From 7a57e0d75ee42ea2860fa31c09f2be3b99a1d874 Mon Sep 17 00:00:00 2001
From: Zoey Castillo <zoey.castillo@netwrix.com>
Date: Mon, 17 Nov 2025 11:50:10 -0600
Subject: [PATCH 01/10] Reorganize Auditor KB articles into categorized
 subfolders
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Reorganize 648 Auditor KB articles into 7 major categories with 31 subcategories:
- configuration-and-setup
- troubleshooting-and-errors
- event-id-reference
- system-administration
- reports-alerts-and-notifications
- monitoring-plans
- features-and-operations

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 ...tory-compression-service-continuously-starting-and-stopping.md | 0
 ...xchange-and-group-policy-changes-reported-as-made-by-system.md | 0
 .../active-directory-auditing}/active-directory-object-restore.md | 0
 .../active_directory_collection_jobs_do_not_run_with_gmsa.md      | 0
 .../audit-extension-attributes-in-active-directory.md             | 0
 ...mining-the-number-of-enabled-active-directory-user-accounts.md | 0
 ...itor-for-active-directory-when-audit-is-properly-configured.md | 0
 ...wrix-auditor-for-active-directory-group-policy-and-exchange.md | 0
 ...on-and-authorization-of-netwrix-auditor-in-active-directory.md | 0
 ...ucing-the-used-active-directory-and-entra-id-license-counts.md | 0
 ...ute-has-failed-error-in-object-restore-for-active-directory.md | 0
 ...netwrix-auditor-for-active-directory-bandwidth-requirements.md | 0
 ...ll_\321\201ommand_error_in_exchange_online_monitoring_plan.md" | 0
 ...not_load_system.net.http_in_exchange_online_monitoring_plan.md | 0
 ...-state-failed-when-auditing-mailbox-access-on-exchange-2013.md | 0
 .../exchange-server-name-instead-of-user-in-reports.md            | 0
 ...box-access-reporter-to-monitor-clusters-of-exchange-servers.md | 0
 .../how-to-determine-the-exchange-web-services-ews-url.md         | 0
 ...ow-to-filter-out-certain-mailboxes-and-folders-from-reports.md | 0
 ...o-omit-changes-to-the-msexchmobilemailboxpolicybl-attribute.md | 0
 ...to-omit-some-exchange-server-attributes-from-being-reported.md | 0
 ...-specify-exchange-server-to-collect-administrator-audit-log.md | 0
 ...ox-access-data-missing-in-exchange-auditing-monitoring-plan.md | 0
 ...hen-trying-to-configure-exchange-server-administrator-audit.md | 0
 .../exchange-auditing}/users-access-their-own-mailboxes.md        | 0
 ...h-a-connection-to-a-windows-file-server-compression-service.md | 0
 ...ith-this-name-already-exists-in-file-server-monitoring-plan.md | 0
 ...itor-for-file-servers-audit-service-terminated-unexpectedly.md | 0
 .../file-servers-security-descriptor-of-file-share-is-empty.md    | 0
 ...how-to-audit-file-servers-with-enabled-user-account-control.md | 0
 ...-the-frequency-of-data-collections-for-file-server-auditing.md | 0
 .../how-to-enable-item-level-auditing-on-multiple-file-servers.md | 0
 ...tor-for-file-servers-audit-service-stops-after-each-startup.md | 0
 ...ts-excessive-file-read-attempts-that-did-not-actually-occur.md | 0
 ...ink-cannot-be-followed-error-in-file-server-monitoring-plan.md | 0
 .../the-disk-on-a-monitored-file-server-is-overfilled.md          | 0
 ...source-does-not-exist-error-in-file-servers-monitoring-plan.md | 0
 .../types-of-the-data-collection-for-file-servers-auditing.md     | 0
 ...unexpected-end-of-file-error-in-file-server-monitoring-plan.md | 0
 ...ow-copy-service-support-in-netwrix-auditor-for-file-servers.md | 0
 .../what-is-sessionid-in-netwrix-auditor-for-file-servers.md      | 0
 .../ale-service-is-unable-to-start-during-installation.md         | 0
 ...-installed-programs-but-still-exists-in-the-services-overvi.md | 0
 ...re-nutanix-files-audit-settings-unexpected-http-status-code.md | 0
 ...r-drive-letter-resolver-is-not-installed-on-the-target-host.md | 0
 ...led-to-install-and-configure-netwrix-auditor-access-reviews.md | 0
 .../how-to-configure-disk-space-monitor-reporting.md              | 0
 ...how-to-configure-granular-audit-policies-for-logon-auditing.md | 0
 .../how-to-configure-monitoring-of-local-accounts.md              | 0
 .../how-to-configure-netwrix-auditor-in-failover-mode.md          | 0
 ...figure-notifications-on-service-account-password-expiration.md | 0
 ...-configure-the-disk-space-monitor-to-work-behind-a-firewall.md | 0
 ...the-product-to-send-two-user-notifications-instead-of-three.md | 0
 .../general-configuration}/how-to-install-access-reviews.md       | 0
 ...oup-policy-management-console-on-different-windows-versions.md | 0
 .../how-to-install-individual-features-for-netwrix-auditor.md     | 0
 ...move-auditor-components-prior-to-further-clear-installation.md | 0
 .../how-to-repair-netwrix-auditor-installation.md                 | 0
 ...sor-installed-in-netwrix-auditor-server-and-audited-servers.md | 0
 ...installation-fails-with-the-category-does-not-exist-message.md | 0
 ...new-netfirewallrule-how-to-open-ports-avoiding-manual-setup.md | 0
 ...ils-to-show-the-current-service-statuses-after-installation.md | 0
 ...ure-microsoft-365-data-sources-to-use-proxy-server-settings.md | 0
 ...etwrix-auditor-to-use-microsoft-365-for-email-notifications.md | 0
 ...wrix-auditor-completes-with-error-validating-your-account-s.md | 0
 ...session-failed-using-oauth-in-microsoft-365-monitoring-plan.md | 0
 ...termining-the-number-of-enabled-microsoft-entra-id-accounts.md | 0
 ...ti-factor-authentication-for-microsoft-365-service-accounts.md | 0
 ...s65001-in-microsoft-365-monitoring-plans-in-netwrix-auditor.md | 0
 ...tenant-administration-site-in-microsoft-365-monitoring-plan.md | 0
 ...te-in-azure-app-for-microsoft-365-tenant-in-netwrix-auditor.md | 0
 ...-collect-logons-forbidden-error-in-entra-id-monitoring-plan.md | 0
 ...icenses-required-for-auditing-a-microsoft-office-365-tenant.md | 0
 ...office_365_and_microsoft_entra_id_(auditor_v10.0_and_older).md | 0
 ...ion-error-in-sharepoint-online-and-ms-teams-monitoring-plan.md | 0
 ...-data-classification-sharepoint-add-in-conceptclassifierapp.md | 0
 ...ification-for-sharepoint-conceptclassifierapp-client-secret.md | 0
 ...ls-to-collect-data-because-the-remote-server-is-unauthorize.md | 0
 ...epoint-online-and-teams-monitoring-plans-in-netwrix-auditor.md | 0
 ...quest_when_auditing_sharepoint_online_and_microsoft_entra_i.md | 0
 .../sharepoint-application-deployment-for-ndc.md                  | 0
 ...nt-application-installation-for-netwrix-data-classification.md | 0
 ...t-configuration-changes-are-reported-with-a-wrong-timestamp.md | 0
 .../sharepoint-core-service-deployment-failed.md                  | 0
 ...erm-set-tree-fails-to-load-or-unable-to-edit-a-clue-or-term.md | 0
 ...y-be-lost-and-not-reflected-in-reports-and-change-summaries.md | 0
 ...-the-unknown-value-in-the-who-changed-column-for-sharepoint.md | 0
 ...ot-applicable-value-in-the-workstation-field-for-sharepoint.md | 0
 ...ped-after-the-netwrix-auditor-agent-for-sharepoint-installa.md | 0
 ...to-connect-to-netwrix-auditor-service-for-sharepoint-error-.md | 0
 ...t-object-id-is-shown-in-the-what-column-instead-of-its-name.md | 0
 ...he-object-type-column-in-the-reports-instead-of-the-object-.md | 0
 ...timeout-expired-error-on-sharepoint-core-service-deployment.md | 0
 .../troubleshoot_sharepoint_serveron-premise_errors.md            | 0
 ...e_for_domain.sharepoint.com_error_accessing_remote_registry.md | 0
 ...repoint-online-audit-data-too-late-or-do-not-receive-at-all.md | 0
 .../auditing-stored-procedures-on-the-sql-server.md               | 0
 ...t-generate-sspi-context-error-in-sql-server-monitoring-plan.md | 0
 ...-the-name-of-your-sql-server-causes-database-related-errors.md | 0
 .../configure-sql-server-auditing-to-ignore-addition.md           | 0
 ...onnection-string-is-not-valid-in-sql-server-monitoring-plan.md | 0
 .../could-not-find-stored-procedure-getallproperties.md           | 0
 ...er-and-report-manager-urls-in-sql-server-reporting-services.md | 0
 .../sql-server-auditing}/enable_tcpip_protocol_in_sql_server.md   | 0
 ...r-check-your-sql-server-settings-in-audit-database-settings.md | 0
 ...y-permissions-for-the-sql-server-reporting-services-reports.md | 0
 ...ng-database-to-another-ms-sql-server-instance-lower-version.md | 0
 ...w-i-can-change-the-trace-log-path-on-the-audited-sql-server.md | 0
 .../how-netwrix-auditor-for-sql-server-collects-data.md           | 0
 ...e-backup-events-from-the-sql-server-change-reporter-reports.md | 0
 ...te-netwrix-auditor-databases-to-another-sql-server-instance.md | 0
 .../how-to-remove-all-triggers-from-sql-server-database.md        | 0
 ...er-settings-error-in-sql-server-reporting-services-settings.md | 0
 ...c-sql-database-and-auditor-databases-on-the-same-sql-server.md | 0
 ...rating_netwrix_access_analyzer_database_to_a_new_sql_server.md | 0
 ...uditor-widgets-show-the-sql-server-error-18452-login-failed.md | 0
 ...s-granted-are-insufficient-in-sql-server-reporting-services.md | 0
 .../recover-access-to-a-sql-server-instance.md                    | 0
 ...y-custom-sql-server-port-for-netwrix-auditor-audit-database.md | 0
 .../sql-server-express-database-size-reached-10gb.md              | 0
 .../tracing-was-disabled-in-sql-server-monitoring-plan.md         | 0
 .../sql-server-auditing}/upgrading-sql-server-instance.md         | 0
 .../what-load-does-sql-audit-generate-for-a-sql-server.md         | 0
 ...is-showing-system-in-netwrix-auditor-for-sql-server-reports.md | 0
 ...it-policy-settings-not-applied-on-domain-controller-locally.md | 0
 ...ed-on-all-or-several-domain-controllers-in-monitored-domain.md | 0
 .../auto-archiving-windows-security-log.md                        | 0
 ...untered-an-internal-error-in-windows-server-monitoring-plan.md | 0
 ...ltls_secure_channel_error_in_windows_server_monitoring_plan.md | 0
 ...is-configured-incorrectly-in-windows-server-monitoring-plan.md | 0
 .../high-cpu-usage-on-domain-controllers.md                       | 0
 ...klm-or-hku-error-in-windows-server-auditing-monitoring-plan.md | 0
 ...i-enable-security-log-autobackups-on-each-domain-controller.md | 0
 ...ix-auditor-collects-data-from-replicated-domain-controllers.md | 0
 ...rable-domain-controllers-from-monitoring-in-netwrix-auditor.md | 0
 ...ons-and-policies-warnings-in-windows-server-monitoring-plan.md | 0
 ...currentcontrolset-changes-in-windows-server-monitoring-plan.md | 0
 ...ntid-2007-could-not-connect-to-windows-server-audit-service.md | 0
 .../nwx-executables-removed-and-readded-to-domain-controllers.md  | 0
 ...ss-cannot-access-the-file-in-windows-server-monitoring-plan.md | 0
 .../request-is-not-supported-windows-server-auditing.md           | 0
 ...aproviderexception2_error_in_windows_server_monitoring_plan.md | 0
 ...ns-multiple-events-5140-generated-by-netwrix-auditor-server.md | 0
 .../unable-to-configure-audit-policies-in-domain-controllers.md   | 0
 ...erview-dashboard-shows-unexpected-issues-for-windows-server.md | 0
 ...ort-shows-windows-defenders-as-the-only-antivirus-installed.md | 0
 ...s-cloned-with-windows-server-auditing-service-pre-installed.md | 0
 ...dit_data_unhandled_value_sendas_\342\200\223_event_id_2002.md" | 0
 ..._for_access_reviews_has_expired_\342\200\223_event_id_2222.md" | 0
 ...y-event-id-5356-csv-file-missing-in-event-log-export-add-on.md | 0
 .../health-log-events}/entitlement-reviews-event-id-6527.md       | 0
 .../health-log-events}/error-event-id-1206-in-health-log.md       | 0
 .../event-id-1000-application-errors-in-netwrix-auditor-server.md | 0
 .../health-log-events}/event-id-1024-in-health-log.md             | 0
 .../health-log-events}/event-id-1079-in-health-log.md             | 0
 .../health-log-events}/event-id-1203-in-health-log.md             | 0
 .../health-log-events}/event-id-1204-in-health-log.md             | 0
 .../health-log-events}/event-id-1205-in-health-log.md             | 0
 .../health-log-events}/event-id-1207-in-health-log.md             | 0
 .../health-log-events}/event-id-1208-in-health-log.md             | 0
 .../health-log-events}/event-id-1209-in-health-log.md             | 0
 .../health-log-events}/event-id-1210-in-health-log.md             | 0
 .../event-id-1211-1215-1226-1235-1246-1248-in-health-log.md       | 0
 .../health-log-events}/event-id-1212-in-health-log.md             | 0
 .../health-log-events}/event-id-1214-in-health-log.md             | 0
 .../event-id-1216-1217-1218-1219-in-health-log.md                 | 0
 .../health-log-events}/event-id-1223-in-health-log.md             | 0
 .../health-log-events}/event-id-1225-in-health-log.md             | 0
 .../health-log-events}/event-id-1236-in-health-log.md             | 0
 .../health-log-events}/event-id-1239-in-health-log.md             | 0
 .../health-log-events}/event-id-1240-in-health-log.md             | 0
 .../health-log-events}/event-id-1241-in-health-log.md             | 0
 .../health-log-events}/event-id-1242-in-health-log.md             | 0
 .../health-log-events}/event-id-1243-in-health-log.md             | 0
 .../health-log-events}/event-id-1244-in-health-log.md             | 0
 .../health-log-events}/event-id-1245-in-health-log.md             | 0
 .../health-log-events}/event-id-1249-in-health-log.md             | 0
 .../health-log-events}/event-id-1250-in-health-log.md             | 0
 .../event-id-1251-1254-1256-1258-in-health-log.md                 | 0
 .../health-log-events}/event-id-1255-in-health-log.md             | 0
 .../health-log-events}/event-id-1259-in-health-log.md             | 0
 .../health-log-events}/event-id-1260-1266-in-health-log.md        | 0
 .../health-log-events}/event-id-1267-1273-in-health-log.md        | 0
 .../health-log-events}/event-id-1274-in-health-log.md             | 0
 .../health-log-events}/event-id-1275-in-health-log.md             | 0
 .../health-log-events}/event-id-1276-in-health-log.md             | 0
 .../health-log-events}/event-id-1280-in-health-log.md             | 0
 .../health-log-events}/event-id-1281-1282-1283-in-health-log.md   | 0
 .../health-log-events}/event-id-1285-in-health-log.md             | 0
 .../health-log-events}/event-id-1286-in-health-log.md             | 0
 .../health-log-events}/event-id-1287-in-health-log.md             | 0
 .../health-log-events}/event-id-1288-in-health-log.md             | 0
 .../health-log-events}/event-id-1289-in-health-log.md             | 0
 .../event-id-2002-the-term-get-help-is-not-recognized.md          | 0
 .../health-log-events}/event-id-5801-in-health-log.md             | 0
 .../health-log-events}/event-id-5802-in-health-log.md             | 0
 .../health-log-events}/event-id-5803-in-health-log.md             | 0
 .../health-log-events}/event_id_12371238_in_health_log.md         | 0
 .../health-log-events}/monitored-event-ids.md                     | 0
 .../netwrix-auditor-health-log-contains-event-id-1119.md          | 0
 .../netwrix-auditor-system-health-event-id-2007.md                | 0
 ...-auditor-system-health-log-contains-event-ids-1015-and-1016.md | 0
 .../netwrix-auditor-system-health-log-event-id-1059.md            | 0
 .../netwrix-auditor-system-health-log-event-id-1213.md            | 0
 .../{ => features-and-operations/glossaries-and-faqs}/aal-test.md | 0
 .../account-lockout-events-for-domain-administrator-account.md    | 0
 .../account-lockouts-are-displayed-with-delay.md                  | 0
 .../glossaries-and-faqs}/additional-audit-details-how-it-works.md | 0
 .../administrator-audit-logging-aal-configuration-details.md      | 0
 ...r-a-file-with-a-custom-extension-is-failing-text-extraction.md | 0
 .../archive-service-is-busy-processing-activity-records.md        | 0
 .../audit-status-shows-logon-auditing-is-disabled.md              | 0
 .../audit-trails-are-incorrect-in-netwrix-auditor.md              | 0
 ...it_internet_information_services_(iis)_with_netwrix_auditor.md | 0
 ...istributed-file-systems-with-replication-in-netwrix-auditor.md | 0
 .../auditing-of-configuration-container-and-schema.md             | 0
 .../auditor-glossary-abbreviations-and-acronyms.md                | 0
 .../best-practices-for-securing-netwrix-auditor.md                | 0
 ...a-group-other-than-the-everyone-group-in-the-audit-settings.md | 0
 .../change-data-collecting-account-password-in-netwrix-auditor.md | 0
 .../glossaries-and-faqs}/check-tcp-and-udp-ports-required.md      | 0
 .../glossaries-and-faqs}/clock-skew-is-too-great.md               | 0
 .../glossaries-and-faqs}/configuring_proxy_scans.md               | 0
 .../data-classification-services-do-not-start.md                  | 0
 .../data-gathering-task-has-not-been-scheduled.md                 | 0
 .../glossaries-and-faqs}/data-matcher-timeout.md                  | 0
 .../determining_which_access_analyzer_collectors_support_gmsa.md  | 0
 ...ference-between-data-stored-in-sql-versus-the-audit-archive.md | 0
 ...-changes-for-all-monitored-domains-in-forest-made-by-system.md | 0
 .../glossaries-and-faqs}/emc-unity-auditing.md                    | 0
 .../events-4624-and-4634-generated-by-service-accounts.md         | 0
 .../fine-grained-policy-and-account-expiration.md                 | 0
 .../given-key-was-not-present-in-the-dictionary-adfs.md           | 0
 .../glossaries-and-faqs}/group-policy-fake-changes.md             | 0
 .../group-policy-shows-sid-instead-of-settings.md                 | 0
 .../glossaries-and-faqs}/high-cpu-load-and-memory-usage.md        | 0
 .../high-cpu-usage-on-remote-desktop-servers.md                   | 0
 ...emory-usage-even-after-the-readlog-registry-key-is-set-to-0.md | 0
 .../how-are-collections-handled-after-a-network-outage.md         | 0
 ...r-of-events-generated-for-directory-service-access-auditing.md | 0
 .../glossaries-and-faqs}/how-do-i-monitor-hidden-file-shares.md   | 0
 ...account-to-obtain-disk-space-information-from-computers-tha.md | 0
 .../how-does-merging-logon-activity-events-work.md                | 0
 .../how-does-netwrix-auditor-for-vmware-work.md                   | 0
 .../how-netwrix-ensures-safety-of-stored-credentials.md           | 0
 .../how-the-network-traffic-compression-service-works.md          | 0
 .../how-to-add-additional-space-to-long-term-archive.md           | 0
 .../glossaries-and-faqs}/how-to-audit-a-non-trusted-domain.md     | 0
 .../how-to-audit-another-domain-with-netwrix-auditor.md           | 0
 ...-to-audit-servers-located-in-another-subnet-behind-firewall.md | 0
 .../glossaries-and-faqs}/how-to-audit-user-password-changes.md    | 0
 .../how-to-automatically-apply-office-classification-labels.md    | 0
 .../glossaries-and-faqs}/how-to-capture-service-traffic.md        | 0
 ...-to-change-the-netwrix-data-classification-query-server-url.md | 0
 .../how-to-check-the-netwrix-auditor-health-status.md             | 0
 .../how-to-clear-the-sessions-list-in-netwrix-auditor.md          | 0
 ...nt-the-number-of-your-network-devices-in-your-configuration.md | 0
 .../how-to-create-a-load-balanced-cews-environment.md             | 0
 .../how-to-create-the-full-dump-of-a-process.md                   | 0
 .../how-to-delete-old-entries-from-the-account-list.md            | 0
 .../how-to-disable-the-self-audit-feature-in-netwrix-auditor.md   | 0
 .../how-to-enable-ocr-for-non-english-images.md                   | 0
 ...ers-and-objects-from-monitoring-scope-in-netwrix-auditor-ui.md | 0
 .../how-to-figure-out-where-a-user-account-was-locked-out.md      | 0
 .../how-to-find-out-my-netwrix-auditor-version.md                 | 0
 .../glossaries-and-faqs}/how-to-find-video-recording-files.md     | 0
 ...s-token-for-a-dropbox-source-in-netwrix-data-classification.md | 0
 .../how-to-get-full-netwrix-auditor-version.md                    | 0
 ...ify-whether-auditor-server-can-receive-data-from-meraki-api.md | 0
 ...port-a-list-of-server-to-be-monitored-in-disk-space-monitor.md | 0
 .../how-to-improve-document-processing-performance.md             | 0
 .../how-to-manually-enable-advanced-sql-tracing.md                | 0
 ...o-manually-remove-compression-services-from-audited-servers.md | 0
 .../how-to-manually-remove-the-help-desk-portal.md                | 0
 .../glossaries-and-faqs}/how-to-modify-index-processing-mode.md   | 0
 .../how-to-modify-the-activity-summary-delivery-schedule.md       | 0
 .../glossaries-and-faqs}/how-to-monitor-print-service-activity.md | 0
 .../how-to-move-long-term-archive-to-a-new-location.md            | 0
 .../how-to-move-netwrix-auditor-to-the-cloud.md                   | 0
 .../how-to-omit-changes-to-the-supported-encryption-type.md       | 0
 ...-customer-experience-improvement-program-in-netwrix-auditor.md | 0
 .../how-to-prevent-long-term-archive-overflow.md                  | 0
 .../glossaries-and-faqs}/how-to-read-netwrix-auditor-logs.md      | 0
 ...cess-to-the-help-desk-portal-and-the-administrative-console.md | 0
 .../glossaries-and-faqs}/how-to-send-netwrix-auditor-logs.md      | 0
 .../how-to-specify-dell-emc-unity-server-as-a-monitored-item.md   | 0
 .../how-to-track-network-interface-changes-on-a-server.md         | 0
 .../glossaries-and-faqs}/how-to-use-omit-lists.md                 | 0
 ...to-view-custom-sensitive-file-categories-in-netwrix-auditor.md | 0
 ...to_get_a_daily_list_of_users_addedremoved_from_any_ad_group.md | 0
 .../glossaries-and-faqs}/hyperlinks-in-custom-branding.md         | 0
 .../glossaries-and-faqs}/images-are-not-shown.md                  | 0
 ...formance_by_adding_indexes_in_netwrix_access_analyzer_v12.0.md | 0
 .../incorrecty-display-names-in-the-what-changed-column.md        | 0
 .../{ => features-and-operations/glossaries-and-faqs}/index.md    | 0
 ...grating-privilege-secure-for-access-management-with-auditor.md | 0
 .../investigations-in-netwrix-auditor-take-too-long.md            | 0
 .../glossaries-and-faqs}/lockouts-are-not-tracked.md              | 0
 .../glossaries-and-faqs}/log-overwrites-warnings.md               | 0
 .../logon-failures-in-multi-domain-environments.md                | 0
 .../logon-prompt-extension-deployment-problems.md                 | 0
 .../logon-request-contained-an-invalid-logon-type-value.md        | 0
 ...ined-invalid-logon-type-value-in-netwrix-auditor-health-log.md | 0
 .../long-data-collection-improving-the-performance.md             | 0
 .../glossaries-and-faqs}/malformed-control-request.md             | 0
 ...objects-disappear-after-disk-space-on-system-drive-fills-up.md | 0
 .../mass-removal-of-files-located-on-dfs-server.md                | 0
 .../glossaries-and-faqs}/migrating-auditor-to-new-server.md       | 0
 .../mimikatz-pass-the-hash-activity-on-netwrix-auditor-server.md  | 0
 ...igating-and-understanding-a-netwrix-auditor-monitoring-plan.md | 0
 .../glossaries-and-faqs}/ndc-dashboard-failure.md                 | 0
 .../glossaries-and-faqs}/ndc-page-status-codes.md                 | 0
 ...service-fails-to-start-too-many-methods-to-fire-events-from.md | 0
 .../netwrix-auditor-consumes-disk-space-recommendations.md        | 0
 .../netwrix-auditor-health-log-contains-eventid-2002.md           | 0
 .../netwrix-auditor-health-log-contains-eventid-3230.md           | 0
 .../glossaries-and-faqs}/netwrix-auditor-licensing-faqs.md        | 0
 ...x-auditor-stops-working-after-upgrading-host-server-windows.md | 0
 ...x-auditor-system-health-log-contains-eventids-3127-and-3129.md | 0
 .../no-data-collected-in-linux-generic-syslog-monitoring-plan.md  | 0
 .../no-monitoring-plans-found-in-netwrix-auditor.md               | 0
 .../object-type-and-what-changed-columns-are-empty.md             | 0
 .../glossaries-and-faqs}/odd-characters-in-csv-file.md            | 0
 .../glossaries-and-faqs}/omit-folder-open-events.md               | 0
 .../glossaries-and-faqs}/out-of-memory-exception.md               | 0
 .../glossaries-and-faqs}/preserving-custom-taxonomies.md          | 0
 ...ocument-images-results-in-no-extracted-text-or-invalid-text.md | 0
 .../glossaries-and-faqs}/reading-log-status.md                    | 0
 ...nse-action-example-moving-user-account-to-the-quarantine-ou.md | 0
 ...lt_administrator_restricted_access_to_users_of_your_domain..md | 0
 .../rif-document-is-not-compatible-with-this-code-version.md      | 0
 .../glossaries-and-faqs}/sa_11.6_010.md                           | 0
 .../glossaries-and-faqs}/search-takes-too-long-to-complete.md     | 0
 .../security-log-overwrites-occurred-on-this-dc.md                | 0
 .../security-log-settings-do-not-apply-via-gpo.md                 | 0
 ...ct-send-for-netwrix-auditor-and-netwrix-data-classification.md | 0
 .../glossaries-and-faqs}/slow-examination.md                      | 0
 ...supplied-object-has-not-been-initialized-for-investigations.md | 0
 .../system-changed-client-operating-system.md                     | 0
 ...m-changed-directory-objects-for-foreign-security-principals.md | 0
 .../system-changed-object-path-after-account-name-change.md       | 0
 .../system-changed-service-principle-name-attribute.md            | 0
 .../the-conceptqs-application-pool-crashes-on-startup.md          | 0
 .../the-domain-param-parameter-is-missing-a-value.md              | 0
 ...d-an-account-lockout-does-not-appear-in-examination-results.md | 0
 ...e-order-in-which-domains-appear-in-the-managed-domains-list.md | 0
 .../glossaries-and-faqs}/uavr-core-service-not-responding.md      | 0
 .../unable-to-audit-target-server-by-ip-address.md                | 0
 .../glossaries-and-faqs}/unable-to-connect-to-remote-server.md    | 0
 .../unable-to-update-the-compression-service.md                   | 0
 ...-long-term-archive-access-to-state-in-time-folder-is-denied.md | 0
 .../glossaries-and-faqs}/user-and-workstation-do-not-match.md     | 0
 .../glossaries-and-faqs}/user-behavior-analytics-configuration.md | 0
 .../warning-53-the-network-path-was-not-found.md                  | 0
 .../what-cmdlets-are-used-for-aal-changes-collection.md           | 0
 ...s-automatic-audit-configuration-do-on-the-monitored-servers.md | 0
 ...what-is-tombstonelifetime-attribute-and-what-is-it-used-for.md | 0
 .../where-does-netwrix-auditor-collect-security-logs.md           | 0
 ...-should-be-whitelisted-for-the-auditor-to-function-properly.md | 0
 .../why-a-registry-key-is-missing-in-both-gpmc-and-local.md       | 0
 ...n-deployment-service-not-start-or-is-terminated-upon-launch.md | 0
 .../why-netwrix-auditor-reads-ad-fs-dkm-key-and-is-it-normal.md   | 0
 .../glossaries-and-faqs}/workstation-name-is-not-shown.md         | 0
 ...lockout-examiner-generates-excessive-traffic-in-the-network.md | 0
 .../account-lockout-examiner-works-very-slowly.md                 | 0
 .../credentials-used-by-account-lockout-examiner.md               | 0
 .../account-lockout-examiner}/faq-account-lockout-examiner.md     | 0
 .../how-does-netwrix-account-lockout-examiner-work.md             | 0
 .../how-to-install-and-use-netwrix-account-lockout-examiner.md    | 0
 .../how-to-migrate-account-lockout-examiner.md                    | 0
 .../how-to-modify-the-account-lockout-examiner-service-account.md | 0
 ...intenance-contract-has-expired-for-account-lockout-examiner.md | 0
 .../the-account-lockout-examiner-service-account.md               | 0
 .../access-is-denied-error-in-event-log-manager-health-log.md     | 0
 .../could-not-locate-end-of-event-log-error.md                    | 0
 .../error-failed-to-check-for-event-log-existence.md              | 0
 ...report-service-starts-and-stops-multi-lingual-configuration.md | 0
 ...ettings-may-lead-to-incorrect-or-incomplete-data-in-reports.md | 0
 .../how-to-edit-schedules-in-netwrix-auditor-event-log-manager.md | 0
 .../how-to-exclude-system-account-from-event-log.md               | 0
 ...r-to-collect-a-specific-applications-and-services-event-log.md | 0
 .../how-to-reduce-the-netwrix-event-log-manager-database-size.md  | 0
 ...how-to-remove-netwrix-event-log-agent-from-multiple-servers.md | 0
 ...how-to-save-and-zip-netwrix-auditor-system-health-event-log.md | 0
 .../migrate-event-log-manager-monitoring-plans.md                 | 0
 .../monitoring-ssl-certificates-with-event-log-manager.md         | 0
 ...mtp-authentication-errors-while-configuring-a-monitoring-pl.md | 0
 ...cess-event-logs-on-a-domain-controller-com-error-2147023485.md | 0
 .../parallel-redo-events-in-sql-server-event-log.md               | 0
 ...s-event-log-backup-without-domain-administrator-permissions.md | 0
 ...-collection-history-for-generic-events-event-log-management.md | 0
 ...t-logs-reports-for-windows-server-does-not-contain-any-data.md | 0
 ...on-mismatch-in-netwrix-auditor-password-expiration-notifier.md | 0
 ...e-notifications-and-reports-in-password-expiration-notifier.md | 0
 .../emails-are-missing-in-password-expiration-notifier.md         | 0
 .../empty-password-expiration-notifier-emails.md                  | 0
 ...le-header-and-footer-in-password-expiration-notifier-emails.md | 0
 .../how-does-password-expiration-notifier-work.md                 | 0
 ...-sms-notifications-feature-for-password-expiration-notifier.md | 0
 ...t-schedules-in-netwrix-auditor-password-expiration-notifier.md | 0
 ...-card-users-from-monitoring-by-password-expiration-notifier.md | 0
 ...-notify-users-without-email-in-password-expiration-notifier.md | 0
 ...ion-contents-and-characters-in-password-expiration-notifier.md | 0
 ...-netwrix-password-expiration-notifier-to-a-different-server.md | 0
 ...ration-notifier-email-header-and-footer-reset-after-upgrade.md | 0
 ...es-blank-reports-after-configuring-password-policy-enforcer.md | 0
 .../password-expiration-notifier-stopped-showing-results.md       | 0
 ...d-password-policies-in-netwrix-password-expiration-notifier.md | 0
 ...or-the-netwrix-password-expiration-notifier-service-account.md | 0
 .../access-errors-for-user-activity-monitoring-plan.md            | 0
 ...rt-after-netwrix-inactive-users-tracker-resets-its-password.md | 0
 ...r-tracking-alert-before-it-performs-any-actions-on-accounts.md | 0
 .../error-user-activity-core-service-has-been-already-launched.md | 0
 .../how-does-inactive-user-tracker-work.md                        | 0
 ...eports-from-user-activity-video-recorder-resolve-host-names.md | 0
 ...ault-ports-in-netwrix-auditor-user-activity-video-recording.md | 0
 ...ctivity-to-trigger-a-recording-session-on-program-execution.md | 0
 .../how-to-discover-inactive-users-with-netwrix-auditor.md        | 0
 ...-to-edit-schedules-in-netwrix-auditor-inactive-user-tracker.md | 0
 ...-to-migrate-netwrix-inactive-users-tracker-to-other-servers.md | 0
 ...rs-tracker-locks-out-active-accounts-not-logging-to-windows.md | 0
 .../manually-update-user-activity-core-service.md                 | 0
 ...s-tracker-does-not-perform-any-actions-on-inactive-accounts.md | 0
 ...disabled-user-accounts-and-does-not-report-them-as-inactive.md | 0
 ...t-to-instance-of-object-in-inactive-user-tracker-health-log.md | 0
 ...the-start-or-control-request-error-in-user-activity-service.md | 0
 ...s-were-not-moved-or-deleted-in-inactive-user-tracker-report.md | 0
 ...puter-cannot-be-identified-in-user-activity-monitoring-plan.md | 0
 ...o-reporter-agent-is-not-being-installed-on-monitored-server.md | 0
 ...unable-to-launch-netwrix-auditor-user-activity-core-service.md | 0
 .../uninstalling-user-activity-monitoring-agents.md               | 0
 .../user-activity-video-is-not-being-captured.md                  | 0
 .../how-to-get-single-alert-on-mass-objects-modification.md       | 0
 .../how-to-remove-footer-from-real-time-alert-emails.md           | 0
 .../alerts-and-rules}/how-to-use-sms-text-for-alerts.md           | 0
 .../logs-to-collect-for-netwrix-auditor-sms-alert-issues.md       | 0
 .../alerts-and-rules}/setting-up-account-lockout-alert.md         | 0
 ...o-find-the-attribute-name-when-configuring-real-time-alerts.md | 0
 .../alerts-and-rules}/unable-to-create-real-time-alerts.md        | 0
 .../why-i-get-alerts-on-accounts-that-cannot-be-locked-out.md     | 0
 .../activity_summary_emails_contain_.zip_files.md                 | 0
 .../expiry-notifications-sent-to-some-users-only.md               | 0
 .../email-notifications}/how-to-change-smtp-timeout.md            | 0
 .../how-to-customize-email-notification-template.md               | 0
 .../notifications-are-not-sent-to-distribution-groups.md          | 0
 .../email-notifications}/notifications-are-not-sent.md            | 0
 ...tion-failed-to-deliver-netwrix-auditor-health-summary-email.md | 0
 .../when-is-the-password-expiration-notification-sent.md          | 0
 ...hows-different-results-in-one-way-trust-forests-environment.md | 0
 .../report-generation}/alert-reported-change-made-by-system.md    | 0
 ...itional-attribites-be-displayed-in-the-modification-reports.md | 0
 .../report-generation}/can-t-find-a-file-share-in-a-report.md     | 0
 ...about-largest-files-in-the-files-and-folders-created-report.md | 0
 ...-errors-occur-when-trying-to-review-netwrix-auditor-reports.md | 0
 ...mestamps-and-change-summaries-are-sent-outside-the-schedule.md | 0
 .../report-generation}/changes-reported-in-wrong-time-zone.md     | 0
 .../error-500-when-viewing-and-accessing-reports.md               | 0
 .../error-503-reports-and-subscriptions-not-working.md            | 0
 ...-report-processing-rserrorimpersonatinguser-running-reports.md | 0
 ...ror-generating-a-report-in-ssrs-http-error-401-unauthorized.md | 0
 ...ment-is-not-supported-in-this-edition-of-reporting-services.md | 0
 .../exporting-information-on-account-lockout-events.md            | 0
 .../filtering-reports-by-the-user-who-made-changes.md             | 0
 ...-reports-displaying-letters-instead-of-command-text-in-ssrs.md | 0
 ...s-to-the-calendar-and-contacts-folders-from-product-reports.md | 0
 .../how-to-exclude-specific-user-accounts-from-reports.md         | 0
 ...e-public-key-infrastructure-pki-changes-from-being-reported.md | 0
 ...w-to-exclude-user-s-extended-properties-from-being-reported.md | 0
 .../how-to-filter-out-certain-users-from-reports.md               | 0
 ...-events-from-being-monitored-by-the-logon-reporter-software.md | 0
 .../report-generation}/how-to-modify-ssrs-report-timeouts.md      | 0
 ...w-to-modify-the-recipient-list-for-activity-summary-reports.md | 0
 .../how-to-omit-certain-object-changes-from-being-reported.md     | 0
 .../how-to-omit-user-account-locked-out-events-from-reports.md    | 0
 .../how-to-prepare-for-printing-ssrs-based-reports.md             | 0
 .../how-to-remove-a-decomissioned-server-from-ssrs-reports.md     | 0
 ...hen-changes-are-listed-as-made-by-system-in-a-change-report.md | 0
 ...how-to-troubleshoot-overwrites-in-change-reports-for-vmware.md | 0
 .../how-to-use-wildcards-in-netwrix-auditor-reports.md            | 0
 .../html-reports-have-an-issue-with-non-latin-characters.md       | 0
 .../report-generation}/impossible-to-export-a-report.md           | 0
 ...ers-via-ctrl-alt-del-combination-in-netwrix-auditor-reports.md | 0
 .../incorrect-data-in-reports-without-any-warnings.md             | 0
 ...-characters-missing-or-displayed-incorrectly-in-pdf-reports.md | 0
 ...nattended-execution-account-running-netwrix-auditor-reports.md | 0
 .../netwrix-auditor-risk-assessment-reports-reference-table.md    | 0
 ...-present-in-reports-the-who-field-contains-the-system-value.md | 0
 ...s-and-reports-when-running-netwrix-auditor-under-non-admin-.md | 0
 .../operation-has-timed-out-for-cef-export-siem-add-on.md         | 0
 ...-cannot-check-the-content-manager-role-on-the-report-server.md | 0
 .../reports-for-subscriptions-are-missing-in-netwrix-auditor.md   | 0
 .../reports-generation-takes-a-while-and-completes-with-errors.md | 0
 ...-fully-displayed-in-the-azure-ad-accounts-attributes-report.md | 0
 .../state-in-time-reports-do-not-show-gpo-settings-values.md      | 0
 .../report-generation}/subscription-reports-errors.md             | 0
 .../the-email-address-column-in-the-enrollment-report.md          | 0
 .../the-product-does-not-report-on-changes-to-calendar.md         | 0
 .../unable-to-generate-reports-after-migration.md                 | 0
 ...unable-to-run-reports-system-cannot-find-the-file-specified.md | 0
 ...-as-office-document-excel-word-or-powerpoint-with-ssrs-2019.md | 0
 ...hy-do-i-get-multiple-events-on-password-changing-in-reports.md | 0
 ...sitive-read-access-attempts-are-reported-by-netwrix-auditor.md | 0
 ...eports-reflect-folders-that-were-not-supposed-to-be-scanned.md | 0
 .../report-generation}/workstation-field-reported-as-unknown.md   | 0
 ...er-the-subscription-due-to-following-error-access-is-denied.md | 0
 ..._procedure_\342\200\224_subscriptions_error_in_netwrix_aud.md" | 0
 ...ents-exceeding-the-size-limit-are-missing-from-lostandfound.md | 0
 ...scription-generation-fails-due-to-incorrect-date-from-value.md | 0
 .../unable-to-save-subscription-file-to-a-shared-location.md      | 0
 ...-netwrix-auditor-due-to-contract-or-subscription-expiration.md | 0
 .../why-does-the-when-field-disappear-in-subscriptions.md         | 0
 .../backup-and-recovery}/backup-recommendations.md                | 0
 .../backup-and-recovery}/backups-folder-in-netwrix-auditor.md     | 0
 .../corruption-of-the-database-owner-record.md                    | 0
 ...locate-space-for-object-objectname-in-database-databasename.md | 0
 .../database-contains-tables-not-compatible-with-the-product.md   | 0
 .../database-management}/database-performance-loss.md             | 0
 .../db-owner-has-been-removed-from-databases.md                   | 0
 .../database-management}/deploying-the-report-server-database.md  | 0
 ...ss-sql-commands-for-the-netwrix-auditor-self-audit-database.md | 0
 .../database-management}/error-database-owner-sid-mismatch.md     | 0
 .../error-login-failed-cannot-open-database-in-reports.md         | 0
 .../error-while-transaction-db-import-operation.md                | 0
 ...ot_find_file_specified_configuration_registry_database_is_.md" | 0
 .../database-management}/how-to-assign-db-owner-permissions.md    | 0
 ...raudit-databases-on-sql-instances-and-what-it-is-needed-for.md | 0
 ...ount-number-of-cpu-cores-on-your-oracle-database-deployment.md | 0
 .../database-management}/how-to-create-new-reporting-databases.md | 0
 .../how-to-get-database-content-audit-working.md                  | 0
 .../how-to-move-reporting-databases-to-a-new-drive.md             | 0
 .../database-management}/how-to-recreate-alerts-database.md       | 0
 .../how-to-reduce-audit-database-size-for-netwrix-auditor.md      | 0
 .../how-to-remove-old-oracle-database-audit-events.md             | 0
 ...oad-audit-data-from-the-long-term-archive-to-audit-database.md | 0
 .../i-can-t-see-changed-values-with-database-content-audit.md     | 0
 ...-changes-are-included-in-reports-for-database-content-audit.md | 0
 .../recovery-mode-changes-in-sql-databases.md                     | 0
 ...ssrs-tempdb-permanently-grows-large-and-occupies-disk-space.md | 0
 ...ql-database-content-audit-configuration-could-not-obtain-in.md | 0
 ...tabase-with-audit-data-does-not-exist-or-cannot-be-accessed.md | 0
 .../audit-policy-settings-for-pci-compliance.md                   | 0
 .../data-missing-after-the-license-expiration.md                  | 0
 .../essential-netwrix-license-usage-data-and-url-resources.md     | 0
 .../licensing-and-compliance}/freeware-license-code.md            | 0
 .../how-to-apply-netwrix-auditor-license.md                       | 0
 .../how-to-apply-the-license-to-virtual-appliance.md              | 0
 .../netwrix-auditor-licenses-and-plans.md                         | 0
 .../error_web_reports_url_not_working_after_upgrade.md            | 0
 ...extended_runtime_for_0-create_schema_job_post_v12.0_upgrade.md | 0
 ...to-migrate-netwrix-auditor-working-folder-to-a-new-location.md | 0
 .../how-to-prepare-netwrix-server-for-os-upgrade.md               | 0
 .../how-to-prepare-the-netwrix-server-for-a-sql-upgrade.md        | 0
 .../migration-and-upgrade}/how-to-upgrade-netwrix-auditor.md      | 0
 .../netwrix-auditor-upgrade-process-taking-too-long.md            | 0
 ...ata_collection_service_crashes_after_upgrade_to_v10.7.13707.md | 0
 .../upgrade-increments-for-netwrix-auditor.md                     | 0
 ..._with_your_netwrix_auditor_version_cannot_be_upgraded_error.md | 0
 .../antivirus-exclusions-for-netwrix-auditor.md                   | 0
 .../cannot-establish-connection-to-compression-service.md         | 0
 .../object-type-of-rras-administration-connection-point.md        | 0
 .../remote-service-control-manager-connection-timout.md           | 0
 ...ccessful-request-did-not-meet-authentication-criteria-error.md | 0
 .../data-collection-errors}/cannot-access-roles-page.md           | 0
 .../data-collection-errors}/cannot-access-the-help-desk-portal.md | 0
 ...ot-complete-login-due-to-an-incorrect-user-name-or-password.md | 0
 ...to-long-term-archive-access-to-short-term-archive-is-denied.md | 0
 .../cannot-obtain-credential-information-for-mapped-drive.md      | 0
 ...ot-retrieve-audit-settings-in-audit-configuration-assistant.md | 0
 ...m_jobs_using_powershell_data_collector_jobs_with_parameters.md | 0
 ...r-saving-current-vmware-virtual-center-snapshot-the-server-.md | 0
 ...entext-content-server-have-failed-to-write-to-the-documents.md | 0
 ...-communicate-because-they-do-not-possess-a-common-algorithm.md | 0
 ...-process-a-request-because-the-target-server-is-unreachable.md | 0
 .../data-collection-errors}/error-0x80040605-connection-failed.md | 0
 .../error-0x800706ba-rpc-server-is-unavailable.md                 | 0
 .../error-0x800706d3-authentication-service-is-unknown.md         | 0
 .../data-collection-errors}/error-403.md                          | 0
 .../error-a-required-privilege-is-not-held-by-the-client.md       | 0
 ...l-error-has-occurred-when-sending-the-request-to-the-server.md | 0
 .../error-an-item-with-the-same-key-has-already-been-added.md     | 0
 ...n-error-occurred-while-processing-the-request-on-the-server.md | 0
 ...s-and-successful-account-management-events-is-not-enabled-f.md | 0
 .../error-cannot-create-a-connection-to-data-source-ds.md         | 0
 ...ertificate-with-identifier-is-not-registered-on-application.md | 0
 .../data-collection-errors}/error-could-not-connect-to-server.md  | 0
 ...rror-during-agent-operation-on-server-no-such-host-is-known.md | 0
 .../error-failed-to-copy-remote-distributed-modules.md            | 0
 ...ailed-to-load-registry-hive-file-is-used-by-another-process.md | 0
 ...re-trying-to-use-is-on-network-resource-that-is-unavailable.md | 0
 .../error-invalid-login-response-in-vmware-monitoring-plan.md     | 0
 .../data-collection-errors}/error-memory-limit-is-reached.md      | 0
 ...ional-system-components-and-updates-required-for-monitoring.md | 0
 .../data-collection-errors}/error-no-connection-could-be-made.md  | 0
 .../data-collection-errors}/error-no-more-threads.md              | 0
 .../data-collection-errors}/error-request-operation-timeout.md    | 0
 ...er-snapshot-permission-to-perform-this-operation-was-denied.md | 0
 ...service-did-not-respond-to-start-or-control-request-in-ssrs.md | 0
 ...data-files-exceeded-limit-in-logon-activity-monitoring-plan.md | 0
 .../error-snapshot-saving-process-was-interrupted.md              | 0
 .../data-collection-errors}/error-sql-error-invalid-class.md      | 0
 .../error-the-maximum-password-age-is-not-set.md                  | 0
 ...ay-not-run-because-of-an-error-exception-from-hresult-0x800.md | 0
 .../error-the-pipe-endpoint-cannot-be-found.md                    | 0
 .../error-the-remote-procedure-call-failed.md                     | 0
 ...ificate-to-ssrs-the-specified-url-was-unexpectedly-reserved.md | 0
 ...ertificate_with_identifier_is_not_registered_on_application.md | 0
 ...requested,_but_not_set_in_domain_1_for_the_{y}_object_class.md | 0
 ...logon-attempts-after-recent-service-account-password-change.md | 0
 .../failed-to-login-by-user-netwrix-service-account.md            | 0
 .../data-collection-errors}/failed-to-open-log.md                 | 0
 .../group-policy-error-is-not-in-a-valid-format.md                | 0
 .../how-to-detect-the-root-cause-of-multiple-failed-logons.md     | 0
 ...o-figure-out-the-ip-address-used-for-a-failed-logon-attempt.md | 0
 .../how-to-find-destination-of-failed-ntlm-logons.md              | 0
 .../how-to-investigate-compression-services-errors.md             | 0
 ...i-cannot-see-sql-changes-made-in-my-third-party-application.md | 0
 .../insufficient-memory-and-not-enough-storage-errors.md          | 0
 ...-specification-error-occurs-when-trying-to-store-audit-data.md | 0
 .../data-collection-errors}/investigating-failed-logons.md        | 0
 ...val-tool-for-adv-2023-003-failed-to-load-configuration-file.md | 0
 ...size-exceeds-fixed-maximum-message-size-error-in-health-log.md | 0
 ...itor-data-collection-account-failed-logons-account-lockouts.md | 0
 ...twrix-auditor-failed-to-collect-the-administrator-audit-log.md | 0
 .../permission-denied-error-code-2146828218.md                    | 0
 ...ncrypteddata-unable-to-validate-integrity-of-encrypted-data.md | 0
 ...ified-logon-session-does-not-exist-error-in-netwrix-auditor.md | 0
 ...no-longer-available-error-in-logon-activity-monitoring-plan.md | 0
 ...t-find-the-path-specified-in-logon-activity-monitoring-plan.md | 0
 ...the-remote-procedure-call-failed-error-when-collecting-logs.md | 0
 .../transport-failed-to-connect-to-server.md                      | 0
 .../data-collection-errors}/ts-collection-failed-warning.md       | 0
 ...le-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md | 0
 ...issing-vserver-parameter-error-when-auditing-netapp-cluster.md | 0
 ...curred-when-trying-to-perform-automatic-audit-configuration.md | 0
 ...tfoundexception_could_not_load_file_or_assembly_dsinternals.md | 0
 .../why-do-i-have-incomplete-information-on-failed-logons.md      | 0
 .../wmi-classes-data-provider-failed-service-cannot-be-started.md | 0
 ...ovider-failed-to-get-the-information-on-win32-printer-error.md | 0
 ...rix-auditor-api-authentication-in-kerberos-only-environment.md | 0
 .../rbac-authorization-returns-access-denied.md                   | 0
 ...d_4768_event_'a_kerberos_authentication_ticket_(tgt)_was_re.md | 0
 ...nrollment-failed-server-certificate-revocation-check-failed.md | 0
 .../generate-self-signed-ssl-certificate-for-ssrs.md              | 0
 ...ow_to_make_netwrix_auditor_upload_data_to_sql_using_tls_1.2.md | 0
 ..._of_expiring_ssltls_certificates_and_their_expiration_dates.md | 0
 ...cure_connection_between_auditor_and_ssrs_via_ssltls_channel.md | 0
 .../use-certificate-authority-issued-certificates-in-ssrs.md      | 0
 .../\321\201onnection_issue_when_tls_1.2_is_required.md"          | 0
 648 files changed, 0 insertions(+), 0 deletions(-)
 rename docs/kb/auditor/{ => configuration-and-setup/active-directory-auditing}/active-directory-compression-service-continuously-starting-and-stopping.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/active-directory-auditing}/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/active-directory-auditing}/active-directory-object-restore.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/active-directory-auditing}/active_directory_collection_jobs_do_not_run_with_gmsa.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/active-directory-auditing}/audit-extension-attributes-in-active-directory.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/active-directory-auditing}/determining-the-number-of-enabled-active-directory-user-accounts.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/active-directory-auditing}/how-to-omit-warnings-in-netwrix-auditor-for-active-directory-when-audit-is-properly-configured.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/active-directory-auditing}/how-to-remove-netwrix-auditor-for-active-directory-group-policy-and-exchange.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/active-directory-auditing}/integration-and-authorization-of-netwrix-auditor-in-active-directory.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/active-directory-auditing}/reducing-the-used-active-directory-and-entra-id-license-counts.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/active-directory-auditing}/rollback-for-attribute-has-failed-error-in-object-restore-for-active-directory.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/active-directory-auditing}/what-are-netwrix-auditor-for-active-directory-bandwidth-requirements.md (100%)
