-network-connection-via-registration-utility.html", - "/en/security/*/prebuilt-rule-8-2-1-network-connection-via-signed-binary.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-network-connection-via-signed-binary.html", - "/en/security/*/prebuilt-rule-8-2-1-new-activesyncalloweddeviceid-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-new-activesyncalloweddeviceid-added-via-powershell.html", - "/en/security/*/prebuilt-rule-8-2-1-new-or-modified-federation-domain.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-new-or-modified-federation-domain.html", - "/en/security/*/prebuilt-rule-8-2-1-nping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-nping-process-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-ntds-or-sam-database-file-copied.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-ntds-or-sam-database-file-copied.html", - "/en/security/*/prebuilt-rule-8-2-1-o365-email-reported-by-user-as-malware-or-phish.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-o365-email-reported-by-user-as-malware-or-phish.html", - "/en/security/*/prebuilt-rule-8-2-1-o365-excessive-single-sign-on-logon-errors.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-o365-excessive-single-sign-on-logon-errors.html", - "/en/security/*/prebuilt-rule-8-2-1-o365-exchange-suspicious-mailbox-right-delegation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-o365-exchange-suspicious-mailbox-right-delegation.html", - "/en/security/*/prebuilt-rule-8-2-1-o365-mailbox-audit-logging-bypass.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-o365-mailbox-audit-logging-bypass.html", - "/en/security/*/prebuilt-rule-8-2-1-okta-brute-force-or-password-spraying-attack.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-okta-brute-force-or-password-spraying-attack.html", - "/en/security/*/prebuilt-rule-8-2-1-okta-user-session-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-okta-user-session-impersonation.html", - "/en/security/*/prebuilt-rule-8-2-1-onedrive-malware-file-upload.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-onedrive-malware-file-upload.html", - "/en/security/*/prebuilt-rule-8-2-1-outbound-scheduled-task-activity-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-outbound-scheduled-task-activity-via-powershell.html", - "/en/security/*/prebuilt-rule-8-2-1-peripheral-device-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-peripheral-device-discovery.html", - "/en/security/*/prebuilt-rule-8-2-1-permission-theft-detected-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-permission-theft-detected-elastic-endgame.html", - "/en/security/*/prebuilt-rule-8-2-1-permission-theft-prevented-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-permission-theft-prevented-elastic-endgame.html", - "/en/security/*/prebuilt-rule-8-2-1-persistence-via-bits-job-notify-cmdline.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistence-via-bits-job-notify-cmdline.html", - "/en/security/*/prebuilt-rule-8-2-1-persistence-via-directoryservice-plugin-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistence-via-directoryservice-plugin-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-persistence-via-folder-action-script.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistence-via-folder-action-script.html", - "/en/security/*/prebuilt-rule-8-2-1-persistence-via-hidden-run-key-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistence-via-hidden-run-key-detected.html", - "/en/security/*/prebuilt-rule-8-2-1-persistence-via-kde-autostart-script-or-desktop-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistence-via-kde-autostart-script-or-desktop-file-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-persistence-via-login-or-logout-hook.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistence-via-login-or-logout-hook.html", - "/en/security/*/prebuilt-rule-8-2-1-persistence-via-microsoft-office-addins.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistence-via-microsoft-office-addins.html", - "/en/security/*/prebuilt-rule-8-2-1-persistence-via-microsoft-outlook-vba.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistence-via-microsoft-outlook-vba.html", - "/en/security/*/prebuilt-rule-8-2-1-persistence-via-scheduled-job-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistence-via-scheduled-job-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-persistence-via-telemetrycontroller-scheduled-task-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistence-via-telemetrycontroller-scheduled-task-hijack.html", - "/en/security/*/prebuilt-rule-8-2-1-persistence-via-update-orchestrator-service-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistence-via-update-orchestrator-service-hijack.html", - "/en/security/*/prebuilt-rule-8-2-1-persistence-via-wmi-event-subscription.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistence-via-wmi-event-subscription.html", - "/en/security/*/prebuilt-rule-8-2-1-persistent-scripts-in-the-startup-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-persistent-scripts-in-the-startup-directory.html", - "/en/security/*/prebuilt-rule-8-2-1-port-forwarding-rule-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-port-forwarding-rule-addition.html", - "/en/security/*/prebuilt-rule-8-2-1-possible-consent-grant-attack-via-azure-registered-application.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-possible-consent-grant-attack-via-azure-registered-application.html", - "/en/security/*/prebuilt-rule-8-2-1-possible-okta-dos-attack.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-possible-okta-dos-attack.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-abuse-of-repeated-mfa-push-notifications.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-abuse-of-repeated-mfa-push-notifications.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-application-shimming-via-sdbinst.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-application-shimming-via-sdbinst.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-cookies-theft-via-browser-debugging.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-cookies-theft-via-browser-debugging.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-credential-access-via-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-credential-access-via-dcsync.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-credential-access-via-duplicatehandle-in-lsass.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-credential-access-via-duplicatehandle-in-lsass.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-credential-access-via-lsass-memory-dump.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-credential-access-via-lsass-memory-dump.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-credential-access-via-renamed-com-services-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-credential-access-via-renamed-com-services-dll.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-credential-access-via-trusted-developer-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-credential-access-via-trusted-developer-utility.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-credential-access-via-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-credential-access-via-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-dll-sideloading-via-trusted-microsoft-programs.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-dll-sideloading-via-trusted-microsoft-programs.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-dns-tunneling-via-iodine.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-dns-tunneling-via-iodine.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-evasion-via-filter-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-evasion-via-filter-manager.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-invoke-mimikatz-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-invoke-mimikatz-powershell-script.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-lsass-clone-creation-via-psscapturesnapshot.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-lsass-clone-creation-via-psscapturesnapshot.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-lsass-memory-dump-via-psscapturesnapshot.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-lsass-memory-dump-via-psscapturesnapshot.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-microsoft-office-sandbox-evasion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-microsoft-office-sandbox-evasion.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-modification-of-accessibility-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-modification-of-accessibility-binaries.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-openssh-backdoor-logging-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-openssh-backdoor-logging-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-password-spraying-of-microsoft-365-user-accounts.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-password-spraying-of-microsoft-365-user-accounts.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-persistence-via-atom-init-script-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-persistence-via-atom-init-script-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-persistence-via-login-hook.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-persistence-via-login-hook.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-privacy-control-bypass-via-localhost-secure-copy.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-privacy-control-bypass-via-localhost-secure-copy.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-privacy-control-bypass-via-tccdb-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-privacy-control-bypass-via-tccdb-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-privilege-escalation-via-installerfiletakeover.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-privilege-escalation-via-installerfiletakeover.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-privilege-escalation-via-local-kerberos-relay-over-ldap.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-privilege-escalation-via-local-kerberos-relay-over-ldap.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-privileged-escalation-via-samaccountname-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-privileged-escalation-via-samaccountname-spoofing.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-process-injection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-process-injection-via-powershell.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-protocol-tunneling-via-earthworm.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-protocol-tunneling-via-earthworm.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-remote-credential-access-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-remote-credential-access-via-registry.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-remote-desktop-shadowing-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-remote-desktop-shadowing-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-remote-desktop-tunneling-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-remote-desktop-tunneling-detected.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-reverse-shell-activity-via-terminal.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-reverse-shell-activity-via-terminal.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-secure-file-deletion-via-sdelete-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-secure-file-deletion-via-sdelete-utility.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-shadow-credentials-added-to-ad-object.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-shadow-credentials-added-to-ad-object.html", - "/en/security/*/prebuilt-rule-8-2-1-potential-shell-via-web-server.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-potential-shell-via-web-server.html", - "/en/security/*/prebuilt-rule-8-2-1-powershell-kerberos-ticket-request.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-powershell-kerberos-ticket-request.html", - "/en/security/*/prebuilt-rule-8-2-1-powershell-keylogging-script.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-powershell-keylogging-script.html", - "/en/security/*/prebuilt-rule-8-2-1-powershell-minidump-script.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-powershell-minidump-script.html", - "/en/security/*/prebuilt-rule-8-2-1-powershell-psreflect-script.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-powershell-psreflect-script.html", - "/en/security/*/prebuilt-rule-8-2-1-powershell-script-block-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-powershell-script-block-logging-disabled.html", - "/en/security/*/prebuilt-rule-8-2-1-powershell-suspicious-discovery-related-windows-api-functions.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-powershell-suspicious-discovery-related-windows-api-functions.html", - "/en/security/*/prebuilt-rule-8-2-1-powershell-suspicious-payload-encoded-and-compressed.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-powershell-suspicious-payload-encoded-and-compressed.html", - "/en/security/*/prebuilt-rule-8-2-1-powershell-suspicious-script-with-audio-capture-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-powershell-suspicious-script-with-audio-capture-capabilities.html", - "/en/security/*/prebuilt-rule-8-2-1-powershell-suspicious-script-with-screenshot-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-powershell-suspicious-script-with-screenshot-capabilities.html", - "/en/security/*/prebuilt-rule-8-2-1-prebuilt-rules-8-2-1-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-prebuilt-rules-8-2-1-appendix.html", - "/en/security/*/prebuilt-rule-8-2-1-privilege-escalation-via-named-pipe-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-privilege-escalation-via-named-pipe-impersonation.html", - "/en/security/*/prebuilt-rule-8-2-1-privilege-escalation-via-rogue-named-pipe-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-privilege-escalation-via-rogue-named-pipe-impersonation.html", - "/en/security/*/prebuilt-rule-8-2-1-process-activity-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-process-activity-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-8-2-1-process-execution-from-an-unusual-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-process-execution-from-an-unusual-directory.html", - "/en/security/*/prebuilt-rule-8-2-1-process-injection-detected-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-process-injection-detected-elastic-endgame.html", - "/en/security/*/prebuilt-rule-8-2-1-process-injection-prevented-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-process-injection-prevented-elastic-endgame.html", - "/en/security/*/prebuilt-rule-8-2-1-process-termination-followed-by-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-process-termination-followed-by-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-program-files-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-program-files-directory-masquerading.html", - "/en/security/*/prebuilt-rule-8-2-1-prompt-for-credentials-with-osascript.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-prompt-for-credentials-with-osascript.html", - "/en/security/*/prebuilt-rule-8-2-1-psexec-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-psexec-network-connection.html", - "/en/security/*/prebuilt-rule-8-2-1-rare-aws-error-code.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-rare-aws-error-code.html", - "/en/security/*/prebuilt-rule-8-2-1-rare-user-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-rare-user-logon.html", - "/en/security/*/prebuilt-rule-8-2-1-rdp-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-rdp-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-8-2-1-registry-persistence-via-appcert-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-registry-persistence-via-appcert-dll.html", - "/en/security/*/prebuilt-rule-8-2-1-registry-persistence-via-appinit-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-registry-persistence-via-appinit-dll.html", - "/en/security/*/prebuilt-rule-8-2-1-remote-desktop-enabled-in-windows-firewall-by-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-remote-desktop-enabled-in-windows-firewall-by-netsh.html", - "/en/security/*/prebuilt-rule-8-2-1-remote-file-copy-to-a-hidden-share.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-remote-file-copy-to-a-hidden-share.html", - "/en/security/*/prebuilt-rule-8-2-1-remote-file-copy-via-teamviewer.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-remote-file-copy-via-teamviewer.html", - "/en/security/*/prebuilt-rule-8-2-1-remote-file-download-via-desktopimgdownldr-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-remote-file-download-via-desktopimgdownldr-utility.html", - "/en/security/*/prebuilt-rule-8-2-1-remote-file-download-via-mpcmdrun.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-remote-file-download-via-mpcmdrun.html", - "/en/security/*/prebuilt-rule-8-2-1-remote-ssh-login-enabled-via-systemsetup-command.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-remote-ssh-login-enabled-via-systemsetup-command.html", - "/en/security/*/prebuilt-rule-8-2-1-remote-system-discovery-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-remote-system-discovery-commands.html", - "/en/security/*/prebuilt-rule-8-2-1-remotely-started-services-via-rpc.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-remotely-started-services-via-rpc.html", - "/en/security/*/prebuilt-rule-8-2-1-renamed-autoit-scripts-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-renamed-autoit-scripts-interpreter.html", - "/en/security/*/prebuilt-rule-8-2-1-scheduled-task-created-by-a-windows-script.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-scheduled-task-created-by-a-windows-script.html", - "/en/security/*/prebuilt-rule-8-2-1-scheduled-task-execution-at-scale-via-gpo.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-scheduled-task-execution-at-scale-via-gpo.html", - "/en/security/*/prebuilt-rule-8-2-1-scheduled-tasks-at-command-enabled.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-scheduled-tasks-at-command-enabled.html", - "/en/security/*/prebuilt-rule-8-2-1-screensaver-plist-file-modified-by-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-screensaver-plist-file-modified-by-unexpected-process.html", - "/en/security/*/prebuilt-rule-8-2-1-searching-for-saved-credentials-via-vaultcmd.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-searching-for-saved-credentials-via-vaultcmd.html", - "/en/security/*/prebuilt-rule-8-2-1-security-software-discovery-using-wmic.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-security-software-discovery-using-wmic.html", - "/en/security/*/prebuilt-rule-8-2-1-security-software-discovery-via-grep.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-security-software-discovery-via-grep.html", - "/en/security/*/prebuilt-rule-8-2-1-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-8-2-1-service-control-spawned-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-service-control-spawned-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-8-2-1-sharepoint-malware-file-upload.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-sharepoint-malware-file-upload.html", - "/en/security/*/prebuilt-rule-8-2-1-signed-proxy-execution-via-ms-work-folders.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-signed-proxy-execution-via-ms-work-folders.html", - "/en/security/*/prebuilt-rule-8-2-1-solarwinds-process-disabling-services-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-solarwinds-process-disabling-services-via-registry.html", - "/en/security/*/prebuilt-rule-8-2-1-spike-in-aws-error-messages.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-spike-in-aws-error-messages.html", - "/en/security/*/prebuilt-rule-8-2-1-spike-in-failed-logon-events.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-spike-in-failed-logon-events.html", - "/en/security/*/prebuilt-rule-8-2-1-spike-in-logon-events-from-a-source-ip.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-spike-in-logon-events-from-a-source-ip.html", - "/en/security/*/prebuilt-rule-8-2-1-spike-in-logon-events.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-spike-in-logon-events.html", - "/en/security/*/prebuilt-rule-8-2-1-startup-logon-script-added-to-group-policy-object.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-startup-logon-script-added-to-group-policy-object.html", - "/en/security/*/prebuilt-rule-8-2-1-startup-persistence-by-a-suspicious-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-startup-persistence-by-a-suspicious-process.html", - "/en/security/*/prebuilt-rule-8-2-1-strace-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-strace-process-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-sublime-plugin-or-application-script-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-sublime-plugin-or-application-script-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-activity-reported-by-okta-user.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-activity-reported-by-okta-user.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-calendar-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-calendar-file-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-certutil-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-certutil-commands.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-cmd-execution-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-cmd-execution-via-wmi.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-endpoint-security-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-endpoint-security-parent-process.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-execution-from-a-mounted-device.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-execution-from-a-mounted-device.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-execution-short-program-name.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-execution-short-program-name.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-execution-via-scheduled-task.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-execution-via-scheduled-task.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-explorer-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-explorer-child-process.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-file-creation-in-etc-for-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-file-creation-in-etc-for-persistence.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-html-file-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-html-file-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-image-load-taskschd-dll-from-ms-office.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-image-load-taskschd-dll-from-ms-office.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-java-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-java-child-process.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-lsass-access-via-malseclogon.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-lsass-access-via-malseclogon.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-microsoft-diagnostics-wizard-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-microsoft-diagnostics-wizard-execution.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-ms-outlook-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-ms-outlook-child-process.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-net-code-compilation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-net-code-compilation.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-net-reflection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-net-reflection-via-powershell.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-network-connection-attempt-by-root.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-network-connection-attempt-by-root.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-pdf-reader-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-pdf-reader-child-process.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-portable-executable-encoded-in-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-portable-executable-encoded-in-powershell-script.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-powershell-engine-imageload.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-powershell-engine-imageload.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-powershell-script.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-print-spooler-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-print-spooler-file-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-printspooler-service-executable-file-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-printspooler-service-executable-file-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-printspooler-spl-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-printspooler-spl-file-created.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-process-access-via-direct-system-call.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-process-access-via-direct-system-call.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-process-creation-calltrace.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-process-creation-calltrace.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-process-execution-via-renamed-psexec-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-process-execution-via-renamed-psexec-executable.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-process-from-conhost.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-process-from-conhost.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-rdp-activex-client-loaded.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-rdp-activex-client-loaded.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-remote-registry-access-via-sebackupprivilege.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-remote-registry-access-via-sebackupprivilege.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-script-object-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-script-object-execution.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-solarwinds-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-solarwinds-child-process.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-werfault-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-werfault-child-process.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-wmi-image-load-from-ms-office.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-wmi-image-load-from-ms-office.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-wmic-xsl-script-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-wmic-xsl-script-execution.html", - "/en/security/*/prebuilt-rule-8-2-1-suspicious-zoom-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-suspicious-zoom-child-process.html", - "/en/security/*/prebuilt-rule-8-2-1-svchost-spawning-cmd.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-svchost-spawning-cmd.html", - "/en/security/*/prebuilt-rule-8-2-1-symbolic-link-to-shadow-copy-created.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-symbolic-link-to-shadow-copy-created.html", - "/en/security/*/prebuilt-rule-8-2-1-system-log-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-system-log-file-deletion.html", - "/en/security/*/prebuilt-rule-8-2-1-system-shells-via-services.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-system-shells-via-services.html", - "/en/security/*/prebuilt-rule-8-2-1-tampering-of-bash-command-line-history.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-tampering-of-bash-command-line-history.html", - "/en/security/*/prebuilt-rule-8-2-1-tcc-bypass-via-mounted-apfs-snapshot-access.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-tcc-bypass-via-mounted-apfs-snapshot-access.html", - "/en/security/*/prebuilt-rule-8-2-1-third-party-backup-files-deleted-via-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-third-party-backup-files-deleted-via-unexpected-process.html", - "/en/security/*/prebuilt-rule-8-2-1-threat-detected-by-okta-threatinsight.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-threat-detected-by-okta-threatinsight.html", - "/en/security/*/prebuilt-rule-8-2-1-timestomping-using-touch-command.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-timestomping-using-touch-command.html", - "/en/security/*/prebuilt-rule-8-2-1-uac-bypass-attempt-via-elevated-com-internet-explorer-add-on-installer.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-uac-bypass-attempt-via-elevated-com-internet-explorer-add-on-installer.html", - "/en/security/*/prebuilt-rule-8-2-1-uac-bypass-attempt-via-privileged-ifileoperation-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-uac-bypass-attempt-via-privileged-ifileoperation-com-interface.html", - "/en/security/*/prebuilt-rule-8-2-1-uac-bypass-attempt-via-windows-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-uac-bypass-attempt-via-windows-directory-masquerading.html", - "/en/security/*/prebuilt-rule-8-2-1-uac-bypass-attempt-with-ieditionupgrademanager-elevated-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-uac-bypass-attempt-with-ieditionupgrademanager-elevated-com-interface.html", - "/en/security/*/prebuilt-rule-8-2-1-uac-bypass-via-diskcleanup-scheduled-task-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-uac-bypass-via-diskcleanup-scheduled-task-hijack.html", - "/en/security/*/prebuilt-rule-8-2-1-uac-bypass-via-icmluautil-elevated-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-uac-bypass-via-icmluautil-elevated-com-interface.html", - "/en/security/*/prebuilt-rule-8-2-1-uac-bypass-via-windows-firewall-snap-in-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-uac-bypass-via-windows-firewall-snap-in-hijack.html", - "/en/security/*/prebuilt-rule-8-2-1-unauthorized-access-to-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unauthorized-access-to-an-okta-application.html", - "/en/security/*/prebuilt-rule-8-2-1-unexpected-child-process-of-macos-screensaver-engine.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unexpected-child-process-of-macos-screensaver-engine.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-aws-command-for-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-aws-command-for-a-user.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-child-process-from-a-system-virtual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-child-process-from-a-system-virtual-process.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-child-process-of-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-child-process-of-dns-exe.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-child-processes-of-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-child-processes-of-rundll32.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-city-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-city-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-country-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-country-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-dns-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-dns-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-executable-file-creation-by-a-system-critical-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-executable-file-creation-by-a-system-critical-process.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-file-creation-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-file-creation-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-file-modification-by-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-file-modification-by-dns-exe.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-hour-for-a-user-to-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-hour-for-a-user-to-logon.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-linux-network-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-linux-network-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-linux-network-connection-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-linux-network-connection-discovery.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-linux-network-port-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-linux-network-port-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-linux-process-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-linux-process-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-linux-process-discovery-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-linux-process-discovery-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-linux-system-information-discovery-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-linux-system-information-discovery-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-linux-system-network-configuration-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-linux-system-network-configuration-discovery.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-linux-system-owner-or-user-discovery-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-linux-system-owner-or-user-discovery-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-linux-user-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-linux-user-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-linux-username.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-linux-username.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-login-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-login-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-network-connection-via-dllhost.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-network-connection-via-dllhost.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-network-connection-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-network-connection-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-parent-child-relationship.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-parent-child-relationship.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-parent-process-for-cmd-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-parent-process-for-cmd-exe.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-print-spooler-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-print-spooler-child-process.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-process-execution-path-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-process-execution-path-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-process-execution-temp.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-process-execution-temp.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-process-for-a-linux-host.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-process-for-a-linux-host.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-process-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-process-network-connection.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-service-host-child-process-childless-service.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-service-host-child-process-childless-service.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-source-ip-for-a-user-to-logon-from.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-source-ip-for-a-user-to-logon-from.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-sudo-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-sudo-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-web-request.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-web-request.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-web-user-agent.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-web-user-agent.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-windows-network-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-windows-network-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-windows-path-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-windows-path-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-windows-process-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-windows-process-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-windows-remote-user.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-windows-remote-user.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-windows-service.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-windows-service.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-windows-user-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-windows-user-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-windows-user-privilege-elevation-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-windows-user-privilege-elevation-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-unusual-windows-username.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-unusual-windows-username.html", - "/en/security/*/prebuilt-rule-8-2-1-user-account-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-user-account-creation.html", - "/en/security/*/prebuilt-rule-8-2-1-user-account-exposed-to-kerberoasting.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-user-account-exposed-to-kerberoasting.html", - "/en/security/*/prebuilt-rule-8-2-1-user-added-as-owner-for-azure-application.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-user-added-as-owner-for-azure-application.html", - "/en/security/*/prebuilt-rule-8-2-1-user-added-as-owner-for-azure-service-principal.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-user-added-as-owner-for-azure-service-principal.html", - "/en/security/*/prebuilt-rule-8-2-1-user-added-to-privileged-group-in-active-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-user-added-to-privileged-group-in-active-directory.html", - "/en/security/*/prebuilt-rule-8-2-1-virtual-machine-fingerprinting-via-grep.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-virtual-machine-fingerprinting-via-grep.html", - "/en/security/*/prebuilt-rule-8-2-1-virtual-private-network-connection-attempt.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-virtual-private-network-connection-attempt.html", - "/en/security/*/prebuilt-rule-8-2-1-volume-shadow-copy-deleted-or-resized-via-vssadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-volume-shadow-copy-deleted-or-resized-via-vssadmin.html", - "/en/security/*/prebuilt-rule-8-2-1-volume-shadow-copy-deletion-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-volume-shadow-copy-deletion-via-powershell.html", - "/en/security/*/prebuilt-rule-8-2-1-volume-shadow-copy-deletion-via-wmic.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-volume-shadow-copy-deletion-via-wmic.html", - "/en/security/*/prebuilt-rule-8-2-1-webserver-access-logs-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-webserver-access-logs-deleted.html", - "/en/security/*/prebuilt-rule-8-2-1-webshell-detection-script-process-child-of-common-web-processes.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-webshell-detection-script-process-child-of-common-web-processes.html", - "/en/security/*/prebuilt-rule-8-2-1-whitespace-padding-in-process-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-whitespace-padding-in-process-command-line.html", - "/en/security/*/prebuilt-rule-8-2-1-whoami-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-whoami-process-activity.html", - "/en/security/*/prebuilt-rule-8-2-1-windows-defender-disabled-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-windows-defender-disabled-via-registry-modification.html", - "/en/security/*/prebuilt-rule-8-2-1-windows-defender-exclusions-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-windows-defender-exclusions-added-via-powershell.html", - "/en/security/*/prebuilt-rule-8-2-1-windows-firewall-disabled-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-windows-firewall-disabled-via-powershell.html", - "/en/security/*/prebuilt-rule-8-2-1-windows-network-enumeration.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-windows-network-enumeration.html", - "/en/security/*/prebuilt-rule-8-2-1-windows-script-executing-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-windows-script-executing-powershell.html", - "/en/security/*/prebuilt-rule-8-2-1-windows-script-interpreter-executing-process-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-windows-script-interpreter-executing-process-via-wmi.html", - "/en/security/*/prebuilt-rule-8-2-1-windows-service-installed-via-an-unusual-client.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-windows-service-installed-via-an-unusual-client.html", - "/en/security/*/prebuilt-rule-8-2-1-zoom-meeting-with-no-passcode.html": "/guide/en/security/8.17/prebuilt-rule-8-2-1-zoom-meeting-with-no-passcode.html", - "/en/security/*/prebuilt-rule-8-3-1-abnormal-process-id-or-lock-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-abnormal-process-id-or-lock-file-created.html", - "/en/security/*/prebuilt-rule-8-3-1-abnormally-large-dns-response.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-abnormally-large-dns-response.html", - "/en/security/*/prebuilt-rule-8-3-1-anomalous-linux-compiler-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-anomalous-linux-compiler-activity.html", - "/en/security/*/prebuilt-rule-8-3-1-anomalous-process-for-a-linux-population.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-anomalous-process-for-a-linux-population.html", - "/en/security/*/prebuilt-rule-8-3-1-anomalous-process-for-a-windows-population.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-anomalous-process-for-a-windows-population.html", - "/en/security/*/prebuilt-rule-8-3-1-anomalous-windows-process-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-anomalous-windows-process-creation.html", - "/en/security/*/prebuilt-rule-8-3-1-attempt-to-disable-gatekeeper.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-attempt-to-disable-gatekeeper.html", - "/en/security/*/prebuilt-rule-8-3-1-aws-root-login-without-mfa.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-aws-root-login-without-mfa.html", - "/en/security/*/prebuilt-rule-8-3-1-azure-active-directory-high-risk-sign-in.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-azure-active-directory-high-risk-sign-in.html", - "/en/security/*/prebuilt-rule-8-3-1-azure-active-directory-high-risk-user-sign-in-heuristic.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-azure-active-directory-high-risk-user-sign-in-heuristic.html", - "/en/security/*/prebuilt-rule-8-3-1-azure-automation-runbook-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-azure-automation-runbook-deleted.html", - "/en/security/*/prebuilt-rule-8-3-1-azure-privilege-identity-management-role-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-azure-privilege-identity-management-role-modified.html", - "/en/security/*/prebuilt-rule-8-3-1-binary-executed-from-shared-memory-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-binary-executed-from-shared-memory-directory.html", - "/en/security/*/prebuilt-rule-8-3-1-bypass-uac-via-event-viewer.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-bypass-uac-via-event-viewer.html", - "/en/security/*/prebuilt-rule-8-3-1-chkconfig-service-add.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-chkconfig-service-add.html", - "/en/security/*/prebuilt-rule-8-3-1-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-8-3-1-conhost-spawned-by-suspicious-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-conhost-spawned-by-suspicious-parent-process.html", - "/en/security/*/prebuilt-rule-8-3-1-creation-of-hidden-shared-object-file.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-creation-of-hidden-shared-object-file.html", - "/en/security/*/prebuilt-rule-8-3-1-creation-or-modification-of-root-certificate.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-creation-or-modification-of-root-certificate.html", - "/en/security/*/prebuilt-rule-8-3-1-direct-outbound-smb-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-direct-outbound-smb-connection.html", - "/en/security/*/prebuilt-rule-8-3-1-dynamic-linker-copy.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-dynamic-linker-copy.html", - "/en/security/*/prebuilt-rule-8-3-1-elastic-agent-service-terminated.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-elastic-agent-service-terminated.html", - "/en/security/*/prebuilt-rule-8-3-1-enumerating-domain-trusts-via-nltest-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-enumerating-domain-trusts-via-nltest-exe.html", - "/en/security/*/prebuilt-rule-8-3-1-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-8-3-1-execution-of-file-written-or-modified-by-microsoft-office.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-execution-of-file-written-or-modified-by-microsoft-office.html", - "/en/security/*/prebuilt-rule-8-3-1-execution-of-file-written-or-modified-by-pdf-reader.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-execution-of-file-written-or-modified-by-pdf-reader.html", - "/en/security/*/prebuilt-rule-8-3-1-execution-via-mssql-xp-cmdshell-stored-procedure.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-execution-via-mssql-xp-cmdshell-stored-procedure.html", - "/en/security/*/prebuilt-rule-8-3-1-finder-sync-plugin-registered-and-enabled.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-finder-sync-plugin-registered-and-enabled.html", - "/en/security/*/prebuilt-rule-8-3-1-image-file-execution-options-injection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-image-file-execution-options-injection.html", - "/en/security/*/prebuilt-rule-8-3-1-installation-of-custom-shim-databases.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-installation-of-custom-shim-databases.html", - "/en/security/*/prebuilt-rule-8-3-1-installutil-process-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-installutil-process-making-network-connections.html", - "/en/security/*/prebuilt-rule-8-3-1-interactive-terminal-spawned-via-python.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-interactive-terminal-spawned-via-python.html", - "/en/security/*/prebuilt-rule-8-3-1-kernel-module-load-via-insmod.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-kernel-module-load-via-insmod.html", - "/en/security/*/prebuilt-rule-8-3-1-kubernetes-pod-created-with-a-sensitive-hostpath-volume.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-kubernetes-pod-created-with-a-sensitive-hostpath-volume.html", - "/en/security/*/prebuilt-rule-8-3-1-kubernetes-suspicious-self-subject-review.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-kubernetes-suspicious-self-subject-review.html", - "/en/security/*/prebuilt-rule-8-3-1-kubernetes-user-exec-into-pod.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-kubernetes-user-exec-into-pod.html", - "/en/security/*/prebuilt-rule-8-3-1-launch-agent-creation-or-modification-and-immediate-loading.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-launch-agent-creation-or-modification-and-immediate-loading.html", - "/en/security/*/prebuilt-rule-8-3-1-macos-installer-package-spawns-network-event.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-macos-installer-package-spawns-network-event.html", - "/en/security/*/prebuilt-rule-8-3-1-microsoft-365-inbox-forwarding-rule-created.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-microsoft-365-inbox-forwarding-rule-created.html", - "/en/security/*/prebuilt-rule-8-3-1-microsoft-build-engine-started-by-an-office-application.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-microsoft-build-engine-started-by-an-office-application.html", - "/en/security/*/prebuilt-rule-8-3-1-modification-of-standard-authentication-module-or-configuration.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-modification-of-standard-authentication-module-or-configuration.html", - "/en/security/*/prebuilt-rule-8-3-1-mounting-hidden-or-webdav-remote-shares.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-mounting-hidden-or-webdav-remote-shares.html", - "/en/security/*/prebuilt-rule-8-3-1-mshta-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-mshta-making-network-connections.html", - "/en/security/*/prebuilt-rule-8-3-1-parent-process-pid-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-parent-process-pid-spoofing.html", - "/en/security/*/prebuilt-rule-8-3-1-persistence-via-docker-shortcut-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-persistence-via-docker-shortcut-modification.html", - "/en/security/*/prebuilt-rule-8-3-1-persistence-via-update-orchestrator-service-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-persistence-via-update-orchestrator-service-hijack.html", - "/en/security/*/prebuilt-rule-8-3-1-persistence-via-wmi-standard-registry-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-persistence-via-wmi-standard-registry-provider.html", - "/en/security/*/prebuilt-rule-8-3-1-possible-consent-grant-attack-via-azure-registered-application.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-possible-consent-grant-attack-via-azure-registered-application.html", - "/en/security/*/prebuilt-rule-8-3-1-potential-credential-access-via-trusted-developer-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-potential-credential-access-via-trusted-developer-utility.html", - "/en/security/*/prebuilt-rule-8-3-1-potential-credential-access-via-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-potential-credential-access-via-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-3-1-potential-kerberos-attack-via-bifrost.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-potential-kerberos-attack-via-bifrost.html", - "/en/security/*/prebuilt-rule-8-3-1-potential-local-ntlm-relay-via-http.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-potential-local-ntlm-relay-via-http.html", - "/en/security/*/prebuilt-rule-8-3-1-potential-sharprdp-behavior.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-potential-sharprdp-behavior.html", - "/en/security/*/prebuilt-rule-8-3-1-prebuilt-rules-8-3-1-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-prebuilt-rules-8-3-1-appendix.html", - "/en/security/*/prebuilt-rule-8-3-1-privilege-escalation-via-windir-environment-variable.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-privilege-escalation-via-windir-environment-variable.html", - "/en/security/*/prebuilt-rule-8-3-1-process-termination-followed-by-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-process-termination-followed-by-deletion.html", - "/en/security/*/prebuilt-rule-8-3-1-remote-file-download-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-remote-file-download-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-1-remotely-started-services-via-rpc.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-remotely-started-services-via-rpc.html", - "/en/security/*/prebuilt-rule-8-3-1-softwareupdate-preferences-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-softwareupdate-preferences-modification.html", - "/en/security/*/prebuilt-rule-8-3-1-ssh-authorized-keys-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-ssh-authorized-keys-file-modification.html", - "/en/security/*/prebuilt-rule-8-3-1-startup-folder-persistence-via-unsigned-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-startup-folder-persistence-via-unsigned-process.html", - "/en/security/*/prebuilt-rule-8-3-1-startup-or-run-key-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-startup-or-run-key-registry-modification.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-browser-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-browser-child-process.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-child-process-of-adobe-acrobat-reader-update-service.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-child-process-of-adobe-acrobat-reader-update-service.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-crontab-creation-or-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-crontab-creation-or-modification.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-execution-via-scheduled-task.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-execution-via-scheduled-task.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-file-creation-in-etc-for-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-file-creation-in-etc-for-persistence.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-macos-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-macos-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-managed-code-hosting-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-managed-code-hosting-process.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-microsoft-diagnostics-wizard-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-microsoft-diagnostics-wizard-execution.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-ms-outlook-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-ms-outlook-child-process.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-network-connection-attempt-by-root.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-network-connection-attempt-by-root.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-powershell-script.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-process-creation-calltrace.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-process-creation-calltrace.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-process-from-conhost.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-process-from-conhost.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-remote-registry-access-via-sebackupprivilege.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-remote-registry-access-via-sebackupprivilege.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-solarwinds-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-solarwinds-child-process.html", - "/en/security/*/prebuilt-rule-8-3-1-suspicious-wmic-xsl-script-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-suspicious-wmic-xsl-script-execution.html", - "/en/security/*/prebuilt-rule-8-3-1-svchost-spawning-cmd.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-svchost-spawning-cmd.html", - "/en/security/*/prebuilt-rule-8-3-1-uac-bypass-attempt-via-windows-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-uac-bypass-attempt-via-windows-directory-masquerading.html", - "/en/security/*/prebuilt-rule-8-3-1-uac-bypass-via-windows-firewall-snap-in-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-uac-bypass-via-windows-firewall-snap-in-hijack.html", - "/en/security/*/prebuilt-rule-8-3-1-uncommon-registry-persistence-change.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-uncommon-registry-persistence-change.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-aws-command-for-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-aws-command-for-a-user.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-child-process-of-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-child-process-of-dns-exe.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-child-processes-of-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-child-processes-of-rundll32.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-city-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-city-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-country-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-country-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-file-creation-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-file-creation-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-linux-network-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-linux-network-activity.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-linux-network-connection-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-linux-network-connection-discovery.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-linux-network-port-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-linux-network-port-activity.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-linux-process-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-linux-process-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-linux-process-discovery-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-linux-process-discovery-activity.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-linux-system-information-discovery-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-linux-system-information-discovery-activity.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-linux-system-network-configuration-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-linux-system-network-configuration-discovery.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-linux-system-owner-or-user-discovery-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-linux-system-owner-or-user-discovery-activity.