 rename "docs/kb/auditor/cannot_execute_powershell_\321\201ommand_error_in_exchange_online_monitoring_plan.md" => "docs/kb/auditor/configuration-and-setup/exchange-auditing/cannot_execute_powershell_\321\201ommand_error_in_exchange_online_monitoring_plan.md" (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/exchange-auditing}/could_not_load_system.net.http_in_exchange_online_monitoring_plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/exchange-auditing}/error-content-index-state-failed-when-auditing-mailbox-access-on-exchange-2013.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/exchange-auditing}/exchange-server-name-instead-of-user-in-reports.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/exchange-auditing}/how-to-configure-netwrix-non-owner-mailbox-access-reporter-to-monitor-clusters-of-exchange-servers.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/exchange-auditing}/how-to-determine-the-exchange-web-services-ews-url.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/exchange-auditing}/how-to-filter-out-certain-mailboxes-and-folders-from-reports.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/exchange-auditing}/how-to-omit-changes-to-the-msexchmobilemailboxpolicybl-attribute.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/exchange-auditing}/how-to-omit-some-exchange-server-attributes-from-being-reported.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/exchange-auditing}/how-to-specify-exchange-server-to-collect-administrator-audit-log.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/exchange-auditing}/non-owner-mailbox-access-data-missing-in-exchange-auditing-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/exchange-auditing}/the-following-issues-have-been-detected-when-trying-to-configure-exchange-server-administrator-audit.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/exchange-auditing}/users-access-their-own-mailboxes.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/cannot-establish-a-connection-to-a-windows-file-server-compression-service.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/child-item-with-this-name-already-exists-in-file-server-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/error-netwrix-auditor-for-file-servers-audit-service-terminated-unexpectedly.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/file-servers-security-descriptor-of-file-share-is-empty.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/how-to-audit-file-servers-with-enabled-user-account-control.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/how-to-change-the-frequency-of-data-collections-for-file-server-auditing.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/how-to-enable-item-level-auditing-on-multiple-file-servers.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/netwrix-auditor-for-file-servers-audit-service-stops-after-each-startup.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/netwrix-auditor-for-file-servers-reports-excessive-file-read-attempts-that-did-not-actually-occur.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/symbolic-link-cannot-be-followed-error-in-file-server-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/the-disk-on-a-monitored-file-server-is-overfilled.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/this-shared-resource-does-not-exist-error-in-file-servers-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/types-of-the-data-collection-for-file-servers-auditing.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/unexpected-end-of-file-error-in-file-server-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/volume-shadow-copy-service-support-in-netwrix-auditor-for-file-servers.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/file-server-auditing}/what-is-sessionid-in-netwrix-auditor-for-file-servers.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/ale-service-is-unable-to-start-during-installation.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/compression-service-does-not-appear-under-installed-programs-but-still-exists-in-the-services-overvi.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/error-6503-netwrix-auditor-cannot-configure-nutanix-files-audit-settings-unexpected-http-status-code.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/error-drive-letter-resolver-is-not-installed-on-the-target-host.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/failed-to-install-and-configure-netwrix-auditor-access-reviews.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/how-to-configure-disk-space-monitor-reporting.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/how-to-configure-granular-audit-policies-for-logon-auditing.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/how-to-configure-monitoring-of-local-accounts.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/how-to-configure-netwrix-auditor-in-failover-mode.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/how-to-configure-notifications-on-service-account-password-expiration.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/how-to-configure-the-disk-space-monitor-to-work-behind-a-firewall.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/how-to-configure-the-product-to-send-two-user-notifications-instead-of-three.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/how-to-install-access-reviews.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/how-to-install-group-policy-management-console-on-different-windows-versions.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/how-to-install-individual-features-for-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/how-to-properly-remove-auditor-components-prior-to-further-clear-installation.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/how-to-repair-netwrix-auditor-installation.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/infognition-screenpressor-installed-in-netwrix-auditor-server-and-audited-servers.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/installation-fails-with-the-category-does-not-exist-message.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/new-netfirewallrule-how-to-open-ports-avoiding-manual-setup.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/general-configuration}/the-conceptserviceviewer-application-fails-to-show-the-current-service-statuses-after-installation.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/microsoft-365-integration}/configure-microsoft-365-data-sources-to-use-proxy-server-settings.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/microsoft-365-integration}/configure-netwrix-auditor-to-use-microsoft-365-for-email-notifications.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/microsoft-365-integration}/connection-to-microsoft-365-tenant-in-netwrix-auditor-completes-with-error-validating-your-account-s.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/microsoft-365-integration}/create-powershell-session-failed-using-oauth-in-microsoft-365-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/microsoft-365-integration}/determining-the-number-of-enabled-microsoft-entra-id-accounts.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/microsoft-365-integration}/disable-multi-factor-authentication-for-microsoft-365-service-accounts.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/microsoft-365-integration}/error-aadsts65001-in-microsoft-365-monitoring-plans-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/microsoft-365-integration}/error-current-site-is-not-a-tenant-administration-site-in-microsoft-365-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/microsoft-365-integration}/expired-certificate-in-azure-app-for-microsoft-365-tenant-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/microsoft-365-integration}/failed-to-collect-logons-forbidden-error-in-entra-id-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/microsoft-365-integration}/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/microsoft-365-integration}/permission_manifests_for_auditing_office_365_and_microsoft_entra_id_(auditor_v10.0_and_older).md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/cannot-find-the-application-error-in-sharepoint-online-and-ms-teams-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/how-to-remove-the-netwrix-data-classification-sharepoint-add-in-conceptclassifierapp.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/how-to-renew-the-netwrix-data-classification-for-sharepoint-conceptclassifierapp-client-secret.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/netwrix-auditor-for-sharepoint-online-fails-to-collect-data-because-the-remote-server-is-unauthorize.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/operation-timed-out-in-sharepoint-online-and-teams-monitoring-plans-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/remote_server_returned_error_(400)_bad_request_when_auditing_sharepoint_online_and_microsoft_entra_i.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/sharepoint-application-deployment-for-ndc.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/sharepoint-application-installation-for-netwrix-data-classification.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/sharepoint-configuration-changes-are-reported-with-a-wrong-timestamp.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/sharepoint-core-service-deployment-failed.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/sharepoint-term-set-tree-fails-to-load-or-unable-to-edit-a-clue-or-term.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/some-sharepoint-events-may-be-lost-and-not-reflected-in-reports-and-change-summaries.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/the-changes-are-reported-with-the-unknown-value-in-the-who-changed-column-for-sharepoint.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/the-changes-can-be-reported-with-the-not-applicable-value-in-the-workstation-field-for-sharepoint.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/the-sharepoint-application-pools-are-stopped-after-the-netwrix-auditor-agent-for-sharepoint-installa.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/the-sharepoint-managed-object-has-unable-to-connect-to-netwrix-auditor-service-for-sharepoint-error-.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/the-sharepoint-object-id-is-shown-in-the-what-column-instead-of-its-name.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/the-sharepoint-object-value-is-shown-in-the-object-type-column-in-the-reports-instead-of-the-object-.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/timeout-expired-error-on-sharepoint-core-service-deployment.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/troubleshoot_sharepoint_serveron-premise_errors.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/unable_to_determine_administrative_site_for_domain.sharepoint.com_error_accessing_remote_registry.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sharepoint-and-teams-auditing}/why-do-i-receive-my-sharepoint-online-audit-data-too-late-or-do-not-receive-at-all.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/auditing-stored-procedures-on-the-sql-server.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/changing-the-name-of-your-sql-server-causes-database-related-errors.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/configure-sql-server-auditing-to-ignore-addition.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/connection-string-is-not-valid-in-sql-server-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/could-not-find-stored-procedure-getallproperties.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/empty-report-server-and-report-manager-urls-in-sql-server-reporting-services.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/enable_tcpip_protocol_in_sql_server.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/error-check-your-sql-server-settings-in-audit-database-settings.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/how-can-i-assign-a-specific-user-read-only-permissions-for-the-sql-server-reporting-services-reports.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/how-do-i-migrate-the-reporting-database-to-another-ms-sql-server-instance-lower-version.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/how-i-can-change-the-trace-log-path-on-the-audited-sql-server.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/how-netwrix-auditor-for-sql-server-collects-data.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/how-to-exclude-backup-events-from-the-sql-server-change-reporter-reports.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/how-to-remove-all-triggers-from-sql-server-database.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/invalid-user-settings-error-in-sql-server-reporting-services-settings.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/is-it-possible-to-have-ndc-sql-database-and-auditor-databases-on-the-same-sql-server.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/migrating_netwrix_access_analyzer_database_to_a_new_sql_server.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/netwrix-auditor-widgets-show-the-sql-server-error-18452-login-failed.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/permissions-granted-are-insufficient-in-sql-server-reporting-services.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/recover-access-to-a-sql-server-instance.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/specify-custom-sql-server-port-for-netwrix-auditor-audit-database.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/sql-server-express-database-size-reached-10gb.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/tracing-was-disabled-in-sql-server-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/upgrading-sql-server-instance.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/what-load-does-sql-audit-generate-for-a-sql-server.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/sql-server-auditing}/who-changed-is-showing-system-in-netwrix-auditor-for-sql-server-reports.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/audit-policy-settings-not-applied-on-domain-controller-locally.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/auditing-policies-are-not-being-enabled-on-all-or-several-domain-controllers-in-monitored-domain.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/auto-archiving-windows-security-log.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/compression-service-encountered-an-internal-error-in-windows-server-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/could_not_create_ssltls_secure_channel_error_in_windows_server_monitoring_plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/event-trace-session-does-not-exist-or-is-configured-incorrectly-in-windows-server-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/high-cpu-usage-on-domain-controllers.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/hklm-or-hku-error-in-windows-server-auditing-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/how-do-i-enable-security-log-autobackups-on-each-domain-controller.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/how-netwrix-auditor-collects-data-from-replicated-domain-controllers.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/how-to-exclude-non-operable-domain-controllers-from-monitoring-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/misconfigured-permissions-and-policies-warnings-in-windows-server-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/monitoring-currentcontrolset-changes-in-windows-server-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/netwrix-auditor-for-windows-servers-eventid-2007-could-not-connect-to-windows-server-audit-service.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/nwx-executables-removed-and-readded-to-domain-controllers.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/process-cannot-access-the-file-in-windows-server-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/request-is-not-supported-windows-server-auditing.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/scmlib.datacollecting.dnsdataproviderexception2_error_in_windows_server_monitoring_plan.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/the-windows-security-log-contains-multiple-events-5140-generated-by-netwrix-auditor-server.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/unable-to-configure-audit-policies-in-domain-controllers.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/why-does-risk-assessment-overview-dashboard-shows-unexpected-issues-for-windows-server.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/windows-server-inventory-report-shows-windows-defenders-as-the-only-antivirus-installed.md (100%)
 rename docs/kb/auditor/{ => configuration-and-setup/windows-server-monitoring}/workstations-cloned-with-windows-server-auditing-service-pre-installed.md (100%)
 rename "docs/kb/auditor/auditor_v10.6_known_issue_\342\200\223_cannot_collect_mailbox_audit_data_unhandled_value_sendas_\342\200\223_event_id_2002.md" => "docs/kb/auditor/event-id-reference/health-log-events/auditor_v10.6_known_issue_\342\200\223_cannot_collect_mailbox_audit_data_unhandled_value_sendas_\342\200\223_event_id_2002.md" (100%)
 rename "docs/kb/auditor/auditor_v10.6_known_issue_\342\200\223_subscription_plan_for_access_reviews_has_expired_\342\200\223_event_id_2222.md" => "docs/kb/auditor/event-id-reference/health-log-events/auditor_v10.6_known_issue_\342\200\223_subscription_plan_for_access_reviews_has_expired_\342\200\223_event_id_2222.md" (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/empty-event-id-5356-csv-file-missing-in-event-log-export-add-on.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/entitlement-reviews-event-id-6527.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/error-event-id-1206-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1000-application-errors-in-netwrix-auditor-server.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1024-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1079-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1203-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1204-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1205-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1207-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1208-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1209-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1210-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1211-1215-1226-1235-1246-1248-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1212-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1214-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1216-1217-1218-1219-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1223-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1225-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1236-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1239-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1240-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1241-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1242-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1243-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1244-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1245-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1249-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1250-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1251-1254-1256-1258-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1255-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1259-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1260-1266-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1267-1273-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1274-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1275-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1276-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1280-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1281-1282-1283-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1285-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1286-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1287-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1288-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-1289-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-2002-the-term-get-help-is-not-recognized.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-5801-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-5802-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event-id-5803-in-health-log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/event_id_12371238_in_health_log.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/monitored-event-ids.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/netwrix-auditor-health-log-contains-event-id-1119.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/netwrix-auditor-system-health-event-id-2007.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/netwrix-auditor-system-health-log-contains-event-ids-1015-and-1016.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/netwrix-auditor-system-health-log-event-id-1059.md (100%)
 rename docs/kb/auditor/{ => event-id-reference/health-log-events}/netwrix-auditor-system-health-log-event-id-1213.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/aal-test.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/account-lockout-events-for-domain-administrator-account.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/account-lockouts-are-displayed-with-delay.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/additional-audit-details-how-it-works.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/administrator-audit-logging-aal-configuration-details.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/an-unknown-file-type-or-a-file-with-a-custom-extension-is-failing-text-extraction.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/archive-service-is-busy-processing-activity-records.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/audit-status-shows-logon-auditing-is-disabled.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/audit-trails-are-incorrect-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/audit_internet_information_services_(iis)_with_netwrix_auditor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/auditing-distributed-file-systems-with-replication-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/auditing-of-configuration-container-and-schema.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/auditor-glossary-abbreviations-and-acronyms.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/best-practices-for-securing-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/can-i-specify-a-group-other-than-the-everyone-group-in-the-audit-settings.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/change-data-collecting-account-password-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/check-tcp-and-udp-ports-required.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/clock-skew-is-too-great.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/configuring_proxy_scans.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/data-classification-services-do-not-start.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/data-gathering-task-has-not-been-scheduled.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/data-matcher-timeout.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/determining_which_access_analyzer_collectors_support_gmsa.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/difference-between-data-stored-in-sql-versus-the-audit-archive.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/duplicate-configuration-and-schema-changes-for-all-monitored-domains-in-forest-made-by-system.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/emc-unity-auditing.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/events-4624-and-4634-generated-by-service-accounts.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/fine-grained-policy-and-account-expiration.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/given-key-was-not-present-in-the-dictionary-adfs.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/group-policy-fake-changes.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/group-policy-shows-sid-instead-of-settings.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/high-cpu-load-and-memory-usage.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/high-cpu-usage-on-remote-desktop-servers.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/high-memory-usage-even-after-the-readlog-registry-key-is-set-to-0.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-are-collections-handled-after-a-network-outage.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-can-i-decrease-number-of-events-generated-for-directory-service-access-auditing.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-do-i-monitor-hidden-file-shares.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-do-you-specify-a-local-administrator-account-to-obtain-disk-space-information-from-computers-tha.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-does-merging-logon-activity-events-work.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-does-netwrix-auditor-for-vmware-work.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-netwrix-ensures-safety-of-stored-credentials.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-the-network-traffic-compression-service-works.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-add-additional-space-to-long-term-archive.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-audit-a-non-trusted-domain.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-audit-another-domain-with-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-audit-servers-located-in-another-subnet-behind-firewall.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-audit-user-password-changes.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-automatically-apply-office-classification-labels.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-capture-service-traffic.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-change-the-netwrix-data-classification-query-server-url.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-check-the-netwrix-auditor-health-status.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-clear-the-sessions-list-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-count-the-number-of-your-network-devices-in-your-configuration.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-create-a-load-balanced-cews-environment.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-create-the-full-dump-of-a-process.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-delete-old-entries-from-the-account-list.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-disable-the-self-audit-feature-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-enable-ocr-for-non-english-images.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-figure-out-where-a-user-account-was-locked-out.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-find-out-my-netwrix-auditor-version.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-find-video-recording-files.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-generate-an-access-token-for-a-dropbox-source-in-netwrix-data-classification.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-get-full-netwrix-auditor-version.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-identify-whether-auditor-server-can-receive-data-from-meraki-api.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-import-a-list-of-server-to-be-monitored-in-disk-space-monitor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-improve-document-processing-performance.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-manually-enable-advanced-sql-tracing.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-manually-remove-compression-services-from-audited-servers.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-manually-remove-the-help-desk-portal.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-modify-index-processing-mode.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-modify-the-activity-summary-delivery-schedule.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-monitor-print-service-activity.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-move-long-term-archive-to-a-new-location.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-move-netwrix-auditor-to-the-cloud.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-omit-changes-to-the-supported-encryption-type.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-opt-out-of-the-netwrix-customer-experience-improvement-program-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-prevent-long-term-archive-overflow.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-read-netwrix-auditor-logs.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-restrict-access-to-the-help-desk-portal-and-the-administrative-console.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-send-netwrix-auditor-logs.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-specify-dell-emc-unity-server-as-a-monitored-item.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-track-network-interface-changes-on-a-server.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-use-omit-lists.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how-to-view-custom-sensitive-file-categories-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/how_to_get_a_daily_list_of_users_addedremoved_from_any_ad_group.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/hyperlinks-in-custom-branding.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/images-are-not-shown.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/improving_file_system_bulk_import_performance_by_adding_indexes_in_netwrix_access_analyzer_v12.0.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/incorrecty-display-names-in-the-what-changed-column.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/index.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/integrating-privilege-secure-for-access-management-with-auditor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/investigations-in-netwrix-auditor-take-too-long.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/lockouts-are-not-tracked.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/log-overwrites-warnings.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/logon-failures-in-multi-domain-environments.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/logon-prompt-extension-deployment-problems.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/logon-request-contained-an-invalid-logon-type-value.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/logon-request-contained-invalid-logon-type-value-in-netwrix-auditor-health-log.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/long-data-collection-improving-the-performance.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/malformed-control-request.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/managed-objects-disappear-after-disk-space-on-system-drive-fills-up.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/mass-removal-of-files-located-on-dfs-server.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/migrating-auditor-to-new-server.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/mimikatz-pass-the-hash-activity-on-netwrix-auditor-server.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/navigating-and-understanding-a-netwrix-auditor-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/ndc-dashboard-failure.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/ndc-page-status-codes.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/netwrix-auditor-configuration-server-service-fails-to-start-too-many-methods-to-fire-events-from.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/netwrix-auditor-consumes-disk-space-recommendations.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/netwrix-auditor-health-log-contains-eventid-2002.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/netwrix-auditor-health-log-contains-eventid-3230.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/netwrix-auditor-licensing-faqs.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/netwrix-auditor-stops-working-after-upgrading-host-server-windows.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/netwrix-auditor-system-health-log-contains-eventids-3127-and-3129.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/no-data-collected-in-linux-generic-syslog-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/no-monitoring-plans-found-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/object-type-and-what-changed-columns-are-empty.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/odd-characters-in-csv-file.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/omit-folder-open-events.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/out-of-memory-exception.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/preserving-custom-taxonomies.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/process-document-images-results-in-no-extracted-text-or-invalid-text.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/reading-log-status.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/response-action-example-moving-user-account-to-the-quarantine-ou.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/result_administrator_restricted_access_to_users_of_your_domain..md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/rif-document-is-not-compatible-with-this-code-version.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/sa_11.6_010.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/search-takes-too-long-to-complete.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/security-log-overwrites-occurred-on-this-dc.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/security-log-settings-do-not-apply-via-gpo.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/set-up-direct-send-for-netwrix-auditor-and-netwrix-data-classification.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/slow-examination.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/supplied-object-has-not-been-initialized-for-investigations.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/system-changed-client-operating-system.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/system-changed-directory-objects-for-foreign-security-principals.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/system-changed-object-path-after-account-name-change.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/system-changed-service-principle-name-attribute.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/the-conceptqs-application-pool-crashes-on-startup.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/the-domain-param-parameter-is-missing-a-value.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/the-name-of-the-process-that-caused-an-account-lockout-does-not-appear-in-examination-results.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/the-order-in-which-domains-appear-in-the-managed-domains-list.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/uavr-core-service-not-responding.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/unable-to-audit-target-server-by-ip-address.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/unable-to-connect-to-remote-server.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/unable-to-update-the-compression-service.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/unable-to-upload-session-to-long-term-archive-access-to-state-in-time-folder-is-denied.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/user-and-workstation-do-not-match.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/user-behavior-analytics-configuration.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/warning-53-the-network-path-was-not-found.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/what-cmdlets-are-used-for-aal-changes-collection.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/what-does-automatic-audit-configuration-do-on-the-monitored-servers.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/what-is-tombstonelifetime-attribute-and-what-is-it-used-for.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/where-does-netwrix-auditor-collect-security-logs.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/which-applications-should-be-whitelisted-for-the-auditor-to-function-properly.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/why-a-registry-key-is-missing-in-both-gpmc-and-local.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/why-does-the-netwrix-auditor-application-deployment-service-not-start-or-is-terminated-upon-launch.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/why-netwrix-auditor-reads-ad-fs-dkm-key-and-is-it-normal.md (100%)
 rename docs/kb/auditor/{ => features-and-operations/glossaries-and-faqs}/workstation-name-is-not-shown.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/account-lockout-examiner}/account-lockout-examiner-generates-excessive-traffic-in-the-network.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/account-lockout-examiner}/account-lockout-examiner-works-very-slowly.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/account-lockout-examiner}/credentials-used-by-account-lockout-examiner.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/account-lockout-examiner}/faq-account-lockout-examiner.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/account-lockout-examiner}/how-does-netwrix-account-lockout-examiner-work.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/account-lockout-examiner}/how-to-install-and-use-netwrix-account-lockout-examiner.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/account-lockout-examiner}/how-to-migrate-account-lockout-examiner.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/account-lockout-examiner}/how-to-modify-the-account-lockout-examiner-service-account.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/account-lockout-examiner}/support-and-maintenance-contract-has-expired-for-account-lockout-examiner.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/account-lockout-examiner}/the-account-lockout-examiner-service-account.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/access-is-denied-error-in-event-log-manager-health-log.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/could-not-locate-end-of-event-log-error.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/error-failed-to-check-for-event-log-existence.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/event-log-manager-report-service-starts-and-stops-multi-lingual-configuration.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/following-event-log-settings-may-lead-to-incorrect-or-incomplete-data-in-reports.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/how-to-edit-schedules-in-netwrix-auditor-event-log-manager.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/how-to-exclude-system-account-from-event-log.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/how-to-force-netwrix-auditor-to-collect-a-specific-applications-and-services-event-log.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/how-to-reduce-the-netwrix-event-log-manager-database-size.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/how-to-remove-netwrix-event-log-agent-from-multiple-servers.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/how-to-save-and-zip-netwrix-auditor-system-health-event-log.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/migrate-event-log-manager-monitoring-plans.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/monitoring-ssl-certificates-with-event-log-manager.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/netwrix-auditor-event-log-manager-shows-smtp-authentication-errors-while-configuring-a-monitoring-pl.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/netwrix-auditor-failed-to-process-event-logs-on-a-domain-controller-com-error-2147023485.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/parallel-redo-events-in-sql-server-event-log.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/process-event-log-backup-without-domain-administrator-permissions.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/reset-collection-history-for-generic-events-event-log-management.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/event-log-management}/the-event-logs-reports-for-windows-server-does-not-contain-any-data.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/account-and-password-expiration-mismatch-in-netwrix-auditor-password-expiration-notifier.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/customize-notifications-and-reports-in-password-expiration-notifier.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/emails-are-missing-in-password-expiration-notifier.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/empty-password-expiration-notifier-emails.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/how-does-password-expiration-notifier-work.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/how-to-configure-the-sms-notifications-feature-for-password-expiration-notifier.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/how-to-edit-schedules-in-netwrix-auditor-password-expiration-notifier.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/how-to-exclude-smart-card-users-from-monitoring-by-password-expiration-notifier.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/how-to-notify-users-without-email-in-password-expiration-notifier.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/illegible-notification-contents-and-characters-in-password-expiration-notifier.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/migrate-netwrix-password-expiration-notifier-to-a-different-server.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/password-expiration-notifier-email-header-and-footer-reset-after-upgrade.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/password-expiration-notifier-generates-blank-reports-after-configuring-password-policy-enforcer.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/password-expiration-notifier-stopped-showing-results.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/support-for-fine-grained-password-policies-in-netwrix-password-expiration-notifier.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/password-expiration-notifier}/the-minimal-rights-for-the-netwrix-password-expiration-notifier-service-account.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/access-errors-for-user-activity-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/account-is-not-shown-in-a-report-after-netwrix-inactive-users-tracker-resets-its-password.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/does-inactive-user-tracking-alert-before-it-performs-any-actions-on-accounts.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/error-user-activity-core-service-has-been-already-launched.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/how-does-inactive-user-tracker-work.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/how-reports-from-user-activity-video-recorder-resolve-host-names.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/how-to-change-the-default-ports-in-netwrix-auditor-user-activity-video-recording.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/how-to-configure-user-activity-to-trigger-a-recording-session-on-program-execution.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/how-to-discover-inactive-users-with-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/how-to-edit-schedules-in-netwrix-auditor-inactive-user-tracker.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/inactive-users-tracker-locks-out-active-accounts-not-logging-to-windows.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/manually-update-user-activity-core-service.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/netwrix-inactive-users-tracker-does-not-perform-any-actions-on-inactive-accounts.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/netwrix-inactive-users-tracker-ignores-disabled-user-accounts-and-does-not-report-them-as-inactive.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/object-reference-not-set-to-instance-of-object-in-inactive-user-tracker-health-log.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/service-did-not-respond-to-the-start-or-control-request-error-in-user-activity-service.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/some-accounts-were-not-moved-or-deleted-in-inactive-user-tracker-report.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/the-user-activity-video-reporter-agent-is-not-being-installed-on-monitored-server.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/unable-to-launch-netwrix-auditor-user-activity-core-service.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/uninstalling-user-activity-monitoring-agents.md (100%)
 rename docs/kb/auditor/{ => monitoring-plans/user-activity-monitoring}/user-activity-video-is-not-being-captured.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/alerts-and-rules}/how-to-get-single-alert-on-mass-objects-modification.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/alerts-and-rules}/how-to-remove-footer-from-real-time-alert-emails.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/alerts-and-rules}/how-to-use-sms-text-for-alerts.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/alerts-and-rules}/logs-to-collect-for-netwrix-auditor-sms-alert-issues.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/alerts-and-rules}/setting-up-account-lockout-alert.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/alerts-and-rules}/the-best-way-to-find-the-attribute-name-when-configuring-real-time-alerts.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/alerts-and-rules}/unable-to-create-real-time-alerts.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/alerts-and-rules}/why-i-get-alerts-on-accounts-that-cannot-be-locked-out.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/email-notifications}/activity_summary_emails_contain_.zip_files.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/email-notifications}/expiry-notifications-sent-to-some-users-only.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/email-notifications}/how-to-change-smtp-timeout.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/email-notifications}/how-to-customize-email-notification-template.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/email-notifications}/notifications-are-not-sent-to-distribution-groups.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/email-notifications}/notifications-are-not-sent.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/email-notifications}/ssl-exception-failed-to-deliver-netwrix-auditor-health-summary-email.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/email-notifications}/when-is-the-password-expiration-notification-sent.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/ad-hoc-and-email-reports-shows-different-results-in-one-way-trust-forests-environment.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/alert-reported-change-made-by-system.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/can-any-additional-attribites-be-displayed-in-the-modification-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/can-t-find-a-file-share-in-a-report.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/can-t-find-info-about-largest-files-in-the-files-and-folders-created-report.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/certificate-related-and-unauthorized-errors-occur-when-trying-to-review-netwrix-auditor-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/changes-are-reported-with-incorrect-timestamps-and-change-summaries-are-sent-outside-the-schedule.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/changes-reported-in-wrong-time-zone.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/error-500-when-viewing-and-accessing-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/error-503-reports-and-subscriptions-not-working.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/error-during-report-processing-rserrorimpersonatinguser-running-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/error-generating-a-report-in-ssrs-http-error-401-unauthorized.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/error-scale-out-deployment-is-not-supported-in-this-edition-of-reporting-services.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/exporting-information-on-account-lockout-events.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/filtering-reports-by-the-user-who-made-changes.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/fixing-reports-displaying-letters-instead-of-command-text-in-ssrs.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-do-i-exclude-access-events-to-the-calendar-and-contacts-folders-from-product-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-exclude-specific-user-accounts-from-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-exclude-the-public-key-infrastructure-pki-changes-from-being-reported.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-exclude-user-s-extended-properties-from-being-reported.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-filter-out-certain-users-from-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-filter-out-specific-events-from-being-monitored-by-the-logon-reporter-software.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-modify-ssrs-report-timeouts.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-modify-the-recipient-list-for-activity-summary-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-omit-certain-object-changes-from-being-reported.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-omit-user-account-locked-out-events-from-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-prepare-for-printing-ssrs-based-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-remove-a-decomissioned-server-from-ssrs-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-troubleshoot-issue-when-changes-are-listed-as-made-by-system-in-a-change-report.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-troubleshoot-overwrites-in-change-reports-for-vmware.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/how-to-use-wildcards-in-netwrix-auditor-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/html-reports-have-an-issue-with-non-latin-characters.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/impossible-to-export-a-report.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/include-change-password-events-by-users-via-ctrl-alt-del-combination-in-netwrix-auditor-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/incorrect-data-in-reports-without-any-warnings.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/japanese-characters-missing-or-displayed-incorrectly-in-pdf-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/logon-failed-for-unattended-execution-account-running-netwrix-auditor-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/netwrix-auditor-risk-assessment-reports-reference-table.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/no-data-is-present-in-reports-the-who-field-contains-the-system-value.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/object-deletion-does-not-show-up-in-alerts-and-reports-when-running-netwrix-auditor-under-non-admin-.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/operation-has-timed-out-for-cef-export-siem-add-on.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/reporting-services-error-cannot-check-the-content-manager-role-on-the-report-server.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/reports-for-subscriptions-are-missing-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/reports-generation-takes-a-while-and-completes-with-errors.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/security-groups-are-not-fully-displayed-in-the-azure-ad-accounts-attributes-report.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/state-in-time-reports-do-not-show-gpo-settings-values.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/subscription-reports-errors.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/the-email-address-column-in-the-enrollment-report.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/the-product-does-not-report-on-changes-to-calendar.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/unable-to-generate-reports-after-migration.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/unable-to-run-reports-system-cannot-find-the-file-specified.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/unable-to-save-reports-as-office-document-excel-word-or-powerpoint-with-ssrs-2019.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/why-do-i-get-multiple-events-on-password-changing-in-reports.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/why-false-positive-read-access-attempts-are-reported-by-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/why-reports-reflect-folders-that-were-not-supposed-to-be-scanned.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/report-generation}/workstation-field-reported-as-unknown.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/subscriptions-and-distribution}/netwrix-auditor-was-unable-to-deliver-the-subscription-due-to-following-error-access-is-denied.md (100%)
 rename "docs/kb/auditor/remote_certificate_is_invalid_according_to_validation_procedure_\342\200\224_subscriptions_error_in_netwrix_aud.md" => "docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/remote_certificate_is_invalid_according_to_validation_procedure_\342\200\224_subscriptions_error_in_netwrix_aud.md" (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/subscriptions-and-distribution}/subscription-attachments-exceeding-the-size-limit-are-missing-from-lostandfound.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/subscriptions-and-distribution}/subscription-generation-fails-due-to-incorrect-date-from-value.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/subscriptions-and-distribution}/unable-to-save-subscription-file-to-a-shared-location.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/subscriptions-and-distribution}/unable-to-update-netwrix-auditor-due-to-contract-or-subscription-expiration.md (100%)
 rename docs/kb/auditor/{ => reports-alerts-and-notifications/subscriptions-and-distribution}/why-does-the-when-field-disappear-in-subscriptions.md (100%)
 rename docs/kb/auditor/{ => system-administration/backup-and-recovery}/backup-recommendations.md (100%)
 rename docs/kb/auditor/{ => system-administration/backup-and-recovery}/backups-folder-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/corruption-of-the-database-owner-record.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/could-not-allocate-space-for-object-objectname-in-database-databasename.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/database-contains-tables-not-compatible-with-the-product.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/database-performance-loss.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/db-owner-has-been-removed-from-databases.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/deploying-the-report-server-database.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/error-can-not-process-sql-commands-for-the-netwrix-auditor-self-audit-database.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/error-database-owner-sid-mismatch.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/error-login-failed-cannot-open-database-in-reports.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/error-while-transaction-db-import-operation.md (100%)
 rename "docs/kb/auditor/failed_to_load_registry_hive_\342\210\222_system_cannot_find_file_specified_configuration_registry_database_is_.md" => "docs/kb/auditor/system-administration/database-management/failed_to_load_registry_hive_\342\210\222_system_cannot_find_file_specified_configuration_registry_database_is_.md" (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/how-to-assign-db-owner-permissions.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/how-to-control-the-size-of-netwrixsqlcraudit-databases-on-sql-instances-and-what-it-is-needed-for.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/how-to-count-number-of-cpu-cores-on-your-oracle-database-deployment.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/how-to-create-new-reporting-databases.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/how-to-get-database-content-audit-working.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/how-to-move-reporting-databases-to-a-new-drive.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/how-to-recreate-alerts-database.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/how-to-reduce-audit-database-size-for-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/how-to-remove-old-oracle-database-audit-events.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/how-to-upload-audit-data-from-the-long-term-archive-to-audit-database.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/i-can-t-see-changed-values-with-database-content-audit.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/not-all-changes-are-included-in-reports-for-database-content-audit.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/recovery-mode-changes-in-sql-databases.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/ssrs-tempdb-permanently-grows-large-and-occupies-disk-space.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/the-following-error-occurred-during-the-sql-database-content-audit-configuration-could-not-obtain-in.md (100%)
 rename docs/kb/auditor/{ => system-administration/database-management}/warning-the-netwrixsqlcraudit-database-with-audit-data-does-not-exist-or-cannot-be-accessed.md (100%)
 rename docs/kb/auditor/{ => system-administration/licensing-and-compliance}/audit-policy-settings-for-pci-compliance.md (100%)
 rename docs/kb/auditor/{ => system-administration/licensing-and-compliance}/data-missing-after-the-license-expiration.md (100%)
 rename docs/kb/auditor/{ => system-administration/licensing-and-compliance}/essential-netwrix-license-usage-data-and-url-resources.md (100%)
 rename docs/kb/auditor/{ => system-administration/licensing-and-compliance}/freeware-license-code.md (100%)
 rename docs/kb/auditor/{ => system-administration/licensing-and-compliance}/how-to-apply-netwrix-auditor-license.md (100%)
 rename docs/kb/auditor/{ => system-administration/licensing-and-compliance}/how-to-apply-the-license-to-virtual-appliance.md (100%)
 rename docs/kb/auditor/{ => system-administration/licensing-and-compliance}/netwrix-auditor-licenses-and-plans.md (100%)
 rename docs/kb/auditor/{ => system-administration/migration-and-upgrade}/error_web_reports_url_not_working_after_upgrade.md (100%)
 rename docs/kb/auditor/{ => system-administration/migration-and-upgrade}/extended_runtime_for_0-create_schema_job_post_v12.0_upgrade.md (100%)
 rename docs/kb/auditor/{ => system-administration/migration-and-upgrade}/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location.md (100%)
 rename docs/kb/auditor/{ => system-administration/migration-and-upgrade}/how-to-prepare-netwrix-server-for-os-upgrade.md (100%)
 rename docs/kb/auditor/{ => system-administration/migration-and-upgrade}/how-to-prepare-the-netwrix-server-for-a-sql-upgrade.md (100%)
 rename docs/kb/auditor/{ => system-administration/migration-and-upgrade}/how-to-upgrade-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => system-administration/migration-and-upgrade}/netwrix-auditor-upgrade-process-taking-too-long.md (100%)
 rename docs/kb/auditor/{ => system-administration/migration-and-upgrade}/netwrix_auditor_data_collection_service_crashes_after_upgrade_to_v10.7.13707.md (100%)
 rename docs/kb/auditor/{ => system-administration/migration-and-upgrade}/upgrade-increments-for-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => system-administration/migration-and-upgrade}/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md (100%)
 rename docs/kb/auditor/{ => system-administration/security-hardening}/antivirus-exclusions-for-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/connection-errors}/cannot-establish-connection-to-compression-service.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/connection-errors}/object-type-of-rras-administration-connection-point.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/connection-errors}/remote-service-control-manager-connection-timout.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/authentication-unsuccessful-request-did-not-meet-authentication-criteria-error.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/cannot-access-roles-page.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/cannot-access-the-help-desk-portal.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/cannot-complete-login-due-to-an-incorrect-user-name-or-password.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/cannot-copy-snapshot-to-long-term-archive-access-to-short-term-archive-is-denied.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/cannot-obtain-credential-information-for-mapped-drive.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/cannot-retrieve-audit-settings-in-audit-configuration-assistant.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/cannot_remove_ui_configuration_from_jobs_using_powershell_data_collector_jobs_with_parameters.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/change-analysis-completed-with-error-error-saving-current-vmware-virtual-center-snapshot-the-server-.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/classifications-for-new-categories-in-opentext-content-server-have-failed-to-write-to-the-documents.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/connection-failed-0x80070721-failed-to-process-a-request-because-the-target-server-is-unreachable.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-0x80040605-connection-failed.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-0x800706ba-rpc-server-is-unavailable.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-0x800706d3-authentication-service-is-unknown.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-403.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-a-required-privilege-is-not-held-by-the-client.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-a-transport-level-error-has-occurred-when-sending-the-request-to-the-server.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-an-item-with-the-same-key-has-already-been-added.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-an-unknown-error-occurred-while-processing-the-request-on-the-server.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-auditing-of-directory-service-access-and-successful-account-management-events-is-not-enabled-f.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-cannot-create-a-connection-to-data-source-ds.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-certificate-with-identifier-is-not-registered-on-application.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-could-not-connect-to-server.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-during-agent-operation-on-server-no-such-host-is-known.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-failed-to-copy-remote-distributed-modules.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-failed-to-load-registry-hive-file-is-used-by-another-process.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-feature-you-are-trying-to-use-is-on-network-resource-that-is-unavailable.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-invalid-login-response-in-vmware-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-memory-limit-is-reached.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-netwrix-auditor-looks-up-additional-system-components-and-updates-required-for-monitoring.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-no-connection-could-be-made.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-no-more-threads.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-request-operation-timeout.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-saving-current-vmware-virtual-center-snapshot-permission-to-perform-this-operation-was-denied.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-service-did-not-respond-to-start-or-control-request-in-ssrs.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-size-of-collected-data-files-exceeded-limit-in-logon-activity-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-snapshot-saving-process-was-interrupted.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-sql-error-invalid-class.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-the-maximum-password-age-is-not-set.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-the-new-task-has-been-created-but-may-not-run-because-of-an-error-exception-from-hresult-0x800.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-the-pipe-endpoint-cannot-be-found.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-the-remote-procedure-call-failed.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error-when-applying-new-wildcard-certificate-to-ssrs-the-specified-url-was-unexpectedly-reserved.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error_certificate_with_identifier_is_not_registered_on_application.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/error_the_custom_attribute_{x}_was_requested,_but_not_set_in_domain_1_for_the_{y}_object_class.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/failed-logon-attempts-after-recent-service-account-password-change.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/failed-to-login-by-user-netwrix-service-account.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/failed-to-open-log.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/group-policy-error-is-not-in-a-valid-format.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/how-to-detect-the-root-cause-of-multiple-failed-logons.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/how-to-figure-out-the-ip-address-used-for-a-failed-logon-attempt.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/how-to-find-destination-of-failed-ntlm-logons.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/how-to-investigate-compression-services-errors.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/i-cannot-see-sql-changes-made-in-my-third-party-application.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/insufficient-memory-and-not-enough-storage-errors.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/invalid-character-value-for-cast-specification-error-occurs-when-trying-to-store-audit-data.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/investigating-failed-logons.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/kds-removal-tool-for-adv-2023-003-failed-to-load-configuration-file.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/message-size-exceeds-fixed-maximum-message-size-error-in-health-log.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/netwrix-auditor-data-collection-account-failed-logons-account-lockouts.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/netwrix-auditor-failed-to-collect-the-administrator-audit-log.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/permission-denied-error-code-2146828218.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/rscannotvalidateencrypteddata-unable-to-validate-integrity-of-encrypted-data.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/specified-logon-session-does-not-exist-error-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/specified-network-name-is-no-longer-available-error-in-logon-activity-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/system-cannot-find-the-path-specified-in-logon-activity-monitoring-plan.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/the-remote-procedure-call-failed-error-when-collecting-logs.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/transport-failed-to-connect-to-server.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/ts-collection-failed-warning.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/vserver-api-missing-vserver-parameter-error-when-auditing-netapp-cluster.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/warning-the-following-error-occurred-when-trying-to-perform-automatic-audit-configuration.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/weak_password_job_errors_system.io.filenotfoundexception_could_not_load_file_or_assembly_dsinternals.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/why-do-i-have-incomplete-information-on-failed-logons.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/wmi-classes-data-provider-failed-service-cannot-be-started.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/data-collection-errors}/wmi-classes-data-provider-failed-to-get-the-information-on-win32-printer-error.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/permission-and-authentication-errors}/netwrix-auditor-api-authentication-in-kerberos-only-environment.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/permission-and-authentication-errors}/rbac-authorization-returns-access-denied.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/permission-and-authentication-errors}/while_auditing_from_external_domain_failed_4768_event_'a_kerberos_authentication_ticket_(tgt)_was_re.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/ssl-tls-certificate-issues}/automatic-user-enrollment-failed-server-certificate-revocation-check-failed.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/ssl-tls-certificate-issues}/generate-self-signed-ssl-certificate-for-ssrs.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/ssl-tls-certificate-issues}/how_to_make_netwrix_auditor_upload_data_to_sql_using_tls_1.2.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/ssl-tls-certificate-issues}/retrieving_a_list_of_expiring_ssltls_certificates_and_their_expiration_dates.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/ssl-tls-certificate-issues}/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel.md (100%)
 rename docs/kb/auditor/{ => troubleshooting-and-errors/ssl-tls-certificate-issues}/use-certificate-authority-issued-certificates-in-ssrs.md (100%)
 rename "docs/kb/auditor/\321\201onnection_issue_when_tls_1.2_is_required.md" => "docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/\321\201onnection_issue_when_tls_1.2_is_required.md" (100%)

diff --git a/docs/kb/auditor/active-directory-compression-service-continuously-starting-and-stopping.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-compression-service-continuously-starting-and-stopping.md
similarity index 100%
rename from docs/kb/auditor/active-directory-compression-service-continuously-starting-and-stopping.md
rename to docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-compression-service-continuously-starting-and-stopping.md
diff --git a/docs/kb/auditor/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md
similarity index 100%
rename from docs/kb/auditor/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md
rename to docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md
diff --git a/docs/kb/auditor/active-directory-object-restore.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-object-restore.md
similarity index 100%
rename from docs/kb/auditor/active-directory-object-restore.md
rename to docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-object-restore.md
diff --git a/docs/kb/auditor/active_directory_collection_jobs_do_not_run_with_gmsa.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active_directory_collection_jobs_do_not_run_with_gmsa.md
similarity index 100%
rename from docs/kb/auditor/active_directory_collection_jobs_do_not_run_with_gmsa.md
rename to docs/kb/auditor/configuration-and-setup/active-directory-auditing/active_directory_collection_jobs_do_not_run_with_gmsa.md
diff --git a/docs/kb/auditor/audit-extension-attributes-in-active-directory.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/audit-extension-attributes-in-active-directory.md
similarity index 100%
rename from docs/kb/auditor/audit-extension-attributes-in-active-directory.md
rename to docs/kb/auditor/configuration-and-setup/active-directory-auditing/audit-extension-attributes-in-active-directory.md
diff --git a/docs/kb/auditor/determining-the-number-of-enabled-active-directory-user-accounts.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/determining-the-number-of-enabled-active-directory-user-accounts.md
similarity index 100%
rename from docs/kb/auditor/determining-the-number-of-enabled-active-directory-user-accounts.md
rename to docs/kb/auditor/configuration-and-setup/active-directory-auditing/determining-the-number-of-enabled-active-directory-user-accounts.md
diff --git a/docs/kb/auditor/how-to-omit-warnings-in-netwrix-auditor-for-active-directory-when-audit-is-properly-configured.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/how-to-omit-warnings-in-netwrix-auditor-for-active-directory-when-audit-is-properly-configured.md
similarity index 100%
rename from docs/kb/auditor/how-to-omit-warnings-in-netwrix-auditor-for-active-directory-when-audit-is-properly-configured.md
rename to docs/kb/auditor/configuration-and-setup/active-directory-auditing/how-to-omit-warnings-in-netwrix-auditor-for-active-directory-when-audit-is-properly-configured.md
diff --git a/docs/kb/auditor/how-to-remove-netwrix-auditor-for-active-directory-group-policy-and-exchange.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/how-to-remove-netwrix-auditor-for-active-directory-group-policy-and-exchange.md
similarity index 100%
rename from docs/kb/auditor/how-to-remove-netwrix-auditor-for-active-directory-group-policy-and-exchange.md
rename to docs/kb/auditor/configuration-and-setup/active-directory-auditing/how-to-remove-netwrix-auditor-for-active-directory-group-policy-and-exchange.md
diff --git a/docs/kb/auditor/integration-and-authorization-of-netwrix-auditor-in-active-directory.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/integration-and-authorization-of-netwrix-auditor-in-active-directory.md
similarity index 100%
rename from docs/kb/auditor/integration-and-authorization-of-netwrix-auditor-in-active-directory.md
rename to docs/kb/auditor/configuration-and-setup/active-directory-auditing/integration-and-authorization-of-netwrix-auditor-in-active-directory.md
diff --git a/docs/kb/auditor/reducing-the-used-active-directory-and-entra-id-license-counts.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md
similarity index 100%
rename from docs/kb/auditor/reducing-the-used-active-directory-and-entra-id-license-counts.md
rename to docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md
diff --git a/docs/kb/auditor/rollback-for-attribute-has-failed-error-in-object-restore-for-active-directory.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/rollback-for-attribute-has-failed-error-in-object-restore-for-active-directory.md
similarity index 100%
rename from docs/kb/auditor/rollback-for-attribute-has-failed-error-in-object-restore-for-active-directory.md
rename to docs/kb/auditor/configuration-and-setup/active-directory-auditing/rollback-for-attribute-has-failed-error-in-object-restore-for-active-directory.md
diff --git a/docs/kb/auditor/what-are-netwrix-auditor-for-active-directory-bandwidth-requirements.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/what-are-netwrix-auditor-for-active-directory-bandwidth-requirements.md
similarity index 100%
rename from docs/kb/auditor/what-are-netwrix-auditor-for-active-directory-bandwidth-requirements.md
rename to docs/kb/auditor/configuration-and-setup/active-directory-auditing/what-are-netwrix-auditor-for-active-directory-bandwidth-requirements.md
diff --git "a/docs/kb/auditor/cannot_execute_powershell_\321\201ommand_error_in_exchange_online_monitoring_plan.md" "b/docs/kb/auditor/configuration-and-setup/exchange-auditing/cannot_execute_powershell_\321\201ommand_error_in_exchange_online_monitoring_plan.md"
similarity index 100%
rename from "docs/kb/auditor/cannot_execute_powershell_\321\201ommand_error_in_exchange_online_monitoring_plan.md"
rename to "docs/kb/auditor/configuration-and-setup/exchange-auditing/cannot_execute_powershell_\321\201ommand_error_in_exchange_online_monitoring_plan.md"
diff --git a/docs/kb/auditor/could_not_load_system.net.http_in_exchange_online_monitoring_plan.md b/docs/kb/auditor/configuration-and-setup/exchange-auditing/could_not_load_system.net.http_in_exchange_online_monitoring_plan.md
similarity index 100%
rename from docs/kb/auditor/could_not_load_system.net.http_in_exchange_online_monitoring_plan.md
rename to docs/kb/auditor/configuration-and-setup/exchange-auditing/could_not_load_system.net.http_in_exchange_online_monitoring_plan.md
diff --git a/docs/kb/auditor/error-content-index-state-failed-when-auditing-mailbox-access-on-exchange-2013.md b/docs/kb/auditor/configuration-and-setup/exchange-auditing/error-content-index-state-failed-when-auditing-mailbox-access-on-exchange-2013.md
similarity index 100%
rename from docs/kb/auditor/error-content-index-state-failed-when-auditing-mailbox-access-on-exchange-2013.md
rename to docs/kb/auditor/configuration-and-setup/exchange-auditing/error-content-index-state-failed-when-auditing-mailbox-access-on-exchange-2013.md
diff --git a/docs/kb/auditor/exchange-server-name-instead-of-user-in-reports.md b/docs/kb/auditor/configuration-and-setup/exchange-auditing/exchange-server-name-instead-of-user-in-reports.md
similarity index 100%
rename from docs/kb/auditor/exchange-server-name-instead-of-user-in-reports.md
rename to docs/kb/auditor/configuration-and-setup/exchange-auditing/exchange-server-name-instead-of-user-in-reports.md
diff --git a/docs/kb/auditor/how-to-configure-netwrix-non-owner-mailbox-access-reporter-to-monitor-clusters-of-exchange-servers.md b/docs/kb/auditor/configuration-and-setup/exchange-auditing/how-to-configure-netwrix-non-owner-mailbox-access-reporter-to-monitor-clusters-of-exchange-servers.md
similarity index 100%
rename from docs/kb/auditor/how-to-configure-netwrix-non-owner-mailbox-access-reporter-to-monitor-clusters-of-exchange-servers.md
rename to docs/kb/auditor/configuration-and-setup/exchange-auditing/how-to-configure-netwrix-non-owner-mailbox-access-reporter-to-monitor-clusters-of-exchange-servers.md
diff --git a/docs/kb/auditor/how-to-determine-the-exchange-web-services-ews-url.md b/docs/kb/auditor/configuration-and-setup/exchange-auditing/how-to-determine-the-exchange-web-services-ews-url.md
similarity index 100%
rename from docs/kb/auditor/how-to-determine-the-exchange-web-services-ews-url.md
rename to docs/kb/auditor/configuration-and-setup/exchange-auditing/how-to-determine-the-exchange-web-services-ews-url.md
diff --git a/docs/kb/auditor/how-to-filter-out-certain-mailboxes-and-folders-from-reports.md b/docs/kb/auditor/configuration-and-setup/exchange-auditing/how-to-filter-out-certain-mailboxes-and-folders-from-reports.md
similarity index 100%
rename from docs/kb/auditor/how-to-filter-out-certain-mailboxes-and-folders-from-reports.md
rename to docs/kb/auditor/configuration-and-setup/exchange-auditing/how-to-filter-out-certain-mailboxes-and-folders-from-reports.md
diff --git a/docs/kb/auditor/how-to-omit-changes-to-the-msexchmobilemailboxpolicybl-attribute.md b/docs/kb/auditor/configuration-and-setup/exchange-auditing/how-to-omit-changes-to-the-msexchmobilemailboxpolicybl-attribute.md
similarity index 100%
rename from docs/kb/auditor/how-to-omit-changes-to-the-msexchmobilemailboxpolicybl-attribute.md
rename to docs/kb/auditor/configuration-and-setup/exchange-auditing/how-to-omit-changes-to-the-msexchmobilemailboxpolicybl-attribute.md
diff --git a/docs/kb/auditor/how-to-omit-some-exchange-server-attributes-from-being-reported.md b/docs/kb/auditor/configuration-and-setup/exchange-auditing/how-to-omit-some-exchange-server-attributes-from-being-reported.md
similarity index 100%
rename from docs/kb/auditor/how-to-omit-some-exchange-server-attributes-from-being-reported.md
rename to docs/kb/auditor/configuration-and-setup/exchange-auditing/how-to-omit-some-exchange-server-attributes-from-being-reported.md
diff --git a/docs/kb/auditor/how-to-specify-exchange-server-to-collect-administrator-audit-log.md b/docs/kb/auditor/configuration-and-setup/exchange-auditing/how-to-specify-exchange-server-to-collect-administrator-audit-log.md
similarity index 100%
rename from docs/kb/auditor/how-to-specify-exchange-server-to-collect-administrator-audit-log.md
rename to docs/kb/auditor/configuration-and-setup/exchange-auditing/how-to-specify-exchange-server-to-collect-administrator-audit-log.md
diff --git a/docs/kb/auditor/non-owner-mailbox-access-data-missing-in-exchange-auditing-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/exchange-auditing/non-owner-mailbox-access-data-missing-in-exchange-auditing-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/non-owner-mailbox-access-data-missing-in-exchange-auditing-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/exchange-auditing/non-owner-mailbox-access-data-missing-in-exchange-auditing-monitoring-plan.md
diff --git a/docs/kb/auditor/the-following-issues-have-been-detected-when-trying-to-configure-exchange-server-administrator-audit.md b/docs/kb/auditor/configuration-and-setup/exchange-auditing/the-following-issues-have-been-detected-when-trying-to-configure-exchange-server-administrator-audit.md
similarity index 100%
rename from docs/kb/auditor/the-following-issues-have-been-detected-when-trying-to-configure-exchange-server-administrator-audit.md
rename to docs/kb/auditor/configuration-and-setup/exchange-auditing/the-following-issues-have-been-detected-when-trying-to-configure-exchange-server-administrator-audit.md
diff --git a/docs/kb/auditor/users-access-their-own-mailboxes.md b/docs/kb/auditor/configuration-and-setup/exchange-auditing/users-access-their-own-mailboxes.md
similarity index 100%
rename from docs/kb/auditor/users-access-their-own-mailboxes.md
rename to docs/kb/auditor/configuration-and-setup/exchange-auditing/users-access-their-own-mailboxes.md
diff --git a/docs/kb/auditor/cannot-establish-a-connection-to-a-windows-file-server-compression-service.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/cannot-establish-a-connection-to-a-windows-file-server-compression-service.md
similarity index 100%
rename from docs/kb/auditor/cannot-establish-a-connection-to-a-windows-file-server-compression-service.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/cannot-establish-a-connection-to-a-windows-file-server-compression-service.md
diff --git a/docs/kb/auditor/child-item-with-this-name-already-exists-in-file-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/child-item-with-this-name-already-exists-in-file-server-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/child-item-with-this-name-already-exists-in-file-server-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/child-item-with-this-name-already-exists-in-file-server-monitoring-plan.md
diff --git a/docs/kb/auditor/error-netwrix-auditor-for-file-servers-audit-service-terminated-unexpectedly.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/error-netwrix-auditor-for-file-servers-audit-service-terminated-unexpectedly.md
similarity index 100%
rename from docs/kb/auditor/error-netwrix-auditor-for-file-servers-audit-service-terminated-unexpectedly.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/error-netwrix-auditor-for-file-servers-audit-service-terminated-unexpectedly.md
diff --git a/docs/kb/auditor/file-servers-security-descriptor-of-file-share-is-empty.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/file-servers-security-descriptor-of-file-share-is-empty.md
similarity index 100%
rename from docs/kb/auditor/file-servers-security-descriptor-of-file-share-is-empty.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/file-servers-security-descriptor-of-file-share-is-empty.md
diff --git a/docs/kb/auditor/how-to-audit-file-servers-with-enabled-user-account-control.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/how-to-audit-file-servers-with-enabled-user-account-control.md
similarity index 100%
rename from docs/kb/auditor/how-to-audit-file-servers-with-enabled-user-account-control.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/how-to-audit-file-servers-with-enabled-user-account-control.md
diff --git a/docs/kb/auditor/how-to-change-the-frequency-of-data-collections-for-file-server-auditing.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/how-to-change-the-frequency-of-data-collections-for-file-server-auditing.md
similarity index 100%
rename from docs/kb/auditor/how-to-change-the-frequency-of-data-collections-for-file-server-auditing.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/how-to-change-the-frequency-of-data-collections-for-file-server-auditing.md
diff --git a/docs/kb/auditor/how-to-enable-item-level-auditing-on-multiple-file-servers.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/how-to-enable-item-level-auditing-on-multiple-file-servers.md
similarity index 100%
rename from docs/kb/auditor/how-to-enable-item-level-auditing-on-multiple-file-servers.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/how-to-enable-item-level-auditing-on-multiple-file-servers.md
diff --git a/docs/kb/auditor/netwrix-auditor-for-file-servers-audit-service-stops-after-each-startup.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/netwrix-auditor-for-file-servers-audit-service-stops-after-each-startup.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-for-file-servers-audit-service-stops-after-each-startup.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/netwrix-auditor-for-file-servers-audit-service-stops-after-each-startup.md
diff --git a/docs/kb/auditor/netwrix-auditor-for-file-servers-reports-excessive-file-read-attempts-that-did-not-actually-occur.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/netwrix-auditor-for-file-servers-reports-excessive-file-read-attempts-that-did-not-actually-occur.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-for-file-servers-reports-excessive-file-read-attempts-that-did-not-actually-occur.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/netwrix-auditor-for-file-servers-reports-excessive-file-read-attempts-that-did-not-actually-occur.md
diff --git a/docs/kb/auditor/symbolic-link-cannot-be-followed-error-in-file-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/symbolic-link-cannot-be-followed-error-in-file-server-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/symbolic-link-cannot-be-followed-error-in-file-server-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/symbolic-link-cannot-be-followed-error-in-file-server-monitoring-plan.md
diff --git a/docs/kb/auditor/the-disk-on-a-monitored-file-server-is-overfilled.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/the-disk-on-a-monitored-file-server-is-overfilled.md
similarity index 100%
rename from docs/kb/auditor/the-disk-on-a-monitored-file-server-is-overfilled.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/the-disk-on-a-monitored-file-server-is-overfilled.md
diff --git a/docs/kb/auditor/this-shared-resource-does-not-exist-error-in-file-servers-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/this-shared-resource-does-not-exist-error-in-file-servers-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/this-shared-resource-does-not-exist-error-in-file-servers-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/this-shared-resource-does-not-exist-error-in-file-servers-monitoring-plan.md
diff --git a/docs/kb/auditor/types-of-the-data-collection-for-file-servers-auditing.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/types-of-the-data-collection-for-file-servers-auditing.md
similarity index 100%
rename from docs/kb/auditor/types-of-the-data-collection-for-file-servers-auditing.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/types-of-the-data-collection-for-file-servers-auditing.md
diff --git a/docs/kb/auditor/unexpected-end-of-file-error-in-file-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/unexpected-end-of-file-error-in-file-server-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/unexpected-end-of-file-error-in-file-server-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/unexpected-end-of-file-error-in-file-server-monitoring-plan.md
diff --git a/docs/kb/auditor/volume-shadow-copy-service-support-in-netwrix-auditor-for-file-servers.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/volume-shadow-copy-service-support-in-netwrix-auditor-for-file-servers.md
similarity index 100%
rename from docs/kb/auditor/volume-shadow-copy-service-support-in-netwrix-auditor-for-file-servers.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/volume-shadow-copy-service-support-in-netwrix-auditor-for-file-servers.md
diff --git a/docs/kb/auditor/what-is-sessionid-in-netwrix-auditor-for-file-servers.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/what-is-sessionid-in-netwrix-auditor-for-file-servers.md
similarity index 100%
rename from docs/kb/auditor/what-is-sessionid-in-netwrix-auditor-for-file-servers.md
rename to docs/kb/auditor/configuration-and-setup/file-server-auditing/what-is-sessionid-in-netwrix-auditor-for-file-servers.md
diff --git a/docs/kb/auditor/ale-service-is-unable-to-start-during-installation.md b/docs/kb/auditor/configuration-and-setup/general-configuration/ale-service-is-unable-to-start-during-installation.md
similarity index 100%
rename from docs/kb/auditor/ale-service-is-unable-to-start-during-installation.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/ale-service-is-unable-to-start-during-installation.md
diff --git a/docs/kb/auditor/compression-service-does-not-appear-under-installed-programs-but-still-exists-in-the-services-overvi.md b/docs/kb/auditor/configuration-and-setup/general-configuration/compression-service-does-not-appear-under-installed-programs-but-still-exists-in-the-services-overvi.md
similarity index 100%
rename from docs/kb/auditor/compression-service-does-not-appear-under-installed-programs-but-still-exists-in-the-services-overvi.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/compression-service-does-not-appear-under-installed-programs-but-still-exists-in-the-services-overvi.md
diff --git a/docs/kb/auditor/error-6503-netwrix-auditor-cannot-configure-nutanix-files-audit-settings-unexpected-http-status-code.md b/docs/kb/auditor/configuration-and-setup/general-configuration/error-6503-netwrix-auditor-cannot-configure-nutanix-files-audit-settings-unexpected-http-status-code.md
similarity index 100%
rename from docs/kb/auditor/error-6503-netwrix-auditor-cannot-configure-nutanix-files-audit-settings-unexpected-http-status-code.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/error-6503-netwrix-auditor-cannot-configure-nutanix-files-audit-settings-unexpected-http-status-code.md
diff --git a/docs/kb/auditor/error-drive-letter-resolver-is-not-installed-on-the-target-host.md b/docs/kb/auditor/configuration-and-setup/general-configuration/error-drive-letter-resolver-is-not-installed-on-the-target-host.md
similarity index 100%
rename from docs/kb/auditor/error-drive-letter-resolver-is-not-installed-on-the-target-host.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/error-drive-letter-resolver-is-not-installed-on-the-target-host.md
diff --git a/docs/kb/auditor/failed-to-install-and-configure-netwrix-auditor-access-reviews.md b/docs/kb/auditor/configuration-and-setup/general-configuration/failed-to-install-and-configure-netwrix-auditor-access-reviews.md
similarity index 100%
rename from docs/kb/auditor/failed-to-install-and-configure-netwrix-auditor-access-reviews.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/failed-to-install-and-configure-netwrix-auditor-access-reviews.md
diff --git a/docs/kb/auditor/how-to-configure-disk-space-monitor-reporting.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-disk-space-monitor-reporting.md
similarity index 100%
rename from docs/kb/auditor/how-to-configure-disk-space-monitor-reporting.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-disk-space-monitor-reporting.md
diff --git a/docs/kb/auditor/how-to-configure-granular-audit-policies-for-logon-auditing.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-granular-audit-policies-for-logon-auditing.md
similarity index 100%
rename from docs/kb/auditor/how-to-configure-granular-audit-policies-for-logon-auditing.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-granular-audit-policies-for-logon-auditing.md
diff --git a/docs/kb/auditor/how-to-configure-monitoring-of-local-accounts.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-monitoring-of-local-accounts.md
similarity index 100%
rename from docs/kb/auditor/how-to-configure-monitoring-of-local-accounts.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-monitoring-of-local-accounts.md
diff --git a/docs/kb/auditor/how-to-configure-netwrix-auditor-in-failover-mode.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-netwrix-auditor-in-failover-mode.md
similarity index 100%
rename from docs/kb/auditor/how-to-configure-netwrix-auditor-in-failover-mode.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-netwrix-auditor-in-failover-mode.md
diff --git a/docs/kb/auditor/how-to-configure-notifications-on-service-account-password-expiration.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-notifications-on-service-account-password-expiration.md
similarity index 100%
rename from docs/kb/auditor/how-to-configure-notifications-on-service-account-password-expiration.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-notifications-on-service-account-password-expiration.md
diff --git a/docs/kb/auditor/how-to-configure-the-disk-space-monitor-to-work-behind-a-firewall.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-the-disk-space-monitor-to-work-behind-a-firewall.md
similarity index 100%
rename from docs/kb/auditor/how-to-configure-the-disk-space-monitor-to-work-behind-a-firewall.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-the-disk-space-monitor-to-work-behind-a-firewall.md
diff --git a/docs/kb/auditor/how-to-configure-the-product-to-send-two-user-notifications-instead-of-three.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-the-product-to-send-two-user-notifications-instead-of-three.md
similarity index 100%
rename from docs/kb/auditor/how-to-configure-the-product-to-send-two-user-notifications-instead-of-three.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-the-product-to-send-two-user-notifications-instead-of-three.md
diff --git a/docs/kb/auditor/how-to-install-access-reviews.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-install-access-reviews.md
similarity index 100%
rename from docs/kb/auditor/how-to-install-access-reviews.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/how-to-install-access-reviews.md
diff --git a/docs/kb/auditor/how-to-install-group-policy-management-console-on-different-windows-versions.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-install-group-policy-management-console-on-different-windows-versions.md
similarity index 100%
rename from docs/kb/auditor/how-to-install-group-policy-management-console-on-different-windows-versions.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/how-to-install-group-policy-management-console-on-different-windows-versions.md
diff --git a/docs/kb/auditor/how-to-install-individual-features-for-netwrix-auditor.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-install-individual-features-for-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/how-to-install-individual-features-for-netwrix-auditor.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/how-to-install-individual-features-for-netwrix-auditor.md
diff --git a/docs/kb/auditor/how-to-properly-remove-auditor-components-prior-to-further-clear-installation.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-properly-remove-auditor-components-prior-to-further-clear-installation.md
similarity index 100%
rename from docs/kb/auditor/how-to-properly-remove-auditor-components-prior-to-further-clear-installation.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/how-to-properly-remove-auditor-components-prior-to-further-clear-installation.md
diff --git a/docs/kb/auditor/how-to-repair-netwrix-auditor-installation.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-repair-netwrix-auditor-installation.md