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-linux-user-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-linux-user-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-linux-username.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-linux-username.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-login-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-login-activity.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-network-activity-from-a-windows-system-binary.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-network-activity-from-a-windows-system-binary.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-process-for-a-linux-host.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-process-for-a-linux-host.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-sudo-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-sudo-activity.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-windows-network-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-windows-network-activity.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-windows-path-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-windows-path-activity.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-windows-process-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-windows-process-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-windows-remote-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-windows-remote-user.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-windows-service.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-windows-service.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-windows-user-calling-the-metadata-service.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-windows-user-calling-the-metadata-service.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-windows-user-privilege-elevation-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-windows-user-privilege-elevation-activity.html", - "/en/security/*/prebuilt-rule-8-3-1-unusual-windows-username.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-unusual-windows-username.html", - "/en/security/*/prebuilt-rule-8-3-1-whoami-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-whoami-process-activity.html", - "/en/security/*/prebuilt-rule-8-3-1-windows-defender-disabled-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-windows-defender-disabled-via-registry-modification.html", - "/en/security/*/prebuilt-rule-8-3-1-wmi-incoming-lateral-movement.html": "/guide/en/security/8.17/prebuilt-rule-8-3-1-wmi-incoming-lateral-movement.html", - "/en/security/*/prebuilt-rule-8-3-2-a-scheduled-task-was-created.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-a-scheduled-task-was-created.html", - "/en/security/*/prebuilt-rule-8-3-2-a-scheduled-task-was-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-a-scheduled-task-was-updated.html", - "/en/security/*/prebuilt-rule-8-3-2-abnormal-process-id-or-lock-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-abnormal-process-id-or-lock-file-created.html", - "/en/security/*/prebuilt-rule-8-3-2-abnormally-large-dns-response.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-abnormally-large-dns-response.html", - "/en/security/*/prebuilt-rule-8-3-2-account-configured-with-never-expiring-password.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-account-configured-with-never-expiring-password.html", - "/en/security/*/prebuilt-rule-8-3-2-account-discovery-command-via-system-account.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-account-discovery-command-via-system-account.html", - "/en/security/*/prebuilt-rule-8-3-2-adding-hidden-file-attribute-via-attrib.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-adding-hidden-file-attribute-via-attrib.html", - "/en/security/*/prebuilt-rule-8-3-2-adfind-command-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-adfind-command-activity.html", - "/en/security/*/prebuilt-rule-8-3-2-adminsdholder-sdprop-exclusion-added.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-adminsdholder-sdprop-exclusion-added.html", - "/en/security/*/prebuilt-rule-8-3-2-adobe-hijack-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-adobe-hijack-persistence.html", - "/en/security/*/prebuilt-rule-8-3-2-application-removed-from-blocklist-in-google-workspace.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-application-removed-from-blocklist-in-google-workspace.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-access-secret-in-secrets-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-access-secret-in-secrets-manager.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-cloudtrail-log-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-cloudtrail-log-deleted.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-cloudtrail-log-suspended.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-cloudtrail-log-suspended.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-cloudtrail-log-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-cloudtrail-log-updated.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-cloudwatch-alarm-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-cloudwatch-alarm-deletion.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-cloudwatch-log-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-cloudwatch-log-group-deletion.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-cloudwatch-log-stream-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-cloudwatch-log-stream-deletion.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-config-resource-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-config-resource-deletion.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-ec2-snapshot-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-ec2-snapshot-activity.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-execution-via-system-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-execution-via-system-manager.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-iam-assume-role-policy-update.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-iam-assume-role-policy-update.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-iam-brute-force-of-assume-role-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-iam-brute-force-of-assume-role-policy.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-iam-deactivation-of-mfa-device.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-iam-deactivation-of-mfa-device.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-iam-user-addition-to-group.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-iam-user-addition-to-group.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-management-console-root-login.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-management-console-root-login.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-root-login-without-mfa.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-root-login-without-mfa.html", - "/en/security/*/prebuilt-rule-8-3-2-aws-vpc-flow-logs-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-aws-vpc-flow-logs-deletion.html", - "/en/security/*/prebuilt-rule-8-3-2-azure-active-directory-high-risk-sign-in.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-azure-active-directory-high-risk-sign-in.html", - "/en/security/*/prebuilt-rule-8-3-2-azure-active-directory-high-risk-user-sign-in-heuristic.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-azure-active-directory-high-risk-user-sign-in-heuristic.html", - "/en/security/*/prebuilt-rule-8-3-2-azure-active-directory-powershell-sign-in.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-azure-active-directory-powershell-sign-in.html", - "/en/security/*/prebuilt-rule-8-3-2-azure-privilege-identity-management-role-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-azure-privilege-identity-management-role-modified.html", - "/en/security/*/prebuilt-rule-8-3-2-azure-service-principal-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-azure-service-principal-addition.html", - "/en/security/*/prebuilt-rule-8-3-2-bypass-uac-via-event-viewer.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-bypass-uac-via-event-viewer.html", - "/en/security/*/prebuilt-rule-8-3-2-clearing-windows-console-history.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-clearing-windows-console-history.html", - "/en/security/*/prebuilt-rule-8-3-2-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-8-3-2-command-execution-via-solarwinds-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-command-execution-via-solarwinds-process.html", - "/en/security/*/prebuilt-rule-8-3-2-component-object-model-hijacking.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-component-object-model-hijacking.html", - "/en/security/*/prebuilt-rule-8-3-2-conhost-spawned-by-suspicious-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-conhost-spawned-by-suspicious-parent-process.html", - "/en/security/*/prebuilt-rule-8-3-2-connection-to-commonly-abused-web-services.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-connection-to-commonly-abused-web-services.html", - "/en/security/*/prebuilt-rule-8-3-2-control-panel-process-with-unusual-arguments.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-control-panel-process-with-unusual-arguments.html", - "/en/security/*/prebuilt-rule-8-3-2-creation-of-a-hidden-local-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-creation-of-a-hidden-local-user-account.html", - "/en/security/*/prebuilt-rule-8-3-2-creation-or-modification-of-a-new-gpo-scheduled-task-or-service.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-creation-or-modification-of-a-new-gpo-scheduled-task-or-service.html", - "/en/security/*/prebuilt-rule-8-3-2-creation-or-modification-of-root-certificate.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-creation-or-modification-of-root-certificate.html", - "/en/security/*/prebuilt-rule-8-3-2-credential-acquisition-via-registry-hive-dumping.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-credential-acquisition-via-registry-hive-dumping.html", - "/en/security/*/prebuilt-rule-8-3-2-delete-volume-usn-journal-with-fsutil.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-delete-volume-usn-journal-with-fsutil.html", - "/en/security/*/prebuilt-rule-8-3-2-deleting-backup-catalogs-with-wbadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-deleting-backup-catalogs-with-wbadmin.html", - "/en/security/*/prebuilt-rule-8-3-2-direct-outbound-smb-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-direct-outbound-smb-connection.html", - "/en/security/*/prebuilt-rule-8-3-2-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-3-2-disable-windows-firewall-rules-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-disable-windows-firewall-rules-via-netsh.html", - "/en/security/*/prebuilt-rule-8-3-2-disabling-user-account-control-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-disabling-user-account-control-via-registry-modification.html", - "/en/security/*/prebuilt-rule-8-3-2-disabling-windows-defender-security-settings-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-disabling-windows-defender-security-settings-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-2-enable-host-network-discovery-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-enable-host-network-discovery-via-netsh.html", - "/en/security/*/prebuilt-rule-8-3-2-encrypting-files-with-winrar-or-7z.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-encrypting-files-with-winrar-or-7z.html", - "/en/security/*/prebuilt-rule-8-3-2-enumerating-domain-trusts-via-nltest-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-enumerating-domain-trusts-via-nltest-exe.html", - "/en/security/*/prebuilt-rule-8-3-2-enumeration-command-spawned-via-wmiprvse.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-enumeration-command-spawned-via-wmiprvse.html", - "/en/security/*/prebuilt-rule-8-3-2-enumeration-of-administrator-accounts.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-enumeration-of-administrator-accounts.html", - "/en/security/*/prebuilt-rule-8-3-2-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-8-3-2-execution-from-unusual-directory-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-execution-from-unusual-directory-command-line.html", - "/en/security/*/prebuilt-rule-8-3-2-execution-of-com-object-via-xwizard.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-execution-of-com-object-via-xwizard.html", - "/en/security/*/prebuilt-rule-8-3-2-execution-of-file-written-or-modified-by-microsoft-office.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-execution-of-file-written-or-modified-by-microsoft-office.html", - "/en/security/*/prebuilt-rule-8-3-2-execution-of-file-written-or-modified-by-pdf-reader.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-execution-of-file-written-or-modified-by-pdf-reader.html", - "/en/security/*/prebuilt-rule-8-3-2-execution-of-persistent-suspicious-program.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-execution-of-persistent-suspicious-program.html", - "/en/security/*/prebuilt-rule-8-3-2-execution-via-mssql-xp-cmdshell-stored-procedure.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-execution-via-mssql-xp-cmdshell-stored-procedure.html", - "/en/security/*/prebuilt-rule-8-3-2-execution-via-tsclient-mountpoint.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-execution-via-tsclient-mountpoint.html", - "/en/security/*/prebuilt-rule-8-3-2-exporting-exchange-mailbox-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-exporting-exchange-mailbox-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-2-external-ip-lookup-from-non-browser-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-external-ip-lookup-from-non-browser-process.html", - "/en/security/*/prebuilt-rule-8-3-2-full-user-mode-dumps-enabled-system-wide.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-full-user-mode-dumps-enabled-system-wide.html", - "/en/security/*/prebuilt-rule-8-3-2-google-drive-ownership-transferred-via-google-workspace.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-google-drive-ownership-transferred-via-google-workspace.html", - "/en/security/*/prebuilt-rule-8-3-2-google-workspace-2sv-policy-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-google-workspace-2sv-policy-disabled.html", - "/en/security/*/prebuilt-rule-8-3-2-google-workspace-admin-role-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-google-workspace-admin-role-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-8-3-2-google-workspace-bitlocker-setting-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-google-workspace-bitlocker-setting-disabled.html", - "/en/security/*/prebuilt-rule-8-3-2-google-workspace-custom-gmail-route-created-or-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-google-workspace-custom-gmail-route-created-or-modified.html", - "/en/security/*/prebuilt-rule-8-3-2-google-workspace-mfa-enforcement-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-google-workspace-mfa-enforcement-disabled.html", - "/en/security/*/prebuilt-rule-8-3-2-google-workspace-restrictions-for-google-marketplace-modified-to-allow-any-app.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-google-workspace-restrictions-for-google-marketplace-modified-to-allow-any-app.html", - "/en/security/*/prebuilt-rule-8-3-2-google-workspace-user-group-access-modified-to-allow-external-access.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-google-workspace-user-group-access-modified-to-allow-external-access.html", - "/en/security/*/prebuilt-rule-8-3-2-google-workspace-user-organizational-unit-changed.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-google-workspace-user-organizational-unit-changed.html", - "/en/security/*/prebuilt-rule-8-3-2-group-policy-abuse-for-privilege-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-group-policy-abuse-for-privilege-addition.html", - "/en/security/*/prebuilt-rule-8-3-2-high-number-of-process-and-or-service-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-high-number-of-process-and-or-service-terminations.html", - "/en/security/*/prebuilt-rule-8-3-2-high-number-of-process-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-high-number-of-process-terminations.html", - "/en/security/*/prebuilt-rule-8-3-2-hosts-file-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-hosts-file-modified.html", - "/en/security/*/prebuilt-rule-8-3-2-iis-http-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-iis-http-logging-disabled.html", - "/en/security/*/prebuilt-rule-8-3-2-imageload-via-windows-update-auto-update-client.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-imageload-via-windows-update-auto-update-client.html", - "/en/security/*/prebuilt-rule-8-3-2-incoming-dcom-lateral-movement-via-mshta.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-incoming-dcom-lateral-movement-via-mshta.html", - "/en/security/*/prebuilt-rule-8-3-2-incoming-dcom-lateral-movement-with-mmc.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-incoming-dcom-lateral-movement-with-mmc.html", - "/en/security/*/prebuilt-rule-8-3-2-incoming-dcom-lateral-movement-with-shellbrowserwindow-or-shellwindows.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-incoming-dcom-lateral-movement-with-shellbrowserwindow-or-shellwindows.html", - "/en/security/*/prebuilt-rule-8-3-2-installation-of-custom-shim-databases.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-installation-of-custom-shim-databases.html", - "/en/security/*/prebuilt-rule-8-3-2-installutil-process-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-installutil-process-making-network-connections.html", - "/en/security/*/prebuilt-rule-8-3-2-kerberos-pre-authentication-disabled-for-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-kerberos-pre-authentication-disabled-for-user.html", - "/en/security/*/prebuilt-rule-8-3-2-kerberos-traffic-from-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-kerberos-traffic-from-unusual-process.html", - "/en/security/*/prebuilt-rule-8-3-2-lsass-memory-dump-handle-access.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-lsass-memory-dump-handle-access.html", - "/en/security/*/prebuilt-rule-8-3-2-microsoft-build-engine-started-an-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-microsoft-build-engine-started-an-unusual-process.html", - "/en/security/*/prebuilt-rule-8-3-2-microsoft-build-engine-started-by-a-system-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-microsoft-build-engine-started-by-a-system-process.html", - "/en/security/*/prebuilt-rule-8-3-2-microsoft-build-engine-started-by-an-office-application.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-microsoft-build-engine-started-by-an-office-application.html", - "/en/security/*/prebuilt-rule-8-3-2-microsoft-build-engine-using-an-alternate-name.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-microsoft-build-engine-using-an-alternate-name.html", - "/en/security/*/prebuilt-rule-8-3-2-microsoft-iis-connection-strings-decryption.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-microsoft-iis-connection-strings-decryption.html", - "/en/security/*/prebuilt-rule-8-3-2-microsoft-iis-service-account-password-dumped.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-microsoft-iis-service-account-password-dumped.html", - "/en/security/*/prebuilt-rule-8-3-2-microsoft-windows-defender-tampering.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-microsoft-windows-defender-tampering.html", - "/en/security/*/prebuilt-rule-8-3-2-mimikatz-memssp-log-file-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-mimikatz-memssp-log-file-detected.html", - "/en/security/*/prebuilt-rule-8-3-2-modification-of-amsienable-registry-key.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-modification-of-amsienable-registry-key.html", - "/en/security/*/prebuilt-rule-8-3-2-modification-of-boot-configuration.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-modification-of-boot-configuration.html", - "/en/security/*/prebuilt-rule-8-3-2-modification-of-wdigest-security-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-modification-of-wdigest-security-provider.html", - "/en/security/*/prebuilt-rule-8-3-2-mounting-hidden-or-webdav-remote-shares.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-mounting-hidden-or-webdav-remote-shares.html", - "/en/security/*/prebuilt-rule-8-3-2-ms-office-macro-security-registry-modifications.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-ms-office-macro-security-registry-modifications.html", - "/en/security/*/prebuilt-rule-8-3-2-mshta-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-mshta-making-network-connections.html", - "/en/security/*/prebuilt-rule-8-3-2-multi-factor-authentication-disabled-for-an-azure-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-multi-factor-authentication-disabled-for-an-azure-user.html", - "/en/security/*/prebuilt-rule-8-3-2-multiple-logon-failure-followed-by-logon-success.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-multiple-logon-failure-followed-by-logon-success.html", - "/en/security/*/prebuilt-rule-8-3-2-multiple-logon-failure-from-the-same-source-address.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-multiple-logon-failure-from-the-same-source-address.html", - "/en/security/*/prebuilt-rule-8-3-2-multiple-vault-web-credentials-read.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-multiple-vault-web-credentials-read.html", - "/en/security/*/prebuilt-rule-8-3-2-namespace-manipulation-using-unshare.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-namespace-manipulation-using-unshare.html", - "/en/security/*/prebuilt-rule-8-3-2-netcat-network-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-netcat-network-activity.html", - "/en/security/*/prebuilt-rule-8-3-2-network-connection-via-certutil.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-network-connection-via-certutil.html", - "/en/security/*/prebuilt-rule-8-3-2-new-activesyncalloweddeviceid-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-new-activesyncalloweddeviceid-added-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-2-ntds-or-sam-database-file-copied.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-ntds-or-sam-database-file-copied.html", - "/en/security/*/prebuilt-rule-8-3-2-peripheral-device-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-peripheral-device-discovery.html", - "/en/security/*/prebuilt-rule-8-3-2-persistence-via-telemetrycontroller-scheduled-task-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-persistence-via-telemetrycontroller-scheduled-task-hijack.html", - "/en/security/*/prebuilt-rule-8-3-2-persistence-via-update-orchestrator-service-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-persistence-via-update-orchestrator-service-hijack.html", - "/en/security/*/prebuilt-rule-8-3-2-persistence-via-wmi-event-subscription.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-persistence-via-wmi-event-subscription.html", - "/en/security/*/prebuilt-rule-8-3-2-persistent-scripts-in-the-startup-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-persistent-scripts-in-the-startup-directory.html", - "/en/security/*/prebuilt-rule-8-3-2-port-forwarding-rule-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-port-forwarding-rule-addition.html", - "/en/security/*/prebuilt-rule-8-3-2-possible-consent-grant-attack-via-azure-registered-application.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-possible-consent-grant-attack-via-azure-registered-application.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-application-shimming-via-sdbinst.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-application-shimming-via-sdbinst.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-credential-access-via-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-credential-access-via-dcsync.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-credential-access-via-trusted-developer-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-credential-access-via-trusted-developer-utility.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-credential-access-via-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-credential-access-via-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-dns-tunneling-via-nslookup.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-dns-tunneling-via-nslookup.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-evasion-via-filter-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-evasion-via-filter-manager.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-invoke-mimikatz-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-invoke-mimikatz-powershell-script.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-lateral-tool-transfer-via-smb-share.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-lateral-tool-transfer-via-smb-share.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-linux-ssh-brute-force-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-linux-ssh-brute-force-detected.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-local-ntlm-relay-via-http.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-local-ntlm-relay-via-http.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-macos-ssh-brute-force-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-macos-ssh-brute-force-detected.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-modification-of-accessibility-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-modification-of-accessibility-binaries.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-privilege-escalation-via-installerfiletakeover.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-privilege-escalation-via-installerfiletakeover.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-process-injection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-process-injection-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-remote-credential-access-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-remote-credential-access-via-registry.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-remote-desktop-tunneling-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-remote-desktop-tunneling-detected.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-reverse-shell-activity-via-terminal.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-reverse-shell-activity-via-terminal.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-sharprdp-behavior.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-sharprdp-behavior.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-shell-via-web-server.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-shell-via-web-server.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-ssh-brute-force-detected-on-privileged-account.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-ssh-brute-force-detected-on-privileged-account.html", - "/en/security/*/prebuilt-rule-8-3-2-potential-ssh-password-guessing.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-potential-ssh-password-guessing.html", - "/en/security/*/prebuilt-rule-8-3-2-powershell-kerberos-ticket-request.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-powershell-kerberos-ticket-request.html", - "/en/security/*/prebuilt-rule-8-3-2-powershell-keylogging-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-powershell-keylogging-script.html", - "/en/security/*/prebuilt-rule-8-3-2-powershell-minidump-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-powershell-minidump-script.html", - "/en/security/*/prebuilt-rule-8-3-2-powershell-psreflect-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-powershell-psreflect-script.html", - "/en/security/*/prebuilt-rule-8-3-2-powershell-script-block-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-powershell-script-block-logging-disabled.html", - "/en/security/*/prebuilt-rule-8-3-2-powershell-script-with-token-impersonation-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-powershell-script-with-token-impersonation-capabilities.html", - "/en/security/*/prebuilt-rule-8-3-2-powershell-share-enumeration-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-powershell-share-enumeration-script.html", - "/en/security/*/prebuilt-rule-8-3-2-powershell-suspicious-discovery-related-windows-api-functions.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-powershell-suspicious-discovery-related-windows-api-functions.html", - "/en/security/*/prebuilt-rule-8-3-2-powershell-suspicious-payload-encoded-and-compressed.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-powershell-suspicious-payload-encoded-and-compressed.html", - "/en/security/*/prebuilt-rule-8-3-2-powershell-suspicious-script-with-audio-capture-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-powershell-suspicious-script-with-audio-capture-capabilities.html", - "/en/security/*/prebuilt-rule-8-3-2-powershell-suspicious-script-with-screenshot-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-powershell-suspicious-script-with-screenshot-capabilities.html", - "/en/security/*/prebuilt-rule-8-3-2-prebuilt-rules-8-3-2-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-prebuilt-rules-8-3-2-appendix.html", - "/en/security/*/prebuilt-rule-8-3-2-privilege-escalation-via-named-pipe-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-privilege-escalation-via-named-pipe-impersonation.html", - "/en/security/*/prebuilt-rule-8-3-2-privileged-account-brute-force.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-privileged-account-brute-force.html", - "/en/security/*/prebuilt-rule-8-3-2-process-activity-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-process-activity-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-8-3-2-process-creation-via-secondary-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-process-creation-via-secondary-logon.html", - "/en/security/*/prebuilt-rule-8-3-2-process-execution-from-an-unusual-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-process-execution-from-an-unusual-directory.html", - "/en/security/*/prebuilt-rule-8-3-2-psexec-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-psexec-network-connection.html", - "/en/security/*/prebuilt-rule-8-3-2-rare-aws-error-code.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-rare-aws-error-code.html", - "/en/security/*/prebuilt-rule-8-3-2-rdp-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-rdp-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-8-3-2-remote-desktop-enabled-in-windows-firewall-by-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-remote-desktop-enabled-in-windows-firewall-by-netsh.html", - "/en/security/*/prebuilt-rule-8-3-2-remote-execution-via-file-shares.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-remote-execution-via-file-shares.html", - "/en/security/*/prebuilt-rule-8-3-2-remote-file-copy-to-a-hidden-share.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-remote-file-copy-to-a-hidden-share.html", - "/en/security/*/prebuilt-rule-8-3-2-remote-file-copy-via-teamviewer.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-remote-file-copy-via-teamviewer.html", - "/en/security/*/prebuilt-rule-8-3-2-remote-file-download-via-desktopimgdownldr-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-remote-file-download-via-desktopimgdownldr-utility.html", - "/en/security/*/prebuilt-rule-8-3-2-remote-file-download-via-mpcmdrun.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-remote-file-download-via-mpcmdrun.html", - "/en/security/*/prebuilt-rule-8-3-2-remote-file-download-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-remote-file-download-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-2-remote-file-download-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-remote-file-download-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-8-3-2-remote-logon-followed-by-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-remote-logon-followed-by-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-3-2-remote-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-remote-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-3-2-remote-system-discovery-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-remote-system-discovery-commands.html", - "/en/security/*/prebuilt-rule-8-3-2-remotely-started-services-via-rpc.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-remotely-started-services-via-rpc.html", - "/en/security/*/prebuilt-rule-8-3-2-renamed-autoit-scripts-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-renamed-autoit-scripts-interpreter.html", - "/en/security/*/prebuilt-rule-8-3-2-scheduled-task-execution-at-scale-via-gpo.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-scheduled-task-execution-at-scale-via-gpo.html", - "/en/security/*/prebuilt-rule-8-3-2-searching-for-saved-credentials-via-vaultcmd.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-searching-for-saved-credentials-via-vaultcmd.html", - "/en/security/*/prebuilt-rule-8-3-2-security-software-discovery-using-wmic.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-security-software-discovery-using-wmic.html", - "/en/security/*/prebuilt-rule-8-3-2-security-software-discovery-via-grep.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-security-software-discovery-via-grep.html", - "/en/security/*/prebuilt-rule-8-3-2-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-8-3-2-service-command-lateral-movement.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-service-command-lateral-movement.html", - "/en/security/*/prebuilt-rule-8-3-2-shadow-file-read-via-command-line-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-shadow-file-read-via-command-line-utilities.html", - "/en/security/*/prebuilt-rule-8-3-2-signed-proxy-execution-via-ms-work-folders.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-signed-proxy-execution-via-ms-work-folders.html", - "/en/security/*/prebuilt-rule-8-3-2-spike-in-aws-error-messages.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-spike-in-aws-error-messages.html", - "/en/security/*/prebuilt-rule-8-3-2-startup-folder-persistence-via-unsigned-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-startup-folder-persistence-via-unsigned-process.html", - "/en/security/*/prebuilt-rule-8-3-2-startup-logon-script-added-to-group-policy-object.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-startup-logon-script-added-to-group-policy-object.html", - "/en/security/*/prebuilt-rule-8-3-2-startup-or-run-key-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-startup-or-run-key-registry-modification.html", - "/en/security/*/prebuilt-rule-8-3-2-startup-persistence-by-a-suspicious-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-startup-persistence-by-a-suspicious-process.html", - "/en/security/*/prebuilt-rule-8-3-2-sunburst-command-and-control-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-sunburst-command-and-control-activity.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-cmd-execution-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-cmd-execution-via-wmi.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-endpoint-security-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-endpoint-security-parent-process.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-execution-short-program-name.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-execution-short-program-name.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-explorer-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-explorer-child-process.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-java-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-java-child-process.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-microsoft-diagnostics-wizard-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-microsoft-diagnostics-wizard-execution.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-ms-outlook-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-ms-outlook-child-process.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-net-code-compilation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-net-code-compilation.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-net-reflection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-net-reflection-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-pdf-reader-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-pdf-reader-child-process.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-portable-executable-encoded-in-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-portable-executable-encoded-in-powershell-script.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-powershell-engine-imageload.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-powershell-engine-imageload.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-print-spooler-spl-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-print-spooler-spl-file-created.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-process-access-via-direct-system-call.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-process-access-via-direct-system-call.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-process-creation-calltrace.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-process-creation-calltrace.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-process-execution-via-renamed-psexec-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-process-execution-via-renamed-psexec-executable.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-remote-registry-access-via-sebackupprivilege.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-remote-registry-access-via-sebackupprivilege.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-solarwinds-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-solarwinds-child-process.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-startup-shell-folder-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-startup-shell-folder-modification.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-werfault-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-werfault-child-process.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-wmic-xsl-script-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-wmic-xsl-script-execution.html", - "/en/security/*/prebuilt-rule-8-3-2-suspicious-zoom-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-suspicious-zoom-child-process.html", - "/en/security/*/prebuilt-rule-8-3-2-svchost-spawning-cmd.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-svchost-spawning-cmd.html", - "/en/security/*/prebuilt-rule-8-3-2-symbolic-link-to-shadow-copy-created.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-symbolic-link-to-shadow-copy-created.html", - "/en/security/*/prebuilt-rule-8-3-2-system-shells-via-services.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-system-shells-via-services.html", - "/en/security/*/prebuilt-rule-8-3-2-temporarily-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-temporarily-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-3-2-third-party-backup-files-deleted-via-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-third-party-backup-files-deleted-via-unexpected-process.html", - "/en/security/*/prebuilt-rule-8-3-2-threat-intel-filebeat-module-v8-x-indicator-match.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-threat-intel-filebeat-module-v8-x-indicator-match.html", - "/en/security/*/prebuilt-rule-8-3-2-threat-intel-indicator-match.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-threat-intel-indicator-match.html", - "/en/security/*/prebuilt-rule-8-3-2-uac-bypass-attempt-via-elevated-com-internet-explorer-add-on-installer.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-uac-bypass-attempt-via-elevated-com-internet-explorer-add-on-installer.html", - "/en/security/*/prebuilt-rule-8-3-2-uac-bypass-attempt-via-windows-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-uac-bypass-attempt-via-windows-directory-masquerading.html", - "/en/security/*/prebuilt-rule-8-3-2-uac-bypass-attempt-with-ieditionupgrademanager-elevated-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-uac-bypass-attempt-with-ieditionupgrademanager-elevated-com-interface.html", - "/en/security/*/prebuilt-rule-8-3-2-uac-bypass-via-icmluautil-elevated-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-uac-bypass-via-icmluautil-elevated-com-interface.html", - "/en/security/*/prebuilt-rule-8-3-2-uac-bypass-via-windows-firewall-snap-in-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-uac-bypass-via-windows-firewall-snap-in-hijack.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-aws-command-for-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-aws-command-for-a-user.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-child-process-from-a-system-virtual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-child-process-from-a-system-virtual-process.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-child-process-of-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-child-process-of-dns-exe.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-child-processes-of-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-child-processes-of-rundll32.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-city-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-city-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-country-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-country-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-executable-file-creation-by-a-system-critical-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-executable-file-creation-by-a-system-critical-process.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-file-creation-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-file-creation-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-network-activity-from-a-windows-system-binary.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-network-activity-from-a-windows-system-binary.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-network-connection-via-dllhost.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-network-connection-via-dllhost.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-network-connection-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-network-connection-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-parent-child-relationship.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-parent-child-relationship.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-parent-process-for-cmd-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-parent-process-for-cmd-exe.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-process-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-process-network-connection.html", - "/en/security/*/prebuilt-rule-8-3-2-unusual-service-host-child-process-childless-service.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-unusual-service-host-child-process-childless-service.html", - "/en/security/*/prebuilt-rule-8-3-2-user-account-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-user-account-creation.html", - "/en/security/*/prebuilt-rule-8-3-2-user-account-exposed-to-kerberoasting.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-user-account-exposed-to-kerberoasting.html", - "/en/security/*/prebuilt-rule-8-3-2-user-added-to-privileged-group-in-active-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-user-added-to-privileged-group-in-active-directory.html", - "/en/security/*/prebuilt-rule-8-3-2-volume-shadow-copy-deleted-or-resized-via-vssadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-volume-shadow-copy-deleted-or-resized-via-vssadmin.html", - "/en/security/*/prebuilt-rule-8-3-2-volume-shadow-copy-deletion-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-volume-shadow-copy-deletion-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-2-volume-shadow-copy-deletion-via-wmic.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-volume-shadow-copy-deletion-via-wmic.html", - "/en/security/*/prebuilt-rule-8-3-2-web-shell-detection-script-process-child-of-common-web-processes.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-web-shell-detection-script-process-child-of-common-web-processes.html", - "/en/security/*/prebuilt-rule-8-3-2-whoami-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-whoami-process-activity.html", - "/en/security/*/prebuilt-rule-8-3-2-windows-defender-disabled-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-windows-defender-disabled-via-registry-modification.html", - "/en/security/*/prebuilt-rule-8-3-2-windows-defender-exclusions-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-windows-defender-exclusions-added-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-2-windows-event-logs-cleared.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-windows-event-logs-cleared.html", - "/en/security/*/prebuilt-rule-8-3-2-windows-firewall-disabled-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-windows-firewall-disabled-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-2-windows-network-enumeration.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-windows-network-enumeration.html", - "/en/security/*/prebuilt-rule-8-3-2-windows-registry-file-creation-in-smb-share.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-windows-registry-file-creation-in-smb-share.html", - "/en/security/*/prebuilt-rule-8-3-2-windows-script-executing-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-windows-script-executing-powershell.html", - "/en/security/*/prebuilt-rule-8-3-2-windows-script-interpreter-executing-process-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-windows-script-interpreter-executing-process-via-wmi.html", - "/en/security/*/prebuilt-rule-8-3-2-wmi-incoming-lateral-movement.html": "/guide/en/security/8.17/prebuilt-rule-8-3-2-wmi-incoming-lateral-movement.html", - "/en/security/*/prebuilt-rule-8-3-3-a-scheduled-task-was-created.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-a-scheduled-task-was-created.html", - "/en/security/*/prebuilt-rule-8-3-3-a-scheduled-task-was-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-a-scheduled-task-was-updated.html", - "/en/security/*/prebuilt-rule-8-3-3-abnormal-process-id-or-lock-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-abnormal-process-id-or-lock-file-created.html", - "/en/security/*/prebuilt-rule-8-3-3-abnormally-large-dns-response.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-abnormally-large-dns-response.html", - "/en/security/*/prebuilt-rule-8-3-3-accepted-default-telnet-port-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-accepted-default-telnet-port-connection.html", - "/en/security/*/prebuilt-rule-8-3-3-access-of-stored-browser-credentials.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-access-of-stored-browser-credentials.html", - "/en/security/*/prebuilt-rule-8-3-3-access-to-a-sensitive-ldap-attribute.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-access-to-a-sensitive-ldap-attribute.html", - "/en/security/*/prebuilt-rule-8-3-3-access-to-keychain-credentials-directories.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-access-to-keychain-credentials-directories.html", - "/en/security/*/prebuilt-rule-8-3-3-account-configured-with-never-expiring-password.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-account-configured-with-never-expiring-password.html", - "/en/security/*/prebuilt-rule-8-3-3-account-discovery-command-via-system-account.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-account-discovery-command-via-system-account.html", - "/en/security/*/prebuilt-rule-8-3-3-account-password-reset-remotely.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-account-password-reset-remotely.html", - "/en/security/*/prebuilt-rule-8-3-3-adding-hidden-file-attribute-via-attrib.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-adding-hidden-file-attribute-via-attrib.html", - "/en/security/*/prebuilt-rule-8-3-3-adfind-command-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-adfind-command-activity.html", - "/en/security/*/prebuilt-rule-8-3-3-administrator-privileges-assigned-to-an-okta-group.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-administrator-privileges-assigned-to-an-okta-group.html", - "/en/security/*/prebuilt-rule-8-3-3-administrator-role-assigned-to-an-okta-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-administrator-role-assigned-to-an-okta-user.html", - "/en/security/*/prebuilt-rule-8-3-3-adminsdholder-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-adminsdholder-backdoor.html", - "/en/security/*/prebuilt-rule-8-3-3-adminsdholder-sdprop-exclusion-added.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-adminsdholder-sdprop-exclusion-added.html", - "/en/security/*/prebuilt-rule-8-3-3-adobe-hijack-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-adobe-hijack-persistence.html", - "/en/security/*/prebuilt-rule-8-3-3-adversary-behavior-detected-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-adversary-behavior-detected-elastic-endgame.html", - "/en/security/*/prebuilt-rule-8-3-3-apple-script-execution-followed-by-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-apple-script-execution-followed-by-network-connection.html", - "/en/security/*/prebuilt-rule-8-3-3-apple-scripting-execution-with-administrator-privileges.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-apple-scripting-execution-with-administrator-privileges.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-create-okta-api-token.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-create-okta-api-token.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-deactivate-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-deactivate-an-okta-application.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-deactivate-an-okta-network-zone.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-deactivate-an-okta-network-zone.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-deactivate-an-okta-policy-rule.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-deactivate-an-okta-policy-rule.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-deactivate-an-okta-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-deactivate-an-okta-policy.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-deactivate-mfa-for-an-okta-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-deactivate-mfa-for-an-okta-user-account.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-delete-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-delete-an-okta-application.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-delete-an-okta-network-zone.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-delete-an-okta-network-zone.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-delete-an-okta-policy-rule.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-delete-an-okta-policy-rule.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-delete-an-okta-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-delete-an-okta-policy.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-disable-gatekeeper.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-disable-gatekeeper.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-disable-syslog-service.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-disable-syslog-service.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-enable-the-root-account.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-enable-the-root-account.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-install-root-certificate.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-install-root-certificate.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-modify-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-modify-an-okta-application.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-modify-an-okta-network-zone.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-modify-an-okta-network-zone.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-modify-an-okta-policy-rule.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-modify-an-okta-policy-rule.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-modify-an-okta-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-modify-an-okta-policy.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-mount-smb-share-via-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-mount-smb-share-via-command-line.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-remove-file-quarantine-attribute.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-remove-file-quarantine-attribute.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-reset-mfa-factors-for-an-okta-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-reset-mfa-factors-for-an-okta-user-account.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-revoke-okta-api-token.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-revoke-okta-api-token.html", - "/en/security/*/prebuilt-rule-8-3-3-attempt-to-unload-elastic-endpoint-security-kernel-extension.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempt-to-unload-elastic-endpoint-security-kernel-extension.html", - "/en/security/*/prebuilt-rule-8-3-3-attempted-bypass-of-okta-mfa.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempted-bypass-of-okta-mfa.html", - "/en/security/*/prebuilt-rule-8-3-3-attempts-to-brute-force-an-okta-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-attempts-to-brute-force-an-okta-user-account.html", - "/en/security/*/prebuilt-rule-8-3-3-authorization-plugin-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-authorization-plugin-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-access-secret-in-secrets-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-access-secret-in-secrets-manager.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-cloudtrail-log-created.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-cloudtrail-log-created.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-cloudtrail-log-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-cloudtrail-log-deleted.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-cloudtrail-log-suspended.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-cloudtrail-log-suspended.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-cloudtrail-log-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-cloudtrail-log-updated.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-cloudwatch-alarm-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-cloudwatch-alarm-deletion.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-cloudwatch-log-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-cloudwatch-log-group-deletion.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-cloudwatch-log-stream-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-cloudwatch-log-stream-deletion.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-config-resource-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-config-resource-deletion.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-ec2-snapshot-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-ec2-snapshot-activity.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-execution-via-system-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-execution-via-system-manager.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-iam-assume-role-policy-update.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-iam-assume-role-policy-update.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-iam-brute-force-of-assume-role-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-iam-brute-force-of-assume-role-policy.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-iam-deactivation-of-mfa-device.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-iam-deactivation-of-mfa-device.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-iam-user-addition-to-group.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-iam-user-addition-to-group.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-kms-customer-managed-key-disabled-or-scheduled-for-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-kms-customer-managed-key-disabled-or-scheduled-for-deletion.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-management-console-root-login.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-management-console-root-login.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-root-login-without-mfa.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-root-login-without-mfa.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-s3-bucket-configuration-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-s3-bucket-configuration-deletion.html", - "/en/security/*/prebuilt-rule-8-3-3-aws-vpc-flow-logs-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-aws-vpc-flow-logs-deletion.html", - "/en/security/*/prebuilt-rule-8-3-3-azure-active-directory-high-risk-sign-in.