similarity index 100%
rename from docs/kb/auditor/how-to-repair-netwrix-auditor-installation.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/how-to-repair-netwrix-auditor-installation.md
diff --git a/docs/kb/auditor/infognition-screenpressor-installed-in-netwrix-auditor-server-and-audited-servers.md b/docs/kb/auditor/configuration-and-setup/general-configuration/infognition-screenpressor-installed-in-netwrix-auditor-server-and-audited-servers.md
similarity index 100%
rename from docs/kb/auditor/infognition-screenpressor-installed-in-netwrix-auditor-server-and-audited-servers.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/infognition-screenpressor-installed-in-netwrix-auditor-server-and-audited-servers.md
diff --git a/docs/kb/auditor/installation-fails-with-the-category-does-not-exist-message.md b/docs/kb/auditor/configuration-and-setup/general-configuration/installation-fails-with-the-category-does-not-exist-message.md
similarity index 100%
rename from docs/kb/auditor/installation-fails-with-the-category-does-not-exist-message.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/installation-fails-with-the-category-does-not-exist-message.md
diff --git a/docs/kb/auditor/new-netfirewallrule-how-to-open-ports-avoiding-manual-setup.md b/docs/kb/auditor/configuration-and-setup/general-configuration/new-netfirewallrule-how-to-open-ports-avoiding-manual-setup.md
similarity index 100%
rename from docs/kb/auditor/new-netfirewallrule-how-to-open-ports-avoiding-manual-setup.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/new-netfirewallrule-how-to-open-ports-avoiding-manual-setup.md
diff --git a/docs/kb/auditor/the-conceptserviceviewer-application-fails-to-show-the-current-service-statuses-after-installation.md b/docs/kb/auditor/configuration-and-setup/general-configuration/the-conceptserviceviewer-application-fails-to-show-the-current-service-statuses-after-installation.md
similarity index 100%
rename from docs/kb/auditor/the-conceptserviceviewer-application-fails-to-show-the-current-service-statuses-after-installation.md
rename to docs/kb/auditor/configuration-and-setup/general-configuration/the-conceptserviceviewer-application-fails-to-show-the-current-service-statuses-after-installation.md
diff --git a/docs/kb/auditor/configure-microsoft-365-data-sources-to-use-proxy-server-settings.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/configure-microsoft-365-data-sources-to-use-proxy-server-settings.md
similarity index 100%
rename from docs/kb/auditor/configure-microsoft-365-data-sources-to-use-proxy-server-settings.md
rename to docs/kb/auditor/configuration-and-setup/microsoft-365-integration/configure-microsoft-365-data-sources-to-use-proxy-server-settings.md
diff --git a/docs/kb/auditor/configure-netwrix-auditor-to-use-microsoft-365-for-email-notifications.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/configure-netwrix-auditor-to-use-microsoft-365-for-email-notifications.md
similarity index 100%
rename from docs/kb/auditor/configure-netwrix-auditor-to-use-microsoft-365-for-email-notifications.md
rename to docs/kb/auditor/configuration-and-setup/microsoft-365-integration/configure-netwrix-auditor-to-use-microsoft-365-for-email-notifications.md
diff --git a/docs/kb/auditor/connection-to-microsoft-365-tenant-in-netwrix-auditor-completes-with-error-validating-your-account-s.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/connection-to-microsoft-365-tenant-in-netwrix-auditor-completes-with-error-validating-your-account-s.md
similarity index 100%
rename from docs/kb/auditor/connection-to-microsoft-365-tenant-in-netwrix-auditor-completes-with-error-validating-your-account-s.md
rename to docs/kb/auditor/configuration-and-setup/microsoft-365-integration/connection-to-microsoft-365-tenant-in-netwrix-auditor-completes-with-error-validating-your-account-s.md
diff --git a/docs/kb/auditor/create-powershell-session-failed-using-oauth-in-microsoft-365-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/create-powershell-session-failed-using-oauth-in-microsoft-365-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/create-powershell-session-failed-using-oauth-in-microsoft-365-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/microsoft-365-integration/create-powershell-session-failed-using-oauth-in-microsoft-365-monitoring-plan.md
diff --git a/docs/kb/auditor/determining-the-number-of-enabled-microsoft-entra-id-accounts.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/determining-the-number-of-enabled-microsoft-entra-id-accounts.md
similarity index 100%
rename from docs/kb/auditor/determining-the-number-of-enabled-microsoft-entra-id-accounts.md
rename to docs/kb/auditor/configuration-and-setup/microsoft-365-integration/determining-the-number-of-enabled-microsoft-entra-id-accounts.md
diff --git a/docs/kb/auditor/disable-multi-factor-authentication-for-microsoft-365-service-accounts.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/disable-multi-factor-authentication-for-microsoft-365-service-accounts.md
similarity index 100%
rename from docs/kb/auditor/disable-multi-factor-authentication-for-microsoft-365-service-accounts.md
rename to docs/kb/auditor/configuration-and-setup/microsoft-365-integration/disable-multi-factor-authentication-for-microsoft-365-service-accounts.md
diff --git a/docs/kb/auditor/error-aadsts65001-in-microsoft-365-monitoring-plans-in-netwrix-auditor.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/error-aadsts65001-in-microsoft-365-monitoring-plans-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/error-aadsts65001-in-microsoft-365-monitoring-plans-in-netwrix-auditor.md
rename to docs/kb/auditor/configuration-and-setup/microsoft-365-integration/error-aadsts65001-in-microsoft-365-monitoring-plans-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/error-current-site-is-not-a-tenant-administration-site-in-microsoft-365-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/error-current-site-is-not-a-tenant-administration-site-in-microsoft-365-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/error-current-site-is-not-a-tenant-administration-site-in-microsoft-365-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/microsoft-365-integration/error-current-site-is-not-a-tenant-administration-site-in-microsoft-365-monitoring-plan.md
diff --git a/docs/kb/auditor/expired-certificate-in-azure-app-for-microsoft-365-tenant-in-netwrix-auditor.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/expired-certificate-in-azure-app-for-microsoft-365-tenant-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/expired-certificate-in-azure-app-for-microsoft-365-tenant-in-netwrix-auditor.md
rename to docs/kb/auditor/configuration-and-setup/microsoft-365-integration/expired-certificate-in-azure-app-for-microsoft-365-tenant-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/failed-to-collect-logons-forbidden-error-in-entra-id-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/failed-to-collect-logons-forbidden-error-in-entra-id-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/failed-to-collect-logons-forbidden-error-in-entra-id-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/microsoft-365-integration/failed-to-collect-logons-forbidden-error-in-entra-id-monitoring-plan.md
diff --git a/docs/kb/auditor/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant.md
similarity index 100%
rename from docs/kb/auditor/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant.md
rename to docs/kb/auditor/configuration-and-setup/microsoft-365-integration/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant.md
diff --git a/docs/kb/auditor/permission_manifests_for_auditing_office_365_and_microsoft_entra_id_(auditor_v10.0_and_older).md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/permission_manifests_for_auditing_office_365_and_microsoft_entra_id_(auditor_v10.0_and_older).md
similarity index 100%
rename from docs/kb/auditor/permission_manifests_for_auditing_office_365_and_microsoft_entra_id_(auditor_v10.0_and_older).md
rename to docs/kb/auditor/configuration-and-setup/microsoft-365-integration/permission_manifests_for_auditing_office_365_and_microsoft_entra_id_(auditor_v10.0_and_older).md
diff --git a/docs/kb/auditor/cannot-find-the-application-error-in-sharepoint-online-and-ms-teams-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/cannot-find-the-application-error-in-sharepoint-online-and-ms-teams-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/cannot-find-the-application-error-in-sharepoint-online-and-ms-teams-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/cannot-find-the-application-error-in-sharepoint-online-and-ms-teams-monitoring-plan.md
diff --git a/docs/kb/auditor/how-to-remove-the-netwrix-data-classification-sharepoint-add-in-conceptclassifierapp.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/how-to-remove-the-netwrix-data-classification-sharepoint-add-in-conceptclassifierapp.md
similarity index 100%
rename from docs/kb/auditor/how-to-remove-the-netwrix-data-classification-sharepoint-add-in-conceptclassifierapp.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/how-to-remove-the-netwrix-data-classification-sharepoint-add-in-conceptclassifierapp.md
diff --git a/docs/kb/auditor/how-to-renew-the-netwrix-data-classification-for-sharepoint-conceptclassifierapp-client-secret.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/how-to-renew-the-netwrix-data-classification-for-sharepoint-conceptclassifierapp-client-secret.md
similarity index 100%
rename from docs/kb/auditor/how-to-renew-the-netwrix-data-classification-for-sharepoint-conceptclassifierapp-client-secret.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/how-to-renew-the-netwrix-data-classification-for-sharepoint-conceptclassifierapp-client-secret.md
diff --git a/docs/kb/auditor/netwrix-auditor-for-sharepoint-online-fails-to-collect-data-because-the-remote-server-is-unauthorize.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/netwrix-auditor-for-sharepoint-online-fails-to-collect-data-because-the-remote-server-is-unauthorize.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-for-sharepoint-online-fails-to-collect-data-because-the-remote-server-is-unauthorize.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/netwrix-auditor-for-sharepoint-online-fails-to-collect-data-because-the-remote-server-is-unauthorize.md
diff --git a/docs/kb/auditor/operation-timed-out-in-sharepoint-online-and-teams-monitoring-plans-in-netwrix-auditor.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/operation-timed-out-in-sharepoint-online-and-teams-monitoring-plans-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/operation-timed-out-in-sharepoint-online-and-teams-monitoring-plans-in-netwrix-auditor.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/operation-timed-out-in-sharepoint-online-and-teams-monitoring-plans-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/remote_server_returned_error_(400)_bad_request_when_auditing_sharepoint_online_and_microsoft_entra_i.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/remote_server_returned_error_(400)_bad_request_when_auditing_sharepoint_online_and_microsoft_entra_i.md
similarity index 100%
rename from docs/kb/auditor/remote_server_returned_error_(400)_bad_request_when_auditing_sharepoint_online_and_microsoft_entra_i.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/remote_server_returned_error_(400)_bad_request_when_auditing_sharepoint_online_and_microsoft_entra_i.md
diff --git a/docs/kb/auditor/sharepoint-application-deployment-for-ndc.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-application-deployment-for-ndc.md
similarity index 100%
rename from docs/kb/auditor/sharepoint-application-deployment-for-ndc.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-application-deployment-for-ndc.md
diff --git a/docs/kb/auditor/sharepoint-application-installation-for-netwrix-data-classification.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-application-installation-for-netwrix-data-classification.md
similarity index 100%
rename from docs/kb/auditor/sharepoint-application-installation-for-netwrix-data-classification.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-application-installation-for-netwrix-data-classification.md
diff --git a/docs/kb/auditor/sharepoint-configuration-changes-are-reported-with-a-wrong-timestamp.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-configuration-changes-are-reported-with-a-wrong-timestamp.md
similarity index 100%
rename from docs/kb/auditor/sharepoint-configuration-changes-are-reported-with-a-wrong-timestamp.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-configuration-changes-are-reported-with-a-wrong-timestamp.md
diff --git a/docs/kb/auditor/sharepoint-core-service-deployment-failed.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-core-service-deployment-failed.md
similarity index 100%
rename from docs/kb/auditor/sharepoint-core-service-deployment-failed.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-core-service-deployment-failed.md
diff --git a/docs/kb/auditor/sharepoint-term-set-tree-fails-to-load-or-unable-to-edit-a-clue-or-term.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-term-set-tree-fails-to-load-or-unable-to-edit-a-clue-or-term.md
similarity index 100%
rename from docs/kb/auditor/sharepoint-term-set-tree-fails-to-load-or-unable-to-edit-a-clue-or-term.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-term-set-tree-fails-to-load-or-unable-to-edit-a-clue-or-term.md
diff --git a/docs/kb/auditor/some-sharepoint-events-may-be-lost-and-not-reflected-in-reports-and-change-summaries.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/some-sharepoint-events-may-be-lost-and-not-reflected-in-reports-and-change-summaries.md
similarity index 100%
rename from docs/kb/auditor/some-sharepoint-events-may-be-lost-and-not-reflected-in-reports-and-change-summaries.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/some-sharepoint-events-may-be-lost-and-not-reflected-in-reports-and-change-summaries.md
diff --git a/docs/kb/auditor/the-changes-are-reported-with-the-unknown-value-in-the-who-changed-column-for-sharepoint.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/the-changes-are-reported-with-the-unknown-value-in-the-who-changed-column-for-sharepoint.md
similarity index 100%
rename from docs/kb/auditor/the-changes-are-reported-with-the-unknown-value-in-the-who-changed-column-for-sharepoint.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/the-changes-are-reported-with-the-unknown-value-in-the-who-changed-column-for-sharepoint.md
diff --git a/docs/kb/auditor/the-changes-can-be-reported-with-the-not-applicable-value-in-the-workstation-field-for-sharepoint.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/the-changes-can-be-reported-with-the-not-applicable-value-in-the-workstation-field-for-sharepoint.md
similarity index 100%
rename from docs/kb/auditor/the-changes-can-be-reported-with-the-not-applicable-value-in-the-workstation-field-for-sharepoint.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/the-changes-can-be-reported-with-the-not-applicable-value-in-the-workstation-field-for-sharepoint.md
diff --git a/docs/kb/auditor/the-sharepoint-application-pools-are-stopped-after-the-netwrix-auditor-agent-for-sharepoint-installa.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/the-sharepoint-application-pools-are-stopped-after-the-netwrix-auditor-agent-for-sharepoint-installa.md
similarity index 100%
rename from docs/kb/auditor/the-sharepoint-application-pools-are-stopped-after-the-netwrix-auditor-agent-for-sharepoint-installa.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/the-sharepoint-application-pools-are-stopped-after-the-netwrix-auditor-agent-for-sharepoint-installa.md
diff --git a/docs/kb/auditor/the-sharepoint-managed-object-has-unable-to-connect-to-netwrix-auditor-service-for-sharepoint-error-.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/the-sharepoint-managed-object-has-unable-to-connect-to-netwrix-auditor-service-for-sharepoint-error-.md
similarity index 100%
rename from docs/kb/auditor/the-sharepoint-managed-object-has-unable-to-connect-to-netwrix-auditor-service-for-sharepoint-error-.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/the-sharepoint-managed-object-has-unable-to-connect-to-netwrix-auditor-service-for-sharepoint-error-.md
diff --git a/docs/kb/auditor/the-sharepoint-object-id-is-shown-in-the-what-column-instead-of-its-name.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/the-sharepoint-object-id-is-shown-in-the-what-column-instead-of-its-name.md
similarity index 100%
rename from docs/kb/auditor/the-sharepoint-object-id-is-shown-in-the-what-column-instead-of-its-name.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/the-sharepoint-object-id-is-shown-in-the-what-column-instead-of-its-name.md
diff --git a/docs/kb/auditor/the-sharepoint-object-value-is-shown-in-the-object-type-column-in-the-reports-instead-of-the-object-.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/the-sharepoint-object-value-is-shown-in-the-object-type-column-in-the-reports-instead-of-the-object-.md
similarity index 100%
rename from docs/kb/auditor/the-sharepoint-object-value-is-shown-in-the-object-type-column-in-the-reports-instead-of-the-object-.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/the-sharepoint-object-value-is-shown-in-the-object-type-column-in-the-reports-instead-of-the-object-.md
diff --git a/docs/kb/auditor/timeout-expired-error-on-sharepoint-core-service-deployment.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/timeout-expired-error-on-sharepoint-core-service-deployment.md
similarity index 100%
rename from docs/kb/auditor/timeout-expired-error-on-sharepoint-core-service-deployment.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/timeout-expired-error-on-sharepoint-core-service-deployment.md
diff --git a/docs/kb/auditor/troubleshoot_sharepoint_serveron-premise_errors.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/troubleshoot_sharepoint_serveron-premise_errors.md
similarity index 100%
rename from docs/kb/auditor/troubleshoot_sharepoint_serveron-premise_errors.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/troubleshoot_sharepoint_serveron-premise_errors.md
diff --git a/docs/kb/auditor/unable_to_determine_administrative_site_for_domain.sharepoint.com_error_accessing_remote_registry.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/unable_to_determine_administrative_site_for_domain.sharepoint.com_error_accessing_remote_registry.md
similarity index 100%
rename from docs/kb/auditor/unable_to_determine_administrative_site_for_domain.sharepoint.com_error_accessing_remote_registry.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/unable_to_determine_administrative_site_for_domain.sharepoint.com_error_accessing_remote_registry.md
diff --git a/docs/kb/auditor/why-do-i-receive-my-sharepoint-online-audit-data-too-late-or-do-not-receive-at-all.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/why-do-i-receive-my-sharepoint-online-audit-data-too-late-or-do-not-receive-at-all.md
similarity index 100%
rename from docs/kb/auditor/why-do-i-receive-my-sharepoint-online-audit-data-too-late-or-do-not-receive-at-all.md
rename to docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/why-do-i-receive-my-sharepoint-online-audit-data-too-late-or-do-not-receive-at-all.md
diff --git a/docs/kb/auditor/auditing-stored-procedures-on-the-sql-server.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/auditing-stored-procedures-on-the-sql-server.md
similarity index 100%
rename from docs/kb/auditor/auditing-stored-procedures-on-the-sql-server.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/auditing-stored-procedures-on-the-sql-server.md
diff --git a/docs/kb/auditor/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md
diff --git a/docs/kb/auditor/changing-the-name-of-your-sql-server-causes-database-related-errors.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/changing-the-name-of-your-sql-server-causes-database-related-errors.md
similarity index 100%
rename from docs/kb/auditor/changing-the-name-of-your-sql-server-causes-database-related-errors.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/changing-the-name-of-your-sql-server-causes-database-related-errors.md
diff --git a/docs/kb/auditor/configure-sql-server-auditing-to-ignore-addition.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/configure-sql-server-auditing-to-ignore-addition.md
similarity index 100%
rename from docs/kb/auditor/configure-sql-server-auditing-to-ignore-addition.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/configure-sql-server-auditing-to-ignore-addition.md
diff --git a/docs/kb/auditor/connection-string-is-not-valid-in-sql-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/connection-string-is-not-valid-in-sql-server-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/connection-string-is-not-valid-in-sql-server-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/connection-string-is-not-valid-in-sql-server-monitoring-plan.md
diff --git a/docs/kb/auditor/could-not-find-stored-procedure-getallproperties.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/could-not-find-stored-procedure-getallproperties.md
similarity index 100%
rename from docs/kb/auditor/could-not-find-stored-procedure-getallproperties.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/could-not-find-stored-procedure-getallproperties.md
diff --git a/docs/kb/auditor/empty-report-server-and-report-manager-urls-in-sql-server-reporting-services.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/empty-report-server-and-report-manager-urls-in-sql-server-reporting-services.md
similarity index 100%
rename from docs/kb/auditor/empty-report-server-and-report-manager-urls-in-sql-server-reporting-services.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/empty-report-server-and-report-manager-urls-in-sql-server-reporting-services.md
diff --git a/docs/kb/auditor/enable_tcpip_protocol_in_sql_server.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/enable_tcpip_protocol_in_sql_server.md
similarity index 100%
rename from docs/kb/auditor/enable_tcpip_protocol_in_sql_server.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/enable_tcpip_protocol_in_sql_server.md
diff --git a/docs/kb/auditor/error-check-your-sql-server-settings-in-audit-database-settings.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/error-check-your-sql-server-settings-in-audit-database-settings.md
similarity index 100%
rename from docs/kb/auditor/error-check-your-sql-server-settings-in-audit-database-settings.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/error-check-your-sql-server-settings-in-audit-database-settings.md
diff --git a/docs/kb/auditor/how-can-i-assign-a-specific-user-read-only-permissions-for-the-sql-server-reporting-services-reports.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-can-i-assign-a-specific-user-read-only-permissions-for-the-sql-server-reporting-services-reports.md
similarity index 100%
rename from docs/kb/auditor/how-can-i-assign-a-specific-user-read-only-permissions-for-the-sql-server-reporting-services-reports.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-can-i-assign-a-specific-user-read-only-permissions-for-the-sql-server-reporting-services-reports.md
diff --git a/docs/kb/auditor/how-do-i-migrate-the-reporting-database-to-another-ms-sql-server-instance-lower-version.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-do-i-migrate-the-reporting-database-to-another-ms-sql-server-instance-lower-version.md
similarity index 100%
rename from docs/kb/auditor/how-do-i-migrate-the-reporting-database-to-another-ms-sql-server-instance-lower-version.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-do-i-migrate-the-reporting-database-to-another-ms-sql-server-instance-lower-version.md
diff --git a/docs/kb/auditor/how-i-can-change-the-trace-log-path-on-the-audited-sql-server.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-i-can-change-the-trace-log-path-on-the-audited-sql-server.md
similarity index 100%
rename from docs/kb/auditor/how-i-can-change-the-trace-log-path-on-the-audited-sql-server.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-i-can-change-the-trace-log-path-on-the-audited-sql-server.md
diff --git a/docs/kb/auditor/how-netwrix-auditor-for-sql-server-collects-data.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-netwrix-auditor-for-sql-server-collects-data.md
similarity index 100%
rename from docs/kb/auditor/how-netwrix-auditor-for-sql-server-collects-data.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-netwrix-auditor-for-sql-server-collects-data.md
diff --git a/docs/kb/auditor/how-to-exclude-backup-events-from-the-sql-server-change-reporter-reports.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-exclude-backup-events-from-the-sql-server-change-reporter-reports.md
similarity index 100%
rename from docs/kb/auditor/how-to-exclude-backup-events-from-the-sql-server-change-reporter-reports.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-exclude-backup-events-from-the-sql-server-change-reporter-reports.md
diff --git a/docs/kb/auditor/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md
similarity index 100%
rename from docs/kb/auditor/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md
diff --git a/docs/kb/auditor/how-to-remove-all-triggers-from-sql-server-database.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-remove-all-triggers-from-sql-server-database.md
similarity index 100%
rename from docs/kb/auditor/how-to-remove-all-triggers-from-sql-server-database.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-remove-all-triggers-from-sql-server-database.md
diff --git a/docs/kb/auditor/invalid-user-settings-error-in-sql-server-reporting-services-settings.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/invalid-user-settings-error-in-sql-server-reporting-services-settings.md
similarity index 100%
rename from docs/kb/auditor/invalid-user-settings-error-in-sql-server-reporting-services-settings.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/invalid-user-settings-error-in-sql-server-reporting-services-settings.md
diff --git a/docs/kb/auditor/is-it-possible-to-have-ndc-sql-database-and-auditor-databases-on-the-same-sql-server.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/is-it-possible-to-have-ndc-sql-database-and-auditor-databases-on-the-same-sql-server.md
similarity index 100%
rename from docs/kb/auditor/is-it-possible-to-have-ndc-sql-database-and-auditor-databases-on-the-same-sql-server.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/is-it-possible-to-have-ndc-sql-database-and-auditor-databases-on-the-same-sql-server.md
diff --git a/docs/kb/auditor/migrating_netwrix_access_analyzer_database_to_a_new_sql_server.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/migrating_netwrix_access_analyzer_database_to_a_new_sql_server.md
similarity index 100%
rename from docs/kb/auditor/migrating_netwrix_access_analyzer_database_to_a_new_sql_server.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/migrating_netwrix_access_analyzer_database_to_a_new_sql_server.md
diff --git a/docs/kb/auditor/netwrix-auditor-widgets-show-the-sql-server-error-18452-login-failed.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/netwrix-auditor-widgets-show-the-sql-server-error-18452-login-failed.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-widgets-show-the-sql-server-error-18452-login-failed.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/netwrix-auditor-widgets-show-the-sql-server-error-18452-login-failed.md
diff --git a/docs/kb/auditor/permissions-granted-are-insufficient-in-sql-server-reporting-services.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/permissions-granted-are-insufficient-in-sql-server-reporting-services.md
similarity index 100%
rename from docs/kb/auditor/permissions-granted-are-insufficient-in-sql-server-reporting-services.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/permissions-granted-are-insufficient-in-sql-server-reporting-services.md
diff --git a/docs/kb/auditor/recover-access-to-a-sql-server-instance.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/recover-access-to-a-sql-server-instance.md
similarity index 100%
rename from docs/kb/auditor/recover-access-to-a-sql-server-instance.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/recover-access-to-a-sql-server-instance.md
diff --git a/docs/kb/auditor/specify-custom-sql-server-port-for-netwrix-auditor-audit-database.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/specify-custom-sql-server-port-for-netwrix-auditor-audit-database.md
similarity index 100%
rename from docs/kb/auditor/specify-custom-sql-server-port-for-netwrix-auditor-audit-database.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/specify-custom-sql-server-port-for-netwrix-auditor-audit-database.md
diff --git a/docs/kb/auditor/sql-server-express-database-size-reached-10gb.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/sql-server-express-database-size-reached-10gb.md
similarity index 100%
rename from docs/kb/auditor/sql-server-express-database-size-reached-10gb.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/sql-server-express-database-size-reached-10gb.md
diff --git a/docs/kb/auditor/tracing-was-disabled-in-sql-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/tracing-was-disabled-in-sql-server-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/tracing-was-disabled-in-sql-server-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/tracing-was-disabled-in-sql-server-monitoring-plan.md
diff --git a/docs/kb/auditor/upgrading-sql-server-instance.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/upgrading-sql-server-instance.md
similarity index 100%
rename from docs/kb/auditor/upgrading-sql-server-instance.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/upgrading-sql-server-instance.md
diff --git a/docs/kb/auditor/what-load-does-sql-audit-generate-for-a-sql-server.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/what-load-does-sql-audit-generate-for-a-sql-server.md
similarity index 100%
rename from docs/kb/auditor/what-load-does-sql-audit-generate-for-a-sql-server.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/what-load-does-sql-audit-generate-for-a-sql-server.md
diff --git a/docs/kb/auditor/who-changed-is-showing-system-in-netwrix-auditor-for-sql-server-reports.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/who-changed-is-showing-system-in-netwrix-auditor-for-sql-server-reports.md
similarity index 100%
rename from docs/kb/auditor/who-changed-is-showing-system-in-netwrix-auditor-for-sql-server-reports.md
rename to docs/kb/auditor/configuration-and-setup/sql-server-auditing/who-changed-is-showing-system-in-netwrix-auditor-for-sql-server-reports.md
diff --git a/docs/kb/auditor/audit-policy-settings-not-applied-on-domain-controller-locally.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/audit-policy-settings-not-applied-on-domain-controller-locally.md
similarity index 100%
rename from docs/kb/auditor/audit-policy-settings-not-applied-on-domain-controller-locally.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/audit-policy-settings-not-applied-on-domain-controller-locally.md
diff --git a/docs/kb/auditor/auditing-policies-are-not-being-enabled-on-all-or-several-domain-controllers-in-monitored-domain.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/auditing-policies-are-not-being-enabled-on-all-or-several-domain-controllers-in-monitored-domain.md
similarity index 100%
rename from docs/kb/auditor/auditing-policies-are-not-being-enabled-on-all-or-several-domain-controllers-in-monitored-domain.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/auditing-policies-are-not-being-enabled-on-all-or-several-domain-controllers-in-monitored-domain.md
diff --git a/docs/kb/auditor/auto-archiving-windows-security-log.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/auto-archiving-windows-security-log.md
similarity index 100%
rename from docs/kb/auditor/auto-archiving-windows-security-log.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/auto-archiving-windows-security-log.md
diff --git a/docs/kb/auditor/compression-service-encountered-an-internal-error-in-windows-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/compression-service-encountered-an-internal-error-in-windows-server-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/compression-service-encountered-an-internal-error-in-windows-server-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/compression-service-encountered-an-internal-error-in-windows-server-monitoring-plan.md
diff --git a/docs/kb/auditor/could_not_create_ssltls_secure_channel_error_in_windows_server_monitoring_plan.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/could_not_create_ssltls_secure_channel_error_in_windows_server_monitoring_plan.md
similarity index 100%
rename from docs/kb/auditor/could_not_create_ssltls_secure_channel_error_in_windows_server_monitoring_plan.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/could_not_create_ssltls_secure_channel_error_in_windows_server_monitoring_plan.md
diff --git a/docs/kb/auditor/event-trace-session-does-not-exist-or-is-configured-incorrectly-in-windows-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/event-trace-session-does-not-exist-or-is-configured-incorrectly-in-windows-server-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/event-trace-session-does-not-exist-or-is-configured-incorrectly-in-windows-server-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/event-trace-session-does-not-exist-or-is-configured-incorrectly-in-windows-server-monitoring-plan.md
diff --git a/docs/kb/auditor/high-cpu-usage-on-domain-controllers.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/high-cpu-usage-on-domain-controllers.md
similarity index 100%
rename from docs/kb/auditor/high-cpu-usage-on-domain-controllers.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/high-cpu-usage-on-domain-controllers.md
diff --git a/docs/kb/auditor/hklm-or-hku-error-in-windows-server-auditing-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/hklm-or-hku-error-in-windows-server-auditing-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/hklm-or-hku-error-in-windows-server-auditing-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/hklm-or-hku-error-in-windows-server-auditing-monitoring-plan.md
diff --git a/docs/kb/auditor/how-do-i-enable-security-log-autobackups-on-each-domain-controller.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/how-do-i-enable-security-log-autobackups-on-each-domain-controller.md
similarity index 100%
rename from docs/kb/auditor/how-do-i-enable-security-log-autobackups-on-each-domain-controller.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/how-do-i-enable-security-log-autobackups-on-each-domain-controller.md
diff --git a/docs/kb/auditor/how-netwrix-auditor-collects-data-from-replicated-domain-controllers.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/how-netwrix-auditor-collects-data-from-replicated-domain-controllers.md
similarity index 100%
rename from docs/kb/auditor/how-netwrix-auditor-collects-data-from-replicated-domain-controllers.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/how-netwrix-auditor-collects-data-from-replicated-domain-controllers.md
diff --git a/docs/kb/auditor/how-to-exclude-non-operable-domain-controllers-from-monitoring-in-netwrix-auditor.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/how-to-exclude-non-operable-domain-controllers-from-monitoring-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/how-to-exclude-non-operable-domain-controllers-from-monitoring-in-netwrix-auditor.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/how-to-exclude-non-operable-domain-controllers-from-monitoring-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/misconfigured-permissions-and-policies-warnings-in-windows-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/misconfigured-permissions-and-policies-warnings-in-windows-server-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/misconfigured-permissions-and-policies-warnings-in-windows-server-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/misconfigured-permissions-and-policies-warnings-in-windows-server-monitoring-plan.md
diff --git a/docs/kb/auditor/monitoring-currentcontrolset-changes-in-windows-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/monitoring-currentcontrolset-changes-in-windows-server-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/monitoring-currentcontrolset-changes-in-windows-server-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/monitoring-currentcontrolset-changes-in-windows-server-monitoring-plan.md
diff --git a/docs/kb/auditor/netwrix-auditor-for-windows-servers-eventid-2007-could-not-connect-to-windows-server-audit-service.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/netwrix-auditor-for-windows-servers-eventid-2007-could-not-connect-to-windows-server-audit-service.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-for-windows-servers-eventid-2007-could-not-connect-to-windows-server-audit-service.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/netwrix-auditor-for-windows-servers-eventid-2007-could-not-connect-to-windows-server-audit-service.md
diff --git a/docs/kb/auditor/nwx-executables-removed-and-readded-to-domain-controllers.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/nwx-executables-removed-and-readded-to-domain-controllers.md
similarity index 100%
rename from docs/kb/auditor/nwx-executables-removed-and-readded-to-domain-controllers.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/nwx-executables-removed-and-readded-to-domain-controllers.md
diff --git a/docs/kb/auditor/process-cannot-access-the-file-in-windows-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/process-cannot-access-the-file-in-windows-server-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/process-cannot-access-the-file-in-windows-server-monitoring-plan.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/process-cannot-access-the-file-in-windows-server-monitoring-plan.md
diff --git a/docs/kb/auditor/request-is-not-supported-windows-server-auditing.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/request-is-not-supported-windows-server-auditing.md
similarity index 100%
rename from docs/kb/auditor/request-is-not-supported-windows-server-auditing.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/request-is-not-supported-windows-server-auditing.md
diff --git a/docs/kb/auditor/scmlib.datacollecting.dnsdataproviderexception2_error_in_windows_server_monitoring_plan.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/scmlib.datacollecting.dnsdataproviderexception2_error_in_windows_server_monitoring_plan.md
similarity index 100%
rename from docs/kb/auditor/scmlib.datacollecting.dnsdataproviderexception2_error_in_windows_server_monitoring_plan.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/scmlib.datacollecting.dnsdataproviderexception2_error_in_windows_server_monitoring_plan.md
diff --git a/docs/kb/auditor/the-windows-security-log-contains-multiple-events-5140-generated-by-netwrix-auditor-server.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/the-windows-security-log-contains-multiple-events-5140-generated-by-netwrix-auditor-server.md
similarity index 100%
rename from docs/kb/auditor/the-windows-security-log-contains-multiple-events-5140-generated-by-netwrix-auditor-server.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/the-windows-security-log-contains-multiple-events-5140-generated-by-netwrix-auditor-server.md
diff --git a/docs/kb/auditor/unable-to-configure-audit-policies-in-domain-controllers.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/unable-to-configure-audit-policies-in-domain-controllers.md
similarity index 100%
rename from docs/kb/auditor/unable-to-configure-audit-policies-in-domain-controllers.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/unable-to-configure-audit-policies-in-domain-controllers.md
diff --git a/docs/kb/auditor/why-does-risk-assessment-overview-dashboard-shows-unexpected-issues-for-windows-server.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/why-does-risk-assessment-overview-dashboard-shows-unexpected-issues-for-windows-server.md
similarity index 100%
rename from docs/kb/auditor/why-does-risk-assessment-overview-dashboard-shows-unexpected-issues-for-windows-server.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/why-does-risk-assessment-overview-dashboard-shows-unexpected-issues-for-windows-server.md
diff --git a/docs/kb/auditor/windows-server-inventory-report-shows-windows-defenders-as-the-only-antivirus-installed.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/windows-server-inventory-report-shows-windows-defenders-as-the-only-antivirus-installed.md
similarity index 100%
rename from docs/kb/auditor/windows-server-inventory-report-shows-windows-defenders-as-the-only-antivirus-installed.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/windows-server-inventory-report-shows-windows-defenders-as-the-only-antivirus-installed.md
diff --git a/docs/kb/auditor/workstations-cloned-with-windows-server-auditing-service-pre-installed.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/workstations-cloned-with-windows-server-auditing-service-pre-installed.md
similarity index 100%
rename from docs/kb/auditor/workstations-cloned-with-windows-server-auditing-service-pre-installed.md
rename to docs/kb/auditor/configuration-and-setup/windows-server-monitoring/workstations-cloned-with-windows-server-auditing-service-pre-installed.md
diff --git "a/docs/kb/auditor/auditor_v10.6_known_issue_\342\200\223_cannot_collect_mailbox_audit_data_unhandled_value_sendas_\342\200\223_event_id_2002.md" "b/docs/kb/auditor/event-id-reference/health-log-events/auditor_v10.6_known_issue_\342\200\223_cannot_collect_mailbox_audit_data_unhandled_value_sendas_\342\200\223_event_id_2002.md"
similarity index 100%
rename from "docs/kb/auditor/auditor_v10.6_known_issue_\342\200\223_cannot_collect_mailbox_audit_data_unhandled_value_sendas_\342\200\223_event_id_2002.md"
rename to "docs/kb/auditor/event-id-reference/health-log-events/auditor_v10.6_known_issue_\342\200\223_cannot_collect_mailbox_audit_data_unhandled_value_sendas_\342\200\223_event_id_2002.md"
diff --git "a/docs/kb/auditor/auditor_v10.6_known_issue_\342\200\223_subscription_plan_for_access_reviews_has_expired_\342\200\223_event_id_2222.md" "b/docs/kb/auditor/event-id-reference/health-log-events/auditor_v10.6_known_issue_\342\200\223_subscription_plan_for_access_reviews_has_expired_\342\200\223_event_id_2222.md"
similarity index 100%
rename from "docs/kb/auditor/auditor_v10.6_known_issue_\342\200\223_subscription_plan_for_access_reviews_has_expired_\342\200\223_event_id_2222.md"
rename to "docs/kb/auditor/event-id-reference/health-log-events/auditor_v10.6_known_issue_\342\200\223_subscription_plan_for_access_reviews_has_expired_\342\200\223_event_id_2222.md"
diff --git a/docs/kb/auditor/empty-event-id-5356-csv-file-missing-in-event-log-export-add-on.md b/docs/kb/auditor/event-id-reference/health-log-events/empty-event-id-5356-csv-file-missing-in-event-log-export-add-on.md
similarity index 100%
rename from docs/kb/auditor/empty-event-id-5356-csv-file-missing-in-event-log-export-add-on.md
rename to docs/kb/auditor/event-id-reference/health-log-events/empty-event-id-5356-csv-file-missing-in-event-log-export-add-on.md
diff --git a/docs/kb/auditor/entitlement-reviews-event-id-6527.md b/docs/kb/auditor/event-id-reference/health-log-events/entitlement-reviews-event-id-6527.md
similarity index 100%
rename from docs/kb/auditor/entitlement-reviews-event-id-6527.md
rename to docs/kb/auditor/event-id-reference/health-log-events/entitlement-reviews-event-id-6527.md
diff --git a/docs/kb/auditor/error-event-id-1206-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/error-event-id-1206-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/error-event-id-1206-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/error-event-id-1206-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1000-application-errors-in-netwrix-auditor-server.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1000-application-errors-in-netwrix-auditor-server.md
similarity index 100%
rename from docs/kb/auditor/event-id-1000-application-errors-in-netwrix-auditor-server.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1000-application-errors-in-netwrix-auditor-server.md
diff --git a/docs/kb/auditor/event-id-1024-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1024-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1024-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1024-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1079-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1079-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1079-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1079-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1203-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1203-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1203-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1203-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1204-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1204-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1204-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1204-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1205-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1205-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1205-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1205-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1207-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1207-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1207-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1207-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1208-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1208-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1208-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1208-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1209-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1209-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1209-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1209-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1210-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1210-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1210-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1210-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1211-1215-1226-1235-1246-1248-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1211-1215-1226-1235-1246-1248-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1211-1215-1226-1235-1246-1248-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1211-1215-1226-1235-1246-1248-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1212-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1212-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1212-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1212-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1214-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1214-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1214-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1214-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1216-1217-1218-1219-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1216-1217-1218-1219-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1216-1217-1218-1219-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1216-1217-1218-1219-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1223-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1223-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1223-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1223-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1225-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1225-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1225-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1225-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1236-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1236-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1236-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1236-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1239-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1239-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1239-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1239-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1240-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1240-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1240-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1240-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1241-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1241-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1241-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1241-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1242-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1242-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1242-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1242-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1243-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1243-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1243-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1243-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1244-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1244-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1244-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1244-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1245-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1245-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1245-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1245-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1249-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1249-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1249-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1249-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1250-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1250-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1250-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1250-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1251-1254-1256-1258-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1251-1254-1256-1258-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1251-1254-1256-1258-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1251-1254-1256-1258-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1255-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1255-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1255-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1255-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1259-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1259-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1259-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1259-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1260-1266-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1260-1266-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1260-1266-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1260-1266-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1267-1273-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1267-1273-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1267-1273-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1267-1273-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1274-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1274-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1274-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1274-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1275-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1275-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1275-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1275-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1276-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1276-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1276-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1276-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1280-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1280-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1280-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1280-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1281-1282-1283-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1281-1282-1283-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1281-1282-1283-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1281-1282-1283-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1285-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1285-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1285-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1285-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1286-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1286-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1286-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1286-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1287-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1287-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1287-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1287-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1288-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1288-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1288-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1288-in-health-log.md
diff --git a/docs/kb/auditor/event-id-1289-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1289-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-1289-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-1289-in-health-log.md
diff --git a/docs/kb/auditor/event-id-2002-the-term-get-help-is-not-recognized.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-2002-the-term-get-help-is-not-recognized.md
similarity index 100%
rename from docs/kb/auditor/event-id-2002-the-term-get-help-is-not-recognized.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-2002-the-term-get-help-is-not-recognized.md
diff --git a/docs/kb/auditor/event-id-5801-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-5801-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-5801-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-5801-in-health-log.md
diff --git a/docs/kb/auditor/event-id-5802-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-5802-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-5802-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-5802-in-health-log.md
diff --git a/docs/kb/auditor/event-id-5803-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-5803-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/event-id-5803-in-health-log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event-id-5803-in-health-log.md
diff --git a/docs/kb/auditor/event_id_12371238_in_health_log.md b/docs/kb/auditor/event-id-reference/health-log-events/event_id_12371238_in_health_log.md
similarity index 100%
rename from docs/kb/auditor/event_id_12371238_in_health_log.md
rename to docs/kb/auditor/event-id-reference/health-log-events/event_id_12371238_in_health_log.md
diff --git a/docs/kb/auditor/monitored-event-ids.md b/docs/kb/auditor/event-id-reference/health-log-events/monitored-event-ids.md
similarity index 100%
rename from docs/kb/auditor/monitored-event-ids.md
rename to docs/kb/auditor/event-id-reference/health-log-events/monitored-event-ids.md
diff --git a/docs/kb/auditor/netwrix-auditor-health-log-contains-event-id-1119.md b/docs/kb/auditor/event-id-reference/health-log-events/netwrix-auditor-health-log-contains-event-id-1119.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-health-log-contains-event-id-1119.md
rename to docs/kb/auditor/event-id-reference/health-log-events/netwrix-auditor-health-log-contains-event-id-1119.md
diff --git a/docs/kb/auditor/netwrix-auditor-system-health-event-id-2007.md b/docs/kb/auditor/event-id-reference/health-log-events/netwrix-auditor-system-health-event-id-2007.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-system-health-event-id-2007.md
rename to docs/kb/auditor/event-id-reference/health-log-events/netwrix-auditor-system-health-event-id-2007.md
diff --git a/docs/kb/auditor/netwrix-auditor-system-health-log-contains-event-ids-1015-and-1016.md b/docs/kb/auditor/event-id-reference/health-log-events/netwrix-auditor-system-health-log-contains-event-ids-1015-and-1016.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-system-health-log-contains-event-ids-1015-and-1016.md
rename to docs/kb/auditor/event-id-reference/health-log-events/netwrix-auditor-system-health-log-contains-event-ids-1015-and-1016.md
diff --git a/docs/kb/auditor/netwrix-auditor-system-health-log-event-id-1059.md b/docs/kb/auditor/event-id-reference/health-log-events/netwrix-auditor-system-health-log-event-id-1059.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-system-health-log-event-id-1059.md
rename to docs/kb/auditor/event-id-reference/health-log-events/netwrix-auditor-system-health-log-event-id-1059.md
diff --git a/docs/kb/auditor/netwrix-auditor-system-health-log-event-id-1213.md b/docs/kb/auditor/event-id-reference/health-log-events/netwrix-auditor-system-health-log-event-id-1213.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-system-health-log-event-id-1213.md
rename to docs/kb/auditor/event-id-reference/health-log-events/netwrix-auditor-system-health-log-event-id-1213.md
diff --git a/docs/kb/auditor/aal-test.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/aal-test.md
similarity index 100%
rename from docs/kb/auditor/aal-test.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/aal-test.md
diff --git a/docs/kb/auditor/account-lockout-events-for-domain-administrator-account.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/account-lockout-events-for-domain-administrator-account.md
similarity index 100%
rename from docs/kb/auditor/account-lockout-events-for-domain-administrator-account.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/account-lockout-events-for-domain-administrator-account.md
diff --git a/docs/kb/auditor/account-lockouts-are-displayed-with-delay.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/account-lockouts-are-displayed-with-delay.md
similarity index 100%
rename from docs/kb/auditor/account-lockouts-are-displayed-with-delay.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/account-lockouts-are-displayed-with-delay.md
diff --git a/docs/kb/auditor/additional-audit-details-how-it-works.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/additional-audit-details-how-it-works.md
similarity index 100%
rename from docs/kb/auditor/additional-audit-details-how-it-works.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/additional-audit-details-how-it-works.md
diff --git a/docs/kb/auditor/administrator-audit-logging-aal-configuration-details.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/administrator-audit-logging-aal-configuration-details.md
similarity index 100%
rename from docs/kb/auditor/administrator-audit-logging-aal-configuration-details.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/administrator-audit-logging-aal-configuration-details.md
diff --git a/docs/kb/auditor/an-unknown-file-type-or-a-file-with-a-custom-extension-is-failing-text-extraction.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/an-unknown-file-type-or-a-file-with-a-custom-extension-is-failing-text-extraction.md
similarity index 100%
rename from docs/kb/auditor/an-unknown-file-type-or-a-file-with-a-custom-extension-is-failing-text-extraction.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/an-unknown-file-type-or-a-file-with-a-custom-extension-is-failing-text-extraction.md
diff --git a/docs/kb/auditor/archive-service-is-busy-processing-activity-records.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/archive-service-is-busy-processing-activity-records.md
similarity index 100%
rename from docs/kb/auditor/archive-service-is-busy-processing-activity-records.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/archive-service-is-busy-processing-activity-records.md
diff --git a/docs/kb/auditor/audit-status-shows-logon-auditing-is-disabled.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit-status-shows-logon-auditing-is-disabled.md
similarity index 100%
rename from docs/kb/auditor/audit-status-shows-logon-auditing-is-disabled.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit-status-shows-logon-auditing-is-disabled.md
diff --git a/docs/kb/auditor/audit-trails-are-incorrect-in-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit-trails-are-incorrect-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/audit-trails-are-incorrect-in-netwrix-auditor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit-trails-are-incorrect-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/audit_internet_information_services_(iis)_with_netwrix_auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit_internet_information_services_(iis)_with_netwrix_auditor.md
similarity index 100%
rename from docs/kb/auditor/audit_internet_information_services_(iis)_with_netwrix_auditor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit_internet_information_services_(iis)_with_netwrix_auditor.md
diff --git a/docs/kb/auditor/auditing-distributed-file-systems-with-replication-in-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/auditing-distributed-file-systems-with-replication-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/auditing-distributed-file-systems-with-replication-in-netwrix-auditor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/auditing-distributed-file-systems-with-replication-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/auditing-of-configuration-container-and-schema.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/auditing-of-configuration-container-and-schema.md
similarity index 100%
rename from docs/kb/auditor/auditing-of-configuration-container-and-schema.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/auditing-of-configuration-container-and-schema.md
diff --git a/docs/kb/auditor/auditor-glossary-abbreviations-and-acronyms.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/auditor-glossary-abbreviations-and-acronyms.md
similarity index 100%
rename from docs/kb/auditor/auditor-glossary-abbreviations-and-acronyms.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/auditor-glossary-abbreviations-and-acronyms.md
diff --git a/docs/kb/auditor/best-practices-for-securing-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/best-practices-for-securing-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/best-practices-for-securing-netwrix-auditor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/best-practices-for-securing-netwrix-auditor.md
diff --git a/docs/kb/auditor/can-i-specify-a-group-other-than-the-everyone-group-in-the-audit-settings.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/can-i-specify-a-group-other-than-the-everyone-group-in-the-audit-settings.md
similarity index 100%
rename from docs/kb/auditor/can-i-specify-a-group-other-than-the-everyone-group-in-the-audit-settings.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/can-i-specify-a-group-other-than-the-everyone-group-in-the-audit-settings.md
diff --git a/docs/kb/auditor/change-data-collecting-account-password-in-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/change-data-collecting-account-password-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/change-data-collecting-account-password-in-netwrix-auditor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/change-data-collecting-account-password-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/check-tcp-and-udp-ports-required.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/check-tcp-and-udp-ports-required.md
similarity index 100%
rename from docs/kb/auditor/check-tcp-and-udp-ports-required.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/check-tcp-and-udp-ports-required.md
diff --git a/docs/kb/auditor/clock-skew-is-too-great.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/clock-skew-is-too-great.md
similarity index 100%
rename from docs/kb/auditor/clock-skew-is-too-great.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/clock-skew-is-too-great.md
diff --git a/docs/kb/auditor/configuring_proxy_scans.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/configuring_proxy_scans.md
similarity index 100%
rename from docs/kb/auditor/configuring_proxy_scans.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/configuring_proxy_scans.md
diff --git a/docs/kb/auditor/data-classification-services-do-not-start.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/data-classification-services-do-not-start.md
similarity index 100%
rename from docs/kb/auditor/data-classification-services-do-not-start.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/data-classification-services-do-not-start.md
diff --git a/docs/kb/auditor/data-gathering-task-has-not-been-scheduled.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/data-gathering-task-has-not-been-scheduled.md
similarity index 100%
rename from docs/kb/auditor/data-gathering-task-has-not-been-scheduled.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/data-gathering-task-has-not-been-scheduled.md
diff --git a/docs/kb/auditor/data-matcher-timeout.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/data-matcher-timeout.md
similarity index 100%
rename from docs/kb/auditor/data-matcher-timeout.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/data-matcher-timeout.md
diff --git a/docs/kb/auditor/determining_which_access_analyzer_collectors_support_gmsa.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/determining_which_access_analyzer_collectors_support_gmsa.md
similarity index 100%
rename from docs/kb/auditor/determining_which_access_analyzer_collectors_support_gmsa.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/determining_which_access_analyzer_collectors_support_gmsa.md
diff --git a/docs/kb/auditor/difference-between-data-stored-in-sql-versus-the-audit-archive.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/difference-between-data-stored-in-sql-versus-the-audit-archive.md
similarity index 100%
rename from docs/kb/auditor/difference-between-data-stored-in-sql-versus-the-audit-archive.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/difference-between-data-stored-in-sql-versus-the-audit-archive.md
diff --git a/docs/kb/auditor/duplicate-configuration-and-schema-changes-for-all-monitored-domains-in-forest-made-by-system.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/duplicate-configuration-and-schema-changes-for-all-monitored-domains-in-forest-made-by-system.md
similarity index 100%
rename from docs/kb/auditor/duplicate-configuration-and-schema-changes-for-all-monitored-domains-in-forest-made-by-system.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/duplicate-configuration-and-schema-changes-for-all-monitored-domains-in-forest-made-by-system.md
diff --git a/docs/kb/auditor/emc-unity-auditing.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/emc-unity-auditing.md
similarity index 100%
rename from docs/kb/auditor/emc-unity-auditing.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/emc-unity-auditing.md
diff --git a/docs/kb/auditor/events-4624-and-4634-generated-by-service-accounts.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/events-4624-and-4634-generated-by-service-accounts.md
similarity index 100%
rename from docs/kb/auditor/events-4624-and-4634-generated-by-service-accounts.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/events-4624-and-4634-generated-by-service-accounts.md
diff --git a/docs/kb/auditor/fine-grained-policy-and-account-expiration.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/fine-grained-policy-and-account-expiration.md
similarity index 100%
rename from docs/kb/auditor/fine-grained-policy-and-account-expiration.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/fine-grained-policy-and-account-expiration.md
diff --git a/docs/kb/auditor/given-key-was-not-present-in-the-dictionary-adfs.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/given-key-was-not-present-in-the-dictionary-adfs.md
similarity index 100%
rename from docs/kb/auditor/given-key-was-not-present-in-the-dictionary-adfs.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/given-key-was-not-present-in-the-dictionary-adfs.md
diff --git a/docs/kb/auditor/group-policy-fake-changes.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/group-policy-fake-changes.md
similarity index 100%
rename from docs/kb/auditor/group-policy-fake-changes.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/group-policy-fake-changes.md
diff --git a/docs/kb/auditor/group-policy-shows-sid-instead-of-settings.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/group-policy-shows-sid-instead-of-settings.md
similarity index 100%
rename from docs/kb/auditor/group-policy-shows-sid-instead-of-settings.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/group-policy-shows-sid-instead-of-settings.md
diff --git a/docs/kb/auditor/high-cpu-load-and-memory-usage.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-cpu-load-and-memory-usage.md
similarity index 100%
rename from docs/kb/auditor/high-cpu-load-and-memory-usage.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-cpu-load-and-memory-usage.md
diff --git a/docs/kb/auditor/high-cpu-usage-on-remote-desktop-servers.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-cpu-usage-on-remote-desktop-servers.md
similarity index 100%
rename from docs/kb/auditor/high-cpu-usage-on-remote-desktop-servers.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-cpu-usage-on-remote-desktop-servers.md
diff --git a/docs/kb/auditor/high-memory-usage-even-after-the-readlog-registry-key-is-set-to-0.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-memory-usage-even-after-the-readlog-registry-key-is-set-to-0.md
similarity index 100%
rename from docs/kb/auditor/high-memory-usage-even-after-the-readlog-registry-key-is-set-to-0.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-memory-usage-even-after-the-readlog-registry-key-is-set-to-0.md
diff --git a/docs/kb/auditor/how-are-collections-handled-after-a-network-outage.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-are-collections-handled-after-a-network-outage.md
similarity index 100%
rename from docs/kb/auditor/how-are-collections-handled-after-a-network-outage.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-are-collections-handled-after-a-network-outage.md
diff --git a/docs/kb/auditor/how-can-i-decrease-number-of-events-generated-for-directory-service-access-auditing.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-can-i-decrease-number-of-events-generated-for-directory-service-access-auditing.md
similarity index 100%
rename from docs/kb/auditor/how-can-i-decrease-number-of-events-generated-for-directory-service-access-auditing.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-can-i-decrease-number-of-events-generated-for-directory-service-access-auditing.md
diff --git a/docs/kb/auditor/how-do-i-monitor-hidden-file-shares.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-do-i-monitor-hidden-file-shares.md
similarity index 100%
rename from docs/kb/auditor/how-do-i-monitor-hidden-file-shares.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-do-i-monitor-hidden-file-shares.md
diff --git a/docs/kb/auditor/how-do-you-specify-a-local-administrator-account-to-obtain-disk-space-information-from-computers-tha.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-do-you-specify-a-local-administrator-account-to-obtain-disk-space-information-from-computers-tha.md
similarity index 100%
rename from docs/kb/auditor/how-do-you-specify-a-local-administrator-account-to-obtain-disk-space-information-from-computers-tha.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-do-you-specify-a-local-administrator-account-to-obtain-disk-space-information-from-computers-tha.md
diff --git a/docs/kb/auditor/how-does-merging-logon-activity-events-work.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-does-merging-logon-activity-events-work.md
similarity index 100%
rename from docs/kb/auditor/how-does-merging-logon-activity-events-work.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-does-merging-logon-activity-events-work.md
diff --git a/docs/kb/auditor/how-does-netwrix-auditor-for-vmware-work.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-does-netwrix-auditor-for-vmware-work.md
similarity index 100%
rename from docs/kb/auditor/how-does-netwrix-auditor-for-vmware-work.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-does-netwrix-auditor-for-vmware-work.md
diff --git a/docs/kb/auditor/how-netwrix-ensures-safety-of-stored-credentials.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-netwrix-ensures-safety-of-stored-credentials.md
similarity index 100%
rename from docs/kb/auditor/how-netwrix-ensures-safety-of-stored-credentials.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-netwrix-ensures-safety-of-stored-credentials.md
diff --git a/docs/kb/auditor/how-the-network-traffic-compression-service-works.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-the-network-traffic-compression-service-works.md
similarity index 100%
rename from docs/kb/auditor/how-the-network-traffic-compression-service-works.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-the-network-traffic-compression-service-works.md
diff --git a/docs/kb/auditor/how-to-add-additional-space-to-long-term-archive.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-add-additional-space-to-long-term-archive.md
similarity index 100%
rename from docs/kb/auditor/how-to-add-additional-space-to-long-term-archive.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-add-additional-space-to-long-term-archive.md
diff --git a/docs/kb/auditor/how-to-audit-a-non-trusted-domain.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-a-non-trusted-domain.md
similarity index 100%
rename from docs/kb/auditor/how-to-audit-a-non-trusted-domain.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-a-non-trusted-domain.md
diff --git a/docs/kb/auditor/how-to-audit-another-domain-with-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-another-domain-with-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/how-to-audit-another-domain-with-netwrix-auditor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-another-domain-with-netwrix-auditor.md
diff --git a/docs/kb/auditor/how-to-audit-servers-located-in-another-subnet-behind-firewall.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-servers-located-in-another-subnet-behind-firewall.md
similarity index 100%
rename from docs/kb/auditor/how-to-audit-servers-located-in-another-subnet-behind-firewall.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-servers-located-in-another-subnet-behind-firewall.md
diff --git a/docs/kb/auditor/how-to-audit-user-password-changes.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-user-password-changes.md
similarity index 100%
rename from docs/kb/auditor/how-to-audit-user-password-changes.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-user-password-changes.md
diff --git a/docs/kb/auditor/how-to-automatically-apply-office-classification-labels.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-automatically-apply-office-classification-labels.md
similarity index 100%
rename from docs/kb/auditor/how-to-automatically-apply-office-classification-labels.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-automatically-apply-office-classification-labels.md
diff --git a/docs/kb/auditor/how-to-capture-service-traffic.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-capture-service-traffic.md
similarity index 100%
rename from docs/kb/auditor/how-to-capture-service-traffic.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-capture-service-traffic.md
diff --git a/docs/kb/auditor/how-to-change-the-netwrix-data-classification-query-server-url.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-change-the-netwrix-data-classification-query-server-url.md
similarity index 100%
rename from docs/kb/auditor/how-to-change-the-netwrix-data-classification-query-server-url.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-change-the-netwrix-data-classification-query-server-url.md
diff --git a/docs/kb/auditor/how-to-check-the-netwrix-auditor-health-status.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-check-the-netwrix-auditor-health-status.md
similarity index 100%
rename from docs/kb/auditor/how-to-check-the-netwrix-auditor-health-status.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-check-the-netwrix-auditor-health-status.md
diff --git a/docs/kb/auditor/how-to-clear-the-sessions-list-in-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-clear-the-sessions-list-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/how-to-clear-the-sessions-list-in-netwrix-auditor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-clear-the-sessions-list-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/how-to-count-the-number-of-your-network-devices-in-your-configuration.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-count-the-number-of-your-network-devices-in-your-configuration.md
similarity index 100%
rename from docs/kb/auditor/how-to-count-the-number-of-your-network-devices-in-your-configuration.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-count-the-number-of-your-network-devices-in-your-configuration.md
diff --git a/docs/kb/auditor/how-to-create-a-load-balanced-cews-environment.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-create-a-load-balanced-cews-environment.md
similarity index 100%
rename from docs/kb/auditor/how-to-create-a-load-balanced-cews-environment.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-create-a-load-balanced-cews-environment.md
diff --git a/docs/kb/auditor/how-to-create-the-full-dump-of-a-process.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-create-the-full-dump-of-a-process.md
similarity index 100%
rename from docs/kb/auditor/how-to-create-the-full-dump-of-a-process.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-create-the-full-dump-of-a-process.md
diff --git a/docs/kb/auditor/how-to-delete-old-entries-from-the-account-list.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-delete-old-entries-from-the-account-list.md
similarity index 100%
rename from docs/kb/auditor/how-to-delete-old-entries-from-the-account-list.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-delete-old-entries-from-the-account-list.md
diff --git a/docs/kb/auditor/how-to-disable-the-self-audit-feature-in-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-disable-the-self-audit-feature-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/how-to-disable-the-self-audit-feature-in-netwrix-auditor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-disable-the-self-audit-feature-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/how-to-enable-ocr-for-non-english-images.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-enable-ocr-for-non-english-images.md
similarity index 100%
rename from docs/kb/auditor/how-to-enable-ocr-for-non-english-images.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-enable-ocr-for-non-english-images.md
diff --git a/docs/kb/auditor/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui.md
similarity index 100%
rename from docs/kb/auditor/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui.md
diff --git a/docs/kb/auditor/how-to-figure-out-where-a-user-account-was-locked-out.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-figure-out-where-a-user-account-was-locked-out.md
similarity index 100%
rename from docs/kb/auditor/how-to-figure-out-where-a-user-account-was-locked-out.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-figure-out-where-a-user-account-was-locked-out.md
diff --git a/docs/kb/auditor/how-to-find-out-my-netwrix-auditor-version.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-find-out-my-netwrix-auditor-version.md
similarity index 100%
rename from docs/kb/auditor/how-to-find-out-my-netwrix-auditor-version.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-find-out-my-netwrix-auditor-version.md
diff --git a/docs/kb/auditor/how-to-find-video-recording-files.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-find-video-recording-files.md
similarity index 100%
rename from docs/kb/auditor/how-to-find-video-recording-files.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-find-video-recording-files.md
diff --git a/docs/kb/auditor/how-to-generate-an-access-token-for-a-dropbox-source-in-netwrix-data-classification.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-generate-an-access-token-for-a-dropbox-source-in-netwrix-data-classification.md
similarity index 100%
rename from docs/kb/auditor/how-to-generate-an-access-token-for-a-dropbox-source-in-netwrix-data-classification.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-generate-an-access-token-for-a-dropbox-source-in-netwrix-data-classification.md
diff --git a/docs/kb/auditor/how-to-get-full-netwrix-auditor-version.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-get-full-netwrix-auditor-version.md
similarity index 100%
rename from docs/kb/auditor/how-to-get-full-netwrix-auditor-version.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-get-full-netwrix-auditor-version.md
diff --git a/docs/kb/auditor/how-to-identify-whether-auditor-server-can-receive-data-from-meraki-api.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-identify-whether-auditor-server-can-receive-data-from-meraki-api.md
similarity index 100%
rename from docs/kb/auditor/how-to-identify-whether-auditor-server-can-receive-data-from-meraki-api.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-identify-whether-auditor-server-can-receive-data-from-meraki-api.md
diff --git a/docs/kb/auditor/how-to-import-a-list-of-server-to-be-monitored-in-disk-space-monitor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-import-a-list-of-server-to-be-monitored-in-disk-space-monitor.md
similarity index 100%
rename from docs/kb/auditor/how-to-import-a-list-of-server-to-be-monitored-in-disk-space-monitor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-import-a-list-of-server-to-be-monitored-in-disk-space-monitor.md
diff --git a/docs/kb/auditor/how-to-improve-document-processing-performance.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-improve-document-processing-performance.md
similarity index 100%
rename from docs/kb/auditor/how-to-improve-document-processing-performance.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-improve-document-processing-performance.md
diff --git a/docs/kb/auditor/how-to-manually-enable-advanced-sql-tracing.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-manually-enable-advanced-sql-tracing.md
similarity index 100%
rename from docs/kb/auditor/how-to-manually-enable-advanced-sql-tracing.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-manually-enable-advanced-sql-tracing.md
diff --git a/docs/kb/auditor/how-to-manually-remove-compression-services-from-audited-servers.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-manually-remove-compression-services-from-audited-servers.md
similarity index 100%
rename from docs/kb/auditor/how-to-manually-remove-compression-services-from-audited-servers.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-manually-remove-compression-services-from-audited-servers.md
diff --git a/docs/kb/auditor/how-to-manually-remove-the-help-desk-portal.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-manually-remove-the-help-desk-portal.md
similarity index 100%
rename from docs/kb/auditor/how-to-manually-remove-the-help-desk-portal.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-manually-remove-the-help-desk-portal.md
diff --git a/docs/kb/auditor/how-to-modify-index-processing-mode.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-modify-index-processing-mode.md
similarity index 100%
rename from docs/kb/auditor/how-to-modify-index-processing-mode.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-modify-index-processing-mode.md
diff --git a/docs/kb/auditor/how-to-modify-the-activity-summary-delivery-schedule.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-modify-the-activity-summary-delivery-schedule.md
similarity index 100%
rename from docs/kb/auditor/how-to-modify-the-activity-summary-delivery-schedule.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-modify-the-activity-summary-delivery-schedule.md
diff --git a/docs/kb/auditor/how-to-monitor-print-service-activity.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-monitor-print-service-activity.md
similarity index 100%
rename from docs/kb/auditor/how-to-monitor-print-service-activity.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-monitor-print-service-activity.md
diff --git a/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location.md
similarity index 100%
rename from docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location.md
diff --git a/docs/kb/auditor/how-to-move-netwrix-auditor-to-the-cloud.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-netwrix-auditor-to-the-cloud.md
similarity index 100%
rename from docs/kb/auditor/how-to-move-netwrix-auditor-to-the-cloud.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-netwrix-auditor-to-the-cloud.md
diff --git a/docs/kb/auditor/how-to-omit-changes-to-the-supported-encryption-type.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-omit-changes-to-the-supported-encryption-type.md
similarity index 100%
rename from docs/kb/auditor/how-to-omit-changes-to-the-supported-encryption-type.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-omit-changes-to-the-supported-encryption-type.md
diff --git a/docs/kb/auditor/how-to-opt-out-of-the-netwrix-customer-experience-improvement-program-in-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-opt-out-of-the-netwrix-customer-experience-improvement-program-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/how-to-opt-out-of-the-netwrix-customer-experience-improvement-program-in-netwrix-auditor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-opt-out-of-the-netwrix-customer-experience-improvement-program-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/how-to-prevent-long-term-archive-overflow.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-prevent-long-term-archive-overflow.md
similarity index 100%
rename from docs/kb/auditor/how-to-prevent-long-term-archive-overflow.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-prevent-long-term-archive-overflow.md
diff --git a/docs/kb/auditor/how-to-read-netwrix-auditor-logs.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-read-netwrix-auditor-logs.md
similarity index 100%
rename from docs/kb/auditor/how-to-read-netwrix-auditor-logs.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-read-netwrix-auditor-logs.md
diff --git a/docs/kb/auditor/how-to-restrict-access-to-the-help-desk-portal-and-the-administrative-console.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-restrict-access-to-the-help-desk-portal-and-the-administrative-console.md
similarity index 100%
rename from docs/kb/auditor/how-to-restrict-access-to-the-help-desk-portal-and-the-administrative-console.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-restrict-access-to-the-help-desk-portal-and-the-administrative-console.md
diff --git a/docs/kb/auditor/how-to-send-netwrix-auditor-logs.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-send-netwrix-auditor-logs.md
similarity index 100%
rename from docs/kb/auditor/how-to-send-netwrix-auditor-logs.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-send-netwrix-auditor-logs.md
diff --git a/docs/kb/auditor/how-to-specify-dell-emc-unity-server-as-a-monitored-item.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-specify-dell-emc-unity-server-as-a-monitored-item.md
similarity index 100%
rename from docs/kb/auditor/how-to-specify-dell-emc-unity-server-as-a-monitored-item.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-specify-dell-emc-unity-server-as-a-monitored-item.md
diff --git a/docs/kb/auditor/how-to-track-network-interface-changes-on-a-server.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-track-network-interface-changes-on-a-server.md
similarity index 100%
rename from docs/kb/auditor/how-to-track-network-interface-changes-on-a-server.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-track-network-interface-changes-on-a-server.md
diff --git a/docs/kb/auditor/how-to-use-omit-lists.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists.md
similarity index 100%
rename from docs/kb/auditor/how-to-use-omit-lists.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists.md
diff --git a/docs/kb/auditor/how-to-view-custom-sensitive-file-categories-in-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-view-custom-sensitive-file-categories-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/how-to-view-custom-sensitive-file-categories-in-netwrix-auditor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-view-custom-sensitive-file-categories-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/how_to_get_a_daily_list_of_users_addedremoved_from_any_ad_group.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how_to_get_a_daily_list_of_users_addedremoved_from_any_ad_group.md
similarity index 100%
rename from docs/kb/auditor/how_to_get_a_daily_list_of_users_addedremoved_from_any_ad_group.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/how_to_get_a_daily_list_of_users_addedremoved_from_any_ad_group.md
diff --git a/docs/kb/auditor/hyperlinks-in-custom-branding.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/hyperlinks-in-custom-branding.md
similarity index 100%
rename from docs/kb/auditor/hyperlinks-in-custom-branding.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/hyperlinks-in-custom-branding.md
diff --git a/docs/kb/auditor/images-are-not-shown.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/images-are-not-shown.md
similarity index 100%
rename from docs/kb/auditor/images-are-not-shown.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/images-are-not-shown.md
diff --git a/docs/kb/auditor/improving_file_system_bulk_import_performance_by_adding_indexes_in_netwrix_access_analyzer_v12.0.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/improving_file_system_bulk_import_performance_by_adding_indexes_in_netwrix_access_analyzer_v12.0.md
similarity index 100%
rename from docs/kb/auditor/improving_file_system_bulk_import_performance_by_adding_indexes_in_netwrix_access_analyzer_v12.0.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/improving_file_system_bulk_import_performance_by_adding_indexes_in_netwrix_access_analyzer_v12.0.md
diff --git a/docs/kb/auditor/incorrecty-display-names-in-the-what-changed-column.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/incorrecty-display-names-in-the-what-changed-column.md
similarity index 100%
rename from docs/kb/auditor/incorrecty-display-names-in-the-what-changed-column.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/incorrecty-display-names-in-the-what-changed-column.md
diff --git a/docs/kb/auditor/index.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/index.md
similarity index 100%
rename from docs/kb/auditor/index.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/index.md
diff --git a/docs/kb/auditor/integrating-privilege-secure-for-access-management-with-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/integrating-privilege-secure-for-access-management-with-auditor.md
similarity index 100%
rename from docs/kb/auditor/integrating-privilege-secure-for-access-management-with-auditor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/integrating-privilege-secure-for-access-management-with-auditor.md
diff --git a/docs/kb/auditor/investigations-in-netwrix-auditor-take-too-long.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/investigations-in-netwrix-auditor-take-too-long.md
similarity index 100%
rename from docs/kb/auditor/investigations-in-netwrix-auditor-take-too-long.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/investigations-in-netwrix-auditor-take-too-long.md
diff --git a/docs/kb/auditor/lockouts-are-not-tracked.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/lockouts-are-not-tracked.md
similarity index 100%
rename from docs/kb/auditor/lockouts-are-not-tracked.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/lockouts-are-not-tracked.md
diff --git a/docs/kb/auditor/log-overwrites-warnings.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/log-overwrites-warnings.md
similarity index 100%
rename from docs/kb/auditor/log-overwrites-warnings.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/log-overwrites-warnings.md
diff --git a/docs/kb/auditor/logon-failures-in-multi-domain-environments.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/logon-failures-in-multi-domain-environments.md
similarity index 100%
rename from docs/kb/auditor/logon-failures-in-multi-domain-environments.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/logon-failures-in-multi-domain-environments.md
diff --git a/docs/kb/auditor/logon-prompt-extension-deployment-problems.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/logon-prompt-extension-deployment-problems.md
similarity index 100%
rename from docs/kb/auditor/logon-prompt-extension-deployment-problems.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/logon-prompt-extension-deployment-problems.md
diff --git a/docs/kb/auditor/logon-request-contained-an-invalid-logon-type-value.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/logon-request-contained-an-invalid-logon-type-value.md
similarity index 100%
rename from docs/kb/auditor/logon-request-contained-an-invalid-logon-type-value.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/logon-request-contained-an-invalid-logon-type-value.md
diff --git a/docs/kb/auditor/logon-request-contained-invalid-logon-type-value-in-netwrix-auditor-health-log.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/logon-request-contained-invalid-logon-type-value-in-netwrix-auditor-health-log.md
similarity index 100%
rename from docs/kb/auditor/logon-request-contained-invalid-logon-type-value-in-netwrix-auditor-health-log.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/logon-request-contained-invalid-logon-type-value-in-netwrix-auditor-health-log.md
diff --git a/docs/kb/auditor/long-data-collection-improving-the-performance.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/long-data-collection-improving-the-performance.md
similarity index 100%
rename from docs/kb/auditor/long-data-collection-improving-the-performance.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/long-data-collection-improving-the-performance.md
diff --git a/docs/kb/auditor/malformed-control-request.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/malformed-control-request.md
similarity index 100%
rename from docs/kb/auditor/malformed-control-request.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/malformed-control-request.md
diff --git a/docs/kb/auditor/managed-objects-disappear-after-disk-space-on-system-drive-fills-up.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/managed-objects-disappear-after-disk-space-on-system-drive-fills-up.md
similarity index 100%
rename from docs/kb/auditor/managed-objects-disappear-after-disk-space-on-system-drive-fills-up.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/managed-objects-disappear-after-disk-space-on-system-drive-fills-up.md
diff --git a/docs/kb/auditor/mass-removal-of-files-located-on-dfs-server.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/mass-removal-of-files-located-on-dfs-server.md
similarity index 100%
rename from docs/kb/auditor/mass-removal-of-files-located-on-dfs-server.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/mass-removal-of-files-located-on-dfs-server.md
diff --git a/docs/kb/auditor/migrating-auditor-to-new-server.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md
similarity index 100%
rename from docs/kb/auditor/migrating-auditor-to-new-server.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md