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-azure-active-directory-high-risk-sign-in.html", - "/en/security/*/prebuilt-rule-8-3-3-azure-active-directory-high-risk-user-sign-in-heuristic.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-azure-active-directory-high-risk-user-sign-in-heuristic.html", - "/en/security/*/prebuilt-rule-8-3-3-azure-active-directory-powershell-sign-in.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-azure-active-directory-powershell-sign-in.html", - "/en/security/*/prebuilt-rule-8-3-3-azure-event-hub-authorization-rule-created-or-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-azure-event-hub-authorization-rule-created-or-updated.html", - "/en/security/*/prebuilt-rule-8-3-3-azure-key-vault-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-azure-key-vault-modified.html", - "/en/security/*/prebuilt-rule-8-3-3-azure-privilege-identity-management-role-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-azure-privilege-identity-management-role-modified.html", - "/en/security/*/prebuilt-rule-8-3-3-azure-service-principal-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-azure-service-principal-addition.html", - "/en/security/*/prebuilt-rule-8-3-3-base16-or-base32-encoding-decoding-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-base16-or-base32-encoding-decoding-activity.html", - "/en/security/*/prebuilt-rule-8-3-3-bash-shell-profile-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-bash-shell-profile-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-binary-executed-from-shared-memory-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-binary-executed-from-shared-memory-directory.html", - "/en/security/*/prebuilt-rule-8-3-3-bpf-filter-applied-using-tc.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-bpf-filter-applied-using-tc.html", - "/en/security/*/prebuilt-rule-8-3-3-bypass-uac-via-event-viewer.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-bypass-uac-via-event-viewer.html", - "/en/security/*/prebuilt-rule-8-3-3-chkconfig-service-add.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-chkconfig-service-add.html", - "/en/security/*/prebuilt-rule-8-3-3-clearing-windows-console-history.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-clearing-windows-console-history.html", - "/en/security/*/prebuilt-rule-8-3-3-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-8-3-3-cobalt-strike-command-and-control-beacon.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-cobalt-strike-command-and-control-beacon.html", - "/en/security/*/prebuilt-rule-8-3-3-command-execution-via-solarwinds-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-command-execution-via-solarwinds-process.html", - "/en/security/*/prebuilt-rule-8-3-3-command-prompt-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-command-prompt-network-connection.html", - "/en/security/*/prebuilt-rule-8-3-3-command-shell-activity-started-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-command-shell-activity-started-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-3-3-component-object-model-hijacking.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-component-object-model-hijacking.html", - "/en/security/*/prebuilt-rule-8-3-3-conhost-spawned-by-suspicious-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-conhost-spawned-by-suspicious-parent-process.html", - "/en/security/*/prebuilt-rule-8-3-3-connection-to-commonly-abused-free-ssl-certificate-providers.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-connection-to-commonly-abused-free-ssl-certificate-providers.html", - "/en/security/*/prebuilt-rule-8-3-3-connection-to-commonly-abused-web-services.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-connection-to-commonly-abused-web-services.html", - "/en/security/*/prebuilt-rule-8-3-3-connection-to-external-network-via-telnet.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-connection-to-external-network-via-telnet.html", - "/en/security/*/prebuilt-rule-8-3-3-connection-to-internal-network-via-telnet.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-connection-to-internal-network-via-telnet.html", - "/en/security/*/prebuilt-rule-8-3-3-control-panel-process-with-unusual-arguments.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-control-panel-process-with-unusual-arguments.html", - "/en/security/*/prebuilt-rule-8-3-3-creation-of-a-hidden-local-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-creation-of-a-hidden-local-user-account.html", - "/en/security/*/prebuilt-rule-8-3-3-creation-of-hidden-files-and-directories-via-commandline.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-creation-of-hidden-files-and-directories-via-commandline.html", - "/en/security/*/prebuilt-rule-8-3-3-creation-of-hidden-launch-agent-or-daemon.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-creation-of-hidden-launch-agent-or-daemon.html", - "/en/security/*/prebuilt-rule-8-3-3-creation-of-hidden-login-item-via-apple-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-creation-of-hidden-login-item-via-apple-script.html", - "/en/security/*/prebuilt-rule-8-3-3-creation-of-hidden-shared-object-file.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-creation-of-hidden-shared-object-file.html", - "/en/security/*/prebuilt-rule-8-3-3-creation-or-modification-of-a-new-gpo-scheduled-task-or-service.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-creation-or-modification-of-a-new-gpo-scheduled-task-or-service.html", - "/en/security/*/prebuilt-rule-8-3-3-creation-or-modification-of-domain-backup-dpapi-private-key.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-creation-or-modification-of-domain-backup-dpapi-private-key.html", - "/en/security/*/prebuilt-rule-8-3-3-creation-or-modification-of-root-certificate.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-creation-or-modification-of-root-certificate.html", - "/en/security/*/prebuilt-rule-8-3-3-credential-acquisition-via-registry-hive-dumping.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-credential-acquisition-via-registry-hive-dumping.html", - "/en/security/*/prebuilt-rule-8-3-3-default-cobalt-strike-team-server-certificate.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-default-cobalt-strike-team-server-certificate.html", - "/en/security/*/prebuilt-rule-8-3-3-delete-volume-usn-journal-with-fsutil.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-delete-volume-usn-journal-with-fsutil.html", - "/en/security/*/prebuilt-rule-8-3-3-deleting-backup-catalogs-with-wbadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-deleting-backup-catalogs-with-wbadmin.html", - "/en/security/*/prebuilt-rule-8-3-3-direct-outbound-smb-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-direct-outbound-smb-connection.html", - "/en/security/*/prebuilt-rule-8-3-3-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-3-3-disable-windows-firewall-rules-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-disable-windows-firewall-rules-via-netsh.html", - "/en/security/*/prebuilt-rule-8-3-3-disabling-user-account-control-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-disabling-user-account-control-via-registry-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-disabling-windows-defender-security-settings-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-disabling-windows-defender-security-settings-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-3-dns-over-https-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-dns-over-https-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-8-3-3-dumping-account-hashes-via-built-in-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-dumping-account-hashes-via-built-in-commands.html", - "/en/security/*/prebuilt-rule-8-3-3-dumping-of-keychain-content-via-security-command.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-dumping-of-keychain-content-via-security-command.html", - "/en/security/*/prebuilt-rule-8-3-3-dynamic-linker-copy.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-dynamic-linker-copy.html", - "/en/security/*/prebuilt-rule-8-3-3-eggshell-backdoor-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-eggshell-backdoor-execution.html", - "/en/security/*/prebuilt-rule-8-3-3-elastic-agent-service-terminated.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-elastic-agent-service-terminated.html", - "/en/security/*/prebuilt-rule-8-3-3-emond-rules-creation-or-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-emond-rules-creation-or-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-enable-host-network-discovery-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-enable-host-network-discovery-via-netsh.html", - "/en/security/*/prebuilt-rule-8-3-3-encoded-executable-stored-in-the-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-encoded-executable-stored-in-the-registry.html", - "/en/security/*/prebuilt-rule-8-3-3-encrypting-files-with-winrar-or-7z.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-encrypting-files-with-winrar-or-7z.html", - "/en/security/*/prebuilt-rule-8-3-3-endpoint-security.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-endpoint-security.html", - "/en/security/*/prebuilt-rule-8-3-3-enumerating-domain-trusts-via-nltest-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-enumerating-domain-trusts-via-nltest-exe.html", - "/en/security/*/prebuilt-rule-8-3-3-enumeration-command-spawned-via-wmiprvse.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-enumeration-command-spawned-via-wmiprvse.html", - "/en/security/*/prebuilt-rule-8-3-3-enumeration-of-administrator-accounts.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-enumeration-of-administrator-accounts.html", - "/en/security/*/prebuilt-rule-8-3-3-enumeration-of-kernel-modules.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-enumeration-of-kernel-modules.html", - "/en/security/*/prebuilt-rule-8-3-3-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-8-3-3-enumeration-of-users-or-groups-via-built-in-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-enumeration-of-users-or-groups-via-built-in-commands.html", - "/en/security/*/prebuilt-rule-8-3-3-executable-file-creation-with-multiple-extensions.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-executable-file-creation-with-multiple-extensions.html", - "/en/security/*/prebuilt-rule-8-3-3-execution-from-unusual-directory-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-execution-from-unusual-directory-command-line.html", - "/en/security/*/prebuilt-rule-8-3-3-execution-of-com-object-via-xwizard.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-execution-of-com-object-via-xwizard.html", - "/en/security/*/prebuilt-rule-8-3-3-execution-of-file-written-or-modified-by-microsoft-office.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-execution-of-file-written-or-modified-by-microsoft-office.html", - "/en/security/*/prebuilt-rule-8-3-3-execution-of-file-written-or-modified-by-pdf-reader.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-execution-of-file-written-or-modified-by-pdf-reader.html", - "/en/security/*/prebuilt-rule-8-3-3-execution-of-persistent-suspicious-program.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-execution-of-persistent-suspicious-program.html", - "/en/security/*/prebuilt-rule-8-3-3-execution-via-electron-child-process-node-js-module.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-execution-via-electron-child-process-node-js-module.html", - "/en/security/*/prebuilt-rule-8-3-3-execution-via-local-sxs-shared-module.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-execution-via-local-sxs-shared-module.html", - "/en/security/*/prebuilt-rule-8-3-3-execution-via-mssql-xp-cmdshell-stored-procedure.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-execution-via-mssql-xp-cmdshell-stored-procedure.html", - "/en/security/*/prebuilt-rule-8-3-3-execution-via-tsclient-mountpoint.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-execution-via-tsclient-mountpoint.html", - "/en/security/*/prebuilt-rule-8-3-3-execution-with-explicit-credentials-via-scripting.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-execution-with-explicit-credentials-via-scripting.html", - "/en/security/*/prebuilt-rule-8-3-3-exporting-exchange-mailbox-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-exporting-exchange-mailbox-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-3-external-ip-lookup-from-non-browser-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-external-ip-lookup-from-non-browser-process.html", - "/en/security/*/prebuilt-rule-8-3-3-file-deletion-via-shred.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-file-deletion-via-shred.html", - "/en/security/*/prebuilt-rule-8-3-3-file-made-immutable-by-chattr.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-file-made-immutable-by-chattr.html", - "/en/security/*/prebuilt-rule-8-3-3-file-permission-modification-in-writable-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-file-permission-modification-in-writable-directory.html", - "/en/security/*/prebuilt-rule-8-3-3-file-transfer-or-listener-established-via-netcat.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-file-transfer-or-listener-established-via-netcat.html", - "/en/security/*/prebuilt-rule-8-3-3-finder-sync-plugin-registered-and-enabled.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-finder-sync-plugin-registered-and-enabled.html", - "/en/security/*/prebuilt-rule-8-3-3-full-user-mode-dumps-enabled-system-wide.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-full-user-mode-dumps-enabled-system-wide.html", - "/en/security/*/prebuilt-rule-8-3-3-gcp-kubernetes-rolebindings-created-or-patched.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-gcp-kubernetes-rolebindings-created-or-patched.html", - "/en/security/*/prebuilt-rule-8-3-3-gcp-pub-sub-subscription-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-gcp-pub-sub-subscription-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-gcp-pub-sub-topic-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-gcp-pub-sub-topic-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-google-workspace-mfa-enforcement-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-google-workspace-mfa-enforcement-disabled.html", - "/en/security/*/prebuilt-rule-8-3-3-group-policy-abuse-for-privilege-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-group-policy-abuse-for-privilege-addition.html", - "/en/security/*/prebuilt-rule-8-3-3-halfbaked-command-and-control-beacon.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-halfbaked-command-and-control-beacon.html", - "/en/security/*/prebuilt-rule-8-3-3-high-number-of-okta-user-password-reset-or-unlock-attempts.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-high-number-of-okta-user-password-reset-or-unlock-attempts.html", - "/en/security/*/prebuilt-rule-8-3-3-high-number-of-process-and-or-service-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-high-number-of-process-and-or-service-terminations.html", - "/en/security/*/prebuilt-rule-8-3-3-high-number-of-process-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-high-number-of-process-terminations.html", - "/en/security/*/prebuilt-rule-8-3-3-hosts-file-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-hosts-file-modified.html", - "/en/security/*/prebuilt-rule-8-3-3-hping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-hping-process-activity.html", - "/en/security/*/prebuilt-rule-8-3-3-iis-http-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-iis-http-logging-disabled.html", - "/en/security/*/prebuilt-rule-8-3-3-image-file-execution-options-injection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-image-file-execution-options-injection.html", - "/en/security/*/prebuilt-rule-8-3-3-imageload-via-windows-update-auto-update-client.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-imageload-via-windows-update-auto-update-client.html", - "/en/security/*/prebuilt-rule-8-3-3-inbound-connection-to-an-unsecure-elasticsearch-node.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-inbound-connection-to-an-unsecure-elasticsearch-node.html", - "/en/security/*/prebuilt-rule-8-3-3-incoming-dcom-lateral-movement-via-mshta.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-incoming-dcom-lateral-movement-via-mshta.html", - "/en/security/*/prebuilt-rule-8-3-3-incoming-dcom-lateral-movement-with-mmc.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-incoming-dcom-lateral-movement-with-mmc.html", - "/en/security/*/prebuilt-rule-8-3-3-incoming-dcom-lateral-movement-with-shellbrowserwindow-or-shellwindows.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-incoming-dcom-lateral-movement-with-shellbrowserwindow-or-shellwindows.html", - "/en/security/*/prebuilt-rule-8-3-3-incoming-execution-via-powershell-remoting.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-incoming-execution-via-powershell-remoting.html", - "/en/security/*/prebuilt-rule-8-3-3-incoming-execution-via-winrm-remote-shell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-incoming-execution-via-winrm-remote-shell.html", - "/en/security/*/prebuilt-rule-8-3-3-installation-of-custom-shim-databases.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-installation-of-custom-shim-databases.html", - "/en/security/*/prebuilt-rule-8-3-3-installation-of-security-support-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-installation-of-security-support-provider.html", - "/en/security/*/prebuilt-rule-8-3-3-installutil-process-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-installutil-process-making-network-connections.html", - "/en/security/*/prebuilt-rule-8-3-3-interactive-terminal-spawned-via-perl.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-interactive-terminal-spawned-via-perl.html", - "/en/security/*/prebuilt-rule-8-3-3-interactive-terminal-spawned-via-python.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-interactive-terminal-spawned-via-python.html", - "/en/security/*/prebuilt-rule-8-3-3-ipsec-nat-traversal-port-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-ipsec-nat-traversal-port-activity.html", - "/en/security/*/prebuilt-rule-8-3-3-kerberos-cached-credentials-dumping.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-kerberos-cached-credentials-dumping.html", - "/en/security/*/prebuilt-rule-8-3-3-kerberos-pre-authentication-disabled-for-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-kerberos-pre-authentication-disabled-for-user.html", - "/en/security/*/prebuilt-rule-8-3-3-kerberos-traffic-from-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-kerberos-traffic-from-unusual-process.html", - "/en/security/*/prebuilt-rule-8-3-3-kernel-module-load-via-insmod.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-kernel-module-load-via-insmod.html", - "/en/security/*/prebuilt-rule-8-3-3-kernel-module-removal.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-kernel-module-removal.html", - "/en/security/*/prebuilt-rule-8-3-3-keychain-password-retrieval-via-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-keychain-password-retrieval-via-command-line.html", - "/en/security/*/prebuilt-rule-8-3-3-krbtgt-delegation-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-krbtgt-delegation-backdoor.html", - "/en/security/*/prebuilt-rule-8-3-3-lateral-movement-via-startup-folder.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-lateral-movement-via-startup-folder.html", - "/en/security/*/prebuilt-rule-8-3-3-launch-agent-creation-or-modification-and-immediate-loading.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-launch-agent-creation-or-modification-and-immediate-loading.html", - "/en/security/*/prebuilt-rule-8-3-3-launchdaemon-creation-or-modification-and-immediate-loading.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-launchdaemon-creation-or-modification-and-immediate-loading.html", - "/en/security/*/prebuilt-rule-8-3-3-linux-restricted-shell-breakout-via-linux-binary-s.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-linux-restricted-shell-breakout-via-linux-binary-s.html", - "/en/security/*/prebuilt-rule-8-3-3-local-account-tokenfilter-policy-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-local-account-tokenfilter-policy-disabled.html", - "/en/security/*/prebuilt-rule-8-3-3-local-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-local-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-lsass-memory-dump-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-lsass-memory-dump-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-lsass-memory-dump-handle-access.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-lsass-memory-dump-handle-access.html", - "/en/security/*/prebuilt-rule-8-3-3-macos-installer-package-spawns-network-event.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-macos-installer-package-spawns-network-event.html", - "/en/security/*/prebuilt-rule-8-3-3-masquerading-space-after-filename.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-masquerading-space-after-filename.html", - "/en/security/*/prebuilt-rule-8-3-3-microsoft-build-engine-started-an-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-microsoft-build-engine-started-an-unusual-process.html", - "/en/security/*/prebuilt-rule-8-3-3-microsoft-build-engine-started-by-a-script-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-microsoft-build-engine-started-by-a-script-process.html", - "/en/security/*/prebuilt-rule-8-3-3-microsoft-build-engine-started-by-a-system-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-microsoft-build-engine-started-by-a-system-process.html", - "/en/security/*/prebuilt-rule-8-3-3-microsoft-build-engine-started-by-an-office-application.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-microsoft-build-engine-started-by-an-office-application.html", - "/en/security/*/prebuilt-rule-8-3-3-microsoft-build-engine-using-an-alternate-name.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-microsoft-build-engine-using-an-alternate-name.html", - "/en/security/*/prebuilt-rule-8-3-3-microsoft-exchange-server-um-spawning-suspicious-processes.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-microsoft-exchange-server-um-spawning-suspicious-processes.html", - "/en/security/*/prebuilt-rule-8-3-3-microsoft-exchange-server-um-writing-suspicious-files.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-microsoft-exchange-server-um-writing-suspicious-files.html", - "/en/security/*/prebuilt-rule-8-3-3-microsoft-exchange-worker-spawning-suspicious-processes.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-microsoft-exchange-worker-spawning-suspicious-processes.html", - "/en/security/*/prebuilt-rule-8-3-3-microsoft-iis-connection-strings-decryption.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-microsoft-iis-connection-strings-decryption.html", - "/en/security/*/prebuilt-rule-8-3-3-microsoft-iis-service-account-password-dumped.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-microsoft-iis-service-account-password-dumped.html", - "/en/security/*/prebuilt-rule-8-3-3-microsoft-windows-defender-tampering.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-microsoft-windows-defender-tampering.html", - "/en/security/*/prebuilt-rule-8-3-3-mimikatz-memssp-log-file-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-mimikatz-memssp-log-file-detected.html", - "/en/security/*/prebuilt-rule-8-3-3-modification-of-amsienable-registry-key.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-modification-of-amsienable-registry-key.html", - "/en/security/*/prebuilt-rule-8-3-3-modification-of-boot-configuration.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-modification-of-boot-configuration.html", - "/en/security/*/prebuilt-rule-8-3-3-modification-of-dynamic-linker-preload-shared-object.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-modification-of-dynamic-linker-preload-shared-object.html", - "/en/security/*/prebuilt-rule-8-3-3-modification-of-environment-variable-via-launchctl.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-modification-of-environment-variable-via-launchctl.html", - "/en/security/*/prebuilt-rule-8-3-3-modification-of-openssh-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-modification-of-openssh-binaries.html", - "/en/security/*/prebuilt-rule-8-3-3-modification-of-safari-settings-via-defaults-command.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-modification-of-safari-settings-via-defaults-command.html", - "/en/security/*/prebuilt-rule-8-3-3-modification-of-standard-authentication-module-or-configuration.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-modification-of-standard-authentication-module-or-configuration.html", - "/en/security/*/prebuilt-rule-8-3-3-modification-of-the-mspkiaccountcredentials.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-modification-of-the-mspkiaccountcredentials.html", - "/en/security/*/prebuilt-rule-8-3-3-modification-of-wdigest-security-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-modification-of-wdigest-security-provider.html", - "/en/security/*/prebuilt-rule-8-3-3-modification-or-removal-of-an-okta-application-sign-on-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-modification-or-removal-of-an-okta-application-sign-on-policy.html", - "/en/security/*/prebuilt-rule-8-3-3-mounting-hidden-or-webdav-remote-shares.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-mounting-hidden-or-webdav-remote-shares.html", - "/en/security/*/prebuilt-rule-8-3-3-ms-office-macro-security-registry-modifications.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-ms-office-macro-security-registry-modifications.html", - "/en/security/*/prebuilt-rule-8-3-3-msbuild-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-msbuild-making-network-connections.html", - "/en/security/*/prebuilt-rule-8-3-3-mshta-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-mshta-making-network-connections.html", - "/en/security/*/prebuilt-rule-8-3-3-multi-factor-authentication-disabled-for-an-azure-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-multi-factor-authentication-disabled-for-an-azure-user.html", - "/en/security/*/prebuilt-rule-8-3-3-multiple-alerts-in-different-att-ck-tactics-on-a-single-host.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-multiple-alerts-in-different-att-ck-tactics-on-a-single-host.html", - "/en/security/*/prebuilt-rule-8-3-3-multiple-alerts-involving-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-multiple-alerts-involving-a-user.html", - "/en/security/*/prebuilt-rule-8-3-3-multiple-logon-failure-followed-by-logon-success.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-multiple-logon-failure-followed-by-logon-success.html", - "/en/security/*/prebuilt-rule-8-3-3-multiple-logon-failure-from-the-same-source-address.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-multiple-logon-failure-from-the-same-source-address.html", - "/en/security/*/prebuilt-rule-8-3-3-multiple-vault-web-credentials-read.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-multiple-vault-web-credentials-read.html", - "/en/security/*/prebuilt-rule-8-3-3-namespace-manipulation-using-unshare.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-namespace-manipulation-using-unshare.html", - "/en/security/*/prebuilt-rule-8-3-3-network-connection-via-certutil.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-network-connection-via-certutil.html", - "/en/security/*/prebuilt-rule-8-3-3-network-connection-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-network-connection-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-8-3-3-network-connection-via-msxsl.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-network-connection-via-msxsl.html", - "/en/security/*/prebuilt-rule-8-3-3-network-connection-via-registration-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-network-connection-via-registration-utility.html", - "/en/security/*/prebuilt-rule-8-3-3-network-connection-via-signed-binary.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-network-connection-via-signed-binary.html", - "/en/security/*/prebuilt-rule-8-3-3-network-logon-provider-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-network-logon-provider-registry-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-new-activesyncalloweddeviceid-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-new-activesyncalloweddeviceid-added-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-3-nping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-nping-process-activity.html", - "/en/security/*/prebuilt-rule-8-3-3-ntds-or-sam-database-file-copied.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-ntds-or-sam-database-file-copied.html", - "/en/security/*/prebuilt-rule-8-3-3-nullsessionpipe-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-nullsessionpipe-registry-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-okta-brute-force-or-password-spraying-attack.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-okta-brute-force-or-password-spraying-attack.html", - "/en/security/*/prebuilt-rule-8-3-3-okta-user-session-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-okta-user-session-impersonation.html", - "/en/security/*/prebuilt-rule-8-3-3-outbound-scheduled-task-activity-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-outbound-scheduled-task-activity-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-3-parent-process-pid-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-parent-process-pid-spoofing.html", - "/en/security/*/prebuilt-rule-8-3-3-peripheral-device-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-peripheral-device-discovery.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-bits-job-notify-cmdline.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-bits-job-notify-cmdline.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-directoryservice-plugin-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-directoryservice-plugin-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-docker-shortcut-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-docker-shortcut-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-folder-action-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-folder-action-script.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-hidden-run-key-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-hidden-run-key-detected.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-kde-autostart-script-or-desktop-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-kde-autostart-script-or-desktop-file-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-login-or-logout-hook.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-login-or-logout-hook.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-microsoft-office-addins.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-microsoft-office-addins.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-microsoft-outlook-vba.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-microsoft-outlook-vba.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-powershell-profile.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-powershell-profile.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-scheduled-job-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-scheduled-job-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-telemetrycontroller-scheduled-task-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-telemetrycontroller-scheduled-task-hijack.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-update-orchestrator-service-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-update-orchestrator-service-hijack.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-wmi-event-subscription.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-wmi-event-subscription.html", - "/en/security/*/prebuilt-rule-8-3-3-persistence-via-wmi-standard-registry-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistence-via-wmi-standard-registry-provider.html", - "/en/security/*/prebuilt-rule-8-3-3-persistent-scripts-in-the-startup-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-persistent-scripts-in-the-startup-directory.html", - "/en/security/*/prebuilt-rule-8-3-3-port-forwarding-rule-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-port-forwarding-rule-addition.html", - "/en/security/*/prebuilt-rule-8-3-3-possible-consent-grant-attack-via-azure-registered-application.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-possible-consent-grant-attack-via-azure-registered-application.html", - "/en/security/*/prebuilt-rule-8-3-3-possible-fin7-dga-command-and-control-behavior.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-possible-fin7-dga-command-and-control-behavior.html", - "/en/security/*/prebuilt-rule-8-3-3-possible-okta-dos-attack.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-possible-okta-dos-attack.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-abuse-of-repeated-mfa-push-notifications.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-abuse-of-repeated-mfa-push-notifications.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-admin-group-account-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-admin-group-account-addition.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-application-shimming-via-sdbinst.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-application-shimming-via-sdbinst.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-command-and-control-via-internet-explorer.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-command-and-control-via-internet-explorer.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-cookies-theft-via-browser-debugging.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-cookies-theft-via-browser-debugging.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-credential-access-via-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-credential-access-via-dcsync.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-credential-access-via-duplicatehandle-in-lsass.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-credential-access-via-duplicatehandle-in-lsass.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-credential-access-via-lsass-memory-dump.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-credential-access-via-lsass-memory-dump.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-credential-access-via-renamed-com-services-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-credential-access-via-renamed-com-services-dll.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-credential-access-via-trusted-developer-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-credential-access-via-trusted-developer-utility.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-credential-access-via-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-credential-access-via-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-disabling-of-selinux.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-disabling-of-selinux.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-dll-sideloading-via-trusted-microsoft-programs.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-dll-sideloading-via-trusted-microsoft-programs.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-dns-tunneling-via-iodine.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-dns-tunneling-via-iodine.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-dns-tunneling-via-nslookup.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-dns-tunneling-via-nslookup.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-evasion-via-filter-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-evasion-via-filter-manager.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-hidden-local-user-account-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-hidden-local-user-account-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-invoke-mimikatz-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-invoke-mimikatz-powershell-script.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-java-jndi-exploitation-attempt.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-java-jndi-exploitation-attempt.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-kerberos-attack-via-bifrost.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-kerberos-attack-via-bifrost.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-lateral-tool-transfer-via-smb-share.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-lateral-tool-transfer-via-smb-share.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-linux-ssh-brute-force-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-linux-ssh-brute-force-detected.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-local-ntlm-relay-via-http.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-local-ntlm-relay-via-http.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-lsa-authentication-package-abuse.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-lsa-authentication-package-abuse.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-lsass-clone-creation-via-psscapturesnapshot.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-lsass-clone-creation-via-psscapturesnapshot.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-lsass-memory-dump-via-psscapturesnapshot.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-lsass-memory-dump-via-psscapturesnapshot.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-macos-ssh-brute-force-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-macos-ssh-brute-force-detected.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-microsoft-office-sandbox-evasion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-microsoft-office-sandbox-evasion.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-modification-of-accessibility-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-modification-of-accessibility-binaries.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-non-standard-port-ssh-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-non-standard-port-ssh-connection.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-openssh-backdoor-logging-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-openssh-backdoor-logging-activity.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-persistence-via-atom-init-script-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-persistence-via-atom-init-script-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-persistence-via-login-hook.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-persistence-via-login-hook.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-persistence-via-periodic-tasks.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-persistence-via-periodic-tasks.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-persistence-via-time-provider-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-persistence-via-time-provider-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-port-monitor-or-print-processor-registration-abuse.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-port-monitor-or-print-processor-registration-abuse.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-privacy-control-bypass-via-localhost-secure-copy.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-privacy-control-bypass-via-localhost-secure-copy.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-privacy-control-bypass-via-tccdb-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-privacy-control-bypass-via-tccdb-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-privilege-escalation-via-installerfiletakeover.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-privilege-escalation-via-installerfiletakeover.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-privilege-escalation-via-pkexec.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-privilege-escalation-via-pkexec.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-privilege-escalation-via-sudoers-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-privilege-escalation-via-sudoers-file-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-privileged-escalation-via-samaccountname-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-privileged-escalation-via-samaccountname-spoofing.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-process-herpaderping-attempt.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-process-herpaderping-attempt.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-process-injection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-process-injection-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-protocol-tunneling-via-earthworm.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-protocol-tunneling-via-earthworm.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-remote-credential-access-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-remote-credential-access-via-registry.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-remote-desktop-shadowing-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-remote-desktop-shadowing-activity.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-remote-desktop-tunneling-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-remote-desktop-tunneling-detected.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-reverse-shell-activity-via-terminal.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-reverse-shell-activity-via-terminal.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-secure-file-deletion-via-sdelete-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-secure-file-deletion-via-sdelete-utility.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-shadow-credentials-added-to-ad-object.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-shadow-credentials-added-to-ad-object.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-shadow-file-read-via-command-line-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-shadow-file-read-via-command-line-utilities.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-sharprdp-behavior.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-sharprdp-behavior.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-shell-via-web-server.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-shell-via-web-server.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-ssh-brute-force-detected-on-privileged-account.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-ssh-brute-force-detected-on-privileged-account.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-ssh-password-guessing.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-ssh-password-guessing.html", - "/en/security/*/prebuilt-rule-8-3-3-potential-windows-error-manager-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-potential-windows-error-manager-masquerading.html", - "/en/security/*/prebuilt-rule-8-3-3-powershell-kerberos-ticket-request.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-powershell-kerberos-ticket-request.html", - "/en/security/*/prebuilt-rule-8-3-3-powershell-keylogging-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-powershell-keylogging-script.html", - "/en/security/*/prebuilt-rule-8-3-3-powershell-minidump-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-powershell-minidump-script.html", - "/en/security/*/prebuilt-rule-8-3-3-powershell-psreflect-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-powershell-psreflect-script.html", - "/en/security/*/prebuilt-rule-8-3-3-powershell-script-block-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-powershell-script-block-logging-disabled.html", - "/en/security/*/prebuilt-rule-8-3-3-powershell-script-with-token-impersonation-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-powershell-script-with-token-impersonation-capabilities.html", - "/en/security/*/prebuilt-rule-8-3-3-powershell-share-enumeration-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-powershell-share-enumeration-script.html", - "/en/security/*/prebuilt-rule-8-3-3-powershell-suspicious-discovery-related-windows-api-functions.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-powershell-suspicious-discovery-related-windows-api-functions.html", - "/en/security/*/prebuilt-rule-8-3-3-powershell-suspicious-payload-encoded-and-compressed.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-powershell-suspicious-payload-encoded-and-compressed.html", - "/en/security/*/prebuilt-rule-8-3-3-powershell-suspicious-script-with-audio-capture-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-powershell-suspicious-script-with-audio-capture-capabilities.html", - "/en/security/*/prebuilt-rule-8-3-3-powershell-suspicious-script-with-screenshot-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-powershell-suspicious-script-with-screenshot-capabilities.html", - "/en/security/*/prebuilt-rule-8-3-3-prebuilt-rules-8-3-3-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-prebuilt-rules-8-3-3-appendix.html", - "/en/security/*/prebuilt-rule-8-3-3-privilege-escalation-via-named-pipe-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-privilege-escalation-via-named-pipe-impersonation.html", - "/en/security/*/prebuilt-rule-8-3-3-privilege-escalation-via-rogue-named-pipe-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-privilege-escalation-via-rogue-named-pipe-impersonation.html", - "/en/security/*/prebuilt-rule-8-3-3-privilege-escalation-via-root-crontab-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-privilege-escalation-via-root-crontab-file-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-privilege-escalation-via-windir-environment-variable.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-privilege-escalation-via-windir-environment-variable.html", - "/en/security/*/prebuilt-rule-8-3-3-privileged-account-brute-force.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-privileged-account-brute-force.html", - "/en/security/*/prebuilt-rule-8-3-3-privileges-elevation-via-parent-process-pid-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-privileges-elevation-via-parent-process-pid-spoofing.html", - "/en/security/*/prebuilt-rule-8-3-3-process-activity-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-process-activity-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-8-3-3-process-creation-via-secondary-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-process-creation-via-secondary-logon.html", - "/en/security/*/prebuilt-rule-8-3-3-process-execution-from-an-unusual-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-process-execution-from-an-unusual-directory.html", - "/en/security/*/prebuilt-rule-8-3-3-process-injection-by-the-microsoft-build-engine.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-process-injection-by-the-microsoft-build-engine.html", - "/en/security/*/prebuilt-rule-8-3-3-process-started-from-process-id-pid-file.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-process-started-from-process-id-pid-file.html", - "/en/security/*/prebuilt-rule-8-3-3-process-termination-followed-by-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-process-termination-followed-by-deletion.html", - "/en/security/*/prebuilt-rule-8-3-3-program-files-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-program-files-directory-masquerading.html", - "/en/security/*/prebuilt-rule-8-3-3-prompt-for-credentials-with-osascript.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-prompt-for-credentials-with-osascript.html", - "/en/security/*/prebuilt-rule-8-3-3-psexec-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-psexec-network-connection.html", - "/en/security/*/prebuilt-rule-8-3-3-rare-aws-error-code.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-rare-aws-error-code.html", - "/en/security/*/prebuilt-rule-8-3-3-rdp-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-rdp-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-8-3-3-registry-persistence-via-appcert-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-registry-persistence-via-appcert-dll.html", - "/en/security/*/prebuilt-rule-8-3-3-registry-persistence-via-appinit-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-registry-persistence-via-appinit-dll.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-computer-account-dnshostname-update.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-computer-account-dnshostname-update.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-desktop-enabled-in-windows-firewall-by-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-desktop-enabled-in-windows-firewall-by-netsh.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-execution-via-file-shares.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-execution-via-file-shares.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-file-copy-to-a-hidden-share.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-file-copy-to-a-hidden-share.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-file-copy-via-teamviewer.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-file-copy-via-teamviewer.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-file-download-via-desktopimgdownldr-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-file-download-via-desktopimgdownldr-utility.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-file-download-via-mpcmdrun.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-file-download-via-mpcmdrun.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-file-download-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-file-download-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-file-download-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-file-download-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-logon-followed-by-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-logon-followed-by-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-ssh-login-enabled-via-systemsetup-command.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-ssh-login-enabled-via-systemsetup-command.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-system-discovery-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-system-discovery-commands.html", - "/en/security/*/prebuilt-rule-8-3-3-remote-windows-service-installed.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remote-windows-service-installed.html", - "/en/security/*/prebuilt-rule-8-3-3-remotely-started-services-via-rpc.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-remotely-started-services-via-rpc.html", - "/en/security/*/prebuilt-rule-8-3-3-renamed-autoit-scripts-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-renamed-autoit-scripts-interpreter.html", - "/en/security/*/prebuilt-rule-8-3-3-reverse-shell-created-via-named-pipe.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-reverse-shell-created-via-named-pipe.html", - "/en/security/*/prebuilt-rule-8-3-3-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html", - "/en/security/*/prebuilt-rule-8-3-3-scheduled-task-created-by-a-windows-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-scheduled-task-created-by-a-windows-script.html", - "/en/security/*/prebuilt-rule-8-3-3-scheduled-task-execution-at-scale-via-gpo.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-scheduled-task-execution-at-scale-via-gpo.html", - "/en/security/*/prebuilt-rule-8-3-3-scheduled-tasks-at-command-enabled.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-scheduled-tasks-at-command-enabled.html", - "/en/security/*/prebuilt-rule-8-3-3-screensaver-plist-file-modified-by-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-screensaver-plist-file-modified-by-unexpected-process.html", - "/en/security/*/prebuilt-rule-8-3-3-searching-for-saved-credentials-via-vaultcmd.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-searching-for-saved-credentials-via-vaultcmd.html", - "/en/security/*/prebuilt-rule-8-3-3-security-software-discovery-using-wmic.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-security-software-discovery-using-wmic.html", - "/en/security/*/prebuilt-rule-8-3-3-security-software-discovery-via-grep.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-security-software-discovery-via-grep.html", - "/en/security/*/prebuilt-rule-8-3-3-sedebugprivilege-enabled-by-a-suspicious-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-sedebugprivilege-enabled-by-a-suspicious-process.html", - "/en/security/*/prebuilt-rule-8-3-3-sensitive-files-compression.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-sensitive-files-compression.html", - "/en/security/*/prebuilt-rule-8-3-3-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-8-3-3-service-command-lateral-movement.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-service-command-lateral-movement.html", - "/en/security/*/prebuilt-rule-8-3-3-service-control-spawned-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-service-control-spawned-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-8-3-3-service-creation-via-local-kerberos-authentication.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-service-creation-via-local-kerberos-authentication.html", - "/en/security/*/prebuilt-rule-8-3-3-setuid-setgid-bit-set-via-chmod.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-setuid-setgid-bit-set-via-chmod.html", - "/en/security/*/prebuilt-rule-8-3-3-shell-execution-via-apple-scripting.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-shell-execution-via-apple-scripting.html", - "/en/security/*/prebuilt-rule-8-3-3-signed-proxy-execution-via-ms-work-folders.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-signed-proxy-execution-via-ms-work-folders.html", - "/en/security/*/prebuilt-rule-8-3-3-sip-provider-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-sip-provider-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-softwareupdate-preferences-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-softwareupdate-preferences-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-solarwinds-process-disabling-services-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-solarwinds-process-disabling-services-via-registry.html", - "/en/security/*/prebuilt-rule-8-3-3-spike-in-aws-error-messages.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-spike-in-aws-error-messages.html", - "/en/security/*/prebuilt-rule-8-3-3-ssh-authorized-keys-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-ssh-authorized-keys-file-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-startup-folder-persistence-via-unsigned-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-startup-folder-persistence-via-unsigned-process.html", - "/en/security/*/prebuilt-rule-8-3-3-startup-logon-script-added-to-group-policy-object.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-startup-logon-script-added-to-group-policy-object.html", - "/en/security/*/prebuilt-rule-8-3-3-startup-or-run-key-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-startup-or-run-key-registry-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-startup-persistence-by-a-suspicious-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-startup-persistence-by-a-suspicious-process.html", - "/en/security/*/prebuilt-rule-8-3-3-sublime-plugin-or-application-script-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-sublime-plugin-or-application-script-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-sudo-heap-based-buffer-overflow-attempt.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-sudo-heap-based-buffer-overflow-attempt.html", - "/en/security/*/prebuilt-rule-8-3-3-sudoers-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-sudoers-file-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-sunburst-command-and-control-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-sunburst-command-and-control-activity.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-activity-reported-by-okta-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-activity-reported-by-okta-user.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-automator-workflows-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-automator-workflows-execution.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-browser-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-browser-child-process.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-calendar-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-calendar-file-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-certutil-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-certutil-commands.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-child-process-of-adobe-acrobat-reader-update-service.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-child-process-of-adobe-acrobat-reader-update-service.