diff --git a/docs/kb/auditor/mimikatz-pass-the-hash-activity-on-netwrix-auditor-server.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/mimikatz-pass-the-hash-activity-on-netwrix-auditor-server.md
similarity index 100%
rename from docs/kb/auditor/mimikatz-pass-the-hash-activity-on-netwrix-auditor-server.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/mimikatz-pass-the-hash-activity-on-netwrix-auditor-server.md
diff --git a/docs/kb/auditor/navigating-and-understanding-a-netwrix-auditor-monitoring-plan.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/navigating-and-understanding-a-netwrix-auditor-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/navigating-and-understanding-a-netwrix-auditor-monitoring-plan.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/navigating-and-understanding-a-netwrix-auditor-monitoring-plan.md
diff --git a/docs/kb/auditor/ndc-dashboard-failure.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/ndc-dashboard-failure.md
similarity index 100%
rename from docs/kb/auditor/ndc-dashboard-failure.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/ndc-dashboard-failure.md
diff --git a/docs/kb/auditor/ndc-page-status-codes.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/ndc-page-status-codes.md
similarity index 100%
rename from docs/kb/auditor/ndc-page-status-codes.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/ndc-page-status-codes.md
diff --git a/docs/kb/auditor/netwrix-auditor-configuration-server-service-fails-to-start-too-many-methods-to-fire-events-from.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-configuration-server-service-fails-to-start-too-many-methods-to-fire-events-from.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-configuration-server-service-fails-to-start-too-many-methods-to-fire-events-from.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-configuration-server-service-fails-to-start-too-many-methods-to-fire-events-from.md
diff --git a/docs/kb/auditor/netwrix-auditor-consumes-disk-space-recommendations.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-consumes-disk-space-recommendations.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-consumes-disk-space-recommendations.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-consumes-disk-space-recommendations.md
diff --git a/docs/kb/auditor/netwrix-auditor-health-log-contains-eventid-2002.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-health-log-contains-eventid-2002.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-health-log-contains-eventid-2002.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-health-log-contains-eventid-2002.md
diff --git a/docs/kb/auditor/netwrix-auditor-health-log-contains-eventid-3230.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-health-log-contains-eventid-3230.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-health-log-contains-eventid-3230.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-health-log-contains-eventid-3230.md
diff --git a/docs/kb/auditor/netwrix-auditor-licensing-faqs.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-licensing-faqs.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-licensing-faqs.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-licensing-faqs.md
diff --git a/docs/kb/auditor/netwrix-auditor-stops-working-after-upgrading-host-server-windows.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-stops-working-after-upgrading-host-server-windows.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-stops-working-after-upgrading-host-server-windows.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-stops-working-after-upgrading-host-server-windows.md
diff --git a/docs/kb/auditor/netwrix-auditor-system-health-log-contains-eventids-3127-and-3129.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-system-health-log-contains-eventids-3127-and-3129.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-system-health-log-contains-eventids-3127-and-3129.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-system-health-log-contains-eventids-3127-and-3129.md
diff --git a/docs/kb/auditor/no-data-collected-in-linux-generic-syslog-monitoring-plan.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/no-data-collected-in-linux-generic-syslog-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/no-data-collected-in-linux-generic-syslog-monitoring-plan.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/no-data-collected-in-linux-generic-syslog-monitoring-plan.md
diff --git a/docs/kb/auditor/no-monitoring-plans-found-in-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/no-monitoring-plans-found-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/no-monitoring-plans-found-in-netwrix-auditor.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/no-monitoring-plans-found-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/object-type-and-what-changed-columns-are-empty.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/object-type-and-what-changed-columns-are-empty.md
similarity index 100%
rename from docs/kb/auditor/object-type-and-what-changed-columns-are-empty.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/object-type-and-what-changed-columns-are-empty.md
diff --git a/docs/kb/auditor/odd-characters-in-csv-file.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/odd-characters-in-csv-file.md
similarity index 100%
rename from docs/kb/auditor/odd-characters-in-csv-file.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/odd-characters-in-csv-file.md
diff --git a/docs/kb/auditor/omit-folder-open-events.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/omit-folder-open-events.md
similarity index 100%
rename from docs/kb/auditor/omit-folder-open-events.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/omit-folder-open-events.md
diff --git a/docs/kb/auditor/out-of-memory-exception.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/out-of-memory-exception.md
similarity index 100%
rename from docs/kb/auditor/out-of-memory-exception.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/out-of-memory-exception.md
diff --git a/docs/kb/auditor/preserving-custom-taxonomies.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/preserving-custom-taxonomies.md
similarity index 100%
rename from docs/kb/auditor/preserving-custom-taxonomies.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/preserving-custom-taxonomies.md
diff --git a/docs/kb/auditor/process-document-images-results-in-no-extracted-text-or-invalid-text.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/process-document-images-results-in-no-extracted-text-or-invalid-text.md
similarity index 100%
rename from docs/kb/auditor/process-document-images-results-in-no-extracted-text-or-invalid-text.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/process-document-images-results-in-no-extracted-text-or-invalid-text.md
diff --git a/docs/kb/auditor/reading-log-status.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/reading-log-status.md
similarity index 100%
rename from docs/kb/auditor/reading-log-status.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/reading-log-status.md
diff --git a/docs/kb/auditor/response-action-example-moving-user-account-to-the-quarantine-ou.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/response-action-example-moving-user-account-to-the-quarantine-ou.md
similarity index 100%
rename from docs/kb/auditor/response-action-example-moving-user-account-to-the-quarantine-ou.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/response-action-example-moving-user-account-to-the-quarantine-ou.md
diff --git a/docs/kb/auditor/result_administrator_restricted_access_to_users_of_your_domain..md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/result_administrator_restricted_access_to_users_of_your_domain..md
similarity index 100%
rename from docs/kb/auditor/result_administrator_restricted_access_to_users_of_your_domain..md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/result_administrator_restricted_access_to_users_of_your_domain..md
diff --git a/docs/kb/auditor/rif-document-is-not-compatible-with-this-code-version.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/rif-document-is-not-compatible-with-this-code-version.md
similarity index 100%
rename from docs/kb/auditor/rif-document-is-not-compatible-with-this-code-version.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/rif-document-is-not-compatible-with-this-code-version.md
diff --git a/docs/kb/auditor/sa_11.6_010.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/sa_11.6_010.md
similarity index 100%
rename from docs/kb/auditor/sa_11.6_010.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/sa_11.6_010.md
diff --git a/docs/kb/auditor/search-takes-too-long-to-complete.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/search-takes-too-long-to-complete.md
similarity index 100%
rename from docs/kb/auditor/search-takes-too-long-to-complete.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/search-takes-too-long-to-complete.md
diff --git a/docs/kb/auditor/security-log-overwrites-occurred-on-this-dc.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/security-log-overwrites-occurred-on-this-dc.md
similarity index 100%
rename from docs/kb/auditor/security-log-overwrites-occurred-on-this-dc.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/security-log-overwrites-occurred-on-this-dc.md
diff --git a/docs/kb/auditor/security-log-settings-do-not-apply-via-gpo.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/security-log-settings-do-not-apply-via-gpo.md
similarity index 100%
rename from docs/kb/auditor/security-log-settings-do-not-apply-via-gpo.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/security-log-settings-do-not-apply-via-gpo.md
diff --git a/docs/kb/auditor/set-up-direct-send-for-netwrix-auditor-and-netwrix-data-classification.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/set-up-direct-send-for-netwrix-auditor-and-netwrix-data-classification.md
similarity index 100%
rename from docs/kb/auditor/set-up-direct-send-for-netwrix-auditor-and-netwrix-data-classification.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/set-up-direct-send-for-netwrix-auditor-and-netwrix-data-classification.md
diff --git a/docs/kb/auditor/slow-examination.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/slow-examination.md
similarity index 100%
rename from docs/kb/auditor/slow-examination.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/slow-examination.md
diff --git a/docs/kb/auditor/supplied-object-has-not-been-initialized-for-investigations.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/supplied-object-has-not-been-initialized-for-investigations.md
similarity index 100%
rename from docs/kb/auditor/supplied-object-has-not-been-initialized-for-investigations.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/supplied-object-has-not-been-initialized-for-investigations.md
diff --git a/docs/kb/auditor/system-changed-client-operating-system.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-client-operating-system.md
similarity index 100%
rename from docs/kb/auditor/system-changed-client-operating-system.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-client-operating-system.md
diff --git a/docs/kb/auditor/system-changed-directory-objects-for-foreign-security-principals.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-directory-objects-for-foreign-security-principals.md
similarity index 100%
rename from docs/kb/auditor/system-changed-directory-objects-for-foreign-security-principals.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-directory-objects-for-foreign-security-principals.md
diff --git a/docs/kb/auditor/system-changed-object-path-after-account-name-change.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-object-path-after-account-name-change.md
similarity index 100%
rename from docs/kb/auditor/system-changed-object-path-after-account-name-change.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-object-path-after-account-name-change.md
diff --git a/docs/kb/auditor/system-changed-service-principle-name-attribute.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-service-principle-name-attribute.md
similarity index 100%
rename from docs/kb/auditor/system-changed-service-principle-name-attribute.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-service-principle-name-attribute.md
diff --git a/docs/kb/auditor/the-conceptqs-application-pool-crashes-on-startup.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-conceptqs-application-pool-crashes-on-startup.md
similarity index 100%
rename from docs/kb/auditor/the-conceptqs-application-pool-crashes-on-startup.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-conceptqs-application-pool-crashes-on-startup.md
diff --git a/docs/kb/auditor/the-domain-param-parameter-is-missing-a-value.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-domain-param-parameter-is-missing-a-value.md
similarity index 100%
rename from docs/kb/auditor/the-domain-param-parameter-is-missing-a-value.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-domain-param-parameter-is-missing-a-value.md
diff --git a/docs/kb/auditor/the-name-of-the-process-that-caused-an-account-lockout-does-not-appear-in-examination-results.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-name-of-the-process-that-caused-an-account-lockout-does-not-appear-in-examination-results.md
similarity index 100%
rename from docs/kb/auditor/the-name-of-the-process-that-caused-an-account-lockout-does-not-appear-in-examination-results.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-name-of-the-process-that-caused-an-account-lockout-does-not-appear-in-examination-results.md
diff --git a/docs/kb/auditor/the-order-in-which-domains-appear-in-the-managed-domains-list.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-order-in-which-domains-appear-in-the-managed-domains-list.md
similarity index 100%
rename from docs/kb/auditor/the-order-in-which-domains-appear-in-the-managed-domains-list.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-order-in-which-domains-appear-in-the-managed-domains-list.md
diff --git a/docs/kb/auditor/uavr-core-service-not-responding.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/uavr-core-service-not-responding.md
similarity index 100%
rename from docs/kb/auditor/uavr-core-service-not-responding.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/uavr-core-service-not-responding.md
diff --git a/docs/kb/auditor/unable-to-audit-target-server-by-ip-address.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/unable-to-audit-target-server-by-ip-address.md
similarity index 100%
rename from docs/kb/auditor/unable-to-audit-target-server-by-ip-address.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/unable-to-audit-target-server-by-ip-address.md
diff --git a/docs/kb/auditor/unable-to-connect-to-remote-server.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/unable-to-connect-to-remote-server.md
similarity index 100%
rename from docs/kb/auditor/unable-to-connect-to-remote-server.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/unable-to-connect-to-remote-server.md
diff --git a/docs/kb/auditor/unable-to-update-the-compression-service.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/unable-to-update-the-compression-service.md
similarity index 100%
rename from docs/kb/auditor/unable-to-update-the-compression-service.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/unable-to-update-the-compression-service.md
diff --git a/docs/kb/auditor/unable-to-upload-session-to-long-term-archive-access-to-state-in-time-folder-is-denied.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/unable-to-upload-session-to-long-term-archive-access-to-state-in-time-folder-is-denied.md
similarity index 100%
rename from docs/kb/auditor/unable-to-upload-session-to-long-term-archive-access-to-state-in-time-folder-is-denied.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/unable-to-upload-session-to-long-term-archive-access-to-state-in-time-folder-is-denied.md
diff --git a/docs/kb/auditor/user-and-workstation-do-not-match.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/user-and-workstation-do-not-match.md
similarity index 100%
rename from docs/kb/auditor/user-and-workstation-do-not-match.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/user-and-workstation-do-not-match.md
diff --git a/docs/kb/auditor/user-behavior-analytics-configuration.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/user-behavior-analytics-configuration.md
similarity index 100%
rename from docs/kb/auditor/user-behavior-analytics-configuration.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/user-behavior-analytics-configuration.md
diff --git a/docs/kb/auditor/warning-53-the-network-path-was-not-found.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/warning-53-the-network-path-was-not-found.md
similarity index 100%
rename from docs/kb/auditor/warning-53-the-network-path-was-not-found.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/warning-53-the-network-path-was-not-found.md
diff --git a/docs/kb/auditor/what-cmdlets-are-used-for-aal-changes-collection.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/what-cmdlets-are-used-for-aal-changes-collection.md
similarity index 100%
rename from docs/kb/auditor/what-cmdlets-are-used-for-aal-changes-collection.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/what-cmdlets-are-used-for-aal-changes-collection.md
diff --git a/docs/kb/auditor/what-does-automatic-audit-configuration-do-on-the-monitored-servers.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/what-does-automatic-audit-configuration-do-on-the-monitored-servers.md
similarity index 100%
rename from docs/kb/auditor/what-does-automatic-audit-configuration-do-on-the-monitored-servers.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/what-does-automatic-audit-configuration-do-on-the-monitored-servers.md
diff --git a/docs/kb/auditor/what-is-tombstonelifetime-attribute-and-what-is-it-used-for.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/what-is-tombstonelifetime-attribute-and-what-is-it-used-for.md
similarity index 100%
rename from docs/kb/auditor/what-is-tombstonelifetime-attribute-and-what-is-it-used-for.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/what-is-tombstonelifetime-attribute-and-what-is-it-used-for.md
diff --git a/docs/kb/auditor/where-does-netwrix-auditor-collect-security-logs.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/where-does-netwrix-auditor-collect-security-logs.md
similarity index 100%
rename from docs/kb/auditor/where-does-netwrix-auditor-collect-security-logs.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/where-does-netwrix-auditor-collect-security-logs.md
diff --git a/docs/kb/auditor/which-applications-should-be-whitelisted-for-the-auditor-to-function-properly.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/which-applications-should-be-whitelisted-for-the-auditor-to-function-properly.md
similarity index 100%
rename from docs/kb/auditor/which-applications-should-be-whitelisted-for-the-auditor-to-function-properly.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/which-applications-should-be-whitelisted-for-the-auditor-to-function-properly.md
diff --git a/docs/kb/auditor/why-a-registry-key-is-missing-in-both-gpmc-and-local.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/why-a-registry-key-is-missing-in-both-gpmc-and-local.md
similarity index 100%
rename from docs/kb/auditor/why-a-registry-key-is-missing-in-both-gpmc-and-local.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/why-a-registry-key-is-missing-in-both-gpmc-and-local.md
diff --git a/docs/kb/auditor/why-does-the-netwrix-auditor-application-deployment-service-not-start-or-is-terminated-upon-launch.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/why-does-the-netwrix-auditor-application-deployment-service-not-start-or-is-terminated-upon-launch.md
similarity index 100%
rename from docs/kb/auditor/why-does-the-netwrix-auditor-application-deployment-service-not-start-or-is-terminated-upon-launch.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/why-does-the-netwrix-auditor-application-deployment-service-not-start-or-is-terminated-upon-launch.md
diff --git a/docs/kb/auditor/why-netwrix-auditor-reads-ad-fs-dkm-key-and-is-it-normal.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/why-netwrix-auditor-reads-ad-fs-dkm-key-and-is-it-normal.md
similarity index 100%
rename from docs/kb/auditor/why-netwrix-auditor-reads-ad-fs-dkm-key-and-is-it-normal.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/why-netwrix-auditor-reads-ad-fs-dkm-key-and-is-it-normal.md
diff --git a/docs/kb/auditor/workstation-name-is-not-shown.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/workstation-name-is-not-shown.md
similarity index 100%
rename from docs/kb/auditor/workstation-name-is-not-shown.md
rename to docs/kb/auditor/features-and-operations/glossaries-and-faqs/workstation-name-is-not-shown.md
diff --git a/docs/kb/auditor/account-lockout-examiner-generates-excessive-traffic-in-the-network.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/account-lockout-examiner-generates-excessive-traffic-in-the-network.md
similarity index 100%
rename from docs/kb/auditor/account-lockout-examiner-generates-excessive-traffic-in-the-network.md
rename to docs/kb/auditor/monitoring-plans/account-lockout-examiner/account-lockout-examiner-generates-excessive-traffic-in-the-network.md
diff --git a/docs/kb/auditor/account-lockout-examiner-works-very-slowly.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/account-lockout-examiner-works-very-slowly.md
similarity index 100%
rename from docs/kb/auditor/account-lockout-examiner-works-very-slowly.md
rename to docs/kb/auditor/monitoring-plans/account-lockout-examiner/account-lockout-examiner-works-very-slowly.md
diff --git a/docs/kb/auditor/credentials-used-by-account-lockout-examiner.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/credentials-used-by-account-lockout-examiner.md
similarity index 100%
rename from docs/kb/auditor/credentials-used-by-account-lockout-examiner.md
rename to docs/kb/auditor/monitoring-plans/account-lockout-examiner/credentials-used-by-account-lockout-examiner.md
diff --git a/docs/kb/auditor/faq-account-lockout-examiner.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/faq-account-lockout-examiner.md
similarity index 100%
rename from docs/kb/auditor/faq-account-lockout-examiner.md
rename to docs/kb/auditor/monitoring-plans/account-lockout-examiner/faq-account-lockout-examiner.md
diff --git a/docs/kb/auditor/how-does-netwrix-account-lockout-examiner-work.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-does-netwrix-account-lockout-examiner-work.md
similarity index 100%
rename from docs/kb/auditor/how-does-netwrix-account-lockout-examiner-work.md
rename to docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-does-netwrix-account-lockout-examiner-work.md
diff --git a/docs/kb/auditor/how-to-install-and-use-netwrix-account-lockout-examiner.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-install-and-use-netwrix-account-lockout-examiner.md
similarity index 100%
rename from docs/kb/auditor/how-to-install-and-use-netwrix-account-lockout-examiner.md
rename to docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-install-and-use-netwrix-account-lockout-examiner.md
diff --git a/docs/kb/auditor/how-to-migrate-account-lockout-examiner.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-migrate-account-lockout-examiner.md
similarity index 100%
rename from docs/kb/auditor/how-to-migrate-account-lockout-examiner.md
rename to docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-migrate-account-lockout-examiner.md
diff --git a/docs/kb/auditor/how-to-modify-the-account-lockout-examiner-service-account.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-modify-the-account-lockout-examiner-service-account.md
similarity index 100%
rename from docs/kb/auditor/how-to-modify-the-account-lockout-examiner-service-account.md
rename to docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-modify-the-account-lockout-examiner-service-account.md
diff --git a/docs/kb/auditor/support-and-maintenance-contract-has-expired-for-account-lockout-examiner.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/support-and-maintenance-contract-has-expired-for-account-lockout-examiner.md
similarity index 100%
rename from docs/kb/auditor/support-and-maintenance-contract-has-expired-for-account-lockout-examiner.md
rename to docs/kb/auditor/monitoring-plans/account-lockout-examiner/support-and-maintenance-contract-has-expired-for-account-lockout-examiner.md
diff --git a/docs/kb/auditor/the-account-lockout-examiner-service-account.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/the-account-lockout-examiner-service-account.md
similarity index 100%
rename from docs/kb/auditor/the-account-lockout-examiner-service-account.md
rename to docs/kb/auditor/monitoring-plans/account-lockout-examiner/the-account-lockout-examiner-service-account.md
diff --git a/docs/kb/auditor/access-is-denied-error-in-event-log-manager-health-log.md b/docs/kb/auditor/monitoring-plans/event-log-management/access-is-denied-error-in-event-log-manager-health-log.md
similarity index 100%
rename from docs/kb/auditor/access-is-denied-error-in-event-log-manager-health-log.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/access-is-denied-error-in-event-log-manager-health-log.md
diff --git a/docs/kb/auditor/could-not-locate-end-of-event-log-error.md b/docs/kb/auditor/monitoring-plans/event-log-management/could-not-locate-end-of-event-log-error.md
similarity index 100%
rename from docs/kb/auditor/could-not-locate-end-of-event-log-error.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/could-not-locate-end-of-event-log-error.md
diff --git a/docs/kb/auditor/error-failed-to-check-for-event-log-existence.md b/docs/kb/auditor/monitoring-plans/event-log-management/error-failed-to-check-for-event-log-existence.md
similarity index 100%
rename from docs/kb/auditor/error-failed-to-check-for-event-log-existence.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/error-failed-to-check-for-event-log-existence.md
diff --git a/docs/kb/auditor/event-log-manager-report-service-starts-and-stops-multi-lingual-configuration.md b/docs/kb/auditor/monitoring-plans/event-log-management/event-log-manager-report-service-starts-and-stops-multi-lingual-configuration.md
similarity index 100%
rename from docs/kb/auditor/event-log-manager-report-service-starts-and-stops-multi-lingual-configuration.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/event-log-manager-report-service-starts-and-stops-multi-lingual-configuration.md
diff --git a/docs/kb/auditor/following-event-log-settings-may-lead-to-incorrect-or-incomplete-data-in-reports.md b/docs/kb/auditor/monitoring-plans/event-log-management/following-event-log-settings-may-lead-to-incorrect-or-incomplete-data-in-reports.md
similarity index 100%
rename from docs/kb/auditor/following-event-log-settings-may-lead-to-incorrect-or-incomplete-data-in-reports.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/following-event-log-settings-may-lead-to-incorrect-or-incomplete-data-in-reports.md
diff --git a/docs/kb/auditor/how-to-edit-schedules-in-netwrix-auditor-event-log-manager.md b/docs/kb/auditor/monitoring-plans/event-log-management/how-to-edit-schedules-in-netwrix-auditor-event-log-manager.md
similarity index 100%
rename from docs/kb/auditor/how-to-edit-schedules-in-netwrix-auditor-event-log-manager.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/how-to-edit-schedules-in-netwrix-auditor-event-log-manager.md
diff --git a/docs/kb/auditor/how-to-exclude-system-account-from-event-log.md b/docs/kb/auditor/monitoring-plans/event-log-management/how-to-exclude-system-account-from-event-log.md
similarity index 100%
rename from docs/kb/auditor/how-to-exclude-system-account-from-event-log.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/how-to-exclude-system-account-from-event-log.md
diff --git a/docs/kb/auditor/how-to-force-netwrix-auditor-to-collect-a-specific-applications-and-services-event-log.md b/docs/kb/auditor/monitoring-plans/event-log-management/how-to-force-netwrix-auditor-to-collect-a-specific-applications-and-services-event-log.md
similarity index 100%
rename from docs/kb/auditor/how-to-force-netwrix-auditor-to-collect-a-specific-applications-and-services-event-log.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/how-to-force-netwrix-auditor-to-collect-a-specific-applications-and-services-event-log.md
diff --git a/docs/kb/auditor/how-to-reduce-the-netwrix-event-log-manager-database-size.md b/docs/kb/auditor/monitoring-plans/event-log-management/how-to-reduce-the-netwrix-event-log-manager-database-size.md
similarity index 100%
rename from docs/kb/auditor/how-to-reduce-the-netwrix-event-log-manager-database-size.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/how-to-reduce-the-netwrix-event-log-manager-database-size.md
diff --git a/docs/kb/auditor/how-to-remove-netwrix-event-log-agent-from-multiple-servers.md b/docs/kb/auditor/monitoring-plans/event-log-management/how-to-remove-netwrix-event-log-agent-from-multiple-servers.md
similarity index 100%
rename from docs/kb/auditor/how-to-remove-netwrix-event-log-agent-from-multiple-servers.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/how-to-remove-netwrix-event-log-agent-from-multiple-servers.md
diff --git a/docs/kb/auditor/how-to-save-and-zip-netwrix-auditor-system-health-event-log.md b/docs/kb/auditor/monitoring-plans/event-log-management/how-to-save-and-zip-netwrix-auditor-system-health-event-log.md
similarity index 100%
rename from docs/kb/auditor/how-to-save-and-zip-netwrix-auditor-system-health-event-log.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/how-to-save-and-zip-netwrix-auditor-system-health-event-log.md
diff --git a/docs/kb/auditor/migrate-event-log-manager-monitoring-plans.md b/docs/kb/auditor/monitoring-plans/event-log-management/migrate-event-log-manager-monitoring-plans.md
similarity index 100%
rename from docs/kb/auditor/migrate-event-log-manager-monitoring-plans.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/migrate-event-log-manager-monitoring-plans.md
diff --git a/docs/kb/auditor/monitoring-ssl-certificates-with-event-log-manager.md b/docs/kb/auditor/monitoring-plans/event-log-management/monitoring-ssl-certificates-with-event-log-manager.md
similarity index 100%
rename from docs/kb/auditor/monitoring-ssl-certificates-with-event-log-manager.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/monitoring-ssl-certificates-with-event-log-manager.md
diff --git a/docs/kb/auditor/netwrix-auditor-event-log-manager-shows-smtp-authentication-errors-while-configuring-a-monitoring-pl.md b/docs/kb/auditor/monitoring-plans/event-log-management/netwrix-auditor-event-log-manager-shows-smtp-authentication-errors-while-configuring-a-monitoring-pl.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-event-log-manager-shows-smtp-authentication-errors-while-configuring-a-monitoring-pl.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/netwrix-auditor-event-log-manager-shows-smtp-authentication-errors-while-configuring-a-monitoring-pl.md
diff --git a/docs/kb/auditor/netwrix-auditor-failed-to-process-event-logs-on-a-domain-controller-com-error-2147023485.md b/docs/kb/auditor/monitoring-plans/event-log-management/netwrix-auditor-failed-to-process-event-logs-on-a-domain-controller-com-error-2147023485.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-failed-to-process-event-logs-on-a-domain-controller-com-error-2147023485.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/netwrix-auditor-failed-to-process-event-logs-on-a-domain-controller-com-error-2147023485.md
diff --git a/docs/kb/auditor/parallel-redo-events-in-sql-server-event-log.md b/docs/kb/auditor/monitoring-plans/event-log-management/parallel-redo-events-in-sql-server-event-log.md
similarity index 100%
rename from docs/kb/auditor/parallel-redo-events-in-sql-server-event-log.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/parallel-redo-events-in-sql-server-event-log.md
diff --git a/docs/kb/auditor/process-event-log-backup-without-domain-administrator-permissions.md b/docs/kb/auditor/monitoring-plans/event-log-management/process-event-log-backup-without-domain-administrator-permissions.md
similarity index 100%
rename from docs/kb/auditor/process-event-log-backup-without-domain-administrator-permissions.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/process-event-log-backup-without-domain-administrator-permissions.md
diff --git a/docs/kb/auditor/reset-collection-history-for-generic-events-event-log-management.md b/docs/kb/auditor/monitoring-plans/event-log-management/reset-collection-history-for-generic-events-event-log-management.md
similarity index 100%
rename from docs/kb/auditor/reset-collection-history-for-generic-events-event-log-management.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/reset-collection-history-for-generic-events-event-log-management.md
diff --git a/docs/kb/auditor/the-event-logs-reports-for-windows-server-does-not-contain-any-data.md b/docs/kb/auditor/monitoring-plans/event-log-management/the-event-logs-reports-for-windows-server-does-not-contain-any-data.md
similarity index 100%
rename from docs/kb/auditor/the-event-logs-reports-for-windows-server-does-not-contain-any-data.md
rename to docs/kb/auditor/monitoring-plans/event-log-management/the-event-logs-reports-for-windows-server-does-not-contain-any-data.md
diff --git a/docs/kb/auditor/account-and-password-expiration-mismatch-in-netwrix-auditor-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/account-and-password-expiration-mismatch-in-netwrix-auditor-password-expiration-notifier.md
similarity index 100%
rename from docs/kb/auditor/account-and-password-expiration-mismatch-in-netwrix-auditor-password-expiration-notifier.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/account-and-password-expiration-mismatch-in-netwrix-auditor-password-expiration-notifier.md
diff --git a/docs/kb/auditor/customize-notifications-and-reports-in-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/customize-notifications-and-reports-in-password-expiration-notifier.md
similarity index 100%
rename from docs/kb/auditor/customize-notifications-and-reports-in-password-expiration-notifier.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/customize-notifications-and-reports-in-password-expiration-notifier.md
diff --git a/docs/kb/auditor/emails-are-missing-in-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/emails-are-missing-in-password-expiration-notifier.md
similarity index 100%
rename from docs/kb/auditor/emails-are-missing-in-password-expiration-notifier.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/emails-are-missing-in-password-expiration-notifier.md
diff --git a/docs/kb/auditor/empty-password-expiration-notifier-emails.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/empty-password-expiration-notifier-emails.md
similarity index 100%
rename from docs/kb/auditor/empty-password-expiration-notifier-emails.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/empty-password-expiration-notifier-emails.md
diff --git a/docs/kb/auditor/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails.md
similarity index 100%
rename from docs/kb/auditor/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails.md
diff --git a/docs/kb/auditor/how-does-password-expiration-notifier-work.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/how-does-password-expiration-notifier-work.md
similarity index 100%
rename from docs/kb/auditor/how-does-password-expiration-notifier-work.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/how-does-password-expiration-notifier-work.md
diff --git a/docs/kb/auditor/how-to-configure-the-sms-notifications-feature-for-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/how-to-configure-the-sms-notifications-feature-for-password-expiration-notifier.md
similarity index 100%
rename from docs/kb/auditor/how-to-configure-the-sms-notifications-feature-for-password-expiration-notifier.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/how-to-configure-the-sms-notifications-feature-for-password-expiration-notifier.md
diff --git a/docs/kb/auditor/how-to-edit-schedules-in-netwrix-auditor-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/how-to-edit-schedules-in-netwrix-auditor-password-expiration-notifier.md
similarity index 100%
rename from docs/kb/auditor/how-to-edit-schedules-in-netwrix-auditor-password-expiration-notifier.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/how-to-edit-schedules-in-netwrix-auditor-password-expiration-notifier.md
diff --git a/docs/kb/auditor/how-to-exclude-smart-card-users-from-monitoring-by-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/how-to-exclude-smart-card-users-from-monitoring-by-password-expiration-notifier.md
similarity index 100%
rename from docs/kb/auditor/how-to-exclude-smart-card-users-from-monitoring-by-password-expiration-notifier.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/how-to-exclude-smart-card-users-from-monitoring-by-password-expiration-notifier.md
diff --git a/docs/kb/auditor/how-to-notify-users-without-email-in-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/how-to-notify-users-without-email-in-password-expiration-notifier.md
similarity index 100%
rename from docs/kb/auditor/how-to-notify-users-without-email-in-password-expiration-notifier.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/how-to-notify-users-without-email-in-password-expiration-notifier.md
diff --git a/docs/kb/auditor/illegible-notification-contents-and-characters-in-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/illegible-notification-contents-and-characters-in-password-expiration-notifier.md
similarity index 100%
rename from docs/kb/auditor/illegible-notification-contents-and-characters-in-password-expiration-notifier.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/illegible-notification-contents-and-characters-in-password-expiration-notifier.md
diff --git a/docs/kb/auditor/migrate-netwrix-password-expiration-notifier-to-a-different-server.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/migrate-netwrix-password-expiration-notifier-to-a-different-server.md
similarity index 100%
rename from docs/kb/auditor/migrate-netwrix-password-expiration-notifier-to-a-different-server.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/migrate-netwrix-password-expiration-notifier-to-a-different-server.md
diff --git a/docs/kb/auditor/password-expiration-notifier-email-header-and-footer-reset-after-upgrade.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-email-header-and-footer-reset-after-upgrade.md
similarity index 100%
rename from docs/kb/auditor/password-expiration-notifier-email-header-and-footer-reset-after-upgrade.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-email-header-and-footer-reset-after-upgrade.md
diff --git a/docs/kb/auditor/password-expiration-notifier-generates-blank-reports-after-configuring-password-policy-enforcer.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-generates-blank-reports-after-configuring-password-policy-enforcer.md
similarity index 100%
rename from docs/kb/auditor/password-expiration-notifier-generates-blank-reports-after-configuring-password-policy-enforcer.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-generates-blank-reports-after-configuring-password-policy-enforcer.md
diff --git a/docs/kb/auditor/password-expiration-notifier-stopped-showing-results.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-stopped-showing-results.md
similarity index 100%
rename from docs/kb/auditor/password-expiration-notifier-stopped-showing-results.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-stopped-showing-results.md
diff --git a/docs/kb/auditor/support-for-fine-grained-password-policies-in-netwrix-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/support-for-fine-grained-password-policies-in-netwrix-password-expiration-notifier.md
similarity index 100%
rename from docs/kb/auditor/support-for-fine-grained-password-policies-in-netwrix-password-expiration-notifier.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/support-for-fine-grained-password-policies-in-netwrix-password-expiration-notifier.md
diff --git a/docs/kb/auditor/the-minimal-rights-for-the-netwrix-password-expiration-notifier-service-account.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/the-minimal-rights-for-the-netwrix-password-expiration-notifier-service-account.md
similarity index 100%
rename from docs/kb/auditor/the-minimal-rights-for-the-netwrix-password-expiration-notifier-service-account.md
rename to docs/kb/auditor/monitoring-plans/password-expiration-notifier/the-minimal-rights-for-the-netwrix-password-expiration-notifier-service-account.md
diff --git a/docs/kb/auditor/access-errors-for-user-activity-monitoring-plan.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/access-errors-for-user-activity-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/access-errors-for-user-activity-monitoring-plan.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/access-errors-for-user-activity-monitoring-plan.md
diff --git a/docs/kb/auditor/account-is-not-shown-in-a-report-after-netwrix-inactive-users-tracker-resets-its-password.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/account-is-not-shown-in-a-report-after-netwrix-inactive-users-tracker-resets-its-password.md
similarity index 100%
rename from docs/kb/auditor/account-is-not-shown-in-a-report-after-netwrix-inactive-users-tracker-resets-its-password.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/account-is-not-shown-in-a-report-after-netwrix-inactive-users-tracker-resets-its-password.md
diff --git a/docs/kb/auditor/does-inactive-user-tracking-alert-before-it-performs-any-actions-on-accounts.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/does-inactive-user-tracking-alert-before-it-performs-any-actions-on-accounts.md
similarity index 100%
rename from docs/kb/auditor/does-inactive-user-tracking-alert-before-it-performs-any-actions-on-accounts.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/does-inactive-user-tracking-alert-before-it-performs-any-actions-on-accounts.md
diff --git a/docs/kb/auditor/error-user-activity-core-service-has-been-already-launched.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/error-user-activity-core-service-has-been-already-launched.md
similarity index 100%
rename from docs/kb/auditor/error-user-activity-core-service-has-been-already-launched.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/error-user-activity-core-service-has-been-already-launched.md
diff --git a/docs/kb/auditor/how-does-inactive-user-tracker-work.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-does-inactive-user-tracker-work.md
similarity index 100%
rename from docs/kb/auditor/how-does-inactive-user-tracker-work.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-does-inactive-user-tracker-work.md
diff --git a/docs/kb/auditor/how-reports-from-user-activity-video-recorder-resolve-host-names.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-reports-from-user-activity-video-recorder-resolve-host-names.md
similarity index 100%
rename from docs/kb/auditor/how-reports-from-user-activity-video-recorder-resolve-host-names.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-reports-from-user-activity-video-recorder-resolve-host-names.md
diff --git a/docs/kb/auditor/how-to-change-the-default-ports-in-netwrix-auditor-user-activity-video-recording.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-change-the-default-ports-in-netwrix-auditor-user-activity-video-recording.md
similarity index 100%
rename from docs/kb/auditor/how-to-change-the-default-ports-in-netwrix-auditor-user-activity-video-recording.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-change-the-default-ports-in-netwrix-auditor-user-activity-video-recording.md
diff --git a/docs/kb/auditor/how-to-configure-user-activity-to-trigger-a-recording-session-on-program-execution.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-configure-user-activity-to-trigger-a-recording-session-on-program-execution.md
similarity index 100%
rename from docs/kb/auditor/how-to-configure-user-activity-to-trigger-a-recording-session-on-program-execution.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-configure-user-activity-to-trigger-a-recording-session-on-program-execution.md
diff --git a/docs/kb/auditor/how-to-discover-inactive-users-with-netwrix-auditor.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-discover-inactive-users-with-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/how-to-discover-inactive-users-with-netwrix-auditor.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-discover-inactive-users-with-netwrix-auditor.md
diff --git a/docs/kb/auditor/how-to-edit-schedules-in-netwrix-auditor-inactive-user-tracker.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-edit-schedules-in-netwrix-auditor-inactive-user-tracker.md
similarity index 100%
rename from docs/kb/auditor/how-to-edit-schedules-in-netwrix-auditor-inactive-user-tracker.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-edit-schedules-in-netwrix-auditor-inactive-user-tracker.md
diff --git a/docs/kb/auditor/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers.md
similarity index 100%
rename from docs/kb/auditor/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers.md
diff --git a/docs/kb/auditor/inactive-users-tracker-locks-out-active-accounts-not-logging-to-windows.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/inactive-users-tracker-locks-out-active-accounts-not-logging-to-windows.md
similarity index 100%
rename from docs/kb/auditor/inactive-users-tracker-locks-out-active-accounts-not-logging-to-windows.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/inactive-users-tracker-locks-out-active-accounts-not-logging-to-windows.md
diff --git a/docs/kb/auditor/manually-update-user-activity-core-service.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/manually-update-user-activity-core-service.md
similarity index 100%
rename from docs/kb/auditor/manually-update-user-activity-core-service.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/manually-update-user-activity-core-service.md
diff --git a/docs/kb/auditor/netwrix-inactive-users-tracker-does-not-perform-any-actions-on-inactive-accounts.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/netwrix-inactive-users-tracker-does-not-perform-any-actions-on-inactive-accounts.md
similarity index 100%
rename from docs/kb/auditor/netwrix-inactive-users-tracker-does-not-perform-any-actions-on-inactive-accounts.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/netwrix-inactive-users-tracker-does-not-perform-any-actions-on-inactive-accounts.md
diff --git a/docs/kb/auditor/netwrix-inactive-users-tracker-ignores-disabled-user-accounts-and-does-not-report-them-as-inactive.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/netwrix-inactive-users-tracker-ignores-disabled-user-accounts-and-does-not-report-them-as-inactive.md
similarity index 100%
rename from docs/kb/auditor/netwrix-inactive-users-tracker-ignores-disabled-user-accounts-and-does-not-report-them-as-inactive.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/netwrix-inactive-users-tracker-ignores-disabled-user-accounts-and-does-not-report-them-as-inactive.md
diff --git a/docs/kb/auditor/object-reference-not-set-to-instance-of-object-in-inactive-user-tracker-health-log.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/object-reference-not-set-to-instance-of-object-in-inactive-user-tracker-health-log.md
similarity index 100%
rename from docs/kb/auditor/object-reference-not-set-to-instance-of-object-in-inactive-user-tracker-health-log.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/object-reference-not-set-to-instance-of-object-in-inactive-user-tracker-health-log.md
diff --git a/docs/kb/auditor/service-did-not-respond-to-the-start-or-control-request-error-in-user-activity-service.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/service-did-not-respond-to-the-start-or-control-request-error-in-user-activity-service.md
similarity index 100%
rename from docs/kb/auditor/service-did-not-respond-to-the-start-or-control-request-error-in-user-activity-service.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/service-did-not-respond-to-the-start-or-control-request-error-in-user-activity-service.md
diff --git a/docs/kb/auditor/some-accounts-were-not-moved-or-deleted-in-inactive-user-tracker-report.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/some-accounts-were-not-moved-or-deleted-in-inactive-user-tracker-report.md
similarity index 100%
rename from docs/kb/auditor/some-accounts-were-not-moved-or-deleted-in-inactive-user-tracker-report.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/some-accounts-were-not-moved-or-deleted-in-inactive-user-tracker-report.md
diff --git a/docs/kb/auditor/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md
diff --git a/docs/kb/auditor/the-user-activity-video-reporter-agent-is-not-being-installed-on-monitored-server.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/the-user-activity-video-reporter-agent-is-not-being-installed-on-monitored-server.md
similarity index 100%
rename from docs/kb/auditor/the-user-activity-video-reporter-agent-is-not-being-installed-on-monitored-server.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/the-user-activity-video-reporter-agent-is-not-being-installed-on-monitored-server.md
diff --git a/docs/kb/auditor/unable-to-launch-netwrix-auditor-user-activity-core-service.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/unable-to-launch-netwrix-auditor-user-activity-core-service.md
similarity index 100%
rename from docs/kb/auditor/unable-to-launch-netwrix-auditor-user-activity-core-service.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/unable-to-launch-netwrix-auditor-user-activity-core-service.md
diff --git a/docs/kb/auditor/uninstalling-user-activity-monitoring-agents.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/uninstalling-user-activity-monitoring-agents.md
similarity index 100%
rename from docs/kb/auditor/uninstalling-user-activity-monitoring-agents.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/uninstalling-user-activity-monitoring-agents.md
diff --git a/docs/kb/auditor/user-activity-video-is-not-being-captured.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/user-activity-video-is-not-being-captured.md
similarity index 100%
rename from docs/kb/auditor/user-activity-video-is-not-being-captured.md
rename to docs/kb/auditor/monitoring-plans/user-activity-monitoring/user-activity-video-is-not-being-captured.md
diff --git a/docs/kb/auditor/how-to-get-single-alert-on-mass-objects-modification.md b/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/how-to-get-single-alert-on-mass-objects-modification.md
similarity index 100%
rename from docs/kb/auditor/how-to-get-single-alert-on-mass-objects-modification.md
rename to docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/how-to-get-single-alert-on-mass-objects-modification.md
diff --git a/docs/kb/auditor/how-to-remove-footer-from-real-time-alert-emails.md b/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/how-to-remove-footer-from-real-time-alert-emails.md
similarity index 100%
rename from docs/kb/auditor/how-to-remove-footer-from-real-time-alert-emails.md
rename to docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/how-to-remove-footer-from-real-time-alert-emails.md
diff --git a/docs/kb/auditor/how-to-use-sms-text-for-alerts.md b/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/how-to-use-sms-text-for-alerts.md
similarity index 100%
rename from docs/kb/auditor/how-to-use-sms-text-for-alerts.md
rename to docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/how-to-use-sms-text-for-alerts.md
diff --git a/docs/kb/auditor/logs-to-collect-for-netwrix-auditor-sms-alert-issues.md b/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/logs-to-collect-for-netwrix-auditor-sms-alert-issues.md
similarity index 100%
rename from docs/kb/auditor/logs-to-collect-for-netwrix-auditor-sms-alert-issues.md
rename to docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/logs-to-collect-for-netwrix-auditor-sms-alert-issues.md
diff --git a/docs/kb/auditor/setting-up-account-lockout-alert.md b/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/setting-up-account-lockout-alert.md
similarity index 100%
rename from docs/kb/auditor/setting-up-account-lockout-alert.md
rename to docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/setting-up-account-lockout-alert.md
diff --git a/docs/kb/auditor/the-best-way-to-find-the-attribute-name-when-configuring-real-time-alerts.md b/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/the-best-way-to-find-the-attribute-name-when-configuring-real-time-alerts.md
similarity index 100%
rename from docs/kb/auditor/the-best-way-to-find-the-attribute-name-when-configuring-real-time-alerts.md
rename to docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/the-best-way-to-find-the-attribute-name-when-configuring-real-time-alerts.md
diff --git a/docs/kb/auditor/unable-to-create-real-time-alerts.md b/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/unable-to-create-real-time-alerts.md
similarity index 100%
rename from docs/kb/auditor/unable-to-create-real-time-alerts.md
rename to docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/unable-to-create-real-time-alerts.md
diff --git a/docs/kb/auditor/why-i-get-alerts-on-accounts-that-cannot-be-locked-out.md b/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/why-i-get-alerts-on-accounts-that-cannot-be-locked-out.md
similarity index 100%
rename from docs/kb/auditor/why-i-get-alerts-on-accounts-that-cannot-be-locked-out.md
rename to docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/why-i-get-alerts-on-accounts-that-cannot-be-locked-out.md
diff --git a/docs/kb/auditor/activity_summary_emails_contain_.zip_files.md b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/activity_summary_emails_contain_.zip_files.md
similarity index 100%
rename from docs/kb/auditor/activity_summary_emails_contain_.zip_files.md
rename to docs/kb/auditor/reports-alerts-and-notifications/email-notifications/activity_summary_emails_contain_.zip_files.md
diff --git a/docs/kb/auditor/expiry-notifications-sent-to-some-users-only.md b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/expiry-notifications-sent-to-some-users-only.md
similarity index 100%
rename from docs/kb/auditor/expiry-notifications-sent-to-some-users-only.md
rename to docs/kb/auditor/reports-alerts-and-notifications/email-notifications/expiry-notifications-sent-to-some-users-only.md
diff --git a/docs/kb/auditor/how-to-change-smtp-timeout.md b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/how-to-change-smtp-timeout.md
similarity index 100%
rename from docs/kb/auditor/how-to-change-smtp-timeout.md
rename to docs/kb/auditor/reports-alerts-and-notifications/email-notifications/how-to-change-smtp-timeout.md
diff --git a/docs/kb/auditor/how-to-customize-email-notification-template.md b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/how-to-customize-email-notification-template.md
similarity index 100%
rename from docs/kb/auditor/how-to-customize-email-notification-template.md
rename to docs/kb/auditor/reports-alerts-and-notifications/email-notifications/how-to-customize-email-notification-template.md
diff --git a/docs/kb/auditor/notifications-are-not-sent-to-distribution-groups.md b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/notifications-are-not-sent-to-distribution-groups.md
similarity index 100%
rename from docs/kb/auditor/notifications-are-not-sent-to-distribution-groups.md
rename to docs/kb/auditor/reports-alerts-and-notifications/email-notifications/notifications-are-not-sent-to-distribution-groups.md
diff --git a/docs/kb/auditor/notifications-are-not-sent.md b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/notifications-are-not-sent.md
similarity index 100%
rename from docs/kb/auditor/notifications-are-not-sent.md
rename to docs/kb/auditor/reports-alerts-and-notifications/email-notifications/notifications-are-not-sent.md
diff --git a/docs/kb/auditor/ssl-exception-failed-to-deliver-netwrix-auditor-health-summary-email.md b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/ssl-exception-failed-to-deliver-netwrix-auditor-health-summary-email.md
similarity index 100%
rename from docs/kb/auditor/ssl-exception-failed-to-deliver-netwrix-auditor-health-summary-email.md
rename to docs/kb/auditor/reports-alerts-and-notifications/email-notifications/ssl-exception-failed-to-deliver-netwrix-auditor-health-summary-email.md
diff --git a/docs/kb/auditor/when-is-the-password-expiration-notification-sent.md b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/when-is-the-password-expiration-notification-sent.md
similarity index 100%
rename from docs/kb/auditor/when-is-the-password-expiration-notification-sent.md
rename to docs/kb/auditor/reports-alerts-and-notifications/email-notifications/when-is-the-password-expiration-notification-sent.md
diff --git a/docs/kb/auditor/ad-hoc-and-email-reports-shows-different-results-in-one-way-trust-forests-environment.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/ad-hoc-and-email-reports-shows-different-results-in-one-way-trust-forests-environment.md
similarity index 100%
rename from docs/kb/auditor/ad-hoc-and-email-reports-shows-different-results-in-one-way-trust-forests-environment.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/ad-hoc-and-email-reports-shows-different-results-in-one-way-trust-forests-environment.md
diff --git a/docs/kb/auditor/alert-reported-change-made-by-system.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/alert-reported-change-made-by-system.md
similarity index 100%
rename from docs/kb/auditor/alert-reported-change-made-by-system.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/alert-reported-change-made-by-system.md
diff --git a/docs/kb/auditor/can-any-additional-attribites-be-displayed-in-the-modification-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/can-any-additional-attribites-be-displayed-in-the-modification-reports.md
similarity index 100%
rename from docs/kb/auditor/can-any-additional-attribites-be-displayed-in-the-modification-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/can-any-additional-attribites-be-displayed-in-the-modification-reports.md
diff --git a/docs/kb/auditor/can-t-find-a-file-share-in-a-report.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/can-t-find-a-file-share-in-a-report.md
similarity index 100%
rename from docs/kb/auditor/can-t-find-a-file-share-in-a-report.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/can-t-find-a-file-share-in-a-report.md
diff --git a/docs/kb/auditor/can-t-find-info-about-largest-files-in-the-files-and-folders-created-report.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/can-t-find-info-about-largest-files-in-the-files-and-folders-created-report.md
similarity index 100%
rename from docs/kb/auditor/can-t-find-info-about-largest-files-in-the-files-and-folders-created-report.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/can-t-find-info-about-largest-files-in-the-files-and-folders-created-report.md
diff --git a/docs/kb/auditor/certificate-related-and-unauthorized-errors-occur-when-trying-to-review-netwrix-auditor-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/certificate-related-and-unauthorized-errors-occur-when-trying-to-review-netwrix-auditor-reports.md
similarity index 100%
rename from docs/kb/auditor/certificate-related-and-unauthorized-errors-occur-when-trying-to-review-netwrix-auditor-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/certificate-related-and-unauthorized-errors-occur-when-trying-to-review-netwrix-auditor-reports.md
diff --git a/docs/kb/auditor/changes-are-reported-with-incorrect-timestamps-and-change-summaries-are-sent-outside-the-schedule.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/changes-are-reported-with-incorrect-timestamps-and-change-summaries-are-sent-outside-the-schedule.md
similarity index 100%
rename from docs/kb/auditor/changes-are-reported-with-incorrect-timestamps-and-change-summaries-are-sent-outside-the-schedule.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/changes-are-reported-with-incorrect-timestamps-and-change-summaries-are-sent-outside-the-schedule.md
diff --git a/docs/kb/auditor/changes-reported-in-wrong-time-zone.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/changes-reported-in-wrong-time-zone.md
similarity index 100%
rename from docs/kb/auditor/changes-reported-in-wrong-time-zone.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/changes-reported-in-wrong-time-zone.md
diff --git a/docs/kb/auditor/error-500-when-viewing-and-accessing-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-500-when-viewing-and-accessing-reports.md
similarity index 100%
rename from docs/kb/auditor/error-500-when-viewing-and-accessing-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-500-when-viewing-and-accessing-reports.md
diff --git a/docs/kb/auditor/error-503-reports-and-subscriptions-not-working.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-503-reports-and-subscriptions-not-working.md
similarity index 100%
rename from docs/kb/auditor/error-503-reports-and-subscriptions-not-working.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-503-reports-and-subscriptions-not-working.md
diff --git a/docs/kb/auditor/error-during-report-processing-rserrorimpersonatinguser-running-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-during-report-processing-rserrorimpersonatinguser-running-reports.md
similarity index 100%
rename from docs/kb/auditor/error-during-report-processing-rserrorimpersonatinguser-running-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-during-report-processing-rserrorimpersonatinguser-running-reports.md
diff --git a/docs/kb/auditor/error-generating-a-report-in-ssrs-http-error-401-unauthorized.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-generating-a-report-in-ssrs-http-error-401-unauthorized.md
similarity index 100%
rename from docs/kb/auditor/error-generating-a-report-in-ssrs-http-error-401-unauthorized.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-generating-a-report-in-ssrs-http-error-401-unauthorized.md
diff --git a/docs/kb/auditor/error-scale-out-deployment-is-not-supported-in-this-edition-of-reporting-services.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-scale-out-deployment-is-not-supported-in-this-edition-of-reporting-services.md
similarity index 100%
rename from docs/kb/auditor/error-scale-out-deployment-is-not-supported-in-this-edition-of-reporting-services.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-scale-out-deployment-is-not-supported-in-this-edition-of-reporting-services.md
diff --git a/docs/kb/auditor/exporting-information-on-account-lockout-events.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/exporting-information-on-account-lockout-events.md
similarity index 100%
rename from docs/kb/auditor/exporting-information-on-account-lockout-events.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/exporting-information-on-account-lockout-events.md
diff --git a/docs/kb/auditor/filtering-reports-by-the-user-who-made-changes.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/filtering-reports-by-the-user-who-made-changes.md
similarity index 100%
rename from docs/kb/auditor/filtering-reports-by-the-user-who-made-changes.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/filtering-reports-by-the-user-who-made-changes.md
diff --git a/docs/kb/auditor/fixing-reports-displaying-letters-instead-of-command-text-in-ssrs.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/fixing-reports-displaying-letters-instead-of-command-text-in-ssrs.md
similarity index 100%
rename from docs/kb/auditor/fixing-reports-displaying-letters-instead-of-command-text-in-ssrs.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/fixing-reports-displaying-letters-instead-of-command-text-in-ssrs.md
diff --git a/docs/kb/auditor/how-do-i-exclude-access-events-to-the-calendar-and-contacts-folders-from-product-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-do-i-exclude-access-events-to-the-calendar-and-contacts-folders-from-product-reports.md
similarity index 100%
rename from docs/kb/auditor/how-do-i-exclude-access-events-to-the-calendar-and-contacts-folders-from-product-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-do-i-exclude-access-events-to-the-calendar-and-contacts-folders-from-product-reports.md
diff --git a/docs/kb/auditor/how-to-exclude-specific-user-accounts-from-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-exclude-specific-user-accounts-from-reports.md
similarity index 100%
rename from docs/kb/auditor/how-to-exclude-specific-user-accounts-from-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-exclude-specific-user-accounts-from-reports.md
diff --git a/docs/kb/auditor/how-to-exclude-the-public-key-infrastructure-pki-changes-from-being-reported.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-exclude-the-public-key-infrastructure-pki-changes-from-being-reported.md
similarity index 100%
rename from docs/kb/auditor/how-to-exclude-the-public-key-infrastructure-pki-changes-from-being-reported.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-exclude-the-public-key-infrastructure-pki-changes-from-being-reported.md
diff --git a/docs/kb/auditor/how-to-exclude-user-s-extended-properties-from-being-reported.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-exclude-user-s-extended-properties-from-being-reported.md
similarity index 100%
rename from docs/kb/auditor/how-to-exclude-user-s-extended-properties-from-being-reported.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-exclude-user-s-extended-properties-from-being-reported.md
diff --git a/docs/kb/auditor/how-to-filter-out-certain-users-from-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-filter-out-certain-users-from-reports.md
similarity index 100%
rename from docs/kb/auditor/how-to-filter-out-certain-users-from-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-filter-out-certain-users-from-reports.md
diff --git a/docs/kb/auditor/how-to-filter-out-specific-events-from-being-monitored-by-the-logon-reporter-software.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-filter-out-specific-events-from-being-monitored-by-the-logon-reporter-software.md
similarity index 100%
rename from docs/kb/auditor/how-to-filter-out-specific-events-from-being-monitored-by-the-logon-reporter-software.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-filter-out-specific-events-from-being-monitored-by-the-logon-reporter-software.md
diff --git a/docs/kb/auditor/how-to-modify-ssrs-report-timeouts.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-modify-ssrs-report-timeouts.md
similarity index 100%
rename from docs/kb/auditor/how-to-modify-ssrs-report-timeouts.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-modify-ssrs-report-timeouts.md
diff --git a/docs/kb/auditor/how-to-modify-the-recipient-list-for-activity-summary-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-modify-the-recipient-list-for-activity-summary-reports.md
similarity index 100%
rename from docs/kb/auditor/how-to-modify-the-recipient-list-for-activity-summary-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-modify-the-recipient-list-for-activity-summary-reports.md
diff --git a/docs/kb/auditor/how-to-omit-certain-object-changes-from-being-reported.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-omit-certain-object-changes-from-being-reported.md
similarity index 100%
rename from docs/kb/auditor/how-to-omit-certain-object-changes-from-being-reported.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-omit-certain-object-changes-from-being-reported.md
diff --git a/docs/kb/auditor/how-to-omit-user-account-locked-out-events-from-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-omit-user-account-locked-out-events-from-reports.md
similarity index 100%
rename from docs/kb/auditor/how-to-omit-user-account-locked-out-events-from-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-omit-user-account-locked-out-events-from-reports.md
diff --git a/docs/kb/auditor/how-to-prepare-for-printing-ssrs-based-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-prepare-for-printing-ssrs-based-reports.md
similarity index 100%
rename from docs/kb/auditor/how-to-prepare-for-printing-ssrs-based-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-prepare-for-printing-ssrs-based-reports.md
diff --git a/docs/kb/auditor/how-to-remove-a-decomissioned-server-from-ssrs-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-remove-a-decomissioned-server-from-ssrs-reports.md
similarity index 100%
rename from docs/kb/auditor/how-to-remove-a-decomissioned-server-from-ssrs-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-remove-a-decomissioned-server-from-ssrs-reports.md
diff --git a/docs/kb/auditor/how-to-troubleshoot-issue-when-changes-are-listed-as-made-by-system-in-a-change-report.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-troubleshoot-issue-when-changes-are-listed-as-made-by-system-in-a-change-report.md
similarity index 100%
rename from docs/kb/auditor/how-to-troubleshoot-issue-when-changes-are-listed-as-made-by-system-in-a-change-report.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-troubleshoot-issue-when-changes-are-listed-as-made-by-system-in-a-change-report.md
diff --git a/docs/kb/auditor/how-to-troubleshoot-overwrites-in-change-reports-for-vmware.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-troubleshoot-overwrites-in-change-reports-for-vmware.md
similarity index 100%
rename from docs/kb/auditor/how-to-troubleshoot-overwrites-in-change-reports-for-vmware.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-troubleshoot-overwrites-in-change-reports-for-vmware.md
diff --git a/docs/kb/auditor/how-to-use-wildcards-in-netwrix-auditor-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-use-wildcards-in-netwrix-auditor-reports.md
similarity index 100%
rename from docs/kb/auditor/how-to-use-wildcards-in-netwrix-auditor-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-use-wildcards-in-netwrix-auditor-reports.md
diff --git a/docs/kb/auditor/html-reports-have-an-issue-with-non-latin-characters.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/html-reports-have-an-issue-with-non-latin-characters.md
similarity index 100%
rename from docs/kb/auditor/html-reports-have-an-issue-with-non-latin-characters.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/html-reports-have-an-issue-with-non-latin-characters.md
diff --git a/docs/kb/auditor/impossible-to-export-a-report.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/impossible-to-export-a-report.md
similarity index 100%
rename from docs/kb/auditor/impossible-to-export-a-report.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/impossible-to-export-a-report.md
diff --git a/docs/kb/auditor/include-change-password-events-by-users-via-ctrl-alt-del-combination-in-netwrix-auditor-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/include-change-password-events-by-users-via-ctrl-alt-del-combination-in-netwrix-auditor-reports.md
similarity index 100%
rename from docs/kb/auditor/include-change-password-events-by-users-via-ctrl-alt-del-combination-in-netwrix-auditor-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/include-change-password-events-by-users-via-ctrl-alt-del-combination-in-netwrix-auditor-reports.md
diff --git a/docs/kb/auditor/incorrect-data-in-reports-without-any-warnings.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/incorrect-data-in-reports-without-any-warnings.md
similarity index 100%
rename from docs/kb/auditor/incorrect-data-in-reports-without-any-warnings.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/incorrect-data-in-reports-without-any-warnings.md
diff --git a/docs/kb/auditor/japanese-characters-missing-or-displayed-incorrectly-in-pdf-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/japanese-characters-missing-or-displayed-incorrectly-in-pdf-reports.md
similarity index 100%
rename from docs/kb/auditor/japanese-characters-missing-or-displayed-incorrectly-in-pdf-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/japanese-characters-missing-or-displayed-incorrectly-in-pdf-reports.md
diff --git a/docs/kb/auditor/logon-failed-for-unattended-execution-account-running-netwrix-auditor-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/logon-failed-for-unattended-execution-account-running-netwrix-auditor-reports.md
similarity index 100%
rename from docs/kb/auditor/logon-failed-for-unattended-execution-account-running-netwrix-auditor-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/logon-failed-for-unattended-execution-account-running-netwrix-auditor-reports.md
diff --git a/docs/kb/auditor/netwrix-auditor-risk-assessment-reports-reference-table.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/netwrix-auditor-risk-assessment-reports-reference-table.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-risk-assessment-reports-reference-table.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/netwrix-auditor-risk-assessment-reports-reference-table.md
diff --git a/docs/kb/auditor/no-data-is-present-in-reports-the-who-field-contains-the-system-value.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/no-data-is-present-in-reports-the-who-field-contains-the-system-value.md
similarity index 100%
rename from docs/kb/auditor/no-data-is-present-in-reports-the-who-field-contains-the-system-value.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/no-data-is-present-in-reports-the-who-field-contains-the-system-value.md
diff --git a/docs/kb/auditor/object-deletion-does-not-show-up-in-alerts-and-reports-when-running-netwrix-auditor-under-non-admin-.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/object-deletion-does-not-show-up-in-alerts-and-reports-when-running-netwrix-auditor-under-non-admin-.md
similarity index 100%
rename from docs/kb/auditor/object-deletion-does-not-show-up-in-alerts-and-reports-when-running-netwrix-auditor-under-non-admin-.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/object-deletion-does-not-show-up-in-alerts-and-reports-when-running-netwrix-auditor-under-non-admin-.md
diff --git a/docs/kb/auditor/operation-has-timed-out-for-cef-export-siem-add-on.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/operation-has-timed-out-for-cef-export-siem-add-on.md
similarity index 100%
rename from docs/kb/auditor/operation-has-timed-out-for-cef-export-siem-add-on.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/operation-has-timed-out-for-cef-export-siem-add-on.md
diff --git a/docs/kb/auditor/reporting-services-error-cannot-check-the-content-manager-role-on-the-report-server.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/reporting-services-error-cannot-check-the-content-manager-role-on-the-report-server.md
similarity index 100%
rename from docs/kb/auditor/reporting-services-error-cannot-check-the-content-manager-role-on-the-report-server.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/reporting-services-error-cannot-check-the-content-manager-role-on-the-report-server.md
diff --git a/docs/kb/auditor/reports-for-subscriptions-are-missing-in-netwrix-auditor.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/reports-for-subscriptions-are-missing-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/reports-for-subscriptions-are-missing-in-netwrix-auditor.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/reports-for-subscriptions-are-missing-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/reports-generation-takes-a-while-and-completes-with-errors.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/reports-generation-takes-a-while-and-completes-with-errors.md
similarity index 100%
rename from docs/kb/auditor/reports-generation-takes-a-while-and-completes-with-errors.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/reports-generation-takes-a-while-and-completes-with-errors.md
diff --git a/docs/kb/auditor/security-groups-are-not-fully-displayed-in-the-azure-ad-accounts-attributes-report.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/security-groups-are-not-fully-displayed-in-the-azure-ad-accounts-attributes-report.md
similarity index 100%
rename from docs/kb/auditor/security-groups-are-not-fully-displayed-in-the-azure-ad-accounts-attributes-report.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/security-groups-are-not-fully-displayed-in-the-azure-ad-accounts-attributes-report.md
diff --git a/docs/kb/auditor/state-in-time-reports-do-not-show-gpo-settings-values.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/state-in-time-reports-do-not-show-gpo-settings-values.md
similarity index 100%
rename from docs/kb/auditor/state-in-time-reports-do-not-show-gpo-settings-values.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/state-in-time-reports-do-not-show-gpo-settings-values.md
diff --git a/docs/kb/auditor/subscription-reports-errors.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/subscription-reports-errors.md
similarity index 100%
rename from docs/kb/auditor/subscription-reports-errors.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/subscription-reports-errors.md
diff --git a/docs/kb/auditor/the-email-address-column-in-the-enrollment-report.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/the-email-address-column-in-the-enrollment-report.md
similarity index 100%
rename from docs/kb/auditor/the-email-address-column-in-the-enrollment-report.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/the-email-address-column-in-the-enrollment-report.md
diff --git a/docs/kb/auditor/the-product-does-not-report-on-changes-to-calendar.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/the-product-does-not-report-on-changes-to-calendar.md
similarity index 100%
rename from docs/kb/auditor/the-product-does-not-report-on-changes-to-calendar.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/the-product-does-not-report-on-changes-to-calendar.md
diff --git a/docs/kb/auditor/unable-to-generate-reports-after-migration.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-generate-reports-after-migration.md
similarity index 100%
rename from docs/kb/auditor/unable-to-generate-reports-after-migration.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-generate-reports-after-migration.md
diff --git a/docs/kb/auditor/unable-to-run-reports-system-cannot-find-the-file-specified.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-run-reports-system-cannot-find-the-file-specified.md
similarity index 100%
rename from docs/kb/auditor/unable-to-run-reports-system-cannot-find-the-file-specified.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-run-reports-system-cannot-find-the-file-specified.md
diff --git a/docs/kb/auditor/unable-to-save-reports-as-office-document-excel-word-or-powerpoint-with-ssrs-2019.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-save-reports-as-office-document-excel-word-or-powerpoint-with-ssrs-2019.md
similarity index 100%
rename from docs/kb/auditor/unable-to-save-reports-as-office-document-excel-word-or-powerpoint-with-ssrs-2019.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-save-reports-as-office-document-excel-word-or-powerpoint-with-ssrs-2019.md
diff --git a/docs/kb/auditor/why-do-i-get-multiple-events-on-password-changing-in-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/why-do-i-get-multiple-events-on-password-changing-in-reports.md
similarity index 100%
rename from docs/kb/auditor/why-do-i-get-multiple-events-on-password-changing-in-reports.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/why-do-i-get-multiple-events-on-password-changing-in-reports.md
diff --git a/docs/kb/auditor/why-false-positive-read-access-attempts-are-reported-by-netwrix-auditor.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/why-false-positive-read-access-attempts-are-reported-by-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/why-false-positive-read-access-attempts-are-reported-by-netwrix-auditor.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/why-false-positive-read-access-attempts-are-reported-by-netwrix-auditor.md
diff --git a/docs/kb/auditor/why-reports-reflect-folders-that-were-not-supposed-to-be-scanned.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/why-reports-reflect-folders-that-were-not-supposed-to-be-scanned.md
similarity index 100%
rename from docs/kb/auditor/why-reports-reflect-folders-that-were-not-supposed-to-be-scanned.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/why-reports-reflect-folders-that-were-not-supposed-to-be-scanned.md
diff --git a/docs/kb/auditor/workstation-field-reported-as-unknown.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/workstation-field-reported-as-unknown.md
similarity index 100%
rename from docs/kb/auditor/workstation-field-reported-as-unknown.md
rename to docs/kb/auditor/reports-alerts-and-notifications/report-generation/workstation-field-reported-as-unknown.md
diff --git a/docs/kb/auditor/netwrix-auditor-was-unable-to-deliver-the-subscription-due-to-following-error-access-is-denied.md b/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/netwrix-auditor-was-unable-to-deliver-the-subscription-due-to-following-error-access-is-denied.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-was-unable-to-deliver-the-subscription-due-to-following-error-access-is-denied.md
rename to docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/netwrix-auditor-was-unable-to-deliver-the-subscription-due-to-following-error-access-is-denied.md
diff --git "a/docs/kb/auditor/remote_certificate_is_invalid_according_to_validation_procedure_\342\200\224_subscriptions_error_in_netwrix_aud.md" "b/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/remote_certificate_is_invalid_according_to_validation_procedure_\342\200\224_subscriptions_error_in_netwrix_aud.md"
similarity index 100%
rename from "docs/kb/auditor/remote_certificate_is_invalid_according_to_validation_procedure_\342\200\224_subscriptions_error_in_netwrix_aud.md"
rename to "docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/remote_certificate_is_invalid_according_to_validation_procedure_\342\200\224_subscriptions_error_in_netwrix_aud.md"
diff --git a/docs/kb/auditor/subscription-attachments-exceeding-the-size-limit-are-missing-from-lostandfound.md b/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/subscription-attachments-exceeding-the-size-limit-are-missing-from-lostandfound.md
similarity index 100%
rename from docs/kb/auditor/subscription-attachments-exceeding-the-size-limit-are-missing-from-lostandfound.md
rename to docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/subscription-attachments-exceeding-the-size-limit-are-missing-from-lostandfound.md
diff --git a/docs/kb/auditor/subscription-generation-fails-due-to-incorrect-date-from-value.md b/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/subscription-generation-fails-due-to-incorrect-date-from-value.md
similarity index 100%
rename from docs/kb/auditor/subscription-generation-fails-due-to-incorrect-date-from-value.md
rename to docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/subscription-generation-fails-due-to-incorrect-date-from-value.md
diff --git a/docs/kb/auditor/unable-to-save-subscription-file-to-a-shared-location.md b/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/unable-to-save-subscription-file-to-a-shared-location.md
similarity index 100%
rename from docs/kb/auditor/unable-to-save-subscription-file-to-a-shared-location.md
rename to docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/unable-to-save-subscription-file-to-a-shared-location.md
diff --git a/docs/kb/auditor/unable-to-update-netwrix-auditor-due-to-contract-or-subscription-expiration.md b/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/unable-to-update-netwrix-auditor-due-to-contract-or-subscription-expiration.md
similarity index 100%
rename from docs/kb/auditor/unable-to-update-netwrix-auditor-due-to-contract-or-subscription-expiration.md
rename to docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/unable-to-update-netwrix-auditor-due-to-contract-or-subscription-expiration.md
diff --git a/docs/kb/auditor/why-does-the-when-field-disappear-in-subscriptions.md b/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/why-does-the-when-field-disappear-in-subscriptions.md
similarity index 100%
rename from docs/kb/auditor/why-does-the-when-field-disappear-in-subscriptions.md
rename to docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/why-does-the-when-field-disappear-in-subscriptions.md
diff --git a/docs/kb/auditor/backup-recommendations.md b/docs/kb/auditor/system-administration/backup-and-recovery/backup-recommendations.md
similarity index 100%
rename from docs/kb/auditor/backup-recommendations.md
rename to docs/kb/auditor/system-administration/backup-and-recovery/backup-recommendations.md
diff --git a/docs/kb/auditor/backups-folder-in-netwrix-auditor.md b/docs/kb/auditor/system-administration/backup-and-recovery/backups-folder-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/backups-folder-in-netwrix-auditor.md
rename to docs/kb/auditor/system-administration/backup-and-recovery/backups-folder-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/corruption-of-the-database-owner-record.md b/docs/kb/auditor/system-administration/database-management/corruption-of-the-database-owner-record.md
similarity index 100%
rename from docs/kb/auditor/corruption-of-the-database-owner-record.md
rename to docs/kb/auditor/system-administration/database-management/corruption-of-the-database-owner-record.md
diff --git a/docs/kb/auditor/could-not-allocate-space-for-object-objectname-in-database-databasename.md b/docs/kb/auditor/system-administration/database-management/could-not-allocate-space-for-object-objectname-in-database-databasename.md
similarity index 100%
rename from docs/kb/auditor/could-not-allocate-space-for-object-objectname-in-database-databasename.md
rename to docs/kb/auditor/system-administration/database-management/could-not-allocate-space-for-object-objectname-in-database-databasename.md
diff --git a/docs/kb/auditor/database-contains-tables-not-compatible-with-the-product.md b/docs/kb/auditor/system-administration/database-management/database-contains-tables-not-compatible-with-the-product.md
similarity index 100%
rename from docs/kb/auditor/database-contains-tables-not-compatible-with-the-product.md
rename to docs/kb/auditor/system-administration/database-management/database-contains-tables-not-compatible-with-the-product.md
diff --git a/docs/kb/auditor/database-performance-loss.md b/docs/kb/auditor/system-administration/database-management/database-performance-loss.md
similarity index 100%
rename from docs/kb/auditor/database-performance-loss.md
rename to docs/kb/auditor/system-administration/database-management/database-performance-loss.md
diff --git a/docs/kb/auditor/db-owner-has-been-removed-from-databases.md b/docs/kb/auditor/system-administration/database-management/db-owner-has-been-removed-from-databases.md
similarity index 100%
rename from docs/kb/auditor/db-owner-has-been-removed-from-databases.md
rename to docs/kb/auditor/system-administration/database-management/db-owner-has-been-removed-from-databases.md
diff --git a/docs/kb/auditor/deploying-the-report-server-database.md b/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database.md
similarity index 100%
rename from docs/kb/auditor/deploying-the-report-server-database.md
rename to docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database.md
diff --git a/docs/kb/auditor/error-can-not-process-sql-commands-for-the-netwrix-auditor-self-audit-database.md b/docs/kb/auditor/system-administration/database-management/error-can-not-process-sql-commands-for-the-netwrix-auditor-self-audit-database.md
similarity index 100%
rename from docs/kb/auditor/error-can-not-process-sql-commands-for-the-netwrix-auditor-self-audit-database.md
rename to docs/kb/auditor/system-administration/database-management/error-can-not-process-sql-commands-for-the-netwrix-auditor-self-audit-database.md
diff --git a/docs/kb/auditor/error-database-owner-sid-mismatch.md b/docs/kb/auditor/system-administration/database-management/error-database-owner-sid-mismatch.md
similarity index 100%
rename from docs/kb/auditor/error-database-owner-sid-mismatch.md
rename to docs/kb/auditor/system-administration/database-management/error-database-owner-sid-mismatch.md
diff --git a/docs/kb/auditor/error-login-failed-cannot-open-database-in-reports.md b/docs/kb/auditor/system-administration/database-management/error-login-failed-cannot-open-database-in-reports.md
similarity index 100%
rename from docs/kb/auditor/error-login-failed-cannot-open-database-in-reports.md
rename to docs/kb/auditor/system-administration/database-management/error-login-failed-cannot-open-database-in-reports.md
diff --git a/docs/kb/auditor/error-while-transaction-db-import-operation.md b/docs/kb/auditor/system-administration/database-management/error-while-transaction-db-import-operation.md
similarity index 100%
rename from docs/kb/auditor/error-while-transaction-db-import-operation.md
rename to docs/kb/auditor/system-administration/database-management/error-while-transaction-db-import-operation.md
diff --git "a/docs/kb/auditor/failed_to_load_registry_hive_\342\210\222_system_cannot_find_file_specified_configuration_registry_database_is_.md" "b/docs/kb/auditor/system-administration/database-management/failed_to_load_registry_hive_\342\210\222_system_cannot_find_file_specified_configuration_registry_database_is_.md"
similarity index 100%
rename from "docs/kb/auditor/failed_to_load_registry_hive_\342\210\222_system_cannot_find_file_specified_configuration_registry_database_is_.md"
rename to "docs/kb/auditor/system-administration/database-management/failed_to_load_registry_hive_\342\210\222_system_cannot_find_file_specified_configuration_registry_database_is_.md"
diff --git a/docs/kb/auditor/how-to-assign-db-owner-permissions.md b/docs/kb/auditor/system-administration/database-management/how-to-assign-db-owner-permissions.md
similarity index 100%
rename from docs/kb/auditor/how-to-assign-db-owner-permissions.md
rename to docs/kb/auditor/system-administration/database-management/how-to-assign-db-owner-permissions.md
diff --git a/docs/kb/auditor/how-to-control-the-size-of-netwrixsqlcraudit-databases-on-sql-instances-and-what-it-is-needed-for.md b/docs/kb/auditor/system-administration/database-management/how-to-control-the-size-of-netwrixsqlcraudit-databases-on-sql-instances-and-what-it-is-needed-for.md
similarity index 100%
rename from docs/kb/auditor/how-to-control-the-size-of-netwrixsqlcraudit-databases-on-sql-instances-and-what-it-is-needed-for.md
rename to docs/kb/auditor/system-administration/database-management/how-to-control-the-size-of-netwrixsqlcraudit-databases-on-sql-instances-and-what-it-is-needed-for.md
diff --git a/docs/kb/auditor/how-to-count-number-of-cpu-cores-on-your-oracle-database-deployment.md b/docs/kb/auditor/system-administration/database-management/how-to-count-number-of-cpu-cores-on-your-oracle-database-deployment.md
similarity index 100%
rename from docs/kb/auditor/how-to-count-number-of-cpu-cores-on-your-oracle-database-deployment.md
rename to docs/kb/auditor/system-administration/database-management/how-to-count-number-of-cpu-cores-on-your-oracle-database-deployment.md
diff --git a/docs/kb/auditor/how-to-create-new-reporting-databases.md b/docs/kb/auditor/system-administration/database-management/how-to-create-new-reporting-databases.md
similarity index 100%
rename from docs/kb/auditor/how-to-create-new-reporting-databases.md
rename to docs/kb/auditor/system-administration/database-management/how-to-create-new-reporting-databases.md
diff --git a/docs/kb/auditor/how-to-get-database-content-audit-working.md b/docs/kb/auditor/system-administration/database-management/how-to-get-database-content-audit-working.md
similarity index 100%
rename from docs/kb/auditor/how-to-get-database-content-audit-working.md
rename to docs/kb/auditor/system-administration/database-management/how-to-get-database-content-audit-working.md
diff --git a/docs/kb/auditor/how-to-move-reporting-databases-to-a-new-drive.md b/docs/kb/auditor/system-administration/database-management/how-to-move-reporting-databases-to-a-new-drive.md
similarity index 100%
rename from docs/kb/auditor/how-to-move-reporting-databases-to-a-new-drive.md
rename to docs/kb/auditor/system-administration/database-management/how-to-move-reporting-databases-to-a-new-drive.md
diff --git a/docs/kb/auditor/how-to-recreate-alerts-database.md b/docs/kb/auditor/system-administration/database-management/how-to-recreate-alerts-database.md
similarity index 100%
rename from docs/kb/auditor/how-to-recreate-alerts-database.md
rename to docs/kb/auditor/system-administration/database-management/how-to-recreate-alerts-database.md
diff --git a/docs/kb/auditor/how-to-reduce-audit-database-size-for-netwrix-auditor.md b/docs/kb/auditor/system-administration/database-management/how-to-reduce-audit-database-size-for-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/how-to-reduce-audit-database-size-for-netwrix-auditor.md
rename to docs/kb/auditor/system-administration/database-management/how-to-reduce-audit-database-size-for-netwrix-auditor.md
diff --git a/docs/kb/auditor/how-to-remove-old-oracle-database-audit-events.md b/docs/kb/auditor/system-administration/database-management/how-to-remove-old-oracle-database-audit-events.md
similarity index 100%
rename from docs/kb/auditor/how-to-remove-old-oracle-database-audit-events.md
rename to docs/kb/auditor/system-administration/database-management/how-to-remove-old-oracle-database-audit-events.md
diff --git a/docs/kb/auditor/how-to-upload-audit-data-from-the-long-term-archive-to-audit-database.md b/docs/kb/auditor/system-administration/database-management/how-to-upload-audit-data-from-the-long-term-archive-to-audit-database.md
similarity index 100%
rename from docs/kb/auditor/how-to-upload-audit-data-from-the-long-term-archive-to-audit-database.md
rename to docs/kb/auditor/system-administration/database-management/how-to-upload-audit-data-from-the-long-term-archive-to-audit-database.md
diff --git a/docs/kb/auditor/i-can-t-see-changed-values-with-database-content-audit.md b/docs/kb/auditor/system-administration/database-management/i-can-t-see-changed-values-with-database-content-audit.md
similarity index 100%
rename from docs/kb/auditor/i-can-t-see-changed-values-with-database-content-audit.md
rename to docs/kb/auditor/system-administration/database-management/i-can-t-see-changed-values-with-database-content-audit.md
diff --git a/docs/kb/auditor/not-all-changes-are-included-in-reports-for-database-content-audit.md b/docs/kb/auditor/system-administration/database-management/not-all-changes-are-included-in-reports-for-database-content-audit.md
similarity index 100%
rename from docs/kb/auditor/not-all-changes-are-included-in-reports-for-database-content-audit.md
rename to docs/kb/auditor/system-administration/database-management/not-all-changes-are-included-in-reports-for-database-content-audit.md
diff --git a/docs/kb/auditor/recovery-mode-changes-in-sql-databases.md b/docs/kb/auditor/system-administration/database-management/recovery-mode-changes-in-sql-databases.md
similarity index 100%
rename from docs/kb/auditor/recovery-mode-changes-in-sql-databases.md
rename to docs/kb/auditor/system-administration/database-management/recovery-mode-changes-in-sql-databases.md
diff --git a/docs/kb/auditor/ssrs-tempdb-permanently-grows-large-and-occupies-disk-space.md b/docs/kb/auditor/system-administration/database-management/ssrs-tempdb-permanently-grows-large-and-occupies-disk-space.md
similarity index 100%
rename from docs/kb/auditor/ssrs-tempdb-permanently-grows-large-and-occupies-disk-space.md
rename to docs/kb/auditor/system-administration/database-management/ssrs-tempdb-permanently-grows-large-and-occupies-disk-space.md
diff --git a/docs/kb/auditor/the-following-error-occurred-during-the-sql-database-content-audit-configuration-could-not-obtain-in.md b/docs/kb/auditor/system-administration/database-management/the-following-error-occurred-during-the-sql-database-content-audit-configuration-could-not-obtain-in.md