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-cmd-execution-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-cmd-execution-via-wmi.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-crontab-creation-or-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-crontab-creation-or-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-emond-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-emond-child-process.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-endpoint-security-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-endpoint-security-parent-process.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-execution-from-a-mounted-device.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-execution-from-a-mounted-device.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-execution-short-program-name.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-execution-short-program-name.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-execution-via-scheduled-task.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-execution-via-scheduled-task.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-explorer-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-explorer-child-process.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-file-creation-in-etc-for-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-file-creation-in-etc-for-persistence.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-hidden-child-process-of-launchd.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-hidden-child-process-of-launchd.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-html-file-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-html-file-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-image-load-taskschd-dll-from-ms-office.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-image-load-taskschd-dll-from-ms-office.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-imagepath-service-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-imagepath-service-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-java-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-java-child-process.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-lsass-access-via-malseclogon.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-lsass-access-via-malseclogon.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-macos-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-macos-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-managed-code-hosting-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-managed-code-hosting-process.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-microsoft-diagnostics-wizard-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-microsoft-diagnostics-wizard-execution.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-module-loaded-by-lsass.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-module-loaded-by-lsass.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-ms-outlook-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-ms-outlook-child-process.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-net-code-compilation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-net-code-compilation.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-net-reflection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-net-reflection-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-network-connection-attempt-by-root.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-network-connection-attempt-by-root.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-pdf-reader-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-pdf-reader-child-process.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-portable-executable-encoded-in-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-portable-executable-encoded-in-powershell-script.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-powershell-engine-imageload.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-powershell-engine-imageload.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-powershell-script.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-print-spooler-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-print-spooler-file-deletion.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-print-spooler-point-and-print-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-print-spooler-point-and-print-dll.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-print-spooler-spl-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-print-spooler-spl-file-created.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-printspooler-service-executable-file-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-printspooler-service-executable-file-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-process-access-via-direct-system-call.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-process-access-via-direct-system-call.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-process-creation-calltrace.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-process-creation-calltrace.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-process-execution-via-renamed-psexec-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-process-execution-via-renamed-psexec-executable.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-rdp-activex-client-loaded.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-rdp-activex-client-loaded.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-remote-registry-access-via-sebackupprivilege.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-remote-registry-access-via-sebackupprivilege.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-script-object-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-script-object-execution.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-service-was-installed-in-the-system.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-service-was-installed-in-the-system.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-solarwinds-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-solarwinds-child-process.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-startup-shell-folder-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-startup-shell-folder-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-werfault-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-werfault-child-process.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-wmi-image-load-from-ms-office.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-wmi-image-load-from-ms-office.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-wmic-xsl-script-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-wmic-xsl-script-execution.html", - "/en/security/*/prebuilt-rule-8-3-3-suspicious-zoom-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-suspicious-zoom-child-process.html", - "/en/security/*/prebuilt-rule-8-3-3-svchost-spawning-cmd.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-svchost-spawning-cmd.html", - "/en/security/*/prebuilt-rule-8-3-3-symbolic-link-to-shadow-copy-created.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-symbolic-link-to-shadow-copy-created.html", - "/en/security/*/prebuilt-rule-8-3-3-system-information-discovery-via-windows-command-shell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-system-information-discovery-via-windows-command-shell.html", - "/en/security/*/prebuilt-rule-8-3-3-system-log-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-system-log-file-deletion.html", - "/en/security/*/prebuilt-rule-8-3-3-system-shells-via-services.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-system-shells-via-services.html", - "/en/security/*/prebuilt-rule-8-3-3-systemkey-access-via-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-systemkey-access-via-command-line.html", - "/en/security/*/prebuilt-rule-8-3-3-tampering-of-bash-command-line-history.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-tampering-of-bash-command-line-history.html", - "/en/security/*/prebuilt-rule-8-3-3-tcc-bypass-via-mounted-apfs-snapshot-access.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-tcc-bypass-via-mounted-apfs-snapshot-access.html", - "/en/security/*/prebuilt-rule-8-3-3-temporarily-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-temporarily-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-third-party-backup-files-deleted-via-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-third-party-backup-files-deleted-via-unexpected-process.html", - "/en/security/*/prebuilt-rule-8-3-3-threat-detected-by-okta-threatinsight.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-threat-detected-by-okta-threatinsight.html", - "/en/security/*/prebuilt-rule-8-3-3-threat-intel-filebeat-module-v8-x-indicator-match.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-threat-intel-filebeat-module-v8-x-indicator-match.html", - "/en/security/*/prebuilt-rule-8-3-3-threat-intel-indicator-match.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-threat-intel-indicator-match.html", - "/en/security/*/prebuilt-rule-8-3-3-timestomping-using-touch-command.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-timestomping-using-touch-command.html", - "/en/security/*/prebuilt-rule-8-3-3-uac-bypass-attempt-via-elevated-com-internet-explorer-add-on-installer.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-uac-bypass-attempt-via-elevated-com-internet-explorer-add-on-installer.html", - "/en/security/*/prebuilt-rule-8-3-3-uac-bypass-attempt-via-privileged-ifileoperation-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-uac-bypass-attempt-via-privileged-ifileoperation-com-interface.html", - "/en/security/*/prebuilt-rule-8-3-3-uac-bypass-attempt-via-windows-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-uac-bypass-attempt-via-windows-directory-masquerading.html", - "/en/security/*/prebuilt-rule-8-3-3-uac-bypass-attempt-with-ieditionupgrademanager-elevated-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-uac-bypass-attempt-with-ieditionupgrademanager-elevated-com-interface.html", - "/en/security/*/prebuilt-rule-8-3-3-uac-bypass-via-diskcleanup-scheduled-task-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-uac-bypass-via-diskcleanup-scheduled-task-hijack.html", - "/en/security/*/prebuilt-rule-8-3-3-uac-bypass-via-icmluautil-elevated-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-uac-bypass-via-icmluautil-elevated-com-interface.html", - "/en/security/*/prebuilt-rule-8-3-3-uac-bypass-via-windows-firewall-snap-in-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-uac-bypass-via-windows-firewall-snap-in-hijack.html", - "/en/security/*/prebuilt-rule-8-3-3-unauthorized-access-to-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unauthorized-access-to-an-okta-application.html", - "/en/security/*/prebuilt-rule-8-3-3-uncommon-registry-persistence-change.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-uncommon-registry-persistence-change.html", - "/en/security/*/prebuilt-rule-8-3-3-unexpected-child-process-of-macos-screensaver-engine.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unexpected-child-process-of-macos-screensaver-engine.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-aws-command-for-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-aws-command-for-a-user.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-child-process-from-a-system-virtual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-child-process-from-a-system-virtual-process.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-child-process-of-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-child-process-of-dns-exe.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-child-processes-of-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-child-processes-of-rundll32.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-city-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-city-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-country-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-country-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-executable-file-creation-by-a-system-critical-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-executable-file-creation-by-a-system-critical-process.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-file-creation-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-file-creation-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-file-modification-by-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-file-modification-by-dns-exe.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-network-activity-from-a-windows-system-binary.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-network-activity-from-a-windows-system-binary.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-network-connection-via-dllhost.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-network-connection-via-dllhost.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-network-connection-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-network-connection-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-parent-child-relationship.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-parent-child-relationship.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-parent-process-for-cmd-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-parent-process-for-cmd-exe.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-persistence-via-services-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-persistence-via-services-registry.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-print-spooler-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-print-spooler-child-process.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-process-execution-path-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-process-execution-path-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-process-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-process-network-connection.html", - "/en/security/*/prebuilt-rule-8-3-3-unusual-service-host-child-process-childless-service.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-unusual-service-host-child-process-childless-service.html", - "/en/security/*/prebuilt-rule-8-3-3-user-account-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-user-account-creation.html", - "/en/security/*/prebuilt-rule-8-3-3-user-account-exposed-to-kerberoasting.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-user-account-exposed-to-kerberoasting.html", - "/en/security/*/prebuilt-rule-8-3-3-user-added-to-privileged-group.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-user-added-to-privileged-group.html", - "/en/security/*/prebuilt-rule-8-3-3-virtual-machine-fingerprinting-via-grep.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-virtual-machine-fingerprinting-via-grep.html", - "/en/security/*/prebuilt-rule-8-3-3-virtual-machine-fingerprinting.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-virtual-machine-fingerprinting.html", - "/en/security/*/prebuilt-rule-8-3-3-virtual-private-network-connection-attempt.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-virtual-private-network-connection-attempt.html", - "/en/security/*/prebuilt-rule-8-3-3-vnc-virtual-network-computing-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-vnc-virtual-network-computing-from-the-internet.html", - "/en/security/*/prebuilt-rule-8-3-3-vnc-virtual-network-computing-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-vnc-virtual-network-computing-to-the-internet.html", - "/en/security/*/prebuilt-rule-8-3-3-volume-shadow-copy-deleted-or-resized-via-vssadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-volume-shadow-copy-deleted-or-resized-via-vssadmin.html", - "/en/security/*/prebuilt-rule-8-3-3-volume-shadow-copy-deletion-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-volume-shadow-copy-deletion-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-3-volume-shadow-copy-deletion-via-wmic.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-volume-shadow-copy-deletion-via-wmic.html", - "/en/security/*/prebuilt-rule-8-3-3-web-application-suspicious-activity-post-request-declined.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-web-application-suspicious-activity-post-request-declined.html", - "/en/security/*/prebuilt-rule-8-3-3-web-application-suspicious-activity-sqlmap-user-agent.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-web-application-suspicious-activity-sqlmap-user-agent.html", - "/en/security/*/prebuilt-rule-8-3-3-web-application-suspicious-activity-unauthorized-method.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-web-application-suspicious-activity-unauthorized-method.html", - "/en/security/*/prebuilt-rule-8-3-3-web-shell-detection-script-process-child-of-common-web-processes.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-web-shell-detection-script-process-child-of-common-web-processes.html", - "/en/security/*/prebuilt-rule-8-3-3-webproxy-settings-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-webproxy-settings-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-webserver-access-logs-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-webserver-access-logs-deleted.html", - "/en/security/*/prebuilt-rule-8-3-3-whoami-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-whoami-process-activity.html", - "/en/security/*/prebuilt-rule-8-3-3-windows-cryptoapi-spoofing-vulnerability-cve-2020-0601-curveball.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-windows-cryptoapi-spoofing-vulnerability-cve-2020-0601-curveball.html", - "/en/security/*/prebuilt-rule-8-3-3-windows-defender-disabled-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-windows-defender-disabled-via-registry-modification.html", - "/en/security/*/prebuilt-rule-8-3-3-windows-defender-exclusions-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-windows-defender-exclusions-added-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-3-windows-event-logs-cleared.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-windows-event-logs-cleared.html", - "/en/security/*/prebuilt-rule-8-3-3-windows-firewall-disabled-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-windows-firewall-disabled-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-3-windows-network-enumeration.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-windows-network-enumeration.html", - "/en/security/*/prebuilt-rule-8-3-3-windows-registry-file-creation-in-smb-share.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-windows-registry-file-creation-in-smb-share.html", - "/en/security/*/prebuilt-rule-8-3-3-windows-script-executing-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-windows-script-executing-powershell.html", - "/en/security/*/prebuilt-rule-8-3-3-windows-script-interpreter-executing-process-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-windows-script-interpreter-executing-process-via-wmi.html", - "/en/security/*/prebuilt-rule-8-3-3-windows-service-installed-via-an-unusual-client.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-windows-service-installed-via-an-unusual-client.html", - "/en/security/*/prebuilt-rule-8-3-3-wireless-credential-dumping-using-netsh-command.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-wireless-credential-dumping-using-netsh-command.html", - "/en/security/*/prebuilt-rule-8-3-3-wmi-incoming-lateral-movement.html": "/guide/en/security/8.17/prebuilt-rule-8-3-3-wmi-incoming-lateral-movement.html", - "/en/security/*/prebuilt-rule-8-3-4-exchange-mailbox-export-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-4-exchange-mailbox-export-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-4-exporting-exchange-mailbox-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-3-4-exporting-exchange-mailbox-via-powershell.html", - "/en/security/*/prebuilt-rule-8-3-4-multiple-alerts-in-different-att-ck-tactics-on-a-single-host.html": "/guide/en/security/8.17/prebuilt-rule-8-3-4-multiple-alerts-in-different-att-ck-tactics-on-a-single-host.html", - "/en/security/*/prebuilt-rule-8-3-4-multiple-alerts-involving-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-3-4-multiple-alerts-involving-a-user.html", - "/en/security/*/prebuilt-rule-8-3-4-prebuilt-rules-8-3-4-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-3-4-prebuilt-rules-8-3-4-appendix.html", - "/en/security/*/prebuilt-rule-8-3-4-suspicious-werfault-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-3-4-suspicious-werfault-child-process.html", - "/en/security/*/prebuilt-rule-8-4-1-a-scheduled-task-was-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-a-scheduled-task-was-created.html", - "/en/security/*/prebuilt-rule-8-4-1-a-scheduled-task-was-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-a-scheduled-task-was-updated.html", - "/en/security/*/prebuilt-rule-8-4-1-abnormal-process-id-or-lock-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-abnormal-process-id-or-lock-file-created.html", - "/en/security/*/prebuilt-rule-8-4-1-abnormally-large-dns-response.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-abnormally-large-dns-response.html", - "/en/security/*/prebuilt-rule-8-4-1-accepted-default-telnet-port-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-accepted-default-telnet-port-connection.html", - "/en/security/*/prebuilt-rule-8-4-1-access-to-a-sensitive-ldap-attribute.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-access-to-a-sensitive-ldap-attribute.html", - "/en/security/*/prebuilt-rule-8-4-1-account-configured-with-never-expiring-password.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-account-configured-with-never-expiring-password.html", - "/en/security/*/prebuilt-rule-8-4-1-account-discovery-command-via-system-account.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-account-discovery-command-via-system-account.html", - "/en/security/*/prebuilt-rule-8-4-1-account-password-reset-remotely.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-account-password-reset-remotely.html", - "/en/security/*/prebuilt-rule-8-4-1-adding-hidden-file-attribute-via-attrib.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-adding-hidden-file-attribute-via-attrib.html", - "/en/security/*/prebuilt-rule-8-4-1-adfind-command-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-adfind-command-activity.html", - "/en/security/*/prebuilt-rule-8-4-1-administrator-privileges-assigned-to-an-okta-group.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-administrator-privileges-assigned-to-an-okta-group.html", - "/en/security/*/prebuilt-rule-8-4-1-administrator-role-assigned-to-an-okta-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-administrator-role-assigned-to-an-okta-user.html", - "/en/security/*/prebuilt-rule-8-4-1-adminsdholder-sdprop-exclusion-added.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-adminsdholder-sdprop-exclusion-added.html", - "/en/security/*/prebuilt-rule-8-4-1-adobe-hijack-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-adobe-hijack-persistence.html", - "/en/security/*/prebuilt-rule-8-4-1-adversary-behavior-detected-elastic-endgame.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-adversary-behavior-detected-elastic-endgame.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-create-okta-api-token.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-create-okta-api-token.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-deactivate-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-deactivate-an-okta-application.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-deactivate-an-okta-network-zone.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-deactivate-an-okta-network-zone.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-deactivate-an-okta-policy-rule.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-deactivate-an-okta-policy-rule.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-deactivate-an-okta-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-deactivate-an-okta-policy.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-deactivate-mfa-for-an-okta-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-deactivate-mfa-for-an-okta-user-account.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-delete-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-delete-an-okta-application.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-delete-an-okta-network-zone.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-delete-an-okta-network-zone.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-delete-an-okta-policy-rule.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-delete-an-okta-policy-rule.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-delete-an-okta-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-delete-an-okta-policy.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-modify-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-modify-an-okta-application.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-modify-an-okta-network-zone.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-modify-an-okta-network-zone.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-modify-an-okta-policy-rule.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-modify-an-okta-policy-rule.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-modify-an-okta-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-modify-an-okta-policy.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-reset-mfa-factors-for-an-okta-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-reset-mfa-factors-for-an-okta-user-account.html", - "/en/security/*/prebuilt-rule-8-4-1-attempt-to-revoke-okta-api-token.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempt-to-revoke-okta-api-token.html", - "/en/security/*/prebuilt-rule-8-4-1-attempted-bypass-of-okta-mfa.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempted-bypass-of-okta-mfa.html", - "/en/security/*/prebuilt-rule-8-4-1-attempts-to-brute-force-an-okta-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-attempts-to-brute-force-an-okta-user-account.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-access-secret-in-secrets-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-access-secret-in-secrets-manager.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-cloudtrail-log-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-cloudtrail-log-deleted.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-cloudtrail-log-suspended.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-cloudtrail-log-suspended.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-cloudtrail-log-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-cloudtrail-log-updated.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-cloudwatch-alarm-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-cloudwatch-alarm-deletion.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-cloudwatch-log-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-cloudwatch-log-group-deletion.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-cloudwatch-log-stream-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-cloudwatch-log-stream-deletion.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-config-resource-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-config-resource-deletion.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-ec2-snapshot-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-ec2-snapshot-activity.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-execution-via-system-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-execution-via-system-manager.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-iam-assume-role-policy-update.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-iam-assume-role-policy-update.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-iam-brute-force-of-assume-role-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-iam-brute-force-of-assume-role-policy.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-iam-deactivation-of-mfa-device.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-iam-deactivation-of-mfa-device.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-iam-user-addition-to-group.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-iam-user-addition-to-group.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-kms-customer-managed-key-disabled-or-scheduled-for-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-kms-customer-managed-key-disabled-or-scheduled-for-deletion.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-management-console-root-login.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-management-console-root-login.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-root-login-without-mfa.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-root-login-without-mfa.html", - "/en/security/*/prebuilt-rule-8-4-1-aws-vpc-flow-logs-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-aws-vpc-flow-logs-deletion.html", - "/en/security/*/prebuilt-rule-8-4-1-azure-active-directory-high-risk-sign-in.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-azure-active-directory-high-risk-sign-in.html", - "/en/security/*/prebuilt-rule-8-4-1-azure-active-directory-high-risk-user-sign-in-heuristic.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-azure-active-directory-high-risk-user-sign-in-heuristic.html", - "/en/security/*/prebuilt-rule-8-4-1-azure-active-directory-powershell-sign-in.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-azure-active-directory-powershell-sign-in.html", - "/en/security/*/prebuilt-rule-8-4-1-azure-key-vault-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-azure-key-vault-modified.html", - "/en/security/*/prebuilt-rule-8-4-1-azure-privilege-identity-management-role-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-azure-privilege-identity-management-role-modified.html", - "/en/security/*/prebuilt-rule-8-4-1-azure-service-principal-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-azure-service-principal-addition.html", - "/en/security/*/prebuilt-rule-8-4-1-binary-executed-from-shared-memory-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-binary-executed-from-shared-memory-directory.html", - "/en/security/*/prebuilt-rule-8-4-1-bypass-uac-via-event-viewer.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-bypass-uac-via-event-viewer.html", - "/en/security/*/prebuilt-rule-8-4-1-clearing-windows-console-history.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-clearing-windows-console-history.html", - "/en/security/*/prebuilt-rule-8-4-1-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-8-4-1-cobalt-strike-command-and-control-beacon.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-cobalt-strike-command-and-control-beacon.html", - "/en/security/*/prebuilt-rule-8-4-1-command-execution-via-solarwinds-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-command-execution-via-solarwinds-process.html", - "/en/security/*/prebuilt-rule-8-4-1-command-shell-activity-started-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-command-shell-activity-started-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-4-1-component-object-model-hijacking.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-component-object-model-hijacking.html", - "/en/security/*/prebuilt-rule-8-4-1-conhost-spawned-by-suspicious-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-conhost-spawned-by-suspicious-parent-process.html", - "/en/security/*/prebuilt-rule-8-4-1-connection-to-commonly-abused-web-services.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-connection-to-commonly-abused-web-services.html", - "/en/security/*/prebuilt-rule-8-4-1-control-panel-process-with-unusual-arguments.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-control-panel-process-with-unusual-arguments.html", - "/en/security/*/prebuilt-rule-8-4-1-creation-of-a-hidden-local-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-creation-of-a-hidden-local-user-account.html", - "/en/security/*/prebuilt-rule-8-4-1-creation-of-hidden-login-item-via-apple-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-creation-of-hidden-login-item-via-apple-script.html", - "/en/security/*/prebuilt-rule-8-4-1-creation-or-modification-of-domain-backup-dpapi-private-key.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-creation-or-modification-of-domain-backup-dpapi-private-key.html", - "/en/security/*/prebuilt-rule-8-4-1-creation-or-modification-of-root-certificate.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-creation-or-modification-of-root-certificate.html", - "/en/security/*/prebuilt-rule-8-4-1-credential-acquisition-via-registry-hive-dumping.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-credential-acquisition-via-registry-hive-dumping.html", - "/en/security/*/prebuilt-rule-8-4-1-default-cobalt-strike-team-server-certificate.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-default-cobalt-strike-team-server-certificate.html", - "/en/security/*/prebuilt-rule-8-4-1-delete-volume-usn-journal-with-fsutil.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-delete-volume-usn-journal-with-fsutil.html", - "/en/security/*/prebuilt-rule-8-4-1-deleting-backup-catalogs-with-wbadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-deleting-backup-catalogs-with-wbadmin.html", - "/en/security/*/prebuilt-rule-8-4-1-direct-outbound-smb-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-direct-outbound-smb-connection.html", - "/en/security/*/prebuilt-rule-8-4-1-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-4-1-disable-windows-firewall-rules-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-disable-windows-firewall-rules-via-netsh.html", - "/en/security/*/prebuilt-rule-8-4-1-disabling-user-account-control-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-disabling-user-account-control-via-registry-modification.html", - "/en/security/*/prebuilt-rule-8-4-1-disabling-windows-defender-security-settings-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-disabling-windows-defender-security-settings-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-1-dns-over-https-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-dns-over-https-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-8-4-1-enable-host-network-discovery-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-enable-host-network-discovery-via-netsh.html", - "/en/security/*/prebuilt-rule-8-4-1-encoded-executable-stored-in-the-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-encoded-executable-stored-in-the-registry.html", - "/en/security/*/prebuilt-rule-8-4-1-encrypting-files-with-winrar-or-7z.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-encrypting-files-with-winrar-or-7z.html", - "/en/security/*/prebuilt-rule-8-4-1-enumerating-domain-trusts-via-nltest-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-enumerating-domain-trusts-via-nltest-exe.html", - "/en/security/*/prebuilt-rule-8-4-1-enumeration-command-spawned-via-wmiprvse.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-enumeration-command-spawned-via-wmiprvse.html", - "/en/security/*/prebuilt-rule-8-4-1-enumeration-of-administrator-accounts.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-enumeration-of-administrator-accounts.html", - "/en/security/*/prebuilt-rule-8-4-1-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-8-4-1-executable-file-creation-with-multiple-extensions.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-executable-file-creation-with-multiple-extensions.html", - "/en/security/*/prebuilt-rule-8-4-1-execution-from-unusual-directory-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-execution-from-unusual-directory-command-line.html", - "/en/security/*/prebuilt-rule-8-4-1-execution-of-com-object-via-xwizard.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-execution-of-com-object-via-xwizard.html", - "/en/security/*/prebuilt-rule-8-4-1-execution-of-file-written-or-modified-by-microsoft-office.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-execution-of-file-written-or-modified-by-microsoft-office.html", - "/en/security/*/prebuilt-rule-8-4-1-execution-of-file-written-or-modified-by-pdf-reader.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-execution-of-file-written-or-modified-by-pdf-reader.html", - "/en/security/*/prebuilt-rule-8-4-1-execution-via-local-sxs-shared-module.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-execution-via-local-sxs-shared-module.html", - "/en/security/*/prebuilt-rule-8-4-1-execution-via-mssql-xp-cmdshell-stored-procedure.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-execution-via-mssql-xp-cmdshell-stored-procedure.html", - "/en/security/*/prebuilt-rule-8-4-1-exporting-exchange-mailbox-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-exporting-exchange-mailbox-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-1-external-ip-lookup-from-non-browser-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-external-ip-lookup-from-non-browser-process.html", - "/en/security/*/prebuilt-rule-8-4-1-file-transfer-or-listener-established-via-netcat.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-file-transfer-or-listener-established-via-netcat.html", - "/en/security/*/prebuilt-rule-8-4-1-gcp-kubernetes-rolebindings-created-or-patched.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-gcp-kubernetes-rolebindings-created-or-patched.html", - "/en/security/*/prebuilt-rule-8-4-1-google-workspace-mfa-enforcement-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-google-workspace-mfa-enforcement-disabled.html", - "/en/security/*/prebuilt-rule-8-4-1-group-policy-abuse-for-privilege-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-group-policy-abuse-for-privilege-addition.html", - "/en/security/*/prebuilt-rule-8-4-1-high-number-of-okta-user-password-reset-or-unlock-attempts.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-high-number-of-okta-user-password-reset-or-unlock-attempts.html", - "/en/security/*/prebuilt-rule-8-4-1-high-number-of-process-and-or-service-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-high-number-of-process-and-or-service-terminations.html", - "/en/security/*/prebuilt-rule-8-4-1-high-number-of-process-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-high-number-of-process-terminations.html", - "/en/security/*/prebuilt-rule-8-4-1-hosts-file-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-hosts-file-modified.html", - "/en/security/*/prebuilt-rule-8-4-1-iis-http-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-iis-http-logging-disabled.html", - "/en/security/*/prebuilt-rule-8-4-1-imageload-via-windows-update-auto-update-client.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-imageload-via-windows-update-auto-update-client.html", - "/en/security/*/prebuilt-rule-8-4-1-kerberos-pre-authentication-disabled-for-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kerberos-pre-authentication-disabled-for-user.html", - "/en/security/*/prebuilt-rule-8-4-1-kerberos-traffic-from-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kerberos-traffic-from-unusual-process.html", - "/en/security/*/prebuilt-rule-8-4-1-kubernetes-anonymous-request-authorized.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kubernetes-anonymous-request-authorized.html", - "/en/security/*/prebuilt-rule-8-4-1-kubernetes-container-created-with-excessive-linux-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kubernetes-container-created-with-excessive-linux-capabilities.html", - "/en/security/*/prebuilt-rule-8-4-1-kubernetes-denied-service-account-request.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kubernetes-denied-service-account-request.html", - "/en/security/*/prebuilt-rule-8-4-1-kubernetes-exposed-service-created-with-type-nodeport.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kubernetes-exposed-service-created-with-type-nodeport.html", - "/en/security/*/prebuilt-rule-8-4-1-kubernetes-pod-created-with-a-sensitive-hostpath-volume.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kubernetes-pod-created-with-a-sensitive-hostpath-volume.html", - "/en/security/*/prebuilt-rule-8-4-1-kubernetes-pod-created-with-hostipc.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kubernetes-pod-created-with-hostipc.html", - "/en/security/*/prebuilt-rule-8-4-1-kubernetes-pod-created-with-hostnetwork.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kubernetes-pod-created-with-hostnetwork.html", - "/en/security/*/prebuilt-rule-8-4-1-kubernetes-pod-created-with-hostpid.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kubernetes-pod-created-with-hostpid.html", - "/en/security/*/prebuilt-rule-8-4-1-kubernetes-privileged-pod-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kubernetes-privileged-pod-created.html", - "/en/security/*/prebuilt-rule-8-4-1-kubernetes-suspicious-assignment-of-controller-service-account.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kubernetes-suspicious-assignment-of-controller-service-account.html", - "/en/security/*/prebuilt-rule-8-4-1-kubernetes-suspicious-self-subject-review.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kubernetes-suspicious-self-subject-review.html", - "/en/security/*/prebuilt-rule-8-4-1-kubernetes-user-exec-into-pod.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-kubernetes-user-exec-into-pod.html", - "/en/security/*/prebuilt-rule-8-4-1-local-account-tokenfilter-policy-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-local-account-tokenfilter-policy-disabled.html", - "/en/security/*/prebuilt-rule-8-4-1-local-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-local-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-4-1-lsass-memory-dump-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-lsass-memory-dump-creation.html", - "/en/security/*/prebuilt-rule-8-4-1-lsass-memory-dump-handle-access.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-lsass-memory-dump-handle-access.html", - "/en/security/*/prebuilt-rule-8-4-1-masquerading-space-after-filename.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-masquerading-space-after-filename.html", - "/en/security/*/prebuilt-rule-8-4-1-microsoft-build-engine-started-an-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-microsoft-build-engine-started-an-unusual-process.html", - "/en/security/*/prebuilt-rule-8-4-1-microsoft-build-engine-started-by-a-script-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-microsoft-build-engine-started-by-a-script-process.html", - "/en/security/*/prebuilt-rule-8-4-1-microsoft-build-engine-started-by-a-system-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-microsoft-build-engine-started-by-a-system-process.html", - "/en/security/*/prebuilt-rule-8-4-1-microsoft-build-engine-started-by-an-office-application.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-microsoft-build-engine-started-by-an-office-application.html", - "/en/security/*/prebuilt-rule-8-4-1-microsoft-build-engine-using-an-alternate-name.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-microsoft-build-engine-using-an-alternate-name.html", - "/en/security/*/prebuilt-rule-8-4-1-microsoft-iis-connection-strings-decryption.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-microsoft-iis-connection-strings-decryption.html", - "/en/security/*/prebuilt-rule-8-4-1-microsoft-iis-service-account-password-dumped.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-microsoft-iis-service-account-password-dumped.html", - "/en/security/*/prebuilt-rule-8-4-1-microsoft-windows-defender-tampering.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-microsoft-windows-defender-tampering.html", - "/en/security/*/prebuilt-rule-8-4-1-mimikatz-memssp-log-file-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-mimikatz-memssp-log-file-detected.html", - "/en/security/*/prebuilt-rule-8-4-1-modification-of-amsienable-registry-key.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-modification-of-amsienable-registry-key.html", - "/en/security/*/prebuilt-rule-8-4-1-modification-of-boot-configuration.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-modification-of-boot-configuration.html", - "/en/security/*/prebuilt-rule-8-4-1-modification-of-the-mspkiaccountcredentials.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-modification-of-the-mspkiaccountcredentials.html", - "/en/security/*/prebuilt-rule-8-4-1-modification-of-wdigest-security-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-modification-of-wdigest-security-provider.html", - "/en/security/*/prebuilt-rule-8-4-1-modification-or-removal-of-an-okta-application-sign-on-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-modification-or-removal-of-an-okta-application-sign-on-policy.html", - "/en/security/*/prebuilt-rule-8-4-1-mounting-hidden-or-webdav-remote-shares.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-mounting-hidden-or-webdav-remote-shares.html", - "/en/security/*/prebuilt-rule-8-4-1-ms-office-macro-security-registry-modifications.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-ms-office-macro-security-registry-modifications.html", - "/en/security/*/prebuilt-rule-8-4-1-multi-factor-authentication-disabled-for-an-azure-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-multi-factor-authentication-disabled-for-an-azure-user.html", - "/en/security/*/prebuilt-rule-8-4-1-multiple-alerts-in-different-att-ck-tactics-on-a-single-host.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-multiple-alerts-in-different-att-ck-tactics-on-a-single-host.html", - "/en/security/*/prebuilt-rule-8-4-1-multiple-vault-web-credentials-read.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-multiple-vault-web-credentials-read.html", - "/en/security/*/prebuilt-rule-8-4-1-network-connection-via-certutil.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-network-connection-via-certutil.html", - "/en/security/*/prebuilt-rule-8-4-1-network-logon-provider-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-network-logon-provider-registry-modification.html", - "/en/security/*/prebuilt-rule-8-4-1-ntds-or-sam-database-file-copied.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-ntds-or-sam-database-file-copied.html", - "/en/security/*/prebuilt-rule-8-4-1-nullsessionpipe-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-nullsessionpipe-registry-modification.html", - "/en/security/*/prebuilt-rule-8-4-1-okta-brute-force-or-password-spraying-attack.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-okta-brute-force-or-password-spraying-attack.html", - "/en/security/*/prebuilt-rule-8-4-1-okta-user-session-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-okta-user-session-impersonation.html", - "/en/security/*/prebuilt-rule-8-4-1-peripheral-device-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-peripheral-device-discovery.html", - "/en/security/*/prebuilt-rule-8-4-1-persistence-via-powershell-profile.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-persistence-via-powershell-profile.html", - "/en/security/*/prebuilt-rule-8-4-1-persistence-via-update-orchestrator-service-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-persistence-via-update-orchestrator-service-hijack.html", - "/en/security/*/prebuilt-rule-8-4-1-persistence-via-wmi-event-subscription.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-persistence-via-wmi-event-subscription.html", - "/en/security/*/prebuilt-rule-8-4-1-persistence-via-wmi-standard-registry-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-persistence-via-wmi-standard-registry-provider.html", - "/en/security/*/prebuilt-rule-8-4-1-persistent-scripts-in-the-startup-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-persistent-scripts-in-the-startup-directory.html", - "/en/security/*/prebuilt-rule-8-4-1-port-forwarding-rule-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-port-forwarding-rule-addition.html", - "/en/security/*/prebuilt-rule-8-4-1-possible-consent-grant-attack-via-azure-registered-application.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-possible-consent-grant-attack-via-azure-registered-application.html", - "/en/security/*/prebuilt-rule-8-4-1-possible-okta-dos-attack.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-possible-okta-dos-attack.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-abuse-of-repeated-mfa-push-notifications.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-abuse-of-repeated-mfa-push-notifications.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-application-shimming-via-sdbinst.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-application-shimming-via-sdbinst.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-credential-access-via-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-credential-access-via-dcsync.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-credential-access-via-duplicatehandle-in-lsass.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-credential-access-via-duplicatehandle-in-lsass.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-credential-access-via-lsass-memory-dump.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-credential-access-via-lsass-memory-dump.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-credential-access-via-renamed-com-services-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-credential-access-via-renamed-com-services-dll.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-credential-access-via-trusted-developer-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-credential-access-via-trusted-developer-utility.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-credential-access-via-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-credential-access-via-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-dll-sideloading-via-trusted-microsoft-programs.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-dll-sideloading-via-trusted-microsoft-programs.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-dns-tunneling-via-nslookup.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-dns-tunneling-via-nslookup.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-evasion-via-filter-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-evasion-via-filter-manager.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-invoke-mimikatz-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-invoke-mimikatz-powershell-script.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-java-jndi-exploitation-attempt.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-java-jndi-exploitation-attempt.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-lateral-tool-transfer-via-smb-share.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-lateral-tool-transfer-via-smb-share.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-local-ntlm-relay-via-http.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-local-ntlm-relay-via-http.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-lsass-clone-creation-via-psscapturesnapshot.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-lsass-clone-creation-via-psscapturesnapshot.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-lsass-memory-dump-via-psscapturesnapshot.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-lsass-memory-dump-via-psscapturesnapshot.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-modification-of-accessibility-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-modification-of-accessibility-binaries.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-non-standard-port-ssh-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-non-standard-port-ssh-connection.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-persistence-via-login-hook.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-persistence-via-login-hook.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-privilege-escalation-via-installerfiletakeover.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-privilege-escalation-via-installerfiletakeover.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-process-herpaderping-attempt.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-process-herpaderping-attempt.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-process-injection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-process-injection-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-remote-credential-access-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-remote-credential-access-via-registry.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-remote-desktop-tunneling-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-remote-desktop-tunneling-detected.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-reverse-shell-activity-via-terminal.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-reverse-shell-activity-via-terminal.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-secure-file-deletion-via-sdelete-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-secure-file-deletion-via-sdelete-utility.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-shadow-credentials-added-to-ad-object.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-shadow-credentials-added-to-ad-object.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-shadow-file-read-via-command-line-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-shadow-file-read-via-command-line-utilities.html", - "/en/security/*/prebuilt-rule-8-4-1-potential-shell-via-web-server.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-potential-shell-via-web-server.html", - "/en/security/*/prebuilt-rule-8-4-1-powershell-kerberos-ticket-request.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-powershell-kerberos-ticket-request.html", - "/en/security/*/prebuilt-rule-8-4-1-powershell-keylogging-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-powershell-keylogging-script.html", - "/en/security/*/prebuilt-rule-8-4-1-powershell-minidump-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-powershell-minidump-script.html", - "/en/security/*/prebuilt-rule-8-4-1-powershell-psreflect-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-powershell-psreflect-script.html", - "/en/security/*/prebuilt-rule-8-4-1-powershell-script-block-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-powershell-script-block-logging-disabled.html", - "/en/security/*/prebuilt-rule-8-4-1-powershell-share-enumeration-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-powershell-share-enumeration-script.html", - "/en/security/*/prebuilt-rule-8-4-1-powershell-suspicious-discovery-related-windows-api-functions.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-powershell-suspicious-discovery-related-windows-api-functions.html", - "/en/security/*/prebuilt-rule-8-4-1-powershell-suspicious-payload-encoded-and-compressed.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-powershell-suspicious-payload-encoded-and-compressed.html", - "/en/security/*/prebuilt-rule-8-4-1-powershell-suspicious-script-with-audio-capture-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-powershell-suspicious-script-with-audio-capture-capabilities.html", - "/en/security/*/prebuilt-rule-8-4-1-powershell-suspicious-script-with-screenshot-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-powershell-suspicious-script-with-screenshot-capabilities.html", - "/en/security/*/prebuilt-rule-8-4-1-prebuilt-rules-8-4-1-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-prebuilt-rules-8-4-1-appendix.html", - "/en/security/*/prebuilt-rule-8-4-1-privilege-escalation-via-rogue-named-pipe-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-privilege-escalation-via-rogue-named-pipe-impersonation.html", - "/en/security/*/prebuilt-rule-8-4-1-privileges-elevation-via-parent-process-pid-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-privileges-elevation-via-parent-process-pid-spoofing.html", - "/en/security/*/prebuilt-rule-8-4-1-process-activity-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-process-activity-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-8-4-1-process-created-with-an-elevated-token.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-process-created-with-an-elevated-token.html", - "/en/security/*/prebuilt-rule-8-4-1-process-creation-via-secondary-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-process-creation-via-secondary-logon.html", - "/en/security/*/prebuilt-rule-8-4-1-process-execution-from-an-unusual-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-process-execution-from-an-unusual-directory.html", - "/en/security/*/prebuilt-rule-8-4-1-process-injection-by-the-microsoft-build-engine.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-process-injection-by-the-microsoft-build-engine.html", - "/en/security/*/prebuilt-rule-8-4-1-process-started-from-process-id-pid-file.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-process-started-from-process-id-pid-file.html", - "/en/security/*/prebuilt-rule-8-4-1-process-termination-followed-by-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-process-termination-followed-by-deletion.html", - "/en/security/*/prebuilt-rule-8-4-1-program-files-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-program-files-directory-masquerading.html", - "/en/security/*/prebuilt-rule-8-4-1-psexec-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-psexec-network-connection.html", - "/en/security/*/prebuilt-rule-8-4-1-rare-aws-error-code.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-rare-aws-error-code.html", - "/en/security/*/prebuilt-rule-8-4-1-rdp-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-rdp-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-8-4-1-remote-computer-account-dnshostname-update.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-remote-computer-account-dnshostname-update.html", - "/en/security/*/prebuilt-rule-8-4-1-remote-desktop-enabled-in-windows-firewall-by-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-remote-desktop-enabled-in-windows-firewall-by-netsh.html", - "/en/security/*/prebuilt-rule-8-4-1-remote-execution-via-file-shares.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-remote-execution-via-file-shares.html", - "/en/security/*/prebuilt-rule-8-4-1-remote-file-copy-via-teamviewer.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-remote-file-copy-via-teamviewer.html", - "/en/security/*/prebuilt-rule-8-4-1-remote-file-download-via-desktopimgdownldr-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-remote-file-download-via-desktopimgdownldr-utility.html", - "/en/security/*/prebuilt-rule-8-4-1-remote-file-download-via-mpcmdrun.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-remote-file-download-via-mpcmdrun.html", - "/en/security/*/prebuilt-rule-8-4-1-remote-file-download-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-remote-file-download-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-1-remote-file-download-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-remote-file-download-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-8-4-1-remote-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-remote-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-4-1-remote-system-discovery-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-remote-system-discovery-commands.html", - "/en/security/*/prebuilt-rule-8-4-1-remote-windows-service-installed.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-remote-windows-service-installed.html", - "/en/security/*/prebuilt-rule-8-4-1-remotely-started-services-via-rpc.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-remotely-started-services-via-rpc.html", - "/en/security/*/prebuilt-rule-8-4-1-renamed-autoit-scripts-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-renamed-autoit-scripts-interpreter.html", - "/en/security/*/prebuilt-rule-8-4-1-reverse-shell-created-via-named-pipe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-reverse-shell-created-via-named-pipe.html", - "/en/security/*/prebuilt-rule-8-4-1-scheduled-task-execution-at-scale-via-gpo.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-scheduled-task-execution-at-scale-via-gpo.html", - "/en/security/*/prebuilt-rule-8-4-1-scheduled-tasks-at-command-enabled.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-scheduled-tasks-at-command-enabled.html", - "/en/security/*/prebuilt-rule-8-4-1-searching-for-saved-credentials-via-vaultcmd.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-searching-for-saved-credentials-via-vaultcmd.html", - "/en/security/*/prebuilt-rule-8-4-1-security-software-discovery-using-wmic.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-security-software-discovery-using-wmic.html", - "/en/security/*/prebuilt-rule-8-4-1-security-software-discovery-via-grep.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-security-software-discovery-via-grep.html", - "/en/security/*/prebuilt-rule-8-4-1-sedebugprivilege-enabled-by-a-suspicious-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-sedebugprivilege-enabled-by-a-suspicious-process.html", - "/en/security/*/prebuilt-rule-8-4-1-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-8-4-1-signed-proxy-execution-via-ms-work-folders.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-signed-proxy-execution-via-ms-work-folders.html", - "/en/security/*/prebuilt-rule-8-4-1-sip-provider-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-sip-provider-modification.html", - "/en/security/*/prebuilt-rule-8-4-1-solarwinds-process-disabling-services-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-solarwinds-process-disabling-services-via-registry.html", - "/en/security/*/prebuilt-rule-8-4-1-spike-in-aws-error-messages.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-spike-in-aws-error-messages.html", - "/en/security/*/prebuilt-rule-8-4-1-startup-folder-persistence-via-unsigned-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-startup-folder-persistence-via-unsigned-process.html", - "/en/security/*/prebuilt-rule-8-4-1-startup-logon-script-added-to-group-policy-object.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-startup-logon-script-added-to-group-policy-object.html", - "/en/security/*/prebuilt-rule-8-4-1-startup-or-run-key-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-startup-or-run-key-registry-modification.html", - "/en/security/*/prebuilt-rule-8-4-1-startup-persistence-by-a-suspicious-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-startup-persistence-by-a-suspicious-process.html", - "/en/security/*/prebuilt-rule-8-4-1-sunburst-command-and-control-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-sunburst-command-and-control-activity.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-activity-reported-by-okta-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-activity-reported-by-okta-user.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-certutil-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-certutil-commands.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-cmd-execution-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-cmd-execution-via-wmi.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-endpoint-security-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-endpoint-security-parent-process.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-execution-short-program-name.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-execution-short-program-name.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-file-creation-in-etc-for-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-file-creation-in-etc-for-persistence.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-java-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-java-child-process.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-lsass-access-via-malseclogon.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-lsass-access-via-malseclogon.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-microsoft-diagnostics-wizard-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-microsoft-diagnostics-wizard-execution.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-ms-outlook-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-ms-outlook-child-process.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-net-code-compilation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-net-code-compilation.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-net-reflection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-net-reflection-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-pdf-reader-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-pdf-reader-child-process.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-portable-executable-encoded-in-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-portable-executable-encoded-in-powershell-script.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-powershell-engine-imageload.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-powershell-engine-imageload.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-powershell-script.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-print-spooler-spl-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-print-spooler-spl-file-created.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-process-access-via-direct-system-call.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-process-access-via-direct-system-call.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-process-creation-calltrace.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-process-creation-calltrace.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-process-execution-via-renamed-psexec-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-process-execution-via-renamed-psexec-executable.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-remote-registry-access-via-sebackupprivilege.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-remote-registry-access-via-sebackupprivilege.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-service-was-installed-in-the-system.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-service-was-installed-in-the-system.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-solarwinds-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-solarwinds-child-process.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-startup-shell-folder-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-startup-shell-folder-modification.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-werfault-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-werfault-child-process.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-wmi-image-load-from-ms-office.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-wmi-image-load-from-ms-office.html", - "/en/security/*/prebuilt-rule-8-4-1-suspicious-zoom-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-suspicious-zoom-child-process.html", - "/en/security/*/prebuilt-rule-8-4-1-svchost-spawning-cmd.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-svchost-spawning-cmd.html", - "/en/security/*/prebuilt-rule-8-4-1-symbolic-link-to-shadow-copy-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-symbolic-link-to-shadow-copy-created.html", - "/en/security/*/prebuilt-rule-8-4-1-system-information-discovery-via-windows-command-shell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-system-information-discovery-via-windows-command-shell.html", - "/en/security/*/prebuilt-rule-8-4-1-system-log-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-system-log-file-deletion.html", - "/en/security/*/prebuilt-rule-8-4-1-system-shells-via-services.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-system-shells-via-services.html", - "/en/security/*/prebuilt-rule-8-4-1-temporarily-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-temporarily-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-4-1-third-party-backup-files-deleted-via-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-third-party-backup-files-deleted-via-unexpected-process.html", - "/en/security/*/prebuilt-rule-8-4-1-threat-detected-by-okta-threatinsight.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-threat-detected-by-okta-threatinsight.html", - "/en/security/*/prebuilt-rule-8-4-1-threat-intel-filebeat-module-v8-x-indicator-match.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-threat-intel-filebeat-module-v8-x-indicator-match.html", - "/en/security/*/prebuilt-rule-8-4-1-threat-intel-indicator-match.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-threat-intel-indicator-match.html", - "/en/security/*/prebuilt-rule-8-4-1-uac-bypass-attempt-via-privileged-ifileoperation-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-uac-bypass-attempt-via-privileged-ifileoperation-com-interface.html", - "/en/security/*/prebuilt-rule-8-4-1-uac-bypass-attempt-via-windows-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-uac-bypass-attempt-via-windows-directory-masquerading.html", - "/en/security/*/prebuilt-rule-8-4-1-uac-bypass-via-windows-firewall-snap-in-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-uac-bypass-via-windows-firewall-snap-in-hijack.html", - "/en/security/*/prebuilt-rule-8-4-1-unauthorized-access-to-an-okta-application.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unauthorized-access-to-an-okta-application.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-aws-command-for-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-aws-command-for-a-user.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-child-process-from-a-system-virtual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-child-process-from-a-system-virtual-process.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-child-process-of-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-child-process-of-dns-exe.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-city-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-city-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-country-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-country-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-executable-file-creation-by-a-system-critical-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-executable-file-creation-by-a-system-critical-process.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-file-creation-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-file-creation-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-file-modification-by-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-file-modification-by-dns-exe.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-network-connection-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-network-connection-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-parent-child-relationship.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-parent-child-relationship.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-parent-process-for-cmd-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-parent-process-for-cmd-exe.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-process-execution-path-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-process-execution-path-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-8-4-1-unusual-process-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-unusual-process-network-connection.html", - "/en/security/*/prebuilt-rule-8-4-1-user-account-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-user-account-creation.html", - "/en/security/*/prebuilt-rule-8-4-1-user-account-exposed-to-kerberoasting.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-user-account-exposed-to-kerberoasting.html", - "/en/security/*/prebuilt-rule-8-4-1-user-added-to-privileged-group.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-user-added-to-privileged-group.html", - "/en/security/*/prebuilt-rule-8-4-1-volume-shadow-copy-deleted-or-resized-via-vssadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-volume-shadow-copy-deleted-or-resized-via-vssadmin.html", - "/en/security/*/prebuilt-rule-8-4-1-volume-shadow-copy-deletion-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-volume-shadow-copy-deletion-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-1-volume-shadow-copy-deletion-via-wmic.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-volume-shadow-copy-deletion-via-wmic.html", - "/en/security/*/prebuilt-rule-8-4-1-web-shell-detection-script-process-child-of-common-web-processes.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-web-shell-detection-script-process-child-of-common-web-processes.html", - "/en/security/*/prebuilt-rule-8-4-1-whoami-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-whoami-process-activity.html", - "/en/security/*/prebuilt-rule-8-4-1-windows-defender-disabled-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-windows-defender-disabled-via-registry-modification.html", - "/en/security/*/prebuilt-rule-8-4-1-windows-defender-exclusions-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-windows-defender-exclusions-added-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-1-windows-event-logs-cleared.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-windows-event-logs-cleared.html", - "/en/security/*/prebuilt-rule-8-4-1-windows-firewall-disabled-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-windows-firewall-disabled-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-1-windows-network-enumeration.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-windows-network-enumeration.html", - "/en/security/*/prebuilt-rule-8-4-1-windows-registry-file-creation-in-smb-share.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-windows-registry-file-creation-in-smb-share.html", - "/en/security/*/prebuilt-rule-8-4-1-windows-script-executing-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-windows-script-executing-powershell.html", - "/en/security/*/prebuilt-rule-8-4-1-wireless-credential-dumping-using-netsh-command.html": "/guide/en/security/8.17/prebuilt-rule-8-4-1-wireless-credential-dumping-using-netsh-command.html", - "/en/security/*/prebuilt-rule-8-4-2-a-scheduled-task-was-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-a-scheduled-task-was-created.html", - "/en/security/*/prebuilt-rule-8-4-2-a-scheduled-task-was-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-a-scheduled-task-was-updated.html", - "/en/security/*/prebuilt-rule-8-4-2-abnormal-process-id-or-lock-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-abnormal-process-id-or-lock-file-created.html", - "/en/security/*/prebuilt-rule-8-4-2-abnormally-large-dns-response.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-abnormally-large-dns-response.html", - "/en/security/*/prebuilt-rule-8-4-2-accepted-default-telnet-port-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-accepted-default-telnet-port-connection.html", - "/en/security/*/prebuilt-rule-8-4-2-access-of-stored-browser-credentials.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-access-of-stored-browser-credentials.html", - "/en/security/*/prebuilt-rule-8-4-2-access-to-a-sensitive-ldap-attribute.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-access-to-a-sensitive-ldap-attribute.html", - "/en/security/*/prebuilt-rule-8-4-2-access-to-keychain-credentials-directories.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-access-to-keychain-credentials-directories.html", - "/en/security/*/prebuilt-rule-8-4-2-account-configured-with-never-expiring-password.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-account-configured-with-never-expiring-password.html", - "/en/security/*/prebuilt-rule-8-4-2-account-discovery-command-via-system-account.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-account-discovery-command-via-system-account.html", - "/en/security/*/prebuilt-rule-8-4-2-account-password-reset-remotely.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-account-password-reset-remotely.html", - "/en/security/*/prebuilt-rule-8-4-2-adding-hidden-file-attribute-via-attrib.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-adding-hidden-file-attribute-via-attrib.html", - "/en/security/*/prebuilt-rule-8-4-2-adfind-command-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-adfind-command-activity.html", - "/en/security/*/prebuilt-rule-8-4-2-adminsdholder-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-adminsdholder-backdoor.html", - "/en/security/*/prebuilt-rule-8-4-2-adminsdholder-sdprop-exclusion-added.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-adminsdholder-sdprop-exclusion-added.html", - "/en/security/*/prebuilt-rule-8-4-2-adobe-hijack-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-adobe-hijack-persistence.html", - "/en/security/*/prebuilt-rule-8-4-2-apple-script-execution-followed-by-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-apple-script-execution-followed-by-network-connection.html", - "/en/security/*/prebuilt-rule-8-4-2-apple-scripting-execution-with-administrator-privileges.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-apple-scripting-execution-with-administrator-privileges.html", - "/en/security/*/prebuilt-rule-8-4-2-attempt-to-disable-gatekeeper.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-attempt-to-disable-gatekeeper.html", - "/en/security/*/prebuilt-rule-8-4-2-attempt-to-disable-syslog-service.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-attempt-to-disable-syslog-service.html", - "/en/security/*/prebuilt-rule-8-4-2-attempt-to-enable-the-root-account.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-attempt-to-enable-the-root-account.html", - "/en/security/*/prebuilt-rule-8-4-2-attempt-to-install-root-certificate.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-attempt-to-install-root-certificate.html", - "/en/security/*/prebuilt-rule-8-4-2-attempt-to-mount-smb-share-via-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-attempt-to-mount-smb-share-via-command-line.html", - "/en/security/*/prebuilt-rule-8-4-2-attempt-to-remove-file-quarantine-attribute.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-attempt-to-remove-file-quarantine-attribute.html", - "/en/security/*/prebuilt-rule-8-4-2-attempt-to-unload-elastic-endpoint-security-kernel-extension.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-attempt-to-unload-elastic-endpoint-security-kernel-extension.html", - "/en/security/*/prebuilt-rule-8-4-2-authorization-plugin-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-authorization-plugin-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-access-secret-in-secrets-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-access-secret-in-secrets-manager.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-cloudtrail-log-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-cloudtrail-log-created.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-cloudtrail-log-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-cloudtrail-log-deleted.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-cloudtrail-log-suspended.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-cloudtrail-log-suspended.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-cloudtrail-log-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-cloudtrail-log-updated.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-cloudwatch-alarm-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-cloudwatch-alarm-deletion.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-cloudwatch-log-group-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-cloudwatch-log-group-deletion.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-cloudwatch-log-stream-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-cloudwatch-log-stream-deletion.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-config-resource-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-config-resource-deletion.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-ec2-snapshot-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-ec2-snapshot-activity.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-execution-via-system-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-execution-via-system-manager.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-iam-assume-role-policy-update.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-iam-assume-role-policy-update.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-iam-brute-force-of-assume-role-policy.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-iam-brute-force-of-assume-role-policy.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-iam-deactivation-of-mfa-device.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-iam-deactivation-of-mfa-device.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-iam-user-addition-to-group.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-iam-user-addition-to-group.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-management-console-root-login.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-management-console-root-login.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-root-login-without-mfa.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-root-login-without-mfa.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-s3-bucket-configuration-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-s3-bucket-configuration-deletion.html", - "/en/security/*/prebuilt-rule-8-4-2-aws-vpc-flow-logs-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-aws-vpc-flow-logs-deletion.html", - "/en/security/*/prebuilt-rule-8-4-2-azure-active-directory-high-risk-sign-in.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-azure-active-directory-high-risk-sign-in.html", - "/en/security/*/prebuilt-rule-8-4-2-azure-active-directory-high-risk-user-sign-in-heuristic.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-azure-active-directory-high-risk-user-sign-in-heuristic.html", - "/en/security/*/prebuilt-rule-8-4-2-azure-active-directory-powershell-sign-in.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-azure-active-directory-powershell-sign-in.html", - "/en/security/*/prebuilt-rule-8-4-2-azure-event-hub-authorization-rule-created-or-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-azure-event-hub-authorization-rule-created-or-updated.html", - "/en/security/*/prebuilt-rule-8-4-2-azure-privilege-identity-management-role-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-azure-privilege-identity-management-role-modified.html", - "/en/security/*/prebuilt-rule-8-4-2-azure-service-principal-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-azure-service-principal-addition.html", - "/en/security/*/prebuilt-rule-8-4-2-base16-or-base32-encoding-decoding-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-base16-or-base32-encoding-decoding-activity.html", - "/en/security/*/prebuilt-rule-8-4-2-bash-shell-profile-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-bash-shell-profile-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-binary-executed-from-shared-memory-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-binary-executed-from-shared-memory-directory.html", - "/en/security/*/prebuilt-rule-8-4-2-bpf-filter-applied-using-tc.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-bpf-filter-applied-using-tc.html", - "/en/security/*/prebuilt-rule-8-4-2-bypass-uac-via-event-viewer.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-bypass-uac-via-event-viewer.html", - "/en/security/*/prebuilt-rule-8-4-2-chkconfig-service-add.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-chkconfig-service-add.html", - "/en/security/*/prebuilt-rule-8-4-2-clearing-windows-console-history.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-clearing-windows-console-history.html", - "/en/security/*/prebuilt-rule-8-4-2-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-8-4-2-cobalt-strike-command-and-control-beacon.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-cobalt-strike-command-and-control-beacon.html", - "/en/security/*/prebuilt-rule-8-4-2-command-execution-via-solarwinds-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-command-execution-via-solarwinds-process.html", - "/en/security/*/prebuilt-rule-8-4-2-command-prompt-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-command-prompt-network-connection.html", - "/en/security/*/prebuilt-rule-8-4-2-command-shell-activity-started-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-command-shell-activity-started-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-4-2-component-object-model-hijacking.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-component-object-model-hijacking.html", - "/en/security/*/prebuilt-rule-8-4-2-conhost-spawned-by-suspicious-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-conhost-spawned-by-suspicious-parent-process.html", - "/en/security/*/prebuilt-rule-8-4-2-connection-to-commonly-abused-free-ssl-certificate-providers.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-connection-to-commonly-abused-free-ssl-certificate-providers.html", - "/en/security/*/prebuilt-rule-8-4-2-connection-to-commonly-abused-web-services.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-connection-to-commonly-abused-web-services.html", - "/en/security/*/prebuilt-rule-8-4-2-connection-to-external-network-via-telnet.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-connection-to-external-network-via-telnet.html", - "/en/security/*/prebuilt-rule-8-4-2-connection-to-internal-network-via-telnet.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-connection-to-internal-network-via-telnet.html", - "/en/security/*/prebuilt-rule-8-4-2-control-panel-process-with-unusual-arguments.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-control-panel-process-with-unusual-arguments.html", - "/en/security/*/prebuilt-rule-8-4-2-creation-of-a-hidden-local-user-account.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-creation-of-a-hidden-local-user-account.html", - "/en/security/*/prebuilt-rule-8-4-2-creation-of-hidden-files-and-directories-via-commandline.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-creation-of-hidden-files-and-directories-via-commandline.html", - "/en/security/*/prebuilt-rule-8-4-2-creation-of-hidden-launch-agent-or-daemon.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-creation-of-hidden-launch-agent-or-daemon.html", - "/en/security/*/prebuilt-rule-8-4-2-creation-of-hidden-login-item-via-apple-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-creation-of-hidden-login-item-via-apple-script.html", - "/en/security/*/prebuilt-rule-8-4-2-creation-of-hidden-shared-object-file.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-creation-of-hidden-shared-object-file.html", - "/en/security/*/prebuilt-rule-8-4-2-creation-or-modification-of-a-new-gpo-scheduled-task-or-service.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-creation-or-modification-of-a-new-gpo-scheduled-task-or-service.html", - "/en/security/*/prebuilt-rule-8-4-2-creation-or-modification-of-domain-backup-dpapi-private-key.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-creation-or-modification-of-domain-backup-dpapi-private-key.html", - "/en/security/*/prebuilt-rule-8-4-2-creation-or-modification-of-root-certificate.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-creation-or-modification-of-root-certificate.html", - "/en/security/*/prebuilt-rule-8-4-2-credential-acquisition-via-registry-hive-dumping.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-credential-acquisition-via-registry-hive-dumping.html", - "/en/security/*/prebuilt-rule-8-4-2-default-cobalt-strike-team-server-certificate.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-default-cobalt-strike-team-server-certificate.html", - "/en/security/*/prebuilt-rule-8-4-2-delete-volume-usn-journal-with-fsutil.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-delete-volume-usn-journal-with-fsutil.html", - "/en/security/*/prebuilt-rule-8-4-2-deleting-backup-catalogs-with-wbadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-deleting-backup-catalogs-with-wbadmin.html", - "/en/security/*/prebuilt-rule-8-4-2-direct-outbound-smb-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-direct-outbound-smb-connection.html", - "/en/security/*/prebuilt-rule-8-4-2-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-4-2-disable-windows-firewall-rules-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-disable-windows-firewall-rules-via-netsh.html", - "/en/security/*/prebuilt-rule-8-4-2-disabling-user-account-control-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-disabling-user-account-control-via-registry-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-disabling-windows-defender-security-settings-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-disabling-windows-defender-security-settings-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-2-dns-over-https-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-dns-over-https-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-8-4-2-dumping-account-hashes-via-built-in-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-dumping-account-hashes-via-built-in-commands.html", - "/en/security/*/prebuilt-rule-8-4-2-dumping-of-keychain-content-via-security-command.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-dumping-of-keychain-content-via-security-command.html", - "/en/security/*/prebuilt-rule-8-4-2-dynamic-linker-copy.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-dynamic-linker-copy.html", - "/en/security/*/prebuilt-rule-8-4-2-eggshell-backdoor-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-eggshell-backdoor-execution.html", - "/en/security/*/prebuilt-rule-8-4-2-elastic-agent-service-terminated.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-elastic-agent-service-terminated.html", - "/en/security/*/prebuilt-rule-8-4-2-emond-rules-creation-or-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-emond-rules-creation-or-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-enable-host-network-discovery-via-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-enable-host-network-discovery-via-netsh.html", - "/en/security/*/prebuilt-rule-8-4-2-encoded-executable-stored-in-the-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-encoded-executable-stored-in-the-registry.html", - "/en/security/*/prebuilt-rule-8-4-2-encrypting-files-with-winrar-or-7z.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-encrypting-files-with-winrar-or-7z.html", - "/en/security/*/prebuilt-rule-8-4-2-endpoint-security.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-endpoint-security.html", - "/en/security/*/prebuilt-rule-8-4-2-enumerating-domain-trusts-via-nltest-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-enumerating-domain-trusts-via-nltest-exe.html", - "/en/security/*/prebuilt-rule-8-4-2-enumeration-command-spawned-via-wmiprvse.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-enumeration-command-spawned-via-wmiprvse.html", - "/en/security/*/prebuilt-rule-8-4-2-enumeration-of-administrator-accounts.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-enumeration-of-administrator-accounts.html", - "/en/security/*/prebuilt-rule-8-4-2-enumeration-of-kernel-modules.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-enumeration-of-kernel-modules.html", - "/en/security/*/prebuilt-rule-8-4-2-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-8-4-2-enumeration-of-users-or-groups-via-built-in-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-enumeration-of-users-or-groups-via-built-in-commands.html", - "/en/security/*/prebuilt-rule-8-4-2-exchange-mailbox-export-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-exchange-mailbox-export-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-2-executable-file-creation-with-multiple-extensions.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-executable-file-creation-with-multiple-extensions.html", - "/en/security/*/prebuilt-rule-8-4-2-execution-from-unusual-directory-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-execution-from-unusual-directory-command-line.html", - "/en/security/*/prebuilt-rule-8-4-2-execution-of-com-object-via-xwizard.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-execution-of-com-object-via-xwizard.html", - "/en/security/*/prebuilt-rule-8-4-2-execution-of-file-written-or-modified-by-microsoft-office.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-execution-of-file-written-or-modified-by-microsoft-office.html", - "/en/security/*/prebuilt-rule-8-4-2-execution-of-file-written-or-modified-by-pdf-reader.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-execution-of-file-written-or-modified-by-pdf-reader.html", - "/en/security/*/prebuilt-rule-8-4-2-execution-of-persistent-suspicious-program.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-execution-of-persistent-suspicious-program.html", - "/en/security/*/prebuilt-rule-8-4-2-execution-via-electron-child-process-node-js-module.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-execution-via-electron-child-process-node-js-module.html", - "/en/security/*/prebuilt-rule-8-4-2-execution-via-local-sxs-shared-module.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-execution-via-local-sxs-shared-module.html", - "/en/security/*/prebuilt-rule-8-4-2-execution-via-mssql-xp-cmdshell-stored-procedure.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-execution-via-mssql-xp-cmdshell-stored-procedure.html", - "/en/security/*/prebuilt-rule-8-4-2-execution-via-tsclient-mountpoint.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-execution-via-tsclient-mountpoint.html", - "/en/security/*/prebuilt-rule-8-4-2-execution-with-explicit-credentials-via-scripting.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-execution-with-explicit-credentials-via-scripting.html", - "/en/security/*/prebuilt-rule-8-4-2-exporting-exchange-mailbox-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-exporting-exchange-mailbox-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-2-external-ip-lookup-from-non-browser-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-external-ip-lookup-from-non-browser-process.html", - "/en/security/*/prebuilt-rule-8-4-2-file-deletion-via-shred.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-file-deletion-via-shred.html", - "/en/security/*/prebuilt-rule-8-4-2-file-made-immutable-by-chattr.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-file-made-immutable-by-chattr.html", - "/en/security/*/prebuilt-rule-8-4-2-file-permission-modification-in-writable-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-file-permission-modification-in-writable-directory.html", - "/en/security/*/prebuilt-rule-8-4-2-file-transfer-or-listener-established-via-netcat.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-file-transfer-or-listener-established-via-netcat.html", - "/en/security/*/prebuilt-rule-8-4-2-finder-sync-plugin-registered-and-enabled.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-finder-sync-plugin-registered-and-enabled.html", - "/en/security/*/prebuilt-rule-8-4-2-forwarded-google-workspace-security-alert.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-forwarded-google-workspace-security-alert.html", - "/en/security/*/prebuilt-rule-8-4-2-full-user-mode-dumps-enabled-system-wide.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-full-user-mode-dumps-enabled-system-wide.html", - "/en/security/*/prebuilt-rule-8-4-2-gcp-pub-sub-subscription-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-gcp-pub-sub-subscription-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-gcp-pub-sub-topic-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-gcp-pub-sub-topic-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-google-workspace-mfa-enforcement-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-google-workspace-mfa-enforcement-disabled.html", - "/en/security/*/prebuilt-rule-8-4-2-group-policy-abuse-for-privilege-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-group-policy-abuse-for-privilege-addition.html", - "/en/security/*/prebuilt-rule-8-4-2-halfbaked-command-and-control-beacon.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-halfbaked-command-and-control-beacon.html", - "/en/security/*/prebuilt-rule-8-4-2-high-number-of-process-and-or-service-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-high-number-of-process-and-or-service-terminations.html", - "/en/security/*/prebuilt-rule-8-4-2-high-number-of-process-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-high-number-of-process-terminations.html", - "/en/security/*/prebuilt-rule-8-4-2-hosts-file-modified.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-hosts-file-modified.html", - "/en/security/*/prebuilt-rule-8-4-2-hping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-hping-process-activity.html", - "/en/security/*/prebuilt-rule-8-4-2-iis-http-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-iis-http-logging-disabled.html", - "/en/security/*/prebuilt-rule-8-4-2-image-file-execution-options-injection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-image-file-execution-options-injection.html", - "/en/security/*/prebuilt-rule-8-4-2-imageload-via-windows-update-auto-update-client.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-imageload-via-windows-update-auto-update-client.html", - "/en/security/*/prebuilt-rule-8-4-2-inbound-connection-to-an-unsecure-elasticsearch-node.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-inbound-connection-to-an-unsecure-elasticsearch-node.html", - "/en/security/*/prebuilt-rule-8-4-2-incoming-dcom-lateral-movement-via-mshta.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-incoming-dcom-lateral-movement-via-mshta.html", - "/en/security/*/prebuilt-rule-8-4-2-incoming-dcom-lateral-movement-with-mmc.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-incoming-dcom-lateral-movement-with-mmc.html", - "/en/security/*/prebuilt-rule-8-4-2-incoming-dcom-lateral-movement-with-shellbrowserwindow-or-shellwindows.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-incoming-dcom-lateral-movement-with-shellbrowserwindow-or-shellwindows.html", - "/en/security/*/prebuilt-rule-8-4-2-incoming-execution-via-powershell-remoting.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-incoming-execution-via-powershell-remoting.html", - "/en/security/*/prebuilt-rule-8-4-2-incoming-execution-via-winrm-remote-shell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-incoming-execution-via-winrm-remote-shell.html", - "/en/security/*/prebuilt-rule-8-4-2-installation-of-custom-shim-databases.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-installation-of-custom-shim-databases.html", - "/en/security/*/prebuilt-rule-8-4-2-installation-of-security-support-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-installation-of-security-support-provider.html", - "/en/security/*/prebuilt-rule-8-4-2-installutil-process-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-installutil-process-making-network-connections.html", - "/en/security/*/prebuilt-rule-8-4-2-interactive-terminal-spawned-via-perl.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-interactive-terminal-spawned-via-perl.html", - "/en/security/*/prebuilt-rule-8-4-2-interactive-terminal-spawned-via-python.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-interactive-terminal-spawned-via-python.html", - "/en/security/*/prebuilt-rule-8-4-2-ipsec-nat-traversal-port-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-ipsec-nat-traversal-port-activity.html", - "/en/security/*/prebuilt-rule-8-4-2-kerberos-cached-credentials-dumping.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kerberos-cached-credentials-dumping.html", - "/en/security/*/prebuilt-rule-8-4-2-kerberos-pre-authentication-disabled-for-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kerberos-pre-authentication-disabled-for-user.html", - "/en/security/*/prebuilt-rule-8-4-2-kerberos-traffic-from-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kerberos-traffic-from-unusual-process.html", - "/en/security/*/prebuilt-rule-8-4-2-kernel-module-load-via-insmod.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kernel-module-load-via-insmod.html", - "/en/security/*/prebuilt-rule-8-4-2-kernel-module-removal.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kernel-module-removal.html", - "/en/security/*/prebuilt-rule-8-4-2-keychain-password-retrieval-via-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-keychain-password-retrieval-via-command-line.html", - "/en/security/*/prebuilt-rule-8-4-2-krbtgt-delegation-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-krbtgt-delegation-backdoor.html", - "/en/security/*/prebuilt-rule-8-4-2-kubernetes-anonymous-request-authorized.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kubernetes-anonymous-request-authorized.html", - "/en/security/*/prebuilt-rule-8-4-2-kubernetes-container-created-with-excessive-linux-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kubernetes-container-created-with-excessive-linux-capabilities.html", - "/en/security/*/prebuilt-rule-8-4-2-kubernetes-denied-service-account-request.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kubernetes-denied-service-account-request.html", - "/en/security/*/prebuilt-rule-8-4-2-kubernetes-exposed-service-created-with-type-nodeport.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kubernetes-exposed-service-created-with-type-nodeport.html", - "/en/security/*/prebuilt-rule-8-4-2-kubernetes-pod-created-with-a-sensitive-hostpath-volume.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kubernetes-pod-created-with-a-sensitive-hostpath-volume.html", - "/en/security/*/prebuilt-rule-8-4-2-kubernetes-pod-created-with-hostipc.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kubernetes-pod-created-with-hostipc.html", - "/en/security/*/prebuilt-rule-8-4-2-kubernetes-pod-created-with-hostnetwork.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kubernetes-pod-created-with-hostnetwork.html", - "/en/security/*/prebuilt-rule-8-4-2-kubernetes-pod-created-with-hostpid.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kubernetes-pod-created-with-hostpid.html", - "/en/security/*/prebuilt-rule-8-4-2-kubernetes-privileged-pod-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kubernetes-privileged-pod-created.html", - "/en/security/*/prebuilt-rule-8-4-2-kubernetes-suspicious-assignment-of-controller-service-account.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kubernetes-suspicious-assignment-of-controller-service-account.html", - "/en/security/*/prebuilt-rule-8-4-2-kubernetes-suspicious-self-subject-review.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kubernetes-suspicious-self-subject-review.html", - "/en/security/*/prebuilt-rule-8-4-2-kubernetes-user-exec-into-pod.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-kubernetes-user-exec-into-pod.html", - "/en/security/*/prebuilt-rule-8-4-2-lateral-movement-via-startup-folder.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-lateral-movement-via-startup-folder.html", - "/en/security/*/prebuilt-rule-8-4-2-launch-agent-creation-or-modification-and-immediate-loading.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-launch-agent-creation-or-modification-and-immediate-loading.html", - "/en/security/*/prebuilt-rule-8-4-2-launchdaemon-creation-or-modification-and-immediate-loading.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-launchdaemon-creation-or-modification-and-immediate-loading.html", - "/en/security/*/prebuilt-rule-8-4-2-linux-restricted-shell-breakout-via-linux-binary-s.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-linux-restricted-shell-breakout-via-linux-binary-s.html", - "/en/security/*/prebuilt-rule-8-4-2-local-account-tokenfilter-policy-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-local-account-tokenfilter-policy-disabled.html", - "/en/security/*/prebuilt-rule-8-4-2-local-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-local-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-lsass-memory-dump-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-lsass-memory-dump-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-lsass-memory-dump-handle-access.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-lsass-memory-dump-handle-access.html", - "/en/security/*/prebuilt-rule-8-4-2-macos-installer-package-spawns-network-event.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-macos-installer-package-spawns-network-event.html", - "/en/security/*/prebuilt-rule-8-4-2-masquerading-space-after-filename.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-masquerading-space-after-filename.html", - "/en/security/*/prebuilt-rule-8-4-2-microsoft-build-engine-started-an-unusual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-microsoft-build-engine-started-an-unusual-process.html", - "/en/security/*/prebuilt-rule-8-4-2-microsoft-build-engine-started-by-a-script-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-microsoft-build-engine-started-by-a-script-process.html", - "/en/security/*/prebuilt-rule-8-4-2-microsoft-build-engine-started-by-a-system-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-microsoft-build-engine-started-by-a-system-process.html", - "/en/security/*/prebuilt-rule-8-4-2-microsoft-build-engine-started-by-an-office-application.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-microsoft-build-engine-started-by-an-office-application.html", - "/en/security/*/prebuilt-rule-8-4-2-microsoft-build-engine-using-an-alternate-name.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-microsoft-build-engine-using-an-alternate-name.html", - "/en/security/*/prebuilt-rule-8-4-2-microsoft-exchange-server-um-spawning-suspicious-processes.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-microsoft-exchange-server-um-spawning-suspicious-processes.html", - "/en/security/*/prebuilt-rule-8-4-2-microsoft-exchange-server-um-writing-suspicious-files.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-microsoft-exchange-server-um-writing-suspicious-files.html", - "/en/security/*/prebuilt-rule-8-4-2-microsoft-exchange-worker-spawning-suspicious-processes.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-microsoft-exchange-worker-spawning-suspicious-processes.html", - "/en/security/*/prebuilt-rule-8-4-2-microsoft-iis-connection-strings-decryption.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-microsoft-iis-connection-strings-decryption.html", - "/en/security/*/prebuilt-rule-8-4-2-microsoft-iis-service-account-password-dumped.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-microsoft-iis-service-account-password-dumped.html", - "/en/security/*/prebuilt-rule-8-4-2-microsoft-windows-defender-tampering.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-microsoft-windows-defender-tampering.html", - "/en/security/*/prebuilt-rule-8-4-2-mimikatz-memssp-log-file-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-mimikatz-memssp-log-file-detected.html", - "/en/security/*/prebuilt-rule-8-4-2-modification-of-amsienable-registry-key.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-modification-of-amsienable-registry-key.html", - "/en/security/*/prebuilt-rule-8-4-2-modification-of-boot-configuration.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-modification-of-boot-configuration.html", - "/en/security/*/prebuilt-rule-8-4-2-modification-of-dynamic-linker-preload-shared-object.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-modification-of-dynamic-linker-preload-shared-object.html", - "/en/security/*/prebuilt-rule-8-4-2-modification-of-environment-variable-via-launchctl.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-modification-of-environment-variable-via-launchctl.html", - "/en/security/*/prebuilt-rule-8-4-2-modification-of-openssh-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-modification-of-openssh-binaries.html", - "/en/security/*/prebuilt-rule-8-4-2-modification-of-safari-settings-via-defaults-command.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-modification-of-safari-settings-via-defaults-command.html", - "/en/security/*/prebuilt-rule-8-4-2-modification-of-standard-authentication-module-or-configuration.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-modification-of-standard-authentication-module-or-configuration.html", - "/en/security/*/prebuilt-rule-8-4-2-modification-of-the-mspkiaccountcredentials.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-modification-of-the-mspkiaccountcredentials.html", - "/en/security/*/prebuilt-rule-8-4-2-modification-of-wdigest-security-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-modification-of-wdigest-security-provider.html", - "/en/security/*/prebuilt-rule-8-4-2-mounting-hidden-or-webdav-remote-shares.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-mounting-hidden-or-webdav-remote-shares.html", - "/en/security/*/prebuilt-rule-8-4-2-ms-office-macro-security-registry-modifications.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-ms-office-macro-security-registry-modifications.html", - "/en/security/*/prebuilt-rule-8-4-2-msbuild-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-msbuild-making-network-connections.html", - "/en/security/*/prebuilt-rule-8-4-2-mshta-making-network-connections.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-mshta-making-network-connections.html", - "/en/security/*/prebuilt-rule-8-4-2-multi-factor-authentication-disabled-for-an-azure-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-multi-factor-authentication-disabled-for-an-azure-user.html", - "/en/security/*/prebuilt-rule-8-4-2-multiple-alerts-in-different-att-ck-tactics-on-a-single-host.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-multiple-alerts-in-different-att-ck-tactics-on-a-single-host.html", - "/en/security/*/prebuilt-rule-8-4-2-multiple-alerts-involving-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-multiple-alerts-involving-a-user.html", - "/en/security/*/prebuilt-rule-8-4-2-multiple-logon-failure-followed-by-logon-success.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-multiple-logon-failure-followed-by-logon-success.html", - "/en/security/*/prebuilt-rule-8-4-2-multiple-logon-failure-from-the-same-source-address.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-multiple-logon-failure-from-the-same-source-address.html", - "/en/security/*/prebuilt-rule-8-4-2-multiple-vault-web-credentials-read.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-multiple-vault-web-credentials-read.html", - "/en/security/*/prebuilt-rule-8-4-2-namespace-manipulation-using-unshare.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-namespace-manipulation-using-unshare.html", - "/en/security/*/prebuilt-rule-8-4-2-network-connection-via-certutil.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-network-connection-via-certutil.html", - "/en/security/*/prebuilt-rule-8-4-2-network-connection-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-network-connection-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-8-4-2-network-connection-via-msxsl.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-network-connection-via-msxsl.html", - "/en/security/*/prebuilt-rule-8-4-2-network-connection-via-registration-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-network-connection-via-registration-utility.html", - "/en/security/*/prebuilt-rule-8-4-2-network-connection-via-signed-binary.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-network-connection-via-signed-binary.html", - "/en/security/*/prebuilt-rule-8-4-2-network-logon-provider-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-network-logon-provider-registry-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-new-activesyncalloweddeviceid-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-new-activesyncalloweddeviceid-added-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-2-nping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-nping-process-activity.html", - "/en/security/*/prebuilt-rule-8-4-2-ntds-or-sam-database-file-copied.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-ntds-or-sam-database-file-copied.html", - "/en/security/*/prebuilt-rule-8-4-2-nullsessionpipe-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-nullsessionpipe-registry-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-outbound-scheduled-task-activity-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-outbound-scheduled-task-activity-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-2-parent-process-pid-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-parent-process-pid-spoofing.html", - "/en/security/*/prebuilt-rule-8-4-2-peripheral-device-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-peripheral-device-discovery.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-bits-job-notify-cmdline.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-bits-job-notify-cmdline.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-directoryservice-plugin-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-directoryservice-plugin-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-docker-shortcut-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-docker-shortcut-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-folder-action-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-folder-action-script.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-hidden-run-key-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-hidden-run-key-detected.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-kde-autostart-script-or-desktop-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-kde-autostart-script-or-desktop-file-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-login-or-logout-hook.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-login-or-logout-hook.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-microsoft-office-addins.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-microsoft-office-addins.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-microsoft-outlook-vba.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-microsoft-outlook-vba.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-powershell-profile.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-powershell-profile.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-scheduled-job-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-scheduled-job-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-telemetrycontroller-scheduled-task-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-telemetrycontroller-scheduled-task-hijack.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-update-orchestrator-service-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-update-orchestrator-service-hijack.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-wmi-event-subscription.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-wmi-event-subscription.html", - "/en/security/*/prebuilt-rule-8-4-2-persistence-via-wmi-standard-registry-provider.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistence-via-wmi-standard-registry-provider.html", - "/en/security/*/prebuilt-rule-8-4-2-persistent-scripts-in-the-startup-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-persistent-scripts-in-the-startup-directory.html", - "/en/security/*/prebuilt-rule-8-4-2-port-forwarding-rule-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-port-forwarding-rule-addition.html", - "/en/security/*/prebuilt-rule-8-4-2-possible-consent-grant-attack-via-azure-registered-application.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-possible-consent-grant-attack-via-azure-registered-application.html", - "/en/security/*/prebuilt-rule-8-4-2-possible-fin7-dga-command-and-control-behavior.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-possible-fin7-dga-command-and-control-behavior.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-admin-group-account-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-admin-group-account-addition.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-application-shimming-via-sdbinst.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-application-shimming-via-sdbinst.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-command-and-control-via-internet-explorer.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-command-and-control-via-internet-explorer.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-cookies-theft-via-browser-debugging.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-cookies-theft-via-browser-debugging.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-credential-access-via-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-credential-access-via-dcsync.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-credential-access-via-duplicatehandle-in-lsass.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-credential-access-via-duplicatehandle-in-lsass.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-credential-access-via-lsass-memory-dump.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-credential-access-via-lsass-memory-dump.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-credential-access-via-renamed-com-services-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-credential-access-via-renamed-com-services-dll.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-credential-access-via-trusted-developer-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-credential-access-via-trusted-developer-utility.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-credential-access-via-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-credential-access-via-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-disabling-of-selinux.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-disabling-of-selinux.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-dll-sideloading-via-trusted-microsoft-programs.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-dll-sideloading-via-trusted-microsoft-programs.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-dns-tunneling-via-iodine.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-dns-tunneling-via-iodine.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-dns-tunneling-via-nslookup.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-dns-tunneling-via-nslookup.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-evasion-via-filter-manager.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-evasion-via-filter-manager.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-hidden-local-user-account-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-hidden-local-user-account-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-invoke-mimikatz-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-invoke-mimikatz-powershell-script.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-java-jndi-exploitation-attempt.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-java-jndi-exploitation-attempt.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-kerberos-attack-via-bifrost.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-kerberos-attack-via-bifrost.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-lateral-tool-transfer-via-smb-share.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-lateral-tool-transfer-via-smb-share.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-linux-ssh-brute-force-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-linux-ssh-brute-force-detected.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-local-ntlm-relay-via-http.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-local-ntlm-relay-via-http.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-lsa-authentication-package-abuse.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-lsa-authentication-package-abuse.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-lsass-clone-creation-via-psscapturesnapshot.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-lsass-clone-creation-via-psscapturesnapshot.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-lsass-memory-dump-via-psscapturesnapshot.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-lsass-memory-dump-via-psscapturesnapshot.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-macos-ssh-brute-force-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-macos-ssh-brute-force-detected.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-microsoft-office-sandbox-evasion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-microsoft-office-sandbox-evasion.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-modification-of-accessibility-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-modification-of-accessibility-binaries.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-non-standard-port-ssh-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-non-standard-port-ssh-connection.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-openssh-backdoor-logging-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-openssh-backdoor-logging-activity.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-persistence-via-atom-init-script-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-persistence-via-atom-init-script-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-persistence-via-login-hook.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-persistence-via-login-hook.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-persistence-via-periodic-tasks.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-persistence-via-periodic-tasks.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-persistence-via-time-provider-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-persistence-via-time-provider-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-port-monitor-or-print-processor-registration-abuse.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-port-monitor-or-print-processor-registration-abuse.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-privacy-control-bypass-via-localhost-secure-copy.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-privacy-control-bypass-via-localhost-secure-copy.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-privacy-control-bypass-via-tccdb-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-privacy-control-bypass-via-tccdb-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-privilege-escalation-via-installerfiletakeover.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-privilege-escalation-via-installerfiletakeover.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-privilege-escalation-via-pkexec.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-privilege-escalation-via-pkexec.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-privilege-escalation-via-sudoers-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-privilege-escalation-via-sudoers-file-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-privileged-escalation-via-samaccountname-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-privileged-escalation-via-samaccountname-spoofing.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-process-herpaderping-attempt.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-process-herpaderping-attempt.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-process-injection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-process-injection-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-protocol-tunneling-via-earthworm.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-protocol-tunneling-via-earthworm.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-remote-credential-access-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-remote-credential-access-via-registry.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-remote-desktop-shadowing-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-remote-desktop-shadowing-activity.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-remote-desktop-tunneling-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-remote-desktop-tunneling-detected.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-reverse-shell-activity-via-terminal.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-reverse-shell-activity-via-terminal.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-secure-file-deletion-via-sdelete-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-secure-file-deletion-via-sdelete-utility.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-shadow-credentials-added-to-ad-object.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-shadow-credentials-added-to-ad-object.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-shadow-file-read-via-command-line-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-shadow-file-read-via-command-line-utilities.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-sharprdp-behavior.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-sharprdp-behavior.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-shell-via-web-server.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-shell-via-web-server.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-ssh-brute-force-detected-on-privileged-account.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-ssh-brute-force-detected-on-privileged-account.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-ssh-password-guessing.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-ssh-password-guessing.html", - "/en/security/*/prebuilt-rule-8-4-2-potential-windows-error-manager-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-potential-windows-error-manager-masquerading.html", - "/en/security/*/prebuilt-rule-8-4-2-powershell-kerberos-ticket-request.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-powershell-kerberos-ticket-request.html", - "/en/security/*/prebuilt-rule-8-4-2-powershell-keylogging-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-powershell-keylogging-script.html", - "/en/security/*/prebuilt-rule-8-4-2-powershell-minidump-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-powershell-minidump-script.html", - "/en/security/*/prebuilt-rule-8-4-2-powershell-psreflect-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-powershell-psreflect-script.html", - "/en/security/*/prebuilt-rule-8-4-2-powershell-script-block-logging-disabled.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-powershell-script-block-logging-disabled.html", - "/en/security/*/prebuilt-rule-8-4-2-powershell-script-with-token-impersonation-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-powershell-script-with-token-impersonation-capabilities.html", - "/en/security/*/prebuilt-rule-8-4-2-powershell-share-enumeration-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-powershell-share-enumeration-script.html", - "/en/security/*/prebuilt-rule-8-4-2-powershell-suspicious-discovery-related-windows-api-functions.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-powershell-suspicious-discovery-related-windows-api-functions.html", - "/en/security/*/prebuilt-rule-8-4-2-powershell-suspicious-payload-encoded-and-compressed.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-powershell-suspicious-payload-encoded-and-compressed.html", - "/en/security/*/prebuilt-rule-8-4-2-powershell-suspicious-script-with-audio-capture-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-powershell-suspicious-script-with-audio-capture-capabilities.html", - "/en/security/*/prebuilt-rule-8-4-2-powershell-suspicious-script-with-screenshot-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-powershell-suspicious-script-with-screenshot-capabilities.html", - "/en/security/*/prebuilt-rule-8-4-2-prebuilt-rules-8-4-2-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-prebuilt-rules-8-4-2-appendix.html", - "/en/security/*/prebuilt-rule-8-4-2-privilege-escalation-via-named-pipe-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-privilege-escalation-via-named-pipe-impersonation.html", - "/en/security/*/prebuilt-rule-8-4-2-privilege-escalation-via-rogue-named-pipe-impersonation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-privilege-escalation-via-rogue-named-pipe-impersonation.html", - "/en/security/*/prebuilt-rule-8-4-2-privilege-escalation-via-root-crontab-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-privilege-escalation-via-root-crontab-file-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-privilege-escalation-via-windir-environment-variable.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-privilege-escalation-via-windir-environment-variable.html", - "/en/security/*/prebuilt-rule-8-4-2-privileged-account-brute-force.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-privileged-account-brute-force.html", - "/en/security/*/prebuilt-rule-8-4-2-privileges-elevation-via-parent-process-pid-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-privileges-elevation-via-parent-process-pid-spoofing.html", - "/en/security/*/prebuilt-rule-8-4-2-process-activity-via-compiled-html-file.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-process-activity-via-compiled-html-file.html", - "/en/security/*/prebuilt-rule-8-4-2-process-created-with-an-elevated-token.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-process-created-with-an-elevated-token.html", - "/en/security/*/prebuilt-rule-8-4-2-process-creation-via-secondary-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-process-creation-via-secondary-logon.html", - "/en/security/*/prebuilt-rule-8-4-2-process-execution-from-an-unusual-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-process-execution-from-an-unusual-directory.html", - "/en/security/*/prebuilt-rule-8-4-2-process-injection-by-the-microsoft-build-engine.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-process-injection-by-the-microsoft-build-engine.html", - "/en/security/*/prebuilt-rule-8-4-2-process-started-from-process-id-pid-file.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-process-started-from-process-id-pid-file.html", - "/en/security/*/prebuilt-rule-8-4-2-process-termination-followed-by-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-process-termination-followed-by-deletion.html", - "/en/security/*/prebuilt-rule-8-4-2-program-files-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-program-files-directory-masquerading.html", - "/en/security/*/prebuilt-rule-8-4-2-prompt-for-credentials-with-osascript.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-prompt-for-credentials-with-osascript.html", - "/en/security/*/prebuilt-rule-8-4-2-psexec-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-psexec-network-connection.html", - "/en/security/*/prebuilt-rule-8-4-2-rare-aws-error-code.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-rare-aws-error-code.html", - "/en/security/*/prebuilt-rule-8-4-2-rdp-enabled-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-rdp-enabled-via-registry.html", - "/en/security/*/prebuilt-rule-8-4-2-registry-persistence-via-appcert-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-registry-persistence-via-appcert-dll.html", - "/en/security/*/prebuilt-rule-8-4-2-registry-persistence-via-appinit-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-registry-persistence-via-appinit-dll.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-computer-account-dnshostname-update.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-computer-account-dnshostname-update.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-desktop-enabled-in-windows-firewall-by-netsh.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-desktop-enabled-in-windows-firewall-by-netsh.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-execution-via-file-shares.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-execution-via-file-shares.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-file-copy-to-a-hidden-share.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-file-copy-to-a-hidden-share.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-file-copy-via-teamviewer.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-file-copy-via-teamviewer.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-file-download-via-desktopimgdownldr-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-file-download-via-desktopimgdownldr-utility.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-file-download-via-mpcmdrun.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-file-download-via-mpcmdrun.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-file-download-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-file-download-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-file-download-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-file-download-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-logon-followed-by-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-logon-followed-by-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-ssh-login-enabled-via-systemsetup-command.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-ssh-login-enabled-via-systemsetup-command.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-system-discovery-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-system-discovery-commands.html", - "/en/security/*/prebuilt-rule-8-4-2-remote-windows-service-installed.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remote-windows-service-installed.html", - "/en/security/*/prebuilt-rule-8-4-2-remotely-started-services-via-rpc.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-remotely-started-services-via-rpc.html", - "/en/security/*/prebuilt-rule-8-4-2-renamed-autoit-scripts-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-renamed-autoit-scripts-interpreter.html", - "/en/security/*/prebuilt-rule-8-4-2-reverse-shell-created-via-named-pipe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-reverse-shell-created-via-named-pipe.html", - "/en/security/*/prebuilt-rule-8-4-2-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-roshal-archive-rar-or-powershell-file-downloaded-from-the-internet.html", - "/en/security/*/prebuilt-rule-8-4-2-scheduled-task-created-by-a-windows-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-scheduled-task-created-by-a-windows-script.html", - "/en/security/*/prebuilt-rule-8-4-2-scheduled-task-execution-at-scale-via-gpo.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-scheduled-task-execution-at-scale-via-gpo.html", - "/en/security/*/prebuilt-rule-8-4-2-scheduled-tasks-at-command-enabled.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-scheduled-tasks-at-command-enabled.html", - "/en/security/*/prebuilt-rule-8-4-2-screensaver-plist-file-modified-by-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-screensaver-plist-file-modified-by-unexpected-process.html", - "/en/security/*/prebuilt-rule-8-4-2-searching-for-saved-credentials-via-vaultcmd.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-searching-for-saved-credentials-via-vaultcmd.html", - "/en/security/*/prebuilt-rule-8-4-2-security-software-discovery-using-wmic.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-security-software-discovery-using-wmic.html", - "/en/security/*/prebuilt-rule-8-4-2-security-software-discovery-via-grep.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-security-software-discovery-via-grep.html", - "/en/security/*/prebuilt-rule-8-4-2-sedebugprivilege-enabled-by-a-suspicious-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-sedebugprivilege-enabled-by-a-suspicious-process.html", - "/en/security/*/prebuilt-rule-8-4-2-sensitive-files-compression.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-sensitive-files-compression.html", - "/en/security/*/prebuilt-rule-8-4-2-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-8-4-2-service-command-lateral-movement.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-service-command-lateral-movement.html", - "/en/security/*/prebuilt-rule-8-4-2-service-control-spawned-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-service-control-spawned-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-8-4-2-service-creation-via-local-kerberos-authentication.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-service-creation-via-local-kerberos-authentication.html", - "/en/security/*/prebuilt-rule-8-4-2-setuid-setgid-bit-set-via-chmod.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-setuid-setgid-bit-set-via-chmod.html", - "/en/security/*/prebuilt-rule-8-4-2-shell-execution-via-apple-scripting.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-shell-execution-via-apple-scripting.html", - "/en/security/*/prebuilt-rule-8-4-2-signed-proxy-execution-via-ms-work-folders.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-signed-proxy-execution-via-ms-work-folders.html", - "/en/security/*/prebuilt-rule-8-4-2-sip-provider-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-sip-provider-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-softwareupdate-preferences-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-softwareupdate-preferences-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-solarwinds-process-disabling-services-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-solarwinds-process-disabling-services-via-registry.html", - "/en/security/*/prebuilt-rule-8-4-2-spike-in-aws-error-messages.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-spike-in-aws-error-messages.html", - "/en/security/*/prebuilt-rule-8-4-2-ssh-authorized-keys-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-ssh-authorized-keys-file-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-startup-folder-persistence-via-unsigned-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-startup-folder-persistence-via-unsigned-process.html", - "/en/security/*/prebuilt-rule-8-4-2-startup-logon-script-added-to-group-policy-object.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-startup-logon-script-added-to-group-policy-object.html", - "/en/security/*/prebuilt-rule-8-4-2-startup-or-run-key-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-startup-or-run-key-registry-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-startup-persistence-by-a-suspicious-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-startup-persistence-by-a-suspicious-process.html", - "/en/security/*/prebuilt-rule-8-4-2-sublime-plugin-or-application-script-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-sublime-plugin-or-application-script-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-sudo-heap-based-buffer-overflow-attempt.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-sudo-heap-based-buffer-overflow-attempt.html", - "/en/security/*/prebuilt-rule-8-4-2-sudoers-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-sudoers-file-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-sunburst-command-and-control-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-sunburst-command-and-control-activity.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-automator-workflows-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-automator-workflows-execution.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-browser-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-browser-child-process.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-calendar-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-calendar-file-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-certutil-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-certutil-commands.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-child-process-of-adobe-acrobat-reader-update-service.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-child-process-of-adobe-acrobat-reader-update-service.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-cmd-execution-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-cmd-execution-via-wmi.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-crontab-creation-or-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-crontab-creation-or-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-dll-loaded-for-persistence-or-privilege-escalation.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-emond-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-emond-child-process.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-endpoint-security-parent-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-endpoint-security-parent-process.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-execution-from-a-mounted-device.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-execution-from-a-mounted-device.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-execution-short-program-name.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-execution-short-program-name.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-execution-via-scheduled-task.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-execution-via-scheduled-task.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-explorer-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-explorer-child-process.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-file-creation-in-etc-for-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-file-creation-in-etc-for-persistence.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-hidden-child-process-of-launchd.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-hidden-child-process-of-launchd.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-html-file-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-html-file-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-image-load-taskschd-dll-from-ms-office.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-image-load-taskschd-dll-from-ms-office.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-imagepath-service-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-imagepath-service-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-java-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-java-child-process.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-lsass-access-via-malseclogon.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-lsass-access-via-malseclogon.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-macos-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-macos-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-managed-code-hosting-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-managed-code-hosting-process.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-microsoft-diagnostics-wizard-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-microsoft-diagnostics-wizard-execution.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-module-loaded-by-lsass.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-module-loaded-by-lsass.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-ms-outlook-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-ms-outlook-child-process.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-net-code-compilation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-net-code-compilation.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-net-reflection-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-net-reflection-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-network-connection-attempt-by-root.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-network-connection-attempt-by-root.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-pdf-reader-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-pdf-reader-child-process.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-portable-executable-encoded-in-powershell-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-portable-executable-encoded-in-powershell-script.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-powershell-engine-imageload.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-powershell-engine-imageload.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-print-spooler-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-print-spooler-file-deletion.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-print-spooler-point-and-print-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-print-spooler-point-and-print-dll.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-print-spooler-spl-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-print-spooler-spl-file-created.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-printspooler-service-executable-file-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-printspooler-service-executable-file-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-process-access-via-direct-system-call.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-process-access-via-direct-system-call.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-process-creation-calltrace.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-process-creation-calltrace.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-process-execution-via-renamed-psexec-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-process-execution-via-renamed-psexec-executable.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-rdp-activex-client-loaded.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-rdp-activex-client-loaded.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-remote-registry-access-via-sebackupprivilege.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-remote-registry-access-via-sebackupprivilege.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-script-object-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-script-object-execution.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-service-was-installed-in-the-system.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-service-was-installed-in-the-system.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-solarwinds-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-solarwinds-child-process.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-startup-shell-folder-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-startup-shell-folder-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-werfault-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-werfault-child-process.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-wmi-image-load-from-ms-office.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-wmi-image-load-from-ms-office.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-wmic-xsl-script-execution.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-wmic-xsl-script-execution.html", - "/en/security/*/prebuilt-rule-8-4-2-suspicious-zoom-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-suspicious-zoom-child-process.html", - "/en/security/*/prebuilt-rule-8-4-2-svchost-spawning-cmd.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-svchost-spawning-cmd.html", - "/en/security/*/prebuilt-rule-8-4-2-symbolic-link-to-shadow-copy-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-symbolic-link-to-shadow-copy-created.html", - "/en/security/*/prebuilt-rule-8-4-2-system-information-discovery-via-windows-command-shell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-system-information-discovery-via-windows-command-shell.html", - "/en/security/*/prebuilt-rule-8-4-2-system-log-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-system-log-file-deletion.html", - "/en/security/*/prebuilt-rule-8-4-2-system-shells-via-services.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-system-shells-via-services.html", - "/en/security/*/prebuilt-rule-8-4-2-system-time-discovery.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-system-time-discovery.html", - "/en/security/*/prebuilt-rule-8-4-2-systemkey-access-via-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-systemkey-access-via-command-line.html", - "/en/security/*/prebuilt-rule-8-4-2-tampering-of-bash-command-line-history.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-tampering-of-bash-command-line-history.html", - "/en/security/*/prebuilt-rule-8-4-2-tcc-bypass-via-mounted-apfs-snapshot-access.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-tcc-bypass-via-mounted-apfs-snapshot-access.html", - "/en/security/*/prebuilt-rule-8-4-2-temporarily-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-temporarily-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-third-party-backup-files-deleted-via-unexpected-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-third-party-backup-files-deleted-via-unexpected-process.html", - "/en/security/*/prebuilt-rule-8-4-2-threat-intel-filebeat-module-v8-x-indicator-match.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-threat-intel-filebeat-module-v8-x-indicator-match.html", - "/en/security/*/prebuilt-rule-8-4-2-threat-intel-indicator-match.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-threat-intel-indicator-match.html", - "/en/security/*/prebuilt-rule-8-4-2-timestomping-using-touch-command.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-timestomping-using-touch-command.html", - "/en/security/*/prebuilt-rule-8-4-2-uac-bypass-attempt-via-elevated-com-internet-explorer-add-on-installer.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-uac-bypass-attempt-via-elevated-com-internet-explorer-add-on-installer.html", - "/en/security/*/prebuilt-rule-8-4-2-uac-bypass-attempt-via-privileged-ifileoperation-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-uac-bypass-attempt-via-privileged-ifileoperation-com-interface.html", - "/en/security/*/prebuilt-rule-8-4-2-uac-bypass-attempt-via-windows-directory-masquerading.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-uac-bypass-attempt-via-windows-directory-masquerading.html", - "/en/security/*/prebuilt-rule-8-4-2-uac-bypass-attempt-with-ieditionupgrademanager-elevated-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-uac-bypass-attempt-with-ieditionupgrademanager-elevated-com-interface.html", - "/en/security/*/prebuilt-rule-8-4-2-uac-bypass-via-diskcleanup-scheduled-task-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-uac-bypass-via-diskcleanup-scheduled-task-hijack.html", - "/en/security/*/prebuilt-rule-8-4-2-uac-bypass-via-icmluautil-elevated-com-interface.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-uac-bypass-via-icmluautil-elevated-com-interface.html", - "/en/security/*/prebuilt-rule-8-4-2-uac-bypass-via-windows-firewall-snap-in-hijack.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-uac-bypass-via-windows-firewall-snap-in-hijack.html", - "/en/security/*/prebuilt-rule-8-4-2-uncommon-registry-persistence-change.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-uncommon-registry-persistence-change.html", - "/en/security/*/prebuilt-rule-8-4-2-unexpected-child-process-of-macos-screensaver-engine.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unexpected-child-process-of-macos-screensaver-engine.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-aws-command-for-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-aws-command-for-a-user.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-child-process-from-a-system-virtual-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-child-process-from-a-system-virtual-process.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-child-process-of-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-child-process-of-dns-exe.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-child-processes-of-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-child-processes-of-rundll32.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-city-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-city-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-country-for-an-aws-command.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-country-for-an-aws-command.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-executable-file-creation-by-a-system-critical-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-executable-file-creation-by-a-system-critical-process.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-file-creation-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-file-creation-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-file-modification-by-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-file-modification-by-dns-exe.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-network-activity-from-a-windows-system-binary.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-network-activity-from-a-windows-system-binary.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-network-connection-via-dllhost.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-network-connection-via-dllhost.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-network-connection-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-network-connection-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-parent-child-relationship.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-parent-child-relationship.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-parent-process-for-cmd-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-parent-process-for-cmd-exe.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-persistence-via-services-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-persistence-via-services-registry.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-print-spooler-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-print-spooler-child-process.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-process-execution-path-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-process-execution-path-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-process-network-connection.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-process-network-connection.html", - "/en/security/*/prebuilt-rule-8-4-2-unusual-service-host-child-process-childless-service.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-unusual-service-host-child-process-childless-service.html", - "/en/security/*/prebuilt-rule-8-4-2-user-account-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-user-account-creation.html", - "/en/security/*/prebuilt-rule-8-4-2-user-account-exposed-to-kerberoasting.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-user-account-exposed-to-kerberoasting.html", - "/en/security/*/prebuilt-rule-8-4-2-user-added-to-privileged-group.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-user-added-to-privileged-group.html", - "/en/security/*/prebuilt-rule-8-4-2-virtual-machine-fingerprinting-via-grep.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-virtual-machine-fingerprinting-via-grep.html", - "/en/security/*/prebuilt-rule-8-4-2-virtual-machine-fingerprinting.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-virtual-machine-fingerprinting.html", - "/en/security/*/prebuilt-rule-8-4-2-virtual-private-network-connection-attempt.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-virtual-private-network-connection-attempt.html", - "/en/security/*/prebuilt-rule-8-4-2-vnc-virtual-network-computing-from-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-vnc-virtual-network-computing-from-the-internet.html", - "/en/security/*/prebuilt-rule-8-4-2-vnc-virtual-network-computing-to-the-internet.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-vnc-virtual-network-computing-to-the-internet.html", - "/en/security/*/prebuilt-rule-8-4-2-volume-shadow-copy-deleted-or-resized-via-vssadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-volume-shadow-copy-deleted-or-resized-via-vssadmin.html", - "/en/security/*/prebuilt-rule-8-4-2-volume-shadow-copy-deletion-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-volume-shadow-copy-deletion-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-2-volume-shadow-copy-deletion-via-wmic.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-volume-shadow-copy-deletion-via-wmic.html", - "/en/security/*/prebuilt-rule-8-4-2-web-application-suspicious-activity-post-request-declined.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-web-application-suspicious-activity-post-request-declined.html", - "/en/security/*/prebuilt-rule-8-4-2-web-application-suspicious-activity-sqlmap-user-agent.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-web-application-suspicious-activity-sqlmap-user-agent.html", - "/en/security/*/prebuilt-rule-8-4-2-web-application-suspicious-activity-unauthorized-method.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-web-application-suspicious-activity-unauthorized-method.html", - "/en/security/*/prebuilt-rule-8-4-2-web-shell-detection-script-process-child-of-common-web-processes.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-web-shell-detection-script-process-child-of-common-web-processes.html", - "/en/security/*/prebuilt-rule-8-4-2-webproxy-settings-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-webproxy-settings-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-webserver-access-logs-deleted.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-webserver-access-logs-deleted.html", - "/en/security/*/prebuilt-rule-8-4-2-whoami-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-whoami-process-activity.html", - "/en/security/*/prebuilt-rule-8-4-2-windows-cryptoapi-spoofing-vulnerability-cve-2020-0601-curveball.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-windows-cryptoapi-spoofing-vulnerability-cve-2020-0601-curveball.html", - "/en/security/*/prebuilt-rule-8-4-2-windows-defender-disabled-via-registry-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-windows-defender-disabled-via-registry-modification.html", - "/en/security/*/prebuilt-rule-8-4-2-windows-defender-exclusions-added-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-windows-defender-exclusions-added-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-2-windows-event-logs-cleared.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-windows-event-logs-cleared.html", - "/en/security/*/prebuilt-rule-8-4-2-windows-firewall-disabled-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-windows-firewall-disabled-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-2-windows-network-enumeration.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-windows-network-enumeration.html", - "/en/security/*/prebuilt-rule-8-4-2-windows-registry-file-creation-in-smb-share.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-windows-registry-file-creation-in-smb-share.html", - "/en/security/*/prebuilt-rule-8-4-2-windows-script-executing-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-windows-script-executing-powershell.html", - "/en/security/*/prebuilt-rule-8-4-2-windows-script-interpreter-executing-process-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-windows-script-interpreter-executing-process-via-wmi.html", - "/en/security/*/prebuilt-rule-8-4-2-windows-service-installed-via-an-unusual-client.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-windows-service-installed-via-an-unusual-client.html", - "/en/security/*/prebuilt-rule-8-4-2-wireless-credential-dumping-using-netsh-command.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-wireless-credential-dumping-using-netsh-command.html", - "/en/security/*/prebuilt-rule-8-4-2-wmi-incoming-lateral-movement.html": "/guide/en/security/8.17/prebuilt-rule-8-4-2-wmi-incoming-lateral-movement.html", - "/en/security/*/prebuilt-rule-8-4-3-a-scheduled-task-was-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-a-scheduled-task-was-created.html", - "/en/security/*/prebuilt-rule-8-4-3-a-scheduled-task-was-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-a-scheduled-task-was-updated.html", - "/en/security/*/prebuilt-rule-8-4-3-abnormal-process-id-or-lock-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-abnormal-process-id-or-lock-file-created.html", - "/en/security/*/prebuilt-rule-8-4-3-access-to-a-sensitive-ldap-attribute.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-access-to-a-sensitive-ldap-attribute.html", - "/en/security/*/prebuilt-rule-8-4-3-account-configured-with-never-expiring-password.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-account-configured-with-never-expiring-password.html", - "/en/security/*/prebuilt-rule-8-4-3-account-password-reset-remotely.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-account-password-reset-remotely.html", - "/en/security/*/prebuilt-rule-8-4-3-adminsdholder-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-adminsdholder-backdoor.html", - "/en/security/*/prebuilt-rule-8-4-3-adminsdholder-sdprop-exclusion-added.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-adminsdholder-sdprop-exclusion-added.html", - "/en/security/*/prebuilt-rule-8-4-3-anomalous-process-for-a-linux-population.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-anomalous-process-for-a-linux-population.html", - "/en/security/*/prebuilt-rule-8-4-3-anomalous-process-for-a-windows-population.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-anomalous-process-for-a-windows-population.html", - "/en/security/*/prebuilt-rule-8-4-3-anomalous-windows-process-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-anomalous-windows-process-creation.html", - "/en/security/*/prebuilt-rule-8-4-3-attempt-to-disable-syslog-service.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-attempt-to-disable-syslog-service.html", - "/en/security/*/prebuilt-rule-8-4-3-attempt-to-install-kali-linux-via-wsl.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-attempt-to-install-kali-linux-via-wsl.html", - "/en/security/*/prebuilt-rule-8-4-3-base16-or-base32-encoding-decoding-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-base16-or-base32-encoding-decoding-activity.html", - "/en/security/*/prebuilt-rule-8-4-3-binary-executed-from-shared-memory-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-binary-executed-from-shared-memory-directory.html", - "/en/security/*/prebuilt-rule-8-4-3-bpf-filter-applied-using-tc.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-bpf-filter-applied-using-tc.html", - "/en/security/*/prebuilt-rule-8-4-3-chkconfig-service-add.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-chkconfig-service-add.html", - "/en/security/*/prebuilt-rule-8-4-3-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-8-4-3-code-signing-policy-modification-through-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-code-signing-policy-modification-through-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-4-3-code-signing-policy-modification-through-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-code-signing-policy-modification-through-registry.html", - "/en/security/*/prebuilt-rule-8-4-3-command-shell-activity-started-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-command-shell-activity-started-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-4-3-creation-of-hidden-shared-object-file.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-creation-of-hidden-shared-object-file.html", - "/en/security/*/prebuilt-rule-8-4-3-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-4-3-encrypting-files-with-winrar-or-7z.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-encrypting-files-with-winrar-or-7z.html", - "/en/security/*/prebuilt-rule-8-4-3-enumerating-domain-trusts-via-dsquery-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-enumerating-domain-trusts-via-dsquery-exe.html", - "/en/security/*/prebuilt-rule-8-4-3-enumeration-of-administrator-accounts.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-enumeration-of-administrator-accounts.html", - "/en/security/*/prebuilt-rule-8-4-3-enumeration-of-kernel-modules.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-enumeration-of-kernel-modules.html", - "/en/security/*/prebuilt-rule-8-4-3-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-8-4-3-execution-from-unusual-directory-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-execution-from-unusual-directory-command-line.html", - "/en/security/*/prebuilt-rule-8-4-3-execution-via-windows-subsystem-for-linux.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-execution-via-windows-subsystem-for-linux.html", - "/en/security/*/prebuilt-rule-8-4-3-file-creation-time-changed.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-file-creation-time-changed.html", - "/en/security/*/prebuilt-rule-8-4-3-file-deletion-via-shred.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-file-deletion-via-shred.html", - "/en/security/*/prebuilt-rule-8-4-3-file-made-immutable-by-chattr.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-file-made-immutable-by-chattr.html", - "/en/security/*/prebuilt-rule-8-4-3-file-transfer-or-listener-established-via-netcat.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-file-transfer-or-listener-established-via-netcat.html", - "/en/security/*/prebuilt-rule-8-4-3-firsttime-seen-account-performing-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-firsttime-seen-account-performing-dcsync.html", - "/en/security/*/prebuilt-rule-8-4-3-group-policy-abuse-for-privilege-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-group-policy-abuse-for-privilege-addition.html", - "/en/security/*/prebuilt-rule-8-4-3-group-policy-discovery-via-microsoft-gpresult-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-group-policy-discovery-via-microsoft-gpresult-utility.html", - "/en/security/*/prebuilt-rule-8-4-3-high-number-of-process-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-high-number-of-process-terminations.html", - "/en/security/*/prebuilt-rule-8-4-3-host-files-system-changes-via-windows-subsystem-for-linux.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-host-files-system-changes-via-windows-subsystem-for-linux.html", - "/en/security/*/prebuilt-rule-8-4-3-hping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-hping-process-activity.html", - "/en/security/*/prebuilt-rule-8-4-3-incoming-execution-via-powershell-remoting.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-incoming-execution-via-powershell-remoting.html", - "/en/security/*/prebuilt-rule-8-4-3-incoming-execution-via-winrm-remote-shell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-incoming-execution-via-winrm-remote-shell.html", - "/en/security/*/prebuilt-rule-8-4-3-ingress-transfer-via-windows-bits.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-ingress-transfer-via-windows-bits.html", - "/en/security/*/prebuilt-rule-8-4-3-interactive-terminal-spawned-via-perl.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-interactive-terminal-spawned-via-perl.html", - "/en/security/*/prebuilt-rule-8-4-3-interactive-terminal-spawned-via-python.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-interactive-terminal-spawned-via-python.html", - "/en/security/*/prebuilt-rule-8-4-3-kerberos-pre-authentication-disabled-for-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-kerberos-pre-authentication-disabled-for-user.html", - "/en/security/*/prebuilt-rule-8-4-3-kernel-module-load-via-insmod.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-kernel-module-load-via-insmod.html", - "/en/security/*/prebuilt-rule-8-4-3-kernel-module-removal.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-kernel-module-removal.html", - "/en/security/*/prebuilt-rule-8-4-3-krbtgt-delegation-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-krbtgt-delegation-backdoor.html", - "/en/security/*/prebuilt-rule-8-4-3-linux-restricted-shell-breakout-via-linux-binary-s.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-linux-restricted-shell-breakout-via-linux-binary-s.html", - "/en/security/*/prebuilt-rule-8-4-3-lsass-memory-dump-handle-access.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-lsass-memory-dump-handle-access.html", - "/en/security/*/prebuilt-rule-8-4-3-modification-of-dynamic-linker-preload-shared-object.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-modification-of-dynamic-linker-preload-shared-object.html", - "/en/security/*/prebuilt-rule-8-4-3-modification-of-openssh-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-modification-of-openssh-binaries.html", - "/en/security/*/prebuilt-rule-8-4-3-modification-of-the-mspkiaccountcredentials.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-modification-of-the-mspkiaccountcredentials.html", - "/en/security/*/prebuilt-rule-8-4-3-multiple-logon-failure-followed-by-logon-success.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-multiple-logon-failure-followed-by-logon-success.html", - "/en/security/*/prebuilt-rule-8-4-3-multiple-logon-failure-from-the-same-source-address.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-multiple-logon-failure-from-the-same-source-address.html", - "/en/security/*/prebuilt-rule-8-4-3-multiple-vault-web-credentials-read.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-multiple-vault-web-credentials-read.html", - "/en/security/*/prebuilt-rule-8-4-3-namespace-manipulation-using-unshare.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-namespace-manipulation-using-unshare.html", - "/en/security/*/prebuilt-rule-8-4-3-nping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-nping-process-activity.html", - "/en/security/*/prebuilt-rule-8-4-3-persistence-via-kde-autostart-script-or-desktop-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-persistence-via-kde-autostart-script-or-desktop-file-modification.html", - "/en/security/*/prebuilt-rule-8-4-3-possible-consent-grant-attack-via-azure-registered-application.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-possible-consent-grant-attack-via-azure-registered-application.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-antimalware-scan-interface-bypass-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-antimalware-scan-interface-bypass-via-powershell.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-credential-access-via-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-credential-access-via-dcsync.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-credential-access-via-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-credential-access-via-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-disabling-of-selinux.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-disabling-of-selinux.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-dns-tunneling-via-iodine.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-dns-tunneling-via-iodine.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-exfiltration-via-certreq.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-exfiltration-via-certreq.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-linux-ssh-brute-force-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-linux-ssh-brute-force-detected.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-openssh-backdoor-logging-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-openssh-backdoor-logging-activity.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-powershell-hacktool-script-by-function-names.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-powershell-hacktool-script-by-function-names.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-privilege-escalation-via-pkexec.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-privilege-escalation-via-pkexec.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-privileged-escalation-via-samaccountname-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-privileged-escalation-via-samaccountname-spoofing.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-protocol-tunneling-via-earthworm.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-protocol-tunneling-via-earthworm.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-remote-credential-access-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-remote-credential-access-via-registry.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-remote-desktop-shadowing-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-remote-desktop-shadowing-activity.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-shadow-credentials-added-to-ad-object.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-shadow-credentials-added-to-ad-object.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-shell-via-web-server.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-shell-via-web-server.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-ssh-brute-force-detected-on-privileged-account.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-ssh-brute-force-detected-on-privileged-account.html", - "/en/security/*/prebuilt-rule-8-4-3-potential-ssh-password-guessing.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-potential-ssh-password-guessing.html", - "/en/security/*/prebuilt-rule-8-4-3-powershell-invoke-ninjacopy-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-powershell-invoke-ninjacopy-script.html", - "/en/security/*/prebuilt-rule-8-4-3-powershell-mailbox-collection-script.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-powershell-mailbox-collection-script.html", - "/en/security/*/prebuilt-rule-8-4-3-powershell-script-with-encryption-decryption-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-powershell-script-with-encryption-decryption-capabilities.html", - "/en/security/*/prebuilt-rule-8-4-3-powershell-suspicious-discovery-related-windows-api-functions.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-powershell-suspicious-discovery-related-windows-api-functions.html", - "/en/security/*/prebuilt-rule-8-4-3-powershell-suspicious-script-with-clipboard-retrieval-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-powershell-suspicious-script-with-clipboard-retrieval-capabilities.html", - "/en/security/*/prebuilt-rule-8-4-3-prebuilt-rules-8-4-3-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-prebuilt-rules-8-4-3-appendix.html", - "/en/security/*/prebuilt-rule-8-4-3-privileged-account-brute-force.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-privileged-account-brute-force.html", - "/en/security/*/prebuilt-rule-8-4-3-process-creation-via-secondary-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-process-creation-via-secondary-logon.html", - "/en/security/*/prebuilt-rule-8-4-3-process-started-from-process-id-pid-file.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-process-started-from-process-id-pid-file.html", - "/en/security/*/prebuilt-rule-8-4-3-rare-user-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-rare-user-logon.html", - "/en/security/*/prebuilt-rule-8-4-3-remote-computer-account-dnshostname-update.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-remote-computer-account-dnshostname-update.html", - "/en/security/*/prebuilt-rule-8-4-3-remote-logon-followed-by-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-remote-logon-followed-by-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-4-3-remote-system-discovery-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-remote-system-discovery-commands.html", - "/en/security/*/prebuilt-rule-8-4-3-remote-windows-service-installed.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-remote-windows-service-installed.html", - "/en/security/*/prebuilt-rule-8-4-3-reverse-shell-created-via-named-pipe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-reverse-shell-created-via-named-pipe.html", - "/en/security/*/prebuilt-rule-8-4-3-scheduled-task-execution-at-scale-via-gpo.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-scheduled-task-execution-at-scale-via-gpo.html", - "/en/security/*/prebuilt-rule-8-4-3-sensitive-files-compression.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-sensitive-files-compression.html", - "/en/security/*/prebuilt-rule-8-4-3-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-8-4-3-service-control-spawned-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-service-control-spawned-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-8-4-3-service-creation-via-local-kerberos-authentication.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-service-creation-via-local-kerberos-authentication.html", - "/en/security/*/prebuilt-rule-8-4-3-spike-in-failed-logon-events.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-spike-in-failed-logon-events.html", - "/en/security/*/prebuilt-rule-8-4-3-spike-in-network-traffic-to-a-country.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-spike-in-network-traffic-to-a-country.html", - "/en/security/*/prebuilt-rule-8-4-3-spike-in-successful-logon-events-from-a-source-ip.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-spike-in-successful-logon-events-from-a-source-ip.html", - "/en/security/*/prebuilt-rule-8-4-3-ssh-authorized-keys-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-ssh-authorized-keys-file-modification.html", - "/en/security/*/prebuilt-rule-8-4-3-startup-logon-script-added-to-group-policy-object.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-startup-logon-script-added-to-group-policy-object.html", - "/en/security/*/prebuilt-rule-8-4-3-suspicious-antimalware-scan-interface-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-suspicious-antimalware-scan-interface-dll.html", - "/en/security/*/prebuilt-rule-8-4-3-suspicious-execution-via-windows-subsystem-for-linux.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-suspicious-execution-via-windows-subsystem-for-linux.html", - "/en/security/*/prebuilt-rule-8-4-3-suspicious-file-creation-in-etc-for-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-suspicious-file-creation-in-etc-for-persistence.html", - "/en/security/*/prebuilt-rule-8-4-3-suspicious-inter-process-communication-via-outlook.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-suspicious-inter-process-communication-via-outlook.html", - "/en/security/*/prebuilt-rule-8-4-3-suspicious-lsass-process-access.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-suspicious-lsass-process-access.html", - "/en/security/*/prebuilt-rule-8-4-3-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-4-3-suspicious-remote-registry-access-via-sebackupprivilege.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-suspicious-remote-registry-access-via-sebackupprivilege.html", - "/en/security/*/prebuilt-rule-8-4-3-suspicious-service-was-installed-in-the-system.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-suspicious-service-was-installed-in-the-system.html", - "/en/security/*/prebuilt-rule-8-4-3-system-log-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-system-log-file-deletion.html", - "/en/security/*/prebuilt-rule-8-4-3-system-service-discovery-through-built-in-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-system-service-discovery-through-built-in-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-4-3-temporarily-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-temporarily-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-4-3-unsigned-dll-loaded-by-svchost.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-unsigned-dll-loaded-by-svchost.html", - "/en/security/*/prebuilt-rule-8-4-3-unsigned-dll-side-loading-from-a-suspicious-folder.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-unsigned-dll-side-loading-from-a-suspicious-folder.html", - "/en/security/*/prebuilt-rule-8-4-3-untrusted-driver-loaded.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-untrusted-driver-loaded.html", - "/en/security/*/prebuilt-rule-8-4-3-unusual-file-creation-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-unusual-file-creation-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-4-3-unusual-file-modification-by-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-unusual-file-modification-by-dns-exe.html", - "/en/security/*/prebuilt-rule-8-4-3-unusual-hour-for-a-user-to-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-unusual-hour-for-a-user-to-logon.html", - "/en/security/*/prebuilt-rule-8-4-3-unusual-network-activity-from-a-windows-system-binary.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-unusual-network-activity-from-a-windows-system-binary.html", - "/en/security/*/prebuilt-rule-8-4-3-unusual-network-connection-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-unusual-network-connection-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-4-3-unusual-process-for-a-linux-host.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-unusual-process-for-a-linux-host.html", - "/en/security/*/prebuilt-rule-8-4-3-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-8-4-3-unusual-windows-path-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-unusual-windows-path-activity.html", - "/en/security/*/prebuilt-rule-8-4-3-unusual-windows-username.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-unusual-windows-username.html", - "/en/security/*/prebuilt-rule-8-4-3-user-account-exposed-to-kerberoasting.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-user-account-exposed-to-kerberoasting.html", - "/en/security/*/prebuilt-rule-8-4-3-user-added-to-privileged-group.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-user-added-to-privileged-group.html", - "/en/security/*/prebuilt-rule-8-4-3-virtual-machine-fingerprinting.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-virtual-machine-fingerprinting.html", - "/en/security/*/prebuilt-rule-8-4-3-volume-shadow-copy-deleted-or-resized-via-vssadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-volume-shadow-copy-deleted-or-resized-via-vssadmin.html", - "/en/security/*/prebuilt-rule-8-4-3-whoami-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-whoami-process-activity.html", - "/en/security/*/prebuilt-rule-8-4-3-windows-event-logs-cleared.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-windows-event-logs-cleared.html", - "/en/security/*/prebuilt-rule-8-4-3-windows-script-interpreter-executing-process-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-windows-script-interpreter-executing-process-via-wmi.html", - "/en/security/*/prebuilt-rule-8-4-3-windows-service-installed-via-an-unusual-client.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-windows-service-installed-via-an-unusual-client.html", - "/en/security/*/prebuilt-rule-8-4-3-windows-subsystem-for-linux-distribution-installed.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-windows-subsystem-for-linux-distribution-installed.html", - "/en/security/*/prebuilt-rule-8-4-3-windows-subsystem-for-linux-enabled-via-dism-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-4-3-windows-subsystem-for-linux-enabled-via-dism-utility.html", - "/en/security/*/prebuilt-rule-8-5-1-a-scheduled-task-was-created.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-a-scheduled-task-was-created.html", - "/en/security/*/prebuilt-rule-8-5-1-a-scheduled-task-was-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-a-scheduled-task-was-updated.html", - "/en/security/*/prebuilt-rule-8-5-1-abnormal-process-id-or-lock-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-abnormal-process-id-or-lock-file-created.html", - "/en/security/*/prebuilt-rule-8-5-1-access-to-a-sensitive-ldap-attribute.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-access-to-a-sensitive-ldap-attribute.html", - "/en/security/*/prebuilt-rule-8-5-1-account-configured-with-never-expiring-password.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-account-configured-with-never-expiring-password.html", - "/en/security/*/prebuilt-rule-8-5-1-account-password-reset-remotely.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-account-password-reset-remotely.html", - "/en/security/*/prebuilt-rule-8-5-1-adminsdholder-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-adminsdholder-backdoor.html", - "/en/security/*/prebuilt-rule-8-5-1-adminsdholder-sdprop-exclusion-added.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-adminsdholder-sdprop-exclusion-added.html", - "/en/security/*/prebuilt-rule-8-5-1-anomalous-process-for-a-linux-population.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-anomalous-process-for-a-linux-population.html", - "/en/security/*/prebuilt-rule-8-5-1-anomalous-process-for-a-windows-population.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-anomalous-process-for-a-windows-population.html", - "/en/security/*/prebuilt-rule-8-5-1-anomalous-windows-process-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-anomalous-windows-process-creation.html", - "/en/security/*/prebuilt-rule-8-5-1-attempt-to-disable-syslog-service.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-attempt-to-disable-syslog-service.html", - "/en/security/*/prebuilt-rule-8-5-1-attempt-to-install-kali-linux-via-wsl.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-attempt-to-install-kali-linux-via-wsl.html", - "/en/security/*/prebuilt-rule-8-5-1-base16-or-base32-encoding-decoding-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-base16-or-base32-encoding-decoding-activity.html", - "/en/security/*/prebuilt-rule-8-5-1-binary-executed-from-shared-memory-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-binary-executed-from-shared-memory-directory.html", - "/en/security/*/prebuilt-rule-8-5-1-bpf-filter-applied-using-tc.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-bpf-filter-applied-using-tc.html", - "/en/security/*/prebuilt-rule-8-5-1-chkconfig-service-add.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-chkconfig-service-add.html", - "/en/security/*/prebuilt-rule-8-5-1-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-8-5-1-code-signing-policy-modification-through-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-code-signing-policy-modification-through-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-5-1-code-signing-policy-modification-through-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-code-signing-policy-modification-through-registry.html", - "/en/security/*/prebuilt-rule-8-5-1-command-shell-activity-started-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-command-shell-activity-started-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-5-1-creation-of-hidden-shared-object-file.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-creation-of-hidden-shared-object-file.html", - "/en/security/*/prebuilt-rule-8-5-1-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-5-1-encrypting-files-with-winrar-or-7z.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-encrypting-files-with-winrar-or-7z.html", - "/en/security/*/prebuilt-rule-8-5-1-enumerating-domain-trusts-via-dsquery-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-enumerating-domain-trusts-via-dsquery-exe.html", - "/en/security/*/prebuilt-rule-8-5-1-enumeration-of-administrator-accounts.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-enumeration-of-administrator-accounts.html", - "/en/security/*/prebuilt-rule-8-5-1-enumeration-of-kernel-modules.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-enumeration-of-kernel-modules.html", - "/en/security/*/prebuilt-rule-8-5-1-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-8-5-1-execution-from-unusual-directory-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-execution-from-unusual-directory-command-line.html", - "/en/security/*/prebuilt-rule-8-5-1-execution-via-windows-subsystem-for-linux.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-execution-via-windows-subsystem-for-linux.html", - "/en/security/*/prebuilt-rule-8-5-1-file-creation-time-changed.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-file-creation-time-changed.html", - "/en/security/*/prebuilt-rule-8-5-1-file-deletion-via-shred.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-file-deletion-via-shred.html", - "/en/security/*/prebuilt-rule-8-5-1-file-made-immutable-by-chattr.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-file-made-immutable-by-chattr.html", - "/en/security/*/prebuilt-rule-8-5-1-file-transfer-or-listener-established-via-netcat.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-file-transfer-or-listener-established-via-netcat.html", - "/en/security/*/prebuilt-rule-8-5-1-firsttime-seen-account-performing-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-firsttime-seen-account-performing-dcsync.html", - "/en/security/*/prebuilt-rule-8-5-1-group-policy-abuse-for-privilege-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-group-policy-abuse-for-privilege-addition.html", - "/en/security/*/prebuilt-rule-8-5-1-group-policy-discovery-via-microsoft-gpresult-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-group-policy-discovery-via-microsoft-gpresult-utility.html", - "/en/security/*/prebuilt-rule-8-5-1-high-number-of-process-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-high-number-of-process-terminations.html", - "/en/security/*/prebuilt-rule-8-5-1-host-files-system-changes-via-windows-subsystem-for-linux.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-host-files-system-changes-via-windows-subsystem-for-linux.html", - "/en/security/*/prebuilt-rule-8-5-1-hping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-hping-process-activity.html", - "/en/security/*/prebuilt-rule-8-5-1-incoming-execution-via-powershell-remoting.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-incoming-execution-via-powershell-remoting.html", - "/en/security/*/prebuilt-rule-8-5-1-incoming-execution-via-winrm-remote-shell.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-incoming-execution-via-winrm-remote-shell.html", - "/en/security/*/prebuilt-rule-8-5-1-ingress-transfer-via-windows-bits.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-ingress-transfer-via-windows-bits.html", - "/en/security/*/prebuilt-rule-8-5-1-interactive-terminal-spawned-via-perl.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-interactive-terminal-spawned-via-perl.html", - "/en/security/*/prebuilt-rule-8-5-1-interactive-terminal-spawned-via-python.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-interactive-terminal-spawned-via-python.html", - "/en/security/*/prebuilt-rule-8-5-1-kerberos-pre-authentication-disabled-for-user.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-kerberos-pre-authentication-disabled-for-user.html", - "/en/security/*/prebuilt-rule-8-5-1-kernel-module-load-via-insmod.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-kernel-module-load-via-insmod.html", - "/en/security/*/prebuilt-rule-8-5-1-kernel-module-removal.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-kernel-module-removal.html", - "/en/security/*/prebuilt-rule-8-5-1-krbtgt-delegation-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-krbtgt-delegation-backdoor.html", - "/en/security/*/prebuilt-rule-8-5-1-linux-restricted-shell-breakout-via-linux-binary-s.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-linux-restricted-shell-breakout-via-linux-binary-s.html", - "/en/security/*/prebuilt-rule-8-5-1-lsass-memory-dump-handle-access.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-lsass-memory-dump-handle-access.html", - "/en/security/*/prebuilt-rule-8-5-1-modification-of-dynamic-linker-preload-shared-object.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-modification-of-dynamic-linker-preload-shared-object.html", - "/en/security/*/prebuilt-rule-8-5-1-modification-of-openssh-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-modification-of-openssh-binaries.html", - "/en/security/*/prebuilt-rule-8-5-1-modification-of-the-mspkiaccountcredentials.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-modification-of-the-mspkiaccountcredentials.html", - "/en/security/*/prebuilt-rule-8-5-1-multiple-logon-failure-followed-by-logon-success.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-multiple-logon-failure-followed-by-logon-success.html", - "/en/security/*/prebuilt-rule-8-5-1-multiple-logon-failure-from-the-same-source-address.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-multiple-logon-failure-from-the-same-source-address.html", - "/en/security/*/prebuilt-rule-8-5-1-multiple-vault-web-credentials-read.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-multiple-vault-web-credentials-read.html", - "/en/security/*/prebuilt-rule-8-5-1-namespace-manipulation-using-unshare.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-namespace-manipulation-using-unshare.html", - "/en/security/*/prebuilt-rule-8-5-1-nping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-nping-process-activity.html", - "/en/security/*/prebuilt-rule-8-5-1-persistence-via-kde-autostart-script-or-desktop-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-persistence-via-kde-autostart-script-or-desktop-file-modification.html", - "/en/security/*/prebuilt-rule-8-5-1-possible-consent-grant-attack-via-azure-registered-application.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-possible-consent-grant-attack-via-azure-registered-application.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-antimalware-scan-interface-bypass-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-antimalware-scan-interface-bypass-via-powershell.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-credential-access-via-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-credential-access-via-dcsync.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-credential-access-via-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-credential-access-via-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-disabling-of-selinux.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-disabling-of-selinux.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-dns-tunneling-via-iodine.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-dns-tunneling-via-iodine.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-exfiltration-via-certreq.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-exfiltration-via-certreq.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-linux-ssh-brute-force-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-linux-ssh-brute-force-detected.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-openssh-backdoor-logging-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-openssh-backdoor-logging-activity.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-powershell-hacktool-script-by-function-names.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-powershell-hacktool-script-by-function-names.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-privilege-escalation-via-pkexec.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-privilege-escalation-via-pkexec.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-privileged-escalation-via-samaccountname-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-privileged-escalation-via-samaccountname-spoofing.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-protocol-tunneling-via-earthworm.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-protocol-tunneling-via-earthworm.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-remote-credential-access-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-remote-credential-access-via-registry.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-remote-desktop-shadowing-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-remote-desktop-shadowing-activity.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-shadow-credentials-added-to-ad-object.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-shadow-credentials-added-to-ad-object.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-shell-via-web-server.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-shell-via-web-server.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-ssh-brute-force-detected-on-privileged-account.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-ssh-brute-force-detected-on-privileged-account.html", - "/en/security/*/prebuilt-rule-8-5-1-potential-ssh-password-guessing.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-potential-ssh-password-guessing.html", - "/en/security/*/prebuilt-rule-8-5-1-powershell-invoke-ninjacopy-script.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-powershell-invoke-ninjacopy-script.html", - "/en/security/*/prebuilt-rule-8-5-1-powershell-mailbox-collection-script.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-powershell-mailbox-collection-script.html", - "/en/security/*/prebuilt-rule-8-5-1-powershell-script-with-encryption-decryption-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-powershell-script-with-encryption-decryption-capabilities.html", - "/en/security/*/prebuilt-rule-8-5-1-powershell-suspicious-discovery-related-windows-api-functions.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-powershell-suspicious-discovery-related-windows-api-functions.html", - "/en/security/*/prebuilt-rule-8-5-1-powershell-suspicious-script-with-clipboard-retrieval-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-powershell-suspicious-script-with-clipboard-retrieval-capabilities.html", - "/en/security/*/prebuilt-rule-8-5-1-prebuilt-rules-8-5-1-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-prebuilt-rules-8-5-1-appendix.html", - "/en/security/*/prebuilt-rule-8-5-1-privileged-account-brute-force.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-privileged-account-brute-force.html", - "/en/security/*/prebuilt-rule-8-5-1-process-creation-via-secondary-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-process-creation-via-secondary-logon.html", - "/en/security/*/prebuilt-rule-8-5-1-process-started-from-process-id-pid-file.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-process-started-from-process-id-pid-file.html", - "/en/security/*/prebuilt-rule-8-5-1-rare-user-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-rare-user-logon.html", - "/en/security/*/prebuilt-rule-8-5-1-remote-computer-account-dnshostname-update.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-remote-computer-account-dnshostname-update.html", - "/en/security/*/prebuilt-rule-8-5-1-remote-logon-followed-by-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-remote-logon-followed-by-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-5-1-remote-system-discovery-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-remote-system-discovery-commands.html", - "/en/security/*/prebuilt-rule-8-5-1-remote-windows-service-installed.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-remote-windows-service-installed.html", - "/en/security/*/prebuilt-rule-8-5-1-reverse-shell-created-via-named-pipe.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-reverse-shell-created-via-named-pipe.html", - "/en/security/*/prebuilt-rule-8-5-1-scheduled-task-execution-at-scale-via-gpo.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-scheduled-task-execution-at-scale-via-gpo.html", - "/en/security/*/prebuilt-rule-8-5-1-sensitive-files-compression.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-sensitive-files-compression.html", - "/en/security/*/prebuilt-rule-8-5-1-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-8-5-1-service-control-spawned-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-service-control-spawned-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-8-5-1-service-creation-via-local-kerberos-authentication.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-service-creation-via-local-kerberos-authentication.html", - "/en/security/*/prebuilt-rule-8-5-1-spike-in-failed-logon-events.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-spike-in-failed-logon-events.html", - "/en/security/*/prebuilt-rule-8-5-1-spike-in-network-traffic-to-a-country.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-spike-in-network-traffic-to-a-country.html", - "/en/security/*/prebuilt-rule-8-5-1-spike-in-successful-logon-events-from-a-source-ip.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-spike-in-successful-logon-events-from-a-source-ip.html", - "/en/security/*/prebuilt-rule-8-5-1-ssh-authorized-keys-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-ssh-authorized-keys-file-modification.html", - "/en/security/*/prebuilt-rule-8-5-1-startup-logon-script-added-to-group-policy-object.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-startup-logon-script-added-to-group-policy-object.html", - "/en/security/*/prebuilt-rule-8-5-1-suspicious-antimalware-scan-interface-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-suspicious-antimalware-scan-interface-dll.html", - "/en/security/*/prebuilt-rule-8-5-1-suspicious-execution-via-windows-subsystem-for-linux.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-suspicious-execution-via-windows-subsystem-for-linux.html", - "/en/security/*/prebuilt-rule-8-5-1-suspicious-file-creation-in-etc-for-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-suspicious-file-creation-in-etc-for-persistence.html", - "/en/security/*/prebuilt-rule-8-5-1-suspicious-inter-process-communication-via-outlook.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-suspicious-inter-process-communication-via-outlook.html", - "/en/security/*/prebuilt-rule-8-5-1-suspicious-lsass-process-access.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-suspicious-lsass-process-access.html", - "/en/security/*/prebuilt-rule-8-5-1-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-5-1-suspicious-remote-registry-access-via-sebackupprivilege.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-suspicious-remote-registry-access-via-sebackupprivilege.html", - "/en/security/*/prebuilt-rule-8-5-1-suspicious-service-was-installed-in-the-system.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-suspicious-service-was-installed-in-the-system.html", - "/en/security/*/prebuilt-rule-8-5-1-system-log-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-system-log-file-deletion.html", - "/en/security/*/prebuilt-rule-8-5-1-system-service-discovery-through-built-in-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-system-service-discovery-through-built-in-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-5-1-temporarily-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-temporarily-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-5-1-unsigned-dll-loaded-by-svchost.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-unsigned-dll-loaded-by-svchost.html", - "/en/security/*/prebuilt-rule-8-5-1-unsigned-dll-side-loading-from-a-suspicious-folder.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-unsigned-dll-side-loading-from-a-suspicious-folder.html", - "/en/security/*/prebuilt-rule-8-5-1-untrusted-driver-loaded.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-untrusted-driver-loaded.html", - "/en/security/*/prebuilt-rule-8-5-1-unusual-file-creation-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-unusual-file-creation-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-5-1-unusual-file-modification-by-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-unusual-file-modification-by-dns-exe.html", - "/en/security/*/prebuilt-rule-8-5-1-unusual-hour-for-a-user-to-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-unusual-hour-for-a-user-to-logon.html", - "/en/security/*/prebuilt-rule-8-5-1-unusual-network-activity-from-a-windows-system-binary.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-unusual-network-activity-from-a-windows-system-binary.html", - "/en/security/*/prebuilt-rule-8-5-1-unusual-network-connection-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-unusual-network-connection-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-5-1-unusual-process-for-a-linux-host.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-unusual-process-for-a-linux-host.html", - "/en/security/*/prebuilt-rule-8-5-1-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-8-5-1-unusual-windows-path-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-unusual-windows-path-activity.html", - "/en/security/*/prebuilt-rule-8-5-1-unusual-windows-username.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-unusual-windows-username.html", - "/en/security/*/prebuilt-rule-8-5-1-user-account-exposed-to-kerberoasting.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-user-account-exposed-to-kerberoasting.html", - "/en/security/*/prebuilt-rule-8-5-1-user-added-to-privileged-group.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-user-added-to-privileged-group.html", - "/en/security/*/prebuilt-rule-8-5-1-virtual-machine-fingerprinting.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-virtual-machine-fingerprinting.html", - "/en/security/*/prebuilt-rule-8-5-1-volume-shadow-copy-deleted-or-resized-via-vssadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-volume-shadow-copy-deleted-or-resized-via-vssadmin.html", - "/en/security/*/prebuilt-rule-8-5-1-web-application-suspicious-activity-no-user-agent.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-web-application-suspicious-activity-no-user-agent.html", - "/en/security/*/prebuilt-rule-8-5-1-whoami-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-whoami-process-activity.html", - "/en/security/*/prebuilt-rule-8-5-1-windows-event-logs-cleared.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-windows-event-logs-cleared.html", - "/en/security/*/prebuilt-rule-8-5-1-windows-script-interpreter-executing-process-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-windows-script-interpreter-executing-process-via-wmi.html", - "/en/security/*/prebuilt-rule-8-5-1-windows-service-installed-via-an-unusual-client.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-windows-service-installed-via-an-unusual-client.html", - "/en/security/*/prebuilt-rule-8-5-1-windows-subsystem-for-linux-distribution-installed.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-windows-subsystem-for-linux-distribution-installed.html", - "/en/security/*/prebuilt-rule-8-5-1-windows-subsystem-for-linux-enabled-via-dism-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-5-1-windows-subsystem-for-linux-enabled-via-dism-utility.html", - "/en/security/*/prebuilt-rule-8-6-1-a-scheduled-task-was-created.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-a-scheduled-task-was-created.html", - "/en/security/*/prebuilt-rule-8-6-1-a-scheduled-task-was-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-a-scheduled-task-was-updated.html", - "/en/security/*/prebuilt-rule-8-6-1-abnormal-process-id-or-lock-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-abnormal-process-id-or-lock-file-created.html", - "/en/security/*/prebuilt-rule-8-6-1-access-to-a-sensitive-ldap-attribute.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-access-to-a-sensitive-ldap-attribute.html", - "/en/security/*/prebuilt-rule-8-6-1-account-configured-with-never-expiring-password.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-account-configured-with-never-expiring-password.html", - "/en/security/*/prebuilt-rule-8-6-1-account-password-reset-remotely.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-account-password-reset-remotely.html", - "/en/security/*/prebuilt-rule-8-6-1-adminsdholder-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-adminsdholder-backdoor.html", - "/en/security/*/prebuilt-rule-8-6-1-adminsdholder-sdprop-exclusion-added.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-adminsdholder-sdprop-exclusion-added.html", - "/en/security/*/prebuilt-rule-8-6-1-anomalous-process-for-a-linux-population.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-anomalous-process-for-a-linux-population.html", - "/en/security/*/prebuilt-rule-8-6-1-anomalous-process-for-a-windows-population.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-anomalous-process-for-a-windows-population.html", - "/en/security/*/prebuilt-rule-8-6-1-anomalous-windows-process-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-anomalous-windows-process-creation.html", - "/en/security/*/prebuilt-rule-8-6-1-attempt-to-disable-syslog-service.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-attempt-to-disable-syslog-service.html", - "/en/security/*/prebuilt-rule-8-6-1-attempt-to-install-kali-linux-via-wsl.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-attempt-to-install-kali-linux-via-wsl.html", - "/en/security/*/prebuilt-rule-8-6-1-base16-or-base32-encoding-decoding-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-base16-or-base32-encoding-decoding-activity.html", - "/en/security/*/prebuilt-rule-8-6-1-binary-executed-from-shared-memory-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-binary-executed-from-shared-memory-directory.html", - "/en/security/*/prebuilt-rule-8-6-1-bpf-filter-applied-using-tc.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-bpf-filter-applied-using-tc.html", - "/en/security/*/prebuilt-rule-8-6-1-chkconfig-service-add.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-chkconfig-service-add.html", - "/en/security/*/prebuilt-rule-8-6-1-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-8-6-1-code-signing-policy-modification-through-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-code-signing-policy-modification-through-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-6-1-code-signing-policy-modification-through-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-code-signing-policy-modification-through-registry.html", - "/en/security/*/prebuilt-rule-8-6-1-command-shell-activity-started-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-command-shell-activity-started-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-6-1-creation-of-hidden-shared-object-file.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-creation-of-hidden-shared-object-file.html", - "/en/security/*/prebuilt-rule-8-6-1-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-6-1-encrypting-files-with-winrar-or-7z.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-encrypting-files-with-winrar-or-7z.html", - "/en/security/*/prebuilt-rule-8-6-1-enumerating-domain-trusts-via-dsquery-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-enumerating-domain-trusts-via-dsquery-exe.html", - "/en/security/*/prebuilt-rule-8-6-1-enumeration-of-administrator-accounts.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-enumeration-of-administrator-accounts.html", - "/en/security/*/prebuilt-rule-8-6-1-enumeration-of-kernel-modules.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-enumeration-of-kernel-modules.html", - "/en/security/*/prebuilt-rule-8-6-1-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-8-6-1-execution-from-unusual-directory-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-execution-from-unusual-directory-command-line.html", - "/en/security/*/prebuilt-rule-8-6-1-execution-via-windows-subsystem-for-linux.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-execution-via-windows-subsystem-for-linux.html", - "/en/security/*/prebuilt-rule-8-6-1-file-creation-time-changed.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-file-creation-time-changed.html", - "/en/security/*/prebuilt-rule-8-6-1-file-deletion-via-shred.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-file-deletion-via-shred.html", - "/en/security/*/prebuilt-rule-8-6-1-file-made-immutable-by-chattr.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-file-made-immutable-by-chattr.html", - "/en/security/*/prebuilt-rule-8-6-1-file-transfer-or-listener-established-via-netcat.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-file-transfer-or-listener-established-via-netcat.html", - "/en/security/*/prebuilt-rule-8-6-1-first-time-seen-driver-loaded.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-first-time-seen-driver-loaded.html", - "/en/security/*/prebuilt-rule-8-6-1-firsttime-seen-account-performing-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-firsttime-seen-account-performing-dcsync.html", - "/en/security/*/prebuilt-rule-8-6-1-group-policy-abuse-for-privilege-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-group-policy-abuse-for-privilege-addition.html", - "/en/security/*/prebuilt-rule-8-6-1-group-policy-discovery-via-microsoft-gpresult-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-group-policy-discovery-via-microsoft-gpresult-utility.html", - "/en/security/*/prebuilt-rule-8-6-1-high-number-of-process-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-high-number-of-process-terminations.html", - "/en/security/*/prebuilt-rule-8-6-1-host-files-system-changes-via-windows-subsystem-for-linux.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-host-files-system-changes-via-windows-subsystem-for-linux.html", - "/en/security/*/prebuilt-rule-8-6-1-hping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-hping-process-activity.html", - "/en/security/*/prebuilt-rule-8-6-1-incoming-execution-via-powershell-remoting.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-incoming-execution-via-powershell-remoting.html", - "/en/security/*/prebuilt-rule-8-6-1-incoming-execution-via-winrm-remote-shell.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-incoming-execution-via-winrm-remote-shell.html", - "/en/security/*/prebuilt-rule-8-6-1-ingress-transfer-via-windows-bits.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-ingress-transfer-via-windows-bits.html", - "/en/security/*/prebuilt-rule-8-6-1-interactive-terminal-spawned-via-perl.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-interactive-terminal-spawned-via-perl.html", - "/en/security/*/prebuilt-rule-8-6-1-interactive-terminal-spawned-via-python.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-interactive-terminal-spawned-via-python.html", - "/en/security/*/prebuilt-rule-8-6-1-kerberos-pre-authentication-disabled-for-user.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-kerberos-pre-authentication-disabled-for-user.html", - "/en/security/*/prebuilt-rule-8-6-1-kernel-module-load-via-insmod.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-kernel-module-load-via-insmod.html", - "/en/security/*/prebuilt-rule-8-6-1-kernel-module-removal.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-kernel-module-removal.html", - "/en/security/*/prebuilt-rule-8-6-1-krbtgt-delegation-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-krbtgt-delegation-backdoor.html", - "/en/security/*/prebuilt-rule-8-6-1-linux-restricted-shell-breakout-via-linux-binary-s.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-linux-restricted-shell-breakout-via-linux-binary-s.html", - "/en/security/*/prebuilt-rule-8-6-1-lsass-memory-dump-handle-access.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-lsass-memory-dump-handle-access.html", - "/en/security/*/prebuilt-rule-8-6-1-modification-of-dynamic-linker-preload-shared-object.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-modification-of-dynamic-linker-preload-shared-object.html", - "/en/security/*/prebuilt-rule-8-6-1-modification-of-openssh-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-modification-of-openssh-binaries.html", - "/en/security/*/prebuilt-rule-8-6-1-modification-of-the-mspkiaccountcredentials.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-modification-of-the-mspkiaccountcredentials.html", - "/en/security/*/prebuilt-rule-8-6-1-multiple-logon-failure-followed-by-logon-success.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-multiple-logon-failure-followed-by-logon-success.html", - "/en/security/*/prebuilt-rule-8-6-1-multiple-logon-failure-from-the-same-source-address.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-multiple-logon-failure-from-the-same-source-address.html", - "/en/security/*/prebuilt-rule-8-6-1-multiple-vault-web-credentials-read.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-multiple-vault-web-credentials-read.html", - "/en/security/*/prebuilt-rule-8-6-1-namespace-manipulation-using-unshare.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-namespace-manipulation-using-unshare.html", - "/en/security/*/prebuilt-rule-8-6-1-nping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-nping-process-activity.html", - "/en/security/*/prebuilt-rule-8-6-1-persistence-via-kde-autostart-script-or-desktop-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-persistence-via-kde-autostart-script-or-desktop-file-modification.html", - "/en/security/*/prebuilt-rule-8-6-1-possible-consent-grant-attack-via-azure-registered-application.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-possible-consent-grant-attack-via-azure-registered-application.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-antimalware-scan-interface-bypass-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-antimalware-scan-interface-bypass-via-powershell.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-credential-access-via-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-credential-access-via-dcsync.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-credential-access-via-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-credential-access-via-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-disabling-of-selinux.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-disabling-of-selinux.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-dns-tunneling-via-iodine.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-dns-tunneling-via-iodine.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-exfiltration-via-certreq.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-exfiltration-via-certreq.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-linux-ssh-brute-force-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-linux-ssh-brute-force-detected.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-openssh-backdoor-logging-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-openssh-backdoor-logging-activity.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-powershell-hacktool-script-by-function-names.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-powershell-hacktool-script-by-function-names.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-privilege-escalation-via-pkexec.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-privilege-escalation-via-pkexec.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-privileged-escalation-via-samaccountname-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-privileged-escalation-via-samaccountname-spoofing.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-protocol-tunneling-via-earthworm.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-protocol-tunneling-via-earthworm.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-remote-credential-access-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-remote-credential-access-via-registry.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-remote-desktop-shadowing-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-remote-desktop-shadowing-activity.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-shadow-credentials-added-to-ad-object.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-shadow-credentials-added-to-ad-object.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-shell-via-web-server.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-shell-via-web-server.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-ssh-brute-force-detected-on-privileged-account.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-ssh-brute-force-detected-on-privileged-account.html", - "/en/security/*/prebuilt-rule-8-6-1-potential-ssh-password-guessing.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-potential-ssh-password-guessing.html", - "/en/security/*/prebuilt-rule-8-6-1-powershell-invoke-ninjacopy-script.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-powershell-invoke-ninjacopy-script.html", - "/en/security/*/prebuilt-rule-8-6-1-powershell-mailbox-collection-script.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-powershell-mailbox-collection-script.html", - "/en/security/*/prebuilt-rule-8-6-1-powershell-script-with-encryption-decryption-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-powershell-script-with-encryption-decryption-capabilities.html", - "/en/security/*/prebuilt-rule-8-6-1-powershell-suspicious-discovery-related-windows-api-functions.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-powershell-suspicious-discovery-related-windows-api-functions.html", - "/en/security/*/prebuilt-rule-8-6-1-powershell-suspicious-script-with-clipboard-retrieval-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-powershell-suspicious-script-with-clipboard-retrieval-capabilities.html", - "/en/security/*/prebuilt-rule-8-6-1-prebuilt-rules-8-6-1-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-prebuilt-rules-8-6-1-appendix.html", - "/en/security/*/prebuilt-rule-8-6-1-privileged-account-brute-force.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-privileged-account-brute-force.html", - "/en/security/*/prebuilt-rule-8-6-1-process-creation-via-secondary-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-process-creation-via-secondary-logon.html", - "/en/security/*/prebuilt-rule-8-6-1-process-started-from-process-id-pid-file.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-process-started-from-process-id-pid-file.html", - "/en/security/*/prebuilt-rule-8-6-1-rare-user-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-rare-user-logon.html", - "/en/security/*/prebuilt-rule-8-6-1-remote-computer-account-dnshostname-update.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-remote-computer-account-dnshostname-update.html", - "/en/security/*/prebuilt-rule-8-6-1-remote-logon-followed-by-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-remote-logon-followed-by-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-6-1-remote-system-discovery-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-remote-system-discovery-commands.html", - "/en/security/*/prebuilt-rule-8-6-1-remote-windows-service-installed.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-remote-windows-service-installed.html", - "/en/security/*/prebuilt-rule-8-6-1-reverse-shell-created-via-named-pipe.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-reverse-shell-created-via-named-pipe.html", - "/en/security/*/prebuilt-rule-8-6-1-scheduled-task-execution-at-scale-via-gpo.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-scheduled-task-execution-at-scale-via-gpo.html", - "/en/security/*/prebuilt-rule-8-6-1-sensitive-files-compression.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-sensitive-files-compression.html", - "/en/security/*/prebuilt-rule-8-6-1-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-8-6-1-service-control-spawned-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-service-control-spawned-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-8-6-1-service-creation-via-local-kerberos-authentication.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-service-creation-via-local-kerberos-authentication.html", - "/en/security/*/prebuilt-rule-8-6-1-spike-in-failed-logon-events.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-spike-in-failed-logon-events.html", - "/en/security/*/prebuilt-rule-8-6-1-spike-in-network-traffic-to-a-country.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-spike-in-network-traffic-to-a-country.html", - "/en/security/*/prebuilt-rule-8-6-1-spike-in-successful-logon-events-from-a-source-ip.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-spike-in-successful-logon-events-from-a-source-ip.html", - "/en/security/*/prebuilt-rule-8-6-1-ssh-authorized-keys-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-ssh-authorized-keys-file-modification.html", - "/en/security/*/prebuilt-rule-8-6-1-startup-logon-script-added-to-group-policy-object.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-startup-logon-script-added-to-group-policy-object.html", - "/en/security/*/prebuilt-rule-8-6-1-suspicious-antimalware-scan-interface-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-suspicious-antimalware-scan-interface-dll.html", - "/en/security/*/prebuilt-rule-8-6-1-suspicious-execution-via-windows-subsystem-for-linux.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-suspicious-execution-via-windows-subsystem-for-linux.html", - "/en/security/*/prebuilt-rule-8-6-1-suspicious-file-creation-in-etc-for-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-suspicious-file-creation-in-etc-for-persistence.html", - "/en/security/*/prebuilt-rule-8-6-1-suspicious-inter-process-communication-via-outlook.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-suspicious-inter-process-communication-via-outlook.html", - "/en/security/*/prebuilt-rule-8-6-1-suspicious-lsass-process-access.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-suspicious-lsass-process-access.html", - "/en/security/*/prebuilt-rule-8-6-1-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-6-1-suspicious-remote-registry-access-via-sebackupprivilege.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-suspicious-remote-registry-access-via-sebackupprivilege.html", - "/en/security/*/prebuilt-rule-8-6-1-suspicious-service-was-installed-in-the-system.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-suspicious-service-was-installed-in-the-system.html", - "/en/security/*/prebuilt-rule-8-6-1-system-log-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-system-log-file-deletion.html", - "/en/security/*/prebuilt-rule-8-6-1-system-service-discovery-through-built-in-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-system-service-discovery-through-built-in-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-6-1-temporarily-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-temporarily-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-6-1-unsigned-dll-loaded-by-svchost.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-unsigned-dll-loaded-by-svchost.html", - "/en/security/*/prebuilt-rule-8-6-1-unsigned-dll-side-loading-from-a-suspicious-folder.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-unsigned-dll-side-loading-from-a-suspicious-folder.html", - "/en/security/*/prebuilt-rule-8-6-1-untrusted-driver-loaded.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-untrusted-driver-loaded.html", - "/en/security/*/prebuilt-rule-8-6-1-unusual-file-creation-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-unusual-file-creation-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-6-1-unusual-file-modification-by-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-unusual-file-modification-by-dns-exe.html", - "/en/security/*/prebuilt-rule-8-6-1-unusual-hour-for-a-user-to-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-unusual-hour-for-a-user-to-logon.html", - "/en/security/*/prebuilt-rule-8-6-1-unusual-network-activity-from-a-windows-system-binary.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-unusual-network-activity-from-a-windows-system-binary.html", - "/en/security/*/prebuilt-rule-8-6-1-unusual-network-connection-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-unusual-network-connection-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-6-1-unusual-process-for-a-linux-host.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-unusual-process-for-a-linux-host.html", - "/en/security/*/prebuilt-rule-8-6-1-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-8-6-1-unusual-windows-path-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-unusual-windows-path-activity.html", - "/en/security/*/prebuilt-rule-8-6-1-unusual-windows-username.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-unusual-windows-username.html", - "/en/security/*/prebuilt-rule-8-6-1-user-account-exposed-to-kerberoasting.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-user-account-exposed-to-kerberoasting.html", - "/en/security/*/prebuilt-rule-8-6-1-user-added-to-privileged-group.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-user-added-to-privileged-group.html", - "/en/security/*/prebuilt-rule-8-6-1-virtual-machine-fingerprinting.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-virtual-machine-fingerprinting.html", - "/en/security/*/prebuilt-rule-8-6-1-volume-shadow-copy-deleted-or-resized-via-vssadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-volume-shadow-copy-deleted-or-resized-via-vssadmin.html", - "/en/security/*/prebuilt-rule-8-6-1-web-application-suspicious-activity-no-user-agent.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-web-application-suspicious-activity-no-user-agent.html", - "/en/security/*/prebuilt-rule-8-6-1-whoami-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-whoami-process-activity.html", - "/en/security/*/prebuilt-rule-8-6-1-windows-event-logs-cleared.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-windows-event-logs-cleared.html", - "/en/security/*/prebuilt-rule-8-6-1-windows-script-interpreter-executing-process-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-windows-script-interpreter-executing-process-via-wmi.html", - "/en/security/*/prebuilt-rule-8-6-1-windows-service-installed-via-an-unusual-client.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-windows-service-installed-via-an-unusual-client.html", - "/en/security/*/prebuilt-rule-8-6-1-windows-subsystem-for-linux-distribution-installed.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-windows-subsystem-for-linux-distribution-installed.html", - "/en/security/*/prebuilt-rule-8-6-1-windows-subsystem-for-linux-enabled-via-dism-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-6-1-windows-subsystem-for-linux-enabled-via-dism-utility.html", - "/en/security/*/prebuilt-rule-8-7-1-a-scheduled-task-was-created.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-a-scheduled-task-was-created.html", - "/en/security/*/prebuilt-rule-8-7-1-a-scheduled-task-was-updated.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-a-scheduled-task-was-updated.html", - "/en/security/*/prebuilt-rule-8-7-1-abnormal-process-id-or-lock-file-created.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-abnormal-process-id-or-lock-file-created.html", - "/en/security/*/prebuilt-rule-8-7-1-access-to-a-sensitive-ldap-attribute.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-access-to-a-sensitive-ldap-attribute.html", - "/en/security/*/prebuilt-rule-8-7-1-account-configured-with-never-expiring-password.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-account-configured-with-never-expiring-password.html", - "/en/security/*/prebuilt-rule-8-7-1-account-password-reset-remotely.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-account-password-reset-remotely.html", - "/en/security/*/prebuilt-rule-8-7-1-adminsdholder-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-adminsdholder-backdoor.html", - "/en/security/*/prebuilt-rule-8-7-1-adminsdholder-sdprop-exclusion-added.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-adminsdholder-sdprop-exclusion-added.html", - "/en/security/*/prebuilt-rule-8-7-1-anomalous-process-for-a-linux-population.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-anomalous-process-for-a-linux-population.html", - "/en/security/*/prebuilt-rule-8-7-1-anomalous-process-for-a-windows-population.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-anomalous-process-for-a-windows-population.html", - "/en/security/*/prebuilt-rule-8-7-1-anomalous-windows-process-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-anomalous-windows-process-creation.html", - "/en/security/*/prebuilt-rule-8-7-1-attempt-to-disable-syslog-service.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-attempt-to-disable-syslog-service.html", - "/en/security/*/prebuilt-rule-8-7-1-attempt-to-install-kali-linux-via-wsl.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-attempt-to-install-kali-linux-via-wsl.html", - "/en/security/*/prebuilt-rule-8-7-1-base16-or-base32-encoding-decoding-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-base16-or-base32-encoding-decoding-activity.html", - "/en/security/*/prebuilt-rule-8-7-1-binary-executed-from-shared-memory-directory.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-binary-executed-from-shared-memory-directory.html", - "/en/security/*/prebuilt-rule-8-7-1-bpf-filter-applied-using-tc.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-bpf-filter-applied-using-tc.html", - "/en/security/*/prebuilt-rule-8-7-1-chkconfig-service-add.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-chkconfig-service-add.html", - "/en/security/*/prebuilt-rule-8-7-1-clearing-windows-event-logs.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-clearing-windows-event-logs.html", - "/en/security/*/prebuilt-rule-8-7-1-code-signing-policy-modification-through-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-code-signing-policy-modification-through-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-7-1-code-signing-policy-modification-through-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-code-signing-policy-modification-through-registry.html", - "/en/security/*/prebuilt-rule-8-7-1-command-shell-activity-started-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-command-shell-activity-started-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-7-1-creation-of-hidden-shared-object-file.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-creation-of-hidden-shared-object-file.html", - "/en/security/*/prebuilt-rule-8-7-1-disable-windows-event-and-security-logs-using-built-in-tools.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-disable-windows-event-and-security-logs-using-built-in-tools.html", - "/en/security/*/prebuilt-rule-8-7-1-encrypting-files-with-winrar-or-7z.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-encrypting-files-with-winrar-or-7z.html", - "/en/security/*/prebuilt-rule-8-7-1-enumerating-domain-trusts-via-dsquery-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-enumerating-domain-trusts-via-dsquery-exe.html", - "/en/security/*/prebuilt-rule-8-7-1-enumeration-of-administrator-accounts.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-enumeration-of-administrator-accounts.html", - "/en/security/*/prebuilt-rule-8-7-1-enumeration-of-kernel-modules.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-enumeration-of-kernel-modules.html", - "/en/security/*/prebuilt-rule-8-7-1-enumeration-of-privileged-local-groups-membership.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-enumeration-of-privileged-local-groups-membership.html", - "/en/security/*/prebuilt-rule-8-7-1-execution-from-unusual-directory-command-line.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-execution-from-unusual-directory-command-line.html", - "/en/security/*/prebuilt-rule-8-7-1-execution-via-windows-subsystem-for-linux.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-execution-via-windows-subsystem-for-linux.html", - "/en/security/*/prebuilt-rule-8-7-1-file-creation-time-changed.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-file-creation-time-changed.html", - "/en/security/*/prebuilt-rule-8-7-1-file-deletion-via-shred.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-file-deletion-via-shred.html", - "/en/security/*/prebuilt-rule-8-7-1-file-made-immutable-by-chattr.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-file-made-immutable-by-chattr.html", - "/en/security/*/prebuilt-rule-8-7-1-file-transfer-or-listener-established-via-netcat.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-file-transfer-or-listener-established-via-netcat.html", - "/en/security/*/prebuilt-rule-8-7-1-first-time-seen-driver-loaded.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-first-time-seen-driver-loaded.html", - "/en/security/*/prebuilt-rule-8-7-1-firsttime-seen-account-performing-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-firsttime-seen-account-performing-dcsync.html", - "/en/security/*/prebuilt-rule-8-7-1-group-policy-abuse-for-privilege-addition.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-group-policy-abuse-for-privilege-addition.html", - "/en/security/*/prebuilt-rule-8-7-1-group-policy-discovery-via-microsoft-gpresult-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-group-policy-discovery-via-microsoft-gpresult-utility.html", - "/en/security/*/prebuilt-rule-8-7-1-high-number-of-process-terminations.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-high-number-of-process-terminations.html", - "/en/security/*/prebuilt-rule-8-7-1-host-files-system-changes-via-windows-subsystem-for-linux.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-host-files-system-changes-via-windows-subsystem-for-linux.html", - "/en/security/*/prebuilt-rule-8-7-1-hping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-hping-process-activity.html", - "/en/security/*/prebuilt-rule-8-7-1-incoming-execution-via-powershell-remoting.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-incoming-execution-via-powershell-remoting.html", - "/en/security/*/prebuilt-rule-8-7-1-incoming-execution-via-winrm-remote-shell.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-incoming-execution-via-winrm-remote-shell.html", - "/en/security/*/prebuilt-rule-8-7-1-ingress-transfer-via-windows-bits.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-ingress-transfer-via-windows-bits.html", - "/en/security/*/prebuilt-rule-8-7-1-interactive-terminal-spawned-via-perl.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-interactive-terminal-spawned-via-perl.html", - "/en/security/*/prebuilt-rule-8-7-1-interactive-terminal-spawned-via-python.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-interactive-terminal-spawned-via-python.html", - "/en/security/*/prebuilt-rule-8-7-1-kerberos-pre-authentication-disabled-for-user.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-kerberos-pre-authentication-disabled-for-user.html", - "/en/security/*/prebuilt-rule-8-7-1-kernel-module-load-via-insmod.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-kernel-module-load-via-insmod.html", - "/en/security/*/prebuilt-rule-8-7-1-kernel-module-removal.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-kernel-module-removal.html", - "/en/security/*/prebuilt-rule-8-7-1-krbtgt-delegation-backdoor.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-krbtgt-delegation-backdoor.html", - "/en/security/*/prebuilt-rule-8-7-1-linux-restricted-shell-breakout-via-linux-binary-s.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-linux-restricted-shell-breakout-via-linux-binary-s.html", - "/en/security/*/prebuilt-rule-8-7-1-lsass-memory-dump-handle-access.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-lsass-memory-dump-handle-access.html", - "/en/security/*/prebuilt-rule-8-7-1-modification-of-dynamic-linker-preload-shared-object.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-modification-of-dynamic-linker-preload-shared-object.html", - "/en/security/*/prebuilt-rule-8-7-1-modification-of-openssh-binaries.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-modification-of-openssh-binaries.html", - "/en/security/*/prebuilt-rule-8-7-1-modification-of-the-mspkiaccountcredentials.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-modification-of-the-mspkiaccountcredentials.html", - "/en/security/*/prebuilt-rule-8-7-1-multiple-logon-failure-followed-by-logon-success.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-multiple-logon-failure-followed-by-logon-success.html", - "/en/security/*/prebuilt-rule-8-7-1-multiple-logon-failure-from-the-same-source-address.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-multiple-logon-failure-from-the-same-source-address.html", - "/en/security/*/prebuilt-rule-8-7-1-multiple-vault-web-credentials-read.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-multiple-vault-web-credentials-read.html", - "/en/security/*/prebuilt-rule-8-7-1-my-first-rule.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-my-first-rule.html", - "/en/security/*/prebuilt-rule-8-7-1-namespace-manipulation-using-unshare.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-namespace-manipulation-using-unshare.html", - "/en/security/*/prebuilt-rule-8-7-1-nping-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-nping-process-activity.html", - "/en/security/*/prebuilt-rule-8-7-1-persistence-via-kde-autostart-script-or-desktop-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-persistence-via-kde-autostart-script-or-desktop-file-modification.html", - "/en/security/*/prebuilt-rule-8-7-1-possible-consent-grant-attack-via-azure-registered-application.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-possible-consent-grant-attack-via-azure-registered-application.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-antimalware-scan-interface-bypass-via-powershell.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-antimalware-scan-interface-bypass-via-powershell.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-credential-access-via-dcsync.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-credential-access-via-dcsync.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-credential-access-via-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-credential-access-via-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-disabling-of-selinux.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-disabling-of-selinux.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-dll-side-loading-via-microsoft-antimalware-service-executable.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-dns-tunneling-via-iodine.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-dns-tunneling-via-iodine.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-exfiltration-via-certreq.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-exfiltration-via-certreq.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-linux-ssh-brute-force-detected.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-linux-ssh-brute-force-detected.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-openssh-backdoor-logging-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-openssh-backdoor-logging-activity.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-powershell-hacktool-script-by-function-names.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-powershell-hacktool-script-by-function-names.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-privilege-escalation-via-pkexec.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-privilege-escalation-via-pkexec.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-privileged-escalation-via-samaccountname-spoofing.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-privileged-escalation-via-samaccountname-spoofing.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-protocol-tunneling-via-earthworm.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-protocol-tunneling-via-earthworm.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-remote-credential-access-via-registry.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-remote-credential-access-via-registry.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-remote-desktop-shadowing-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-remote-desktop-shadowing-activity.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-shadow-credentials-added-to-ad-object.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-shadow-credentials-added-to-ad-object.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-shell-via-web-server.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-shell-via-web-server.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-ssh-brute-force-detected-on-privileged-account.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-ssh-brute-force-detected-on-privileged-account.html", - "/en/security/*/prebuilt-rule-8-7-1-potential-ssh-password-guessing.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-potential-ssh-password-guessing.html", - "/en/security/*/prebuilt-rule-8-7-1-powershell-invoke-ninjacopy-script.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-powershell-invoke-ninjacopy-script.html", - "/en/security/*/prebuilt-rule-8-7-1-powershell-mailbox-collection-script.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-powershell-mailbox-collection-script.html", - "/en/security/*/prebuilt-rule-8-7-1-powershell-script-with-encryption-decryption-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-powershell-script-with-encryption-decryption-capabilities.html", - "/en/security/*/prebuilt-rule-8-7-1-powershell-suspicious-discovery-related-windows-api-functions.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-powershell-suspicious-discovery-related-windows-api-functions.html", - "/en/security/*/prebuilt-rule-8-7-1-powershell-suspicious-script-with-clipboard-retrieval-capabilities.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-powershell-suspicious-script-with-clipboard-retrieval-capabilities.html", - "/en/security/*/prebuilt-rule-8-7-1-prebuilt-rules-8-7-1-appendix.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-prebuilt-rules-8-7-1-appendix.html", - "/en/security/*/prebuilt-rule-8-7-1-privileged-account-brute-force.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-privileged-account-brute-force.html", - "/en/security/*/prebuilt-rule-8-7-1-process-creation-via-secondary-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-process-creation-via-secondary-logon.html", - "/en/security/*/prebuilt-rule-8-7-1-process-started-from-process-id-pid-file.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-process-started-from-process-id-pid-file.html", - "/en/security/*/prebuilt-rule-8-7-1-rare-user-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-rare-user-logon.html", - "/en/security/*/prebuilt-rule-8-7-1-remote-computer-account-dnshostname-update.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-remote-computer-account-dnshostname-update.html", - "/en/security/*/prebuilt-rule-8-7-1-remote-logon-followed-by-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-remote-logon-followed-by-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-7-1-remote-system-discovery-commands.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-remote-system-discovery-commands.html", - "/en/security/*/prebuilt-rule-8-7-1-remote-windows-service-installed.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-remote-windows-service-installed.html", - "/en/security/*/prebuilt-rule-8-7-1-reverse-shell-created-via-named-pipe.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-reverse-shell-created-via-named-pipe.html", - "/en/security/*/prebuilt-rule-8-7-1-scheduled-task-execution-at-scale-via-gpo.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-scheduled-task-execution-at-scale-via-gpo.html", - "/en/security/*/prebuilt-rule-8-7-1-sensitive-files-compression.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-sensitive-files-compression.html", - "/en/security/*/prebuilt-rule-8-7-1-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-sensitive-privilege-seenabledelegationprivilege-assigned-to-a-user.html", - "/en/security/*/prebuilt-rule-8-7-1-service-control-spawned-via-script-interpreter.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-service-control-spawned-via-script-interpreter.html", - "/en/security/*/prebuilt-rule-8-7-1-service-creation-via-local-kerberos-authentication.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-service-creation-via-local-kerberos-authentication.html", - "/en/security/*/prebuilt-rule-8-7-1-spike-in-failed-logon-events.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-spike-in-failed-logon-events.html", - "/en/security/*/prebuilt-rule-8-7-1-spike-in-network-traffic-to-a-country.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-spike-in-network-traffic-to-a-country.html", - "/en/security/*/prebuilt-rule-8-7-1-spike-in-successful-logon-events-from-a-source-ip.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-spike-in-successful-logon-events-from-a-source-ip.html", - "/en/security/*/prebuilt-rule-8-7-1-ssh-authorized-keys-file-modification.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-ssh-authorized-keys-file-modification.html", - "/en/security/*/prebuilt-rule-8-7-1-startup-logon-script-added-to-group-policy-object.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-startup-logon-script-added-to-group-policy-object.html", - "/en/security/*/prebuilt-rule-8-7-1-suspicious-antimalware-scan-interface-dll.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-suspicious-antimalware-scan-interface-dll.html", - "/en/security/*/prebuilt-rule-8-7-1-suspicious-execution-via-windows-subsystem-for-linux.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-suspicious-execution-via-windows-subsystem-for-linux.html", - "/en/security/*/prebuilt-rule-8-7-1-suspicious-file-creation-in-etc-for-persistence.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-suspicious-file-creation-in-etc-for-persistence.html", - "/en/security/*/prebuilt-rule-8-7-1-suspicious-inter-process-communication-via-outlook.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-suspicious-inter-process-communication-via-outlook.html", - "/en/security/*/prebuilt-rule-8-7-1-suspicious-lsass-process-access.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-suspicious-lsass-process-access.html", - "/en/security/*/prebuilt-rule-8-7-1-suspicious-ms-office-child-process.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-suspicious-ms-office-child-process.html", - "/en/security/*/prebuilt-rule-8-7-1-suspicious-remote-registry-access-via-sebackupprivilege.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-suspicious-remote-registry-access-via-sebackupprivilege.html", - "/en/security/*/prebuilt-rule-8-7-1-suspicious-service-was-installed-in-the-system.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-suspicious-service-was-installed-in-the-system.html", - "/en/security/*/prebuilt-rule-8-7-1-system-log-file-deletion.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-system-log-file-deletion.html", - "/en/security/*/prebuilt-rule-8-7-1-system-service-discovery-through-built-in-windows-utilities.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-system-service-discovery-through-built-in-windows-utilities.html", - "/en/security/*/prebuilt-rule-8-7-1-temporarily-scheduled-task-creation.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-temporarily-scheduled-task-creation.html", - "/en/security/*/prebuilt-rule-8-7-1-unsigned-dll-loaded-by-svchost.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-unsigned-dll-loaded-by-svchost.html", - "/en/security/*/prebuilt-rule-8-7-1-unsigned-dll-side-loading-from-a-suspicious-folder.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-unsigned-dll-side-loading-from-a-suspicious-folder.html", - "/en/security/*/prebuilt-rule-8-7-1-untrusted-driver-loaded.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-untrusted-driver-loaded.html", - "/en/security/*/prebuilt-rule-8-7-1-unusual-file-creation-alternate-data-stream.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-unusual-file-creation-alternate-data-stream.html", - "/en/security/*/prebuilt-rule-8-7-1-unusual-file-modification-by-dns-exe.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-unusual-file-modification-by-dns-exe.html", - "/en/security/*/prebuilt-rule-8-7-1-unusual-hour-for-a-user-to-logon.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-unusual-hour-for-a-user-to-logon.html", - "/en/security/*/prebuilt-rule-8-7-1-unusual-network-activity-from-a-windows-system-binary.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-unusual-network-activity-from-a-windows-system-binary.html", - "/en/security/*/prebuilt-rule-8-7-1-unusual-network-connection-via-rundll32.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-unusual-network-connection-via-rundll32.html", - "/en/security/*/prebuilt-rule-8-7-1-unusual-process-for-a-linux-host.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-unusual-process-for-a-linux-host.html", - "/en/security/*/prebuilt-rule-8-7-1-unusual-process-for-a-windows-host.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-unusual-process-for-a-windows-host.html", - "/en/security/*/prebuilt-rule-8-7-1-unusual-windows-path-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-unusual-windows-path-activity.html", - "/en/security/*/prebuilt-rule-8-7-1-unusual-windows-username.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-unusual-windows-username.html", - "/en/security/*/prebuilt-rule-8-7-1-user-account-exposed-to-kerberoasting.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-user-account-exposed-to-kerberoasting.html", - "/en/security/*/prebuilt-rule-8-7-1-user-added-to-privileged-group.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-user-added-to-privileged-group.html", - "/en/security/*/prebuilt-rule-8-7-1-virtual-machine-fingerprinting.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-virtual-machine-fingerprinting.html", - "/en/security/*/prebuilt-rule-8-7-1-volume-shadow-copy-deleted-or-resized-via-vssadmin.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-volume-shadow-copy-deleted-or-resized-via-vssadmin.html", - "/en/security/*/prebuilt-rule-8-7-1-web-application-suspicious-activity-no-user-agent.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-web-application-suspicious-activity-no-user-agent.html", - "/en/security/*/prebuilt-rule-8-7-1-whoami-process-activity.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-whoami-process-activity.html", - "/en/security/*/prebuilt-rule-8-7-1-windows-event-logs-cleared.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-windows-event-logs-cleared.html", - "/en/security/*/prebuilt-rule-8-7-1-windows-script-interpreter-executing-process-via-wmi.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-windows-script-interpreter-executing-process-via-wmi.html", - "/en/security/*/prebuilt-rule-8-7-1-windows-service-installed-via-an-unusual-client.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-windows-service-installed-via-an-unusual-client.html", - "/en/security/*/prebuilt-rule-8-7-1-windows-subsystem-for-linux-distribution-installed.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-windows-subsystem-for-linux-distribution-installed.html", - "/en/security/*/prebuilt-rule-8-7-1-windows-subsystem-for-linux-enabled-via-dism-utility.html": "/guide/en/security/8.17/prebuilt-rule-8-7-1-windows-subsystem-for-linux-enabled-via-dism-utility.html", "/en/security/*/prebuilt-rules-api.html": "/docs/api/doc/kibana/operation/operation-installprebuiltrulesandtimelines", "/en/security/*/prebuilt-rules-management.html": "/docs/solutions/security/detect-and-alert/install-manage-elastic-prebuilt-rules", "/en/security/*/printer-user-lp-shell-execution.html": "/docs/reference/security/prebuilt-rules/rules/linux/execution_cupsd_foomatic_rip_lp_user_execution", @@ -17370,24 +12151,6 @@ "/en/security/*/reduce-notifications-alerts.html": "/docs/solutions/security/detect-and-alert/reduce-notifications-alerts", "/en/security/*/registry-persistence-via-appcert-dll.html": "/docs/reference/security/prebuilt-rules/rules/windows/persistence_appcertdlls_registry", "/en/security/*/registry-persistence-via-appinit-dll.html": "/docs/reference/security/prebuilt-rules/rules/windows/persistence_appinitdlls_registry", - "/en/security/*/release-notes-header-8.0.0.html": "/guide/en/security/8.18/release-notes-header-8.0.0.html", - "/en/security/*/release-notes-header-8.1.0.html": "/guide/en/security/8.18/release-notes-header-8.1.0.html", - "/en/security/*/release-notes-header-8.10.0.html": "/guide/en/security/8.18/release-notes-header-8.10.0.html", - "/en/security/*/release-notes-header-8.11.0.html": "/guide/en/security/8.18/release-notes-header-8.11.0.html", - "/en/security/*/release-notes-header-8.12.0.html": "/guide/en/security/8.18/release-notes-header-8.12.0.html", - "/en/security/*/release-notes-header-8.13.0.html": "/guide/en/security/8.18/release-notes-header-8.13.0.html", - "/en/security/*/release-notes-header-8.14.0.html": "/guide/en/security/8.18/release-notes-header-8.14.0.html", - "/en/security/*/release-notes-header-8.15.0.html": "/guide/en/security/8.18/release-notes-header-8.15.0.html", - "/en/security/*/release-notes-header-8.16.0.html": "/guide/en/security/8.18/release-notes-header-8.16.0.html", - "/en/security/*/release-notes-header-8.17.0.html": "/guide/en/security/8.18/release-notes-header-8.17.0.html", - "/en/security/*/release-notes-header-8.2.0.html": "/guide/en/security/8.18/release-notes-header-8.2.0.html", - "/en/security/*/release-notes-header-8.3.0.html": "/guide/en/security/8.18/release-notes-header-8.3.0.html", - "/en/security/*/release-notes-header-8.4.0.html": "/guide/en/security/8.18/release-notes-header-8.4.0.html", - "/en/security/*/release-notes-header-8.5.0.html": "/guide/en/security/8.18/release-notes-header-8.5.0.html", - "/en/security/*/release-notes-header-8.6.0.html": "/guide/en/security/8.18/release-notes-header-8.6.0.html", - "/en/security/*/release-notes-header-8.7.0.html": "/guide/en/security/8.18/release-notes-header-8.7.0.html", - "/en/security/*/release-notes-header-8.8.0.html": "/guide/en/security/8.18/release-notes-header-8.8.0.html", - "/en/security/*/release-notes-header-8.9.0.html": "/guide/en/security/8.18/release-notes-header-8.9.0.html", "/en/security/*/release-notes.html": "/docs/release-notes/security", "/en/security/*/remote-computer-account-dnshostname-update.html": "/docs/reference/security/prebuilt-rules/rules/windows/privilege_escalation_suspicious_dnshostname_update", "/en/security/*/remote-desktop-enabled-in-windows-firewall-by-netsh.html": "/docs/reference/security/prebuilt-rules/rules/windows/defense_evasion_enable_inbound_rdp_with_netsh", @@ -17482,7 +12245,6 @@ "/en/security/*/shortcut-file-written-or-modified-on-startup-folder.html": "/docs/reference/security/prebuilt-rules/rules_building_block/persistence_startup_folder_lnk", "/en/security/*/siem-field-reference.html": "/docs/reference/security/fields-and-object-schemas/siem-field-reference", "/en/security/*/signals-api-overview.html": "/docs/api/doc/kibana/operation/operation-searchalerts", - "/en/security/*/signals-index-template.html": "/guide/en/security/8.18/signals-index-template.html", "/en/security/*/signals-migration-api.html": "/docs/api/doc/kibana/group/endpoint-security-detections-api", "/en/security/*/signals-to-cases.html": "/docs/solutions/security/detect-and-alert/add-detection-alerts-to-cases", "/en/security/*/signed-proxy-execution-via-ms-work-folders.html": "/docs/reference/security/prebuilt-rules/rules/windows/defense_evasion_workfolders_control_execution", @@ -17785,8 +12547,6 @@ "/en/security/*/unusual-windows-user-calling-the-metadata-service.html": "/docs/reference/security/prebuilt-rules/rules/ml/credential_access_ml_windows_anomalous_metadata_user", "/en/security/*/unusual-windows-user-privilege-elevation-activity.html": "/docs/reference/security/prebuilt-rules/rules/ml/privilege_escalation_ml_windows_rare_user_runas_event", "/en/security/*/unusual-windows-username.html": "/docs/reference/security/prebuilt-rules/rules/ml/initial_access_ml_windows_anomalous_user_name", - "/en/security/*/upgrade-7.17-8x.html": "/guide/en/security/8.18/upgrade-7.17-8x.html", - "/en/security/*/upgrade-intro.html": "/guide/en/security/8.18/upgrade-intro.html", "/en/security/*/upload-api.html": "/docs/api/doc/kibana/operation/operation-endpointuploadaction", "/en/security/*/use-osquery.html": "/docs/solutions/security/investigate/osquery", "/en/security/*/user-account-creation.html": "/docs/reference/security/prebuilt-rules/rules/windows/persistence_user_account_creation", @@ -17859,7 +12619,7 @@ "/en/serverless/*/agentless-integration-troubleshooting.html": "/docs/troubleshoot/security/agentless-integrations", "/en/serverless/*/ai-assistant-knowledge-base.html": "/docs/solutions/security/ai/ai-assistant-knowledge-base", "/en/serverless/*/api-keys.html": "/docs/deploy-manage/api-keys/serverless-project-api-keys", - "/en/serverless/*/application-and-service-monitoring.html": "/docs/solutions/observability/apps", + "/en/serverless/*/application-and-service-monitoring.html": "/docs/solutions/observability/applications", "/en/serverless/*/attack-discovery.html": "/docs/solutions/security/ai/attack-discovery", "/en/serverless/*/collect-data-with-aws-firehose.html": "/docs/solutions/observability/get-started/quickstart-collect-data-with-aws-firehose", "/en/serverless/*/collect-data-with-native-otlp.html": "/docs/solutions/observability/get-started/quickstart-elastic-cloud-otel-endpoint", @@ -17882,6 +12642,7 @@ "/en/serverless/*/elasticsearch-dot-net-client-getting-started.html": "/docs/reference/elasticsearch/clients/dotnet/getting-started", "/en/serverless/*/elasticsearch-explore-your-data.html": "/docs/explore-analyze", "/en/serverless/*/elasticsearch-get-started.html": "/docs/solutions/search/get-started", + "/en/serverless/*/elasticsearch-go-client-getting-started.html": "/docs/reference/elasticsearch/clients/go/getting-started", "/en/serverless/*/elasticsearch-http-apis.html": "/docs/deploy-manage/deploy/elastic-cloud/tools-apis", "/en/serverless/*/elasticsearch-ingest-data-file-upload.html": "/docs/manage-data/ingest/upload-data-files", "/en/serverless/*/elasticsearch-ingest-data-through-api.html": "/docs/solutions/search/ingest-for-search", @@ -17889,6 +12650,7 @@ "/en/serverless/*/elasticsearch-ingest-data-through-integrations-connector-client.html": "/docs/reference/search-connectors", "/en/serverless/*/elasticsearch-ingest-data-through-logstash.html": "/docs/reference/logstash", "/en/serverless/*/elasticsearch-ingest-your-data.html": "/docs/manage-data/ingest", + "/en/serverless/*/elasticsearch-java-client-getting-started.html": "/docs/reference/elasticsearch/clients/java/getting-started", "/en/serverless/*/elasticsearch-kibana-api-conventions.html": "/docs/api/doc/kibana/", "/en/serverless/*/elasticsearch-knn-search.html": "/docs/solutions/search/vector/knn", "/en/serverless/*/elasticsearch-manage-project.html": "/docs/deploy-manage/deploy/elastic-cloud/project-settings", @@ -17944,52 +12706,48 @@ "/en/serverless/*/observability-aiops.html": "/docs/explore-analyze/machine-learning/machine-learning-in-kibana/xpack-ml-aiops", "/en/serverless/*/observability-alerting.html": "/docs/solutions/observability/incident-management/alerting", "/en/serverless/*/observability-analyze-hosts.html": "/docs/solutions/observability/infra-and-hosts/analyze-compare-hosts", - "/en/serverless/*/observability-apm-act-on-data.html": "/docs/solutions/observability/apps/act-on-data", - "/en/serverless/*/observability-apm-agents-aws-lambda-functions.html": "/docs/solutions/observability/apps/monitoring-aws-lambda-functions", - "/en/serverless/*/observability-apm-agents-elastic-apm-agents.html": "/docs/solutions/observability/apps/elastic-apm-agents", - "/en/serverless/*/observability-apm-agents-opentelemetry-collect-metrics.html": "/guide/en/observability/8.18/apm-open-telemetry-collect-metrics.html", - "/en/serverless/*/observability-apm-agents-opentelemetry-limitations.html": "/guide/en/observability/8.18/apm-open-telemetry-known-limitations.html", - "/en/serverless/*/observability-apm-agents-opentelemetry-opentelemetry-native-support.html": "/guide/en/observability/8.18/apm-open-telemetry-direct.html", - "/en/serverless/*/observability-apm-agents-opentelemetry-resource-attributes.html": "/guide/en/observability/8.18/apm-open-telemetry-resource-attributes.html", - "/en/serverless/*/observability-apm-agents-opentelemetry.html": "/docs/solutions/observability/apps/use-opentelemetry-with-apm", - "/en/serverless/*/observability-apm-alerts.html": "/docs/solutions/observability/apps/create-apm-rules-alerts", - "/en/serverless/*/observability-apm-compress-spans.html": "/docs/solutions/observability/apps/spans", - "/en/serverless/*/observability-apm-create-custom-links.html": "/docs/solutions/observability/apps/create-custom-links", - "/en/serverless/*/observability-apm-data-types.html": "/docs/solutions/observability/apps/learn-about-application-data-types", - "/en/serverless/*/observability-apm-dependencies.html": "/docs/solutions/observability/apps/dependencies", - "/en/serverless/*/observability-apm-distributed-tracing.html": "/docs/solutions/observability/apps/traces", - "/en/serverless/*/observability-apm-errors.html": "/docs/solutions/observability/apps/errors-2", - "/en/serverless/*/observability-apm-filter-and-search-data.html": "/docs/solutions/observability/apps/filter-search-application-data", - "/en/serverless/*/observability-apm-filter-your-data.html": "/docs/solutions/observability/apps/filter-application-data", - "/en/serverless/*/observability-apm-find-transaction-latency-and-failure-correlations.html": "/docs/solutions/observability/apps/find-transaction-latency-failure-correlations", - "/en/serverless/*/observability-apm-get-started.html": "/docs/solutions/observability/apps/get-started-with-apm", - "/en/serverless/*/observability-apm-infrastructure.html": "/docs/solutions/observability/apps/infrastructure", - "/en/serverless/*/observability-apm-integrate-with-machine-learning.html": "/docs/solutions/observability/apps/integrate-with-machine-learning", - "/en/serverless/*/observability-apm-interpret-data.html": "/docs/solutions/observability/apps/interpret-application-data", - "/en/serverless/*/observability-apm-keep-data-secure.html": "/docs/solutions/observability/apps/use-apm-securely", - "/en/serverless/*/observability-apm-kibana-settings.html": "/docs/solutions/observability/apps/applications-ui-settings", - "/en/serverless/*/observability-apm-logs.html": "/docs/solutions/observability/apps/logs", - "/en/serverless/*/observability-apm-metrics.html": "/docs/solutions/observability/apps/metrics-2", - "/en/serverless/*/observability-apm-observe-lambda-functions.html": "/docs/solutions/observability/apps/observe-lambda-functions", - "/en/serverless/*/observability-apm-query-your-data.html": "/docs/solutions/observability/apps/use-advanced-queries-on-application-data", - "/en/serverless/*/observability-apm-reduce-your-data-usage.html": "/docs/solutions/observability/apps/reduce-storage", - "/en/serverless/*/observability-apm-reference.html": "/docs/solutions/observability/apps/managed-intake-service-event-api", - "/en/serverless/*/observability-apm-send-data-to-elastic.html": "/docs/solutions/observability/apps/collect-application-data", - "/en/serverless/*/observability-apm-server-api.html": "/docs/solutions/observability/apps/managed-intake-service-event-api", - "/en/serverless/*/observability-apm-service-map.html": "/docs/solutions/observability/apps/service-map", - "/en/serverless/*/observability-apm-service-overview.html": "/docs/solutions/observability/apps/service-overview", - "/en/serverless/*/observability-apm-services.html": "/docs/solutions/observability/apps/services", - "/en/serverless/*/observability-apm-stacktrace-collection.html": "/guide/en/serverless/current/observability-apm-reduce-your-data-usage.html#observability-apm-reduce-stacktrace", - "/en/serverless/*/observability-apm-trace-sample-timeline.html": "/docs/solutions/observability/apps/trace-sample-timeline", - "/en/serverless/*/observability-apm-traces.html": "/docs/solutions/observability/apps/traces-2", - "/en/serverless/*/observability-apm-track-deployments-with-annotations.html": "/docs/solutions/observability/apps/track-deployments-with-annotations", - "/en/serverless/*/observability-apm-transaction-sampling.html": "/docs/solutions/observability/apps/transaction-sampling", - "/en/serverless/*/observability-apm-transactions.html": "/docs/solutions/observability/apps/transactions-2", + "/en/serverless/*/observability-apm-act-on-data.html": "/docs/solutions/observability/apm/act-on-data", + "/en/serverless/*/observability-apm-agents-aws-lambda-functions.html": "/docs/solutions/observability/apm/monitor-aws-lambda-functions", + "/en/serverless/*/observability-apm-agents-elastic-apm-agents.html": "/docs/solutions/observability/apm/elastic-apm-agents", + "/en/serverless/*/observability-apm-agents-opentelemetry.html": "/docs/solutions/observability/apm/use-opentelemetry-with-apm", + "/en/serverless/*/observability-apm-alerts.html": "/docs/solutions/observability/apm/create-apm-rules-alerts", + "/en/serverless/*/observability-apm-compress-spans.html": "/docs/solutions/observability/apm/spans", + "/en/serverless/*/observability-apm-create-custom-links.html": "/docs/solutions/observability/apm/create-custom-links", + "/en/serverless/*/observability-apm-data-types.html": "/docs/solutions/observability/apm/data-types", + "/en/serverless/*/observability-apm-dependencies.html": "/docs/solutions/observability/apm/dependencies", + "/en/serverless/*/observability-apm-distributed-tracing.html": "/docs/solutions/observability/apm/traces", + "/en/serverless/*/observability-apm-errors.html": "/docs/solutions/observability/apm/errors-ui", + "/en/serverless/*/observability-apm-filter-and-search-data.html": "/docs/solutions/observability/apm/filter-search-data", + "/en/serverless/*/observability-apm-filter-your-data.html": "/docs/solutions/observability/apm/filter-data", + "/en/serverless/*/observability-apm-find-transaction-latency-and-failure-correlations.html": "/docs/solutions/observability/apm/find-transaction-latency-failure-correlations", + "/en/serverless/*/observability-apm-get-started.html": "/docs/solutions/observability/apm/get-started-serverless", + "/en/serverless/*/observability-apm-infrastructure.html": "/docs/solutions/observability/apm/infrastructure", + "/en/serverless/*/observability-apm-integrate-with-machine-learning.html": "/docs/solutions/observability/apm/machine-learning", + "/en/serverless/*/observability-apm-interpret-data.html": "/docs/solutions/observability/apm/interpret-data", + "/en/serverless/*/observability-apm-keep-data-secure.html": "/docs/solutions/observability/apm/use-apm-securely", + "/en/serverless/*/observability-apm-kibana-settings.html": "/docs/solutions/observability/apm/applications-ui-settings", + "/en/serverless/*/observability-apm-logs.html": "/docs/solutions/observability/apm/logs", + "/en/serverless/*/observability-apm-metrics.html": "/docs/solutions/observability/apm/metrics-ui", + "/en/serverless/*/observability-apm-observe-lambda-functions.html": "/docs/solutions/observability/apm/observe-lambda-functions", + "/en/serverless/*/observability-apm-query-your-data.html": "/docs/solutions/observability/apm/advanced-queries", + "/en/serverless/*/observability-apm-reduce-your-data-usage.html": "/docs/solutions/observability/apm/reduce-storage", + "/en/serverless/*/observability-apm-reference.html": "/docs/solutions/observability/apm/managed-intake-service-event-api", + "/en/serverless/*/observability-apm-send-data-to-elastic.html": "/docs/solutions/observability/apm/collect-application-data", + "/en/serverless/*/observability-apm-server-api.html": "/docs/solutions/observability/apm/managed-intake-service-event-api", + "/en/serverless/*/observability-apm-service-map.html": "/docs/solutions/observability/apm/service-map", + "/en/serverless/*/observability-apm-service-overview.html": "/docs/solutions/observability/apm/service-overview", + "/en/serverless/*/observability-apm-services.html": "/docs/solutions/observability/apm/services", + "/en/serverless/*/observability-apm-stacktrace-collection.html": "/docs/solutions/observability/apm/reduce-storage", + "/en/serverless/*/observability-apm-trace-sample-timeline.html": "/docs/solutions/observability/apm/trace-sample-timeline", + "/en/serverless/*/observability-apm-traces.html": "/docs/solutions/observability/apm/traces-ui", + "/en/serverless/*/observability-apm-track-deployments-with-annotations.html": "/docs/solutions/observability/apm/track-deployments-with-annotations", + "/en/serverless/*/observability-apm-transaction-sampling.html": "/docs/solutions/observability/apm/transaction-sampling", + "/en/serverless/*/observability-apm-transactions.html": "/docs/solutions/observability/apm/transactions-ui", "/en/serverless/*/observability-apm-troubleshooting.html": "/docs/troubleshoot/observability/apm/common-problems", - "/en/serverless/*/observability-apm-ui-drill-down.html": "/docs/solutions/observability/apps/drill-down-into-data", - "/en/serverless/*/observability-apm-ui-overview.html": "/docs/solutions/observability/apps/overviews", - "/en/serverless/*/observability-apm-view-and-analyze-traces.html": "/docs/solutions/observability/apps/view-analyze-data", - "/en/serverless/*/observability-apm.html": "/docs/solutions/observability/apps/application-performance-monitoring-apm", + "/en/serverless/*/observability-apm-ui-drill-down.html": "/docs/solutions/observability/apm/drill-down-into-data", + "/en/serverless/*/observability-apm-ui-overview.html": "/docs/solutions/observability/apm/overviews", + "/en/serverless/*/observability-apm-view-and-analyze-traces.html": "/docs/solutions/observability/apm/view-analyze-data", + "/en/serverless/*/observability-apm.html": "/docs/solutions/observability/apm", "/en/serverless/*/observability-aws-metrics.html": "/docs/reference/data-analysis/observability/observability-aws-metrics", "/en/serverless/*/observability-billing.html": "/docs/deploy-manage/cloud-organization/billing/elastic-observability-billing-dimensions", "/en/serverless/*/observability-case-settings.html": "/docs/solutions/observability/incident-management/configure-case-settings", @@ -18011,7 +12769,7 @@ "/en/serverless/*/observability-create-slo-burn-rate-alert-rule.html": "/docs/solutions/observability/incident-management/create-an-slo-burn-rate-rule", "/en/serverless/*/observability-dashboards.html": "/docs/solutions/observability/get-started/get-started-with-dashboards", "/en/serverless/*/observability-detect-metric-anomalies.html": "/docs/solutions/observability/infra-and-hosts/detect-metric-anomalies", - "/en/serverless/*/observability-discover-and-explore-logs.html": "/docs/solutions/observability/logs/logs-explorer", + "/en/serverless/*/observability-discover-and-explore-logs.html": "/docs/solutions/observability/logs/discover-logs", "/en/serverless/*/observability-ecs-application-logs.html": "/docs/solutions/observability/logs/ecs-formatted-application-logs", "/en/serverless/*/observability-elastic-entity-model.html": "/docs/reference/observability/elastic-entity-model", "/en/serverless/*/observability-filter-and-aggregate-logs.html": "/docs/solutions/observability/logs/filter-aggregate-logs", @@ -18022,14 +12780,14 @@ "/en/serverless/*/observability-host-metrics.html": "/docs/reference/data-analysis/observability/observability-host-metrics", "/en/serverless/*/observability-infrastructure-monitoring-required-fields.html": "/docs/reference/observability/serverless/infrastructure-app-fields", "/en/serverless/*/observability-infrastructure-monitoring.html": "/docs/solutions/observability/infra-and-hosts/analyze-infrastructure-host-metrics", - "/en/serverless/*/observability-inventory.html": "/docs/solutions/observability/apps/inventory", + "/en/serverless/*/observability-inventory.html": "/docs/solutions/observability/apm/inventory", "/en/serverless/*/observability-kubernetes-pod-metrics.html": "/docs/reference/data-analysis/observability/observability-kubernetes-pod-metrics", "/en/serverless/*/observability-log-monitoring.html": "/docs/solutions/observability/logs", "/en/serverless/*/observability-machine-learning.html": "/docs/explore-analyze/machine-learning/machine-learning-in-kibana/xpack-ml-aiops", "/en/serverless/*/observability-metrics-reference.html": "/docs/reference/data-analysis/observability", "/en/serverless/*/observability-monitor-datasets.html": "/docs/solutions/observability/data-set-quality-monitoring", "/en/serverless/*/observability-monitor-status-alert.html": "/docs/solutions/observability/incident-management/create-monitor-status-rule", - "/en/serverless/*/observability-monitor-synthetics.html": "/docs/solutions/observability/apps/synthetic-monitoring", + "/en/serverless/*/observability-monitor-synthetics.html": "/docs/solutions/observability/synthetics", "/en/serverless/*/observability-parse-log-data.html": "/docs/solutions/observability/logs/parse-route-logs", "/en/serverless/*/observability-plaintext-application-logs.html": "/docs/solutions/observability/logs/plaintext-application-logs", "/en/serverless/*/observability-quickstarts-k8s-logs-metrics.html": "/docs/solutions/observability/get-started/quickstart-monitor-kubernetes-cluster-with-elastic-agent", @@ -18040,26 +12798,26 @@ "/en/serverless/*/observability-serverless-observability-overview.html": "/docs/solutions/observability/get-started/what-is-elastic-observability", "/en/serverless/*/observability-slos.html": "/docs/solutions/observability/incident-management/service-level-objectives-slos", "/en/serverless/*/observability-stream-log-files.html": "/docs/solutions/observability/logs/stream-any-log-file", - "/en/serverless/*/observability-synthetics-analyze.html": "/docs/solutions/observability/apps/analyze-data-from-synthetic-monitors", - "/en/serverless/*/observability-synthetics-command-reference.html": "/docs/solutions/observability/apps/use-synthetics-cli", - "/en/serverless/*/observability-synthetics-configuration.html": "/docs/solutions/observability/apps/configure-synthetics-projects", - "/en/serverless/*/observability-synthetics-create-test.html": "/docs/solutions/observability/apps/write-synthetic-test", - "/en/serverless/*/observability-synthetics-feature-roles.html": "/docs/solutions/observability/apps/grant-users-access-to-secured-resources", - "/en/serverless/*/observability-synthetics-get-started-project.html": "/docs/solutions/observability/apps/create-monitors-with-project-monitors", - "/en/serverless/*/observability-synthetics-get-started-ui.html": "/docs/solutions/observability/apps/create-monitors-in-synthetics-app", - "/en/serverless/*/observability-synthetics-get-started.html": "/docs/solutions/observability/apps/get-started", - "/en/serverless/*/observability-synthetics-journeys.html": "/docs/solutions/observability/apps/scripting-browser-monitors", - "/en/serverless/*/observability-synthetics-lightweight.html": "/docs/solutions/observability/apps/configure-lightweight-monitors", - "/en/serverless/*/observability-synthetics-manage-monitors.html": "/docs/solutions/observability/apps/manage-monitors", - "/en/serverless/*/observability-synthetics-manage-retention.html": "/docs/solutions/observability/apps/manage-data-retention", - "/en/serverless/*/observability-synthetics-mfa.html": "/docs/solutions/observability/apps/multi-factor-authentication-mfa-for-browser-monitors", - "/en/serverless/*/observability-synthetics-monitor-use.html": "/docs/solutions/observability/apps/configure-individual-browser-monitors", - "/en/serverless/*/observability-synthetics-params-secrets.html": "/docs/solutions/observability/apps/work-with-params-secrets", - "/en/serverless/*/observability-synthetics-private-location.html": "/docs/solutions/observability/apps/monitor-resources-on-private-networks", - "/en/serverless/*/observability-synthetics-recorder.html": "/docs/solutions/observability/apps/use-synthetics-recorder", - "/en/serverless/*/observability-synthetics-scale-and-architect.html": "/docs/solutions/observability/apps/scale-architect-synthetics-deployment", - "/en/serverless/*/observability-synthetics-security-encryption.html": "/docs/solutions/observability/apps/synthetics-encryption-security", - "/en/serverless/*/observability-synthetics-settings.html": "/docs/solutions/observability/apps/configure-synthetics-settings", + "/en/serverless/*/observability-synthetics-analyze.html": "/docs/solutions/observability/synthetics/analyze-data", + "/en/serverless/*/observability-synthetics-command-reference.html": "/docs/solutions/observability/synthetics/cli", + "/en/serverless/*/observability-synthetics-configuration.html": "/docs/solutions/observability/synthetics/configure-projects", + "/en/serverless/*/observability-synthetics-create-test.html": "/docs/solutions/observability/synthetics/write-synthetic-test", + "/en/serverless/*/observability-synthetics-feature-roles.html": "/docs/solutions/observability/synthetics/grant-access-to-secured-resources", + "/en/serverless/*/observability-synthetics-get-started-project.html": "/docs/solutions/observability/synthetics/create-monitors-with-projects", + "/en/serverless/*/observability-synthetics-get-started-ui.html": "/docs/solutions/observability/synthetics/create-monitors-ui", + "/en/serverless/*/observability-synthetics-get-started.html": "/docs/solutions/observability/synthetics/get-started", + "/en/serverless/*/observability-synthetics-journeys.html": "/docs/solutions/observability/synthetics/scripting-browser-monitors", + "/en/serverless/*/observability-synthetics-lightweight.html": "/docs/solutions/observability/synthetics/configure-lightweight-monitors", + "/en/serverless/*/observability-synthetics-manage-monitors.html": "/docs/solutions/observability/synthetics/manage-monitors", + "/en/serverless/*/observability-synthetics-manage-retention.html": "/docs/solutions/observability/synthetics/manage-data-retention", + "/en/serverless/*/observability-synthetics-mfa.html": "/docs/solutions/observability/synthetics/mfa-for-browser-monitors", + "/en/serverless/*/observability-synthetics-monitor-use.html": "/docs/solutions/observability/synthetics/configure-individual-browser-monitors", + "/en/serverless/*/observability-synthetics-params-secrets.html": "/docs/solutions/observability/synthetics/work-with-params-secrets", + "/en/serverless/*/observability-synthetics-private-location.html": "/docs/solutions/observability/synthetics/monitor-resources-on-private-networks", + "/en/serverless/*/observability-synthetics-recorder.html": "/docs/solutions/observability/synthetics/use-synthetics-recorder", + "/en/serverless/*/observability-synthetics-scale-and-architect.html": "/docs/solutions/observability/synthetics/scale-architect-synthetics-deployment", + "/en/serverless/*/observability-synthetics-security-encryption.html": "/docs/solutions/observability/synthetics/encryption-security", + "/en/serverless/*/observability-synthetics-settings.html": "/docs/solutions/observability/synthetics/configure-settings", "/en/serverless/*/observability-synthetics-troubleshooting.html": "/docs/troubleshoot/observability/troubleshooting-synthetics", "/en/serverless/*/observability-triage-slo-burn-rate-breaches.html": "/docs/solutions/observability/incident-management/triage-slo-burn-rate-breaches", "/en/serverless/*/observability-triage-threshold-breaches.html": "/docs/solutions/observability/incident-management/triage-threshold-breaches", @@ -18246,12 +13004,8 @@ "/en/starting-with-the-elasticsearch-platform-and-its-solutions/*/get-elastic.html": "/docs/deploy-manage/deploy", "/en/starting-with-the-elasticsearch-platform-and-its-solutions/*/get-support-help.html": "/docs/troubleshoot", "/en/starting-with-the-elasticsearch-platform-and-its-solutions/*/getting-started-appsearch.html": "/docs/reference/search-connectors/es-postgresql-connector-client-tutorial", - "/en/starting-with-the-elasticsearch-platform-and-its-solutions/*/getting-started-endpoint-security.html": "/getting-started/security/secure-my-hosts-with-endpoint-security", - "/en/starting-with-the-elasticsearch-platform-and-its-solutions/*/getting-started-general-purpose.html": "/guide/en/starting-with-the-elasticsearch-platform-and-its-solutions/8.18/getting-started-general-purpose.html", - "/en/starting-with-the-elasticsearch-platform-and-its-solutions/*/getting-started-guides.html": "/guide/en/starting-with-the-elasticsearch-platform-and-its-solutions/8.18/getting-started-guides.html", "/en/starting-with-the-elasticsearch-platform-and-its-solutions/*/getting-started-kubernetes.html": "/docs/solutions/observability/get-started/quickstart-monitor-hosts-with-elastic-agent", "/en/starting-with-the-elasticsearch-platform-and-its-solutions/*/getting-started-observability.html": "/docs/solutions/observability/get-started/quickstart-monitor-hosts-with-elastic-agent", - "/en/starting-with-the-elasticsearch-platform-and-its-solutions/*/getting-started-siem-security.html": "/getting-started/security/detect-threats-in-my-data-with-siem", "/en/starting-with-the-elasticsearch-platform-and-its-solutions/*/index.html": "/docs/get-started", "/en/starting-with-the-elasticsearch-platform-and-its-solutions/*/introducing-elastic-documentation.html": "/docs/get-started/versioning-availability", "/en/starting-with-the-elasticsearch-platform-and-its-solutions/*/new.html": "/docs/release-notes",