similarity index 100%
rename from docs/kb/auditor/the-following-error-occurred-during-the-sql-database-content-audit-configuration-could-not-obtain-in.md
rename to docs/kb/auditor/system-administration/database-management/the-following-error-occurred-during-the-sql-database-content-audit-configuration-could-not-obtain-in.md
diff --git a/docs/kb/auditor/warning-the-netwrixsqlcraudit-database-with-audit-data-does-not-exist-or-cannot-be-accessed.md b/docs/kb/auditor/system-administration/database-management/warning-the-netwrixsqlcraudit-database-with-audit-data-does-not-exist-or-cannot-be-accessed.md
similarity index 100%
rename from docs/kb/auditor/warning-the-netwrixsqlcraudit-database-with-audit-data-does-not-exist-or-cannot-be-accessed.md
rename to docs/kb/auditor/system-administration/database-management/warning-the-netwrixsqlcraudit-database-with-audit-data-does-not-exist-or-cannot-be-accessed.md
diff --git a/docs/kb/auditor/audit-policy-settings-for-pci-compliance.md b/docs/kb/auditor/system-administration/licensing-and-compliance/audit-policy-settings-for-pci-compliance.md
similarity index 100%
rename from docs/kb/auditor/audit-policy-settings-for-pci-compliance.md
rename to docs/kb/auditor/system-administration/licensing-and-compliance/audit-policy-settings-for-pci-compliance.md
diff --git a/docs/kb/auditor/data-missing-after-the-license-expiration.md b/docs/kb/auditor/system-administration/licensing-and-compliance/data-missing-after-the-license-expiration.md
similarity index 100%
rename from docs/kb/auditor/data-missing-after-the-license-expiration.md
rename to docs/kb/auditor/system-administration/licensing-and-compliance/data-missing-after-the-license-expiration.md
diff --git a/docs/kb/auditor/essential-netwrix-license-usage-data-and-url-resources.md b/docs/kb/auditor/system-administration/licensing-and-compliance/essential-netwrix-license-usage-data-and-url-resources.md
similarity index 100%
rename from docs/kb/auditor/essential-netwrix-license-usage-data-and-url-resources.md
rename to docs/kb/auditor/system-administration/licensing-and-compliance/essential-netwrix-license-usage-data-and-url-resources.md
diff --git a/docs/kb/auditor/freeware-license-code.md b/docs/kb/auditor/system-administration/licensing-and-compliance/freeware-license-code.md
similarity index 100%
rename from docs/kb/auditor/freeware-license-code.md
rename to docs/kb/auditor/system-administration/licensing-and-compliance/freeware-license-code.md
diff --git a/docs/kb/auditor/how-to-apply-netwrix-auditor-license.md b/docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-netwrix-auditor-license.md
similarity index 100%
rename from docs/kb/auditor/how-to-apply-netwrix-auditor-license.md
rename to docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-netwrix-auditor-license.md
diff --git a/docs/kb/auditor/how-to-apply-the-license-to-virtual-appliance.md b/docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-the-license-to-virtual-appliance.md
similarity index 100%
rename from docs/kb/auditor/how-to-apply-the-license-to-virtual-appliance.md
rename to docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-the-license-to-virtual-appliance.md
diff --git a/docs/kb/auditor/netwrix-auditor-licenses-and-plans.md b/docs/kb/auditor/system-administration/licensing-and-compliance/netwrix-auditor-licenses-and-plans.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-licenses-and-plans.md
rename to docs/kb/auditor/system-administration/licensing-and-compliance/netwrix-auditor-licenses-and-plans.md
diff --git a/docs/kb/auditor/error_web_reports_url_not_working_after_upgrade.md b/docs/kb/auditor/system-administration/migration-and-upgrade/error_web_reports_url_not_working_after_upgrade.md
similarity index 100%
rename from docs/kb/auditor/error_web_reports_url_not_working_after_upgrade.md
rename to docs/kb/auditor/system-administration/migration-and-upgrade/error_web_reports_url_not_working_after_upgrade.md
diff --git a/docs/kb/auditor/extended_runtime_for_0-create_schema_job_post_v12.0_upgrade.md b/docs/kb/auditor/system-administration/migration-and-upgrade/extended_runtime_for_0-create_schema_job_post_v12.0_upgrade.md
similarity index 100%
rename from docs/kb/auditor/extended_runtime_for_0-create_schema_job_post_v12.0_upgrade.md
rename to docs/kb/auditor/system-administration/migration-and-upgrade/extended_runtime_for_0-create_schema_job_post_v12.0_upgrade.md
diff --git a/docs/kb/auditor/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location.md b/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location.md
similarity index 100%
rename from docs/kb/auditor/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location.md
rename to docs/kb/auditor/system-administration/migration-and-upgrade/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location.md
diff --git a/docs/kb/auditor/how-to-prepare-netwrix-server-for-os-upgrade.md b/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-prepare-netwrix-server-for-os-upgrade.md
similarity index 100%
rename from docs/kb/auditor/how-to-prepare-netwrix-server-for-os-upgrade.md
rename to docs/kb/auditor/system-administration/migration-and-upgrade/how-to-prepare-netwrix-server-for-os-upgrade.md
diff --git a/docs/kb/auditor/how-to-prepare-the-netwrix-server-for-a-sql-upgrade.md b/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-prepare-the-netwrix-server-for-a-sql-upgrade.md
similarity index 100%
rename from docs/kb/auditor/how-to-prepare-the-netwrix-server-for-a-sql-upgrade.md
rename to docs/kb/auditor/system-administration/migration-and-upgrade/how-to-prepare-the-netwrix-server-for-a-sql-upgrade.md
diff --git a/docs/kb/auditor/how-to-upgrade-netwrix-auditor.md b/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-upgrade-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/how-to-upgrade-netwrix-auditor.md
rename to docs/kb/auditor/system-administration/migration-and-upgrade/how-to-upgrade-netwrix-auditor.md
diff --git a/docs/kb/auditor/netwrix-auditor-upgrade-process-taking-too-long.md b/docs/kb/auditor/system-administration/migration-and-upgrade/netwrix-auditor-upgrade-process-taking-too-long.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-upgrade-process-taking-too-long.md
rename to docs/kb/auditor/system-administration/migration-and-upgrade/netwrix-auditor-upgrade-process-taking-too-long.md
diff --git a/docs/kb/auditor/netwrix_auditor_data_collection_service_crashes_after_upgrade_to_v10.7.13707.md b/docs/kb/auditor/system-administration/migration-and-upgrade/netwrix_auditor_data_collection_service_crashes_after_upgrade_to_v10.7.13707.md
similarity index 100%
rename from docs/kb/auditor/netwrix_auditor_data_collection_service_crashes_after_upgrade_to_v10.7.13707.md
rename to docs/kb/auditor/system-administration/migration-and-upgrade/netwrix_auditor_data_collection_service_crashes_after_upgrade_to_v10.7.13707.md
diff --git a/docs/kb/auditor/upgrade-increments-for-netwrix-auditor.md b/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/upgrade-increments-for-netwrix-auditor.md
rename to docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor.md
diff --git a/docs/kb/auditor/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md b/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md
similarity index 100%
rename from docs/kb/auditor/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md
rename to docs/kb/auditor/system-administration/migration-and-upgrade/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md
diff --git a/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor.md b/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor.md
rename to docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor.md
diff --git a/docs/kb/auditor/cannot-establish-connection-to-compression-service.md b/docs/kb/auditor/troubleshooting-and-errors/connection-errors/cannot-establish-connection-to-compression-service.md
similarity index 100%
rename from docs/kb/auditor/cannot-establish-connection-to-compression-service.md
rename to docs/kb/auditor/troubleshooting-and-errors/connection-errors/cannot-establish-connection-to-compression-service.md
diff --git a/docs/kb/auditor/object-type-of-rras-administration-connection-point.md b/docs/kb/auditor/troubleshooting-and-errors/connection-errors/object-type-of-rras-administration-connection-point.md
similarity index 100%
rename from docs/kb/auditor/object-type-of-rras-administration-connection-point.md
rename to docs/kb/auditor/troubleshooting-and-errors/connection-errors/object-type-of-rras-administration-connection-point.md
diff --git a/docs/kb/auditor/remote-service-control-manager-connection-timout.md b/docs/kb/auditor/troubleshooting-and-errors/connection-errors/remote-service-control-manager-connection-timout.md
similarity index 100%
rename from docs/kb/auditor/remote-service-control-manager-connection-timout.md
rename to docs/kb/auditor/troubleshooting-and-errors/connection-errors/remote-service-control-manager-connection-timout.md
diff --git a/docs/kb/auditor/authentication-unsuccessful-request-did-not-meet-authentication-criteria-error.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/authentication-unsuccessful-request-did-not-meet-authentication-criteria-error.md
similarity index 100%
rename from docs/kb/auditor/authentication-unsuccessful-request-did-not-meet-authentication-criteria-error.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/authentication-unsuccessful-request-did-not-meet-authentication-criteria-error.md
diff --git a/docs/kb/auditor/cannot-access-roles-page.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-access-roles-page.md
similarity index 100%
rename from docs/kb/auditor/cannot-access-roles-page.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-access-roles-page.md
diff --git a/docs/kb/auditor/cannot-access-the-help-desk-portal.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-access-the-help-desk-portal.md
similarity index 100%
rename from docs/kb/auditor/cannot-access-the-help-desk-portal.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-access-the-help-desk-portal.md
diff --git a/docs/kb/auditor/cannot-complete-login-due-to-an-incorrect-user-name-or-password.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-complete-login-due-to-an-incorrect-user-name-or-password.md
similarity index 100%
rename from docs/kb/auditor/cannot-complete-login-due-to-an-incorrect-user-name-or-password.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-complete-login-due-to-an-incorrect-user-name-or-password.md
diff --git a/docs/kb/auditor/cannot-copy-snapshot-to-long-term-archive-access-to-short-term-archive-is-denied.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-copy-snapshot-to-long-term-archive-access-to-short-term-archive-is-denied.md
similarity index 100%
rename from docs/kb/auditor/cannot-copy-snapshot-to-long-term-archive-access-to-short-term-archive-is-denied.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-copy-snapshot-to-long-term-archive-access-to-short-term-archive-is-denied.md
diff --git a/docs/kb/auditor/cannot-obtain-credential-information-for-mapped-drive.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-obtain-credential-information-for-mapped-drive.md
similarity index 100%
rename from docs/kb/auditor/cannot-obtain-credential-information-for-mapped-drive.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-obtain-credential-information-for-mapped-drive.md
diff --git a/docs/kb/auditor/cannot-retrieve-audit-settings-in-audit-configuration-assistant.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-retrieve-audit-settings-in-audit-configuration-assistant.md
similarity index 100%
rename from docs/kb/auditor/cannot-retrieve-audit-settings-in-audit-configuration-assistant.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-retrieve-audit-settings-in-audit-configuration-assistant.md
diff --git a/docs/kb/auditor/cannot_remove_ui_configuration_from_jobs_using_powershell_data_collector_jobs_with_parameters.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot_remove_ui_configuration_from_jobs_using_powershell_data_collector_jobs_with_parameters.md
similarity index 100%
rename from docs/kb/auditor/cannot_remove_ui_configuration_from_jobs_using_powershell_data_collector_jobs_with_parameters.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot_remove_ui_configuration_from_jobs_using_powershell_data_collector_jobs_with_parameters.md
diff --git a/docs/kb/auditor/change-analysis-completed-with-error-error-saving-current-vmware-virtual-center-snapshot-the-server-.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/change-analysis-completed-with-error-error-saving-current-vmware-virtual-center-snapshot-the-server-.md
similarity index 100%
rename from docs/kb/auditor/change-analysis-completed-with-error-error-saving-current-vmware-virtual-center-snapshot-the-server-.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/change-analysis-completed-with-error-error-saving-current-vmware-virtual-center-snapshot-the-server-.md
diff --git a/docs/kb/auditor/classifications-for-new-categories-in-opentext-content-server-have-failed-to-write-to-the-documents.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/classifications-for-new-categories-in-opentext-content-server-have-failed-to-write-to-the-documents.md
similarity index 100%
rename from docs/kb/auditor/classifications-for-new-categories-in-opentext-content-server-have-failed-to-write-to-the-documents.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/classifications-for-new-categories-in-opentext-content-server-have-failed-to-write-to-the-documents.md
diff --git a/docs/kb/auditor/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm.md
similarity index 100%
rename from docs/kb/auditor/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm.md
diff --git a/docs/kb/auditor/connection-failed-0x80070721-failed-to-process-a-request-because-the-target-server-is-unreachable.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/connection-failed-0x80070721-failed-to-process-a-request-because-the-target-server-is-unreachable.md
similarity index 100%
rename from docs/kb/auditor/connection-failed-0x80070721-failed-to-process-a-request-because-the-target-server-is-unreachable.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/connection-failed-0x80070721-failed-to-process-a-request-because-the-target-server-is-unreachable.md
diff --git a/docs/kb/auditor/error-0x80040605-connection-failed.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x80040605-connection-failed.md
similarity index 100%
rename from docs/kb/auditor/error-0x80040605-connection-failed.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x80040605-connection-failed.md
diff --git a/docs/kb/auditor/error-0x800706ba-rpc-server-is-unavailable.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x800706ba-rpc-server-is-unavailable.md
similarity index 100%
rename from docs/kb/auditor/error-0x800706ba-rpc-server-is-unavailable.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x800706ba-rpc-server-is-unavailable.md
diff --git a/docs/kb/auditor/error-0x800706d3-authentication-service-is-unknown.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x800706d3-authentication-service-is-unknown.md
similarity index 100%
rename from docs/kb/auditor/error-0x800706d3-authentication-service-is-unknown.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x800706d3-authentication-service-is-unknown.md
diff --git a/docs/kb/auditor/error-403.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-403.md
similarity index 100%
rename from docs/kb/auditor/error-403.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-403.md
diff --git a/docs/kb/auditor/error-a-required-privilege-is-not-held-by-the-client.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-a-required-privilege-is-not-held-by-the-client.md
similarity index 100%
rename from docs/kb/auditor/error-a-required-privilege-is-not-held-by-the-client.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-a-required-privilege-is-not-held-by-the-client.md
diff --git a/docs/kb/auditor/error-a-transport-level-error-has-occurred-when-sending-the-request-to-the-server.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-a-transport-level-error-has-occurred-when-sending-the-request-to-the-server.md
similarity index 100%
rename from docs/kb/auditor/error-a-transport-level-error-has-occurred-when-sending-the-request-to-the-server.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-a-transport-level-error-has-occurred-when-sending-the-request-to-the-server.md
diff --git a/docs/kb/auditor/error-an-item-with-the-same-key-has-already-been-added.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-an-item-with-the-same-key-has-already-been-added.md
similarity index 100%
rename from docs/kb/auditor/error-an-item-with-the-same-key-has-already-been-added.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-an-item-with-the-same-key-has-already-been-added.md
diff --git a/docs/kb/auditor/error-an-unknown-error-occurred-while-processing-the-request-on-the-server.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-an-unknown-error-occurred-while-processing-the-request-on-the-server.md
similarity index 100%
rename from docs/kb/auditor/error-an-unknown-error-occurred-while-processing-the-request-on-the-server.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-an-unknown-error-occurred-while-processing-the-request-on-the-server.md
diff --git a/docs/kb/auditor/error-auditing-of-directory-service-access-and-successful-account-management-events-is-not-enabled-f.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-auditing-of-directory-service-access-and-successful-account-management-events-is-not-enabled-f.md
similarity index 100%
rename from docs/kb/auditor/error-auditing-of-directory-service-access-and-successful-account-management-events-is-not-enabled-f.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-auditing-of-directory-service-access-and-successful-account-management-events-is-not-enabled-f.md
diff --git a/docs/kb/auditor/error-cannot-create-a-connection-to-data-source-ds.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-cannot-create-a-connection-to-data-source-ds.md
similarity index 100%
rename from docs/kb/auditor/error-cannot-create-a-connection-to-data-source-ds.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-cannot-create-a-connection-to-data-source-ds.md
diff --git a/docs/kb/auditor/error-certificate-with-identifier-is-not-registered-on-application.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-certificate-with-identifier-is-not-registered-on-application.md
similarity index 100%
rename from docs/kb/auditor/error-certificate-with-identifier-is-not-registered-on-application.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-certificate-with-identifier-is-not-registered-on-application.md
diff --git a/docs/kb/auditor/error-could-not-connect-to-server.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-could-not-connect-to-server.md
similarity index 100%
rename from docs/kb/auditor/error-could-not-connect-to-server.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-could-not-connect-to-server.md
diff --git a/docs/kb/auditor/error-during-agent-operation-on-server-no-such-host-is-known.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-during-agent-operation-on-server-no-such-host-is-known.md
similarity index 100%
rename from docs/kb/auditor/error-during-agent-operation-on-server-no-such-host-is-known.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-during-agent-operation-on-server-no-such-host-is-known.md
diff --git a/docs/kb/auditor/error-failed-to-copy-remote-distributed-modules.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-failed-to-copy-remote-distributed-modules.md
similarity index 100%
rename from docs/kb/auditor/error-failed-to-copy-remote-distributed-modules.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-failed-to-copy-remote-distributed-modules.md
diff --git a/docs/kb/auditor/error-failed-to-load-registry-hive-file-is-used-by-another-process.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-failed-to-load-registry-hive-file-is-used-by-another-process.md
similarity index 100%
rename from docs/kb/auditor/error-failed-to-load-registry-hive-file-is-used-by-another-process.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-failed-to-load-registry-hive-file-is-used-by-another-process.md
diff --git a/docs/kb/auditor/error-feature-you-are-trying-to-use-is-on-network-resource-that-is-unavailable.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-feature-you-are-trying-to-use-is-on-network-resource-that-is-unavailable.md
similarity index 100%
rename from docs/kb/auditor/error-feature-you-are-trying-to-use-is-on-network-resource-that-is-unavailable.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-feature-you-are-trying-to-use-is-on-network-resource-that-is-unavailable.md
diff --git a/docs/kb/auditor/error-invalid-login-response-in-vmware-monitoring-plan.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-invalid-login-response-in-vmware-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/error-invalid-login-response-in-vmware-monitoring-plan.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-invalid-login-response-in-vmware-monitoring-plan.md
diff --git a/docs/kb/auditor/error-memory-limit-is-reached.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-memory-limit-is-reached.md
similarity index 100%
rename from docs/kb/auditor/error-memory-limit-is-reached.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-memory-limit-is-reached.md
diff --git a/docs/kb/auditor/error-netwrix-auditor-looks-up-additional-system-components-and-updates-required-for-monitoring.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-netwrix-auditor-looks-up-additional-system-components-and-updates-required-for-monitoring.md
similarity index 100%
rename from docs/kb/auditor/error-netwrix-auditor-looks-up-additional-system-components-and-updates-required-for-monitoring.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-netwrix-auditor-looks-up-additional-system-components-and-updates-required-for-monitoring.md
diff --git a/docs/kb/auditor/error-no-connection-could-be-made.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-no-connection-could-be-made.md
similarity index 100%
rename from docs/kb/auditor/error-no-connection-could-be-made.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-no-connection-could-be-made.md
diff --git a/docs/kb/auditor/error-no-more-threads.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-no-more-threads.md
similarity index 100%
rename from docs/kb/auditor/error-no-more-threads.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-no-more-threads.md
diff --git a/docs/kb/auditor/error-request-operation-timeout.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-request-operation-timeout.md
similarity index 100%
rename from docs/kb/auditor/error-request-operation-timeout.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-request-operation-timeout.md
diff --git a/docs/kb/auditor/error-saving-current-vmware-virtual-center-snapshot-permission-to-perform-this-operation-was-denied.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-saving-current-vmware-virtual-center-snapshot-permission-to-perform-this-operation-was-denied.md
similarity index 100%
rename from docs/kb/auditor/error-saving-current-vmware-virtual-center-snapshot-permission-to-perform-this-operation-was-denied.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-saving-current-vmware-virtual-center-snapshot-permission-to-perform-this-operation-was-denied.md
diff --git a/docs/kb/auditor/error-service-did-not-respond-to-start-or-control-request-in-ssrs.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-service-did-not-respond-to-start-or-control-request-in-ssrs.md
similarity index 100%
rename from docs/kb/auditor/error-service-did-not-respond-to-start-or-control-request-in-ssrs.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-service-did-not-respond-to-start-or-control-request-in-ssrs.md
diff --git a/docs/kb/auditor/error-size-of-collected-data-files-exceeded-limit-in-logon-activity-monitoring-plan.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-size-of-collected-data-files-exceeded-limit-in-logon-activity-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/error-size-of-collected-data-files-exceeded-limit-in-logon-activity-monitoring-plan.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-size-of-collected-data-files-exceeded-limit-in-logon-activity-monitoring-plan.md
diff --git a/docs/kb/auditor/error-snapshot-saving-process-was-interrupted.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-snapshot-saving-process-was-interrupted.md
similarity index 100%
rename from docs/kb/auditor/error-snapshot-saving-process-was-interrupted.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-snapshot-saving-process-was-interrupted.md
diff --git a/docs/kb/auditor/error-sql-error-invalid-class.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-sql-error-invalid-class.md
similarity index 100%
rename from docs/kb/auditor/error-sql-error-invalid-class.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-sql-error-invalid-class.md
diff --git a/docs/kb/auditor/error-the-maximum-password-age-is-not-set.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-maximum-password-age-is-not-set.md
similarity index 100%
rename from docs/kb/auditor/error-the-maximum-password-age-is-not-set.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-maximum-password-age-is-not-set.md
diff --git a/docs/kb/auditor/error-the-new-task-has-been-created-but-may-not-run-because-of-an-error-exception-from-hresult-0x800.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-new-task-has-been-created-but-may-not-run-because-of-an-error-exception-from-hresult-0x800.md
similarity index 100%
rename from docs/kb/auditor/error-the-new-task-has-been-created-but-may-not-run-because-of-an-error-exception-from-hresult-0x800.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-new-task-has-been-created-but-may-not-run-because-of-an-error-exception-from-hresult-0x800.md
diff --git a/docs/kb/auditor/error-the-pipe-endpoint-cannot-be-found.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-pipe-endpoint-cannot-be-found.md
similarity index 100%
rename from docs/kb/auditor/error-the-pipe-endpoint-cannot-be-found.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-pipe-endpoint-cannot-be-found.md
diff --git a/docs/kb/auditor/error-the-remote-procedure-call-failed.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-remote-procedure-call-failed.md
similarity index 100%
rename from docs/kb/auditor/error-the-remote-procedure-call-failed.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-remote-procedure-call-failed.md
diff --git a/docs/kb/auditor/error-when-applying-new-wildcard-certificate-to-ssrs-the-specified-url-was-unexpectedly-reserved.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-when-applying-new-wildcard-certificate-to-ssrs-the-specified-url-was-unexpectedly-reserved.md
similarity index 100%
rename from docs/kb/auditor/error-when-applying-new-wildcard-certificate-to-ssrs-the-specified-url-was-unexpectedly-reserved.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-when-applying-new-wildcard-certificate-to-ssrs-the-specified-url-was-unexpectedly-reserved.md
diff --git a/docs/kb/auditor/error_certificate_with_identifier_is_not_registered_on_application.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error_certificate_with_identifier_is_not_registered_on_application.md
similarity index 100%
rename from docs/kb/auditor/error_certificate_with_identifier_is_not_registered_on_application.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error_certificate_with_identifier_is_not_registered_on_application.md
diff --git a/docs/kb/auditor/error_the_custom_attribute_{x}_was_requested,_but_not_set_in_domain_1_for_the_{y}_object_class.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error_the_custom_attribute_{x}_was_requested,_but_not_set_in_domain_1_for_the_{y}_object_class.md
similarity index 100%
rename from docs/kb/auditor/error_the_custom_attribute_{x}_was_requested,_but_not_set_in_domain_1_for_the_{y}_object_class.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error_the_custom_attribute_{x}_was_requested,_but_not_set_in_domain_1_for_the_{y}_object_class.md
diff --git a/docs/kb/auditor/failed-logon-attempts-after-recent-service-account-password-change.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-logon-attempts-after-recent-service-account-password-change.md
similarity index 100%
rename from docs/kb/auditor/failed-logon-attempts-after-recent-service-account-password-change.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-logon-attempts-after-recent-service-account-password-change.md
diff --git a/docs/kb/auditor/failed-to-login-by-user-netwrix-service-account.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-to-login-by-user-netwrix-service-account.md
similarity index 100%
rename from docs/kb/auditor/failed-to-login-by-user-netwrix-service-account.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-to-login-by-user-netwrix-service-account.md
diff --git a/docs/kb/auditor/failed-to-open-log.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-to-open-log.md
similarity index 100%
rename from docs/kb/auditor/failed-to-open-log.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-to-open-log.md
diff --git a/docs/kb/auditor/group-policy-error-is-not-in-a-valid-format.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/group-policy-error-is-not-in-a-valid-format.md
similarity index 100%
rename from docs/kb/auditor/group-policy-error-is-not-in-a-valid-format.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/group-policy-error-is-not-in-a-valid-format.md
diff --git a/docs/kb/auditor/how-to-detect-the-root-cause-of-multiple-failed-logons.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-detect-the-root-cause-of-multiple-failed-logons.md
similarity index 100%
rename from docs/kb/auditor/how-to-detect-the-root-cause-of-multiple-failed-logons.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-detect-the-root-cause-of-multiple-failed-logons.md
diff --git a/docs/kb/auditor/how-to-figure-out-the-ip-address-used-for-a-failed-logon-attempt.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-figure-out-the-ip-address-used-for-a-failed-logon-attempt.md
similarity index 100%
rename from docs/kb/auditor/how-to-figure-out-the-ip-address-used-for-a-failed-logon-attempt.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-figure-out-the-ip-address-used-for-a-failed-logon-attempt.md
diff --git a/docs/kb/auditor/how-to-find-destination-of-failed-ntlm-logons.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-find-destination-of-failed-ntlm-logons.md
similarity index 100%
rename from docs/kb/auditor/how-to-find-destination-of-failed-ntlm-logons.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-find-destination-of-failed-ntlm-logons.md
diff --git a/docs/kb/auditor/how-to-investigate-compression-services-errors.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-investigate-compression-services-errors.md
similarity index 100%
rename from docs/kb/auditor/how-to-investigate-compression-services-errors.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-investigate-compression-services-errors.md
diff --git a/docs/kb/auditor/i-cannot-see-sql-changes-made-in-my-third-party-application.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/i-cannot-see-sql-changes-made-in-my-third-party-application.md
similarity index 100%
rename from docs/kb/auditor/i-cannot-see-sql-changes-made-in-my-third-party-application.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/i-cannot-see-sql-changes-made-in-my-third-party-application.md
diff --git a/docs/kb/auditor/insufficient-memory-and-not-enough-storage-errors.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/insufficient-memory-and-not-enough-storage-errors.md
similarity index 100%
rename from docs/kb/auditor/insufficient-memory-and-not-enough-storage-errors.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/insufficient-memory-and-not-enough-storage-errors.md
diff --git a/docs/kb/auditor/invalid-character-value-for-cast-specification-error-occurs-when-trying-to-store-audit-data.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/invalid-character-value-for-cast-specification-error-occurs-when-trying-to-store-audit-data.md
similarity index 100%
rename from docs/kb/auditor/invalid-character-value-for-cast-specification-error-occurs-when-trying-to-store-audit-data.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/invalid-character-value-for-cast-specification-error-occurs-when-trying-to-store-audit-data.md
diff --git a/docs/kb/auditor/investigating-failed-logons.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/investigating-failed-logons.md
similarity index 100%
rename from docs/kb/auditor/investigating-failed-logons.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/investigating-failed-logons.md
diff --git a/docs/kb/auditor/kds-removal-tool-for-adv-2023-003-failed-to-load-configuration-file.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/kds-removal-tool-for-adv-2023-003-failed-to-load-configuration-file.md
similarity index 100%
rename from docs/kb/auditor/kds-removal-tool-for-adv-2023-003-failed-to-load-configuration-file.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/kds-removal-tool-for-adv-2023-003-failed-to-load-configuration-file.md
diff --git a/docs/kb/auditor/message-size-exceeds-fixed-maximum-message-size-error-in-health-log.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/message-size-exceeds-fixed-maximum-message-size-error-in-health-log.md
similarity index 100%
rename from docs/kb/auditor/message-size-exceeds-fixed-maximum-message-size-error-in-health-log.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/message-size-exceeds-fixed-maximum-message-size-error-in-health-log.md
diff --git a/docs/kb/auditor/netwrix-auditor-data-collection-account-failed-logons-account-lockouts.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/netwrix-auditor-data-collection-account-failed-logons-account-lockouts.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-data-collection-account-failed-logons-account-lockouts.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/netwrix-auditor-data-collection-account-failed-logons-account-lockouts.md
diff --git a/docs/kb/auditor/netwrix-auditor-failed-to-collect-the-administrator-audit-log.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/netwrix-auditor-failed-to-collect-the-administrator-audit-log.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-failed-to-collect-the-administrator-audit-log.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/netwrix-auditor-failed-to-collect-the-administrator-audit-log.md
diff --git a/docs/kb/auditor/permission-denied-error-code-2146828218.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/permission-denied-error-code-2146828218.md
similarity index 100%
rename from docs/kb/auditor/permission-denied-error-code-2146828218.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/permission-denied-error-code-2146828218.md
diff --git a/docs/kb/auditor/rscannotvalidateencrypteddata-unable-to-validate-integrity-of-encrypted-data.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/rscannotvalidateencrypteddata-unable-to-validate-integrity-of-encrypted-data.md
similarity index 100%
rename from docs/kb/auditor/rscannotvalidateencrypteddata-unable-to-validate-integrity-of-encrypted-data.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/rscannotvalidateencrypteddata-unable-to-validate-integrity-of-encrypted-data.md
diff --git a/docs/kb/auditor/specified-logon-session-does-not-exist-error-in-netwrix-auditor.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/specified-logon-session-does-not-exist-error-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/specified-logon-session-does-not-exist-error-in-netwrix-auditor.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/specified-logon-session-does-not-exist-error-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/specified-network-name-is-no-longer-available-error-in-logon-activity-monitoring-plan.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/specified-network-name-is-no-longer-available-error-in-logon-activity-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/specified-network-name-is-no-longer-available-error-in-logon-activity-monitoring-plan.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/specified-network-name-is-no-longer-available-error-in-logon-activity-monitoring-plan.md
diff --git a/docs/kb/auditor/system-cannot-find-the-path-specified-in-logon-activity-monitoring-plan.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/system-cannot-find-the-path-specified-in-logon-activity-monitoring-plan.md
similarity index 100%
rename from docs/kb/auditor/system-cannot-find-the-path-specified-in-logon-activity-monitoring-plan.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/system-cannot-find-the-path-specified-in-logon-activity-monitoring-plan.md
diff --git a/docs/kb/auditor/the-remote-procedure-call-failed-error-when-collecting-logs.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/the-remote-procedure-call-failed-error-when-collecting-logs.md
similarity index 100%
rename from docs/kb/auditor/the-remote-procedure-call-failed-error-when-collecting-logs.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/the-remote-procedure-call-failed-error-when-collecting-logs.md
diff --git a/docs/kb/auditor/transport-failed-to-connect-to-server.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/transport-failed-to-connect-to-server.md
similarity index 100%
rename from docs/kb/auditor/transport-failed-to-connect-to-server.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/transport-failed-to-connect-to-server.md
diff --git a/docs/kb/auditor/ts-collection-failed-warning.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/ts-collection-failed-warning.md
similarity index 100%
rename from docs/kb/auditor/ts-collection-failed-warning.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/ts-collection-failed-warning.md
diff --git a/docs/kb/auditor/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md
similarity index 100%
rename from docs/kb/auditor/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md
diff --git a/docs/kb/auditor/vserver-api-missing-vserver-parameter-error-when-auditing-netapp-cluster.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/vserver-api-missing-vserver-parameter-error-when-auditing-netapp-cluster.md
similarity index 100%
rename from docs/kb/auditor/vserver-api-missing-vserver-parameter-error-when-auditing-netapp-cluster.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/vserver-api-missing-vserver-parameter-error-when-auditing-netapp-cluster.md
diff --git a/docs/kb/auditor/warning-the-following-error-occurred-when-trying-to-perform-automatic-audit-configuration.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/warning-the-following-error-occurred-when-trying-to-perform-automatic-audit-configuration.md
similarity index 100%
rename from docs/kb/auditor/warning-the-following-error-occurred-when-trying-to-perform-automatic-audit-configuration.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/warning-the-following-error-occurred-when-trying-to-perform-automatic-audit-configuration.md
diff --git a/docs/kb/auditor/weak_password_job_errors_system.io.filenotfoundexception_could_not_load_file_or_assembly_dsinternals.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/weak_password_job_errors_system.io.filenotfoundexception_could_not_load_file_or_assembly_dsinternals.md
similarity index 100%
rename from docs/kb/auditor/weak_password_job_errors_system.io.filenotfoundexception_could_not_load_file_or_assembly_dsinternals.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/weak_password_job_errors_system.io.filenotfoundexception_could_not_load_file_or_assembly_dsinternals.md
diff --git a/docs/kb/auditor/why-do-i-have-incomplete-information-on-failed-logons.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/why-do-i-have-incomplete-information-on-failed-logons.md
similarity index 100%
rename from docs/kb/auditor/why-do-i-have-incomplete-information-on-failed-logons.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/why-do-i-have-incomplete-information-on-failed-logons.md
diff --git a/docs/kb/auditor/wmi-classes-data-provider-failed-service-cannot-be-started.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/wmi-classes-data-provider-failed-service-cannot-be-started.md
similarity index 100%
rename from docs/kb/auditor/wmi-classes-data-provider-failed-service-cannot-be-started.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/wmi-classes-data-provider-failed-service-cannot-be-started.md
diff --git a/docs/kb/auditor/wmi-classes-data-provider-failed-to-get-the-information-on-win32-printer-error.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/wmi-classes-data-provider-failed-to-get-the-information-on-win32-printer-error.md
similarity index 100%
rename from docs/kb/auditor/wmi-classes-data-provider-failed-to-get-the-information-on-win32-printer-error.md
rename to docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/wmi-classes-data-provider-failed-to-get-the-information-on-win32-printer-error.md
diff --git a/docs/kb/auditor/netwrix-auditor-api-authentication-in-kerberos-only-environment.md b/docs/kb/auditor/troubleshooting-and-errors/permission-and-authentication-errors/netwrix-auditor-api-authentication-in-kerberos-only-environment.md
similarity index 100%
rename from docs/kb/auditor/netwrix-auditor-api-authentication-in-kerberos-only-environment.md
rename to docs/kb/auditor/troubleshooting-and-errors/permission-and-authentication-errors/netwrix-auditor-api-authentication-in-kerberos-only-environment.md
diff --git a/docs/kb/auditor/rbac-authorization-returns-access-denied.md b/docs/kb/auditor/troubleshooting-and-errors/permission-and-authentication-errors/rbac-authorization-returns-access-denied.md
similarity index 100%
rename from docs/kb/auditor/rbac-authorization-returns-access-denied.md
rename to docs/kb/auditor/troubleshooting-and-errors/permission-and-authentication-errors/rbac-authorization-returns-access-denied.md
diff --git a/docs/kb/auditor/while_auditing_from_external_domain_failed_4768_event_'a_kerberos_authentication_ticket_(tgt)_was_re.md b/docs/kb/auditor/troubleshooting-and-errors/permission-and-authentication-errors/while_auditing_from_external_domain_failed_4768_event_'a_kerberos_authentication_ticket_(tgt)_was_re.md
similarity index 100%
rename from docs/kb/auditor/while_auditing_from_external_domain_failed_4768_event_'a_kerberos_authentication_ticket_(tgt)_was_re.md
rename to docs/kb/auditor/troubleshooting-and-errors/permission-and-authentication-errors/while_auditing_from_external_domain_failed_4768_event_'a_kerberos_authentication_ticket_(tgt)_was_re.md
diff --git a/docs/kb/auditor/automatic-user-enrollment-failed-server-certificate-revocation-check-failed.md b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/automatic-user-enrollment-failed-server-certificate-revocation-check-failed.md
similarity index 100%
rename from docs/kb/auditor/automatic-user-enrollment-failed-server-certificate-revocation-check-failed.md
rename to docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/automatic-user-enrollment-failed-server-certificate-revocation-check-failed.md
diff --git a/docs/kb/auditor/generate-self-signed-ssl-certificate-for-ssrs.md b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/generate-self-signed-ssl-certificate-for-ssrs.md
similarity index 100%
rename from docs/kb/auditor/generate-self-signed-ssl-certificate-for-ssrs.md
rename to docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/generate-self-signed-ssl-certificate-for-ssrs.md
diff --git a/docs/kb/auditor/how_to_make_netwrix_auditor_upload_data_to_sql_using_tls_1.2.md b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/how_to_make_netwrix_auditor_upload_data_to_sql_using_tls_1.2.md
similarity index 100%
rename from docs/kb/auditor/how_to_make_netwrix_auditor_upload_data_to_sql_using_tls_1.2.md
rename to docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/how_to_make_netwrix_auditor_upload_data_to_sql_using_tls_1.2.md
diff --git a/docs/kb/auditor/retrieving_a_list_of_expiring_ssltls_certificates_and_their_expiration_dates.md b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/retrieving_a_list_of_expiring_ssltls_certificates_and_their_expiration_dates.md
similarity index 100%
rename from docs/kb/auditor/retrieving_a_list_of_expiring_ssltls_certificates_and_their_expiration_dates.md
rename to docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/retrieving_a_list_of_expiring_ssltls_certificates_and_their_expiration_dates.md
diff --git a/docs/kb/auditor/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel.md b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel.md
similarity index 100%
rename from docs/kb/auditor/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel.md
rename to docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel.md
diff --git a/docs/kb/auditor/use-certificate-authority-issued-certificates-in-ssrs.md b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/use-certificate-authority-issued-certificates-in-ssrs.md
similarity index 100%
rename from docs/kb/auditor/use-certificate-authority-issued-certificates-in-ssrs.md
rename to docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/use-certificate-authority-issued-certificates-in-ssrs.md
diff --git "a/docs/kb/auditor/\321\201onnection_issue_when_tls_1.2_is_required.md" "b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/\321\201onnection_issue_when_tls_1.2_is_required.md"
similarity index 100%
rename from "docs/kb/auditor/\321\201onnection_issue_when_tls_1.2_is_required.md"
rename to "docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/\321\201onnection_issue_when_tls_1.2_is_required.md"

From 5af790804671a16f07415043c3864e5e4a36339c Mon Sep 17 00:00:00 2001
From: Zoey Castillo <zoey.castillo@netwrix.com>
Date: Mon, 24 Nov 2025 17:54:38 -0600
Subject: [PATCH 02/10] Fix image paths and internal links in Auditor KB
 articles
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Consolidate images: Move all scattered 0-images/ subdirectories into single root-level /docs/kb/auditor/0-images/
- Update image references: Change all ../images/ paths to ./../0-images/ across 498 modified files
- Fix internal cross-links: Add category paths to 94 internal article references (e.g., /docs/kb/auditor/article-name) → /docs/kb/auditor/category/article-name))
- Remove obsolete images directory: Delete old /docs/kb/auditor/images/ folder containing 306 images

Changes applied across all 7 main categories:
- configuration-and-setup (7 subcategories, 33 files)
- event-id-reference (7 files)
- features-and-operations (53 files)
- monitoring-plans (28 files)
- reports-alerts-and-notifications (22 files)
- system-administration (15 files)
- troubleshooting-and-errors (33 files)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 .../ka04u000000HcMr_0EM0g000000hNsh.png       | Bin
 .../ka04u000000HcMv_0EM700000004wr9.png       | Bin
 .../ka04u000000HcMw_0EM700000004wzm.png       | Bin
 .../ka04u000000HcN0_0EM700000004wxW.png       | Bin
 .../ka04u000000HcN3_0EM700000004wrO.png       | Bin
 ...00HcN7_00N0g000004CA0p_0EM700000004xgW.png | Bin
 ...00HcN7_00N0g000004CA0p_0EM700000004xgl.png | Bin
 .../ka04u000000HcNK_0EM700000004wzw.png       | Bin
 .../ka04u000000HcNK_0EM700000004x01.png       | Bin
 .../ka04u000000HcNT_0EM700000004wyK.png       | Bin
 .../ka04u000000HcNU_0EM700000004xUL.png       | Bin
 .../ka04u000000HcNV_0EM700000007LkF.png       | Bin
 .../ka04u000000HcNW_0EM4u000002QzDA.png       | Bin
 .../ka04u000000HcNX_0EM700000004wxg.png       | Bin
 .../ka04u000000HcNZ_0EM700000004wyZ.png       | Bin
 .../ka04u000000HcNZ_0EM700000004wye.png       | Bin
 .../ka04u000000HcNi_0EM700000004yKg.png       | Bin
 .../ka04u000000HcNi_0EM700000004yKq.png       | Bin
 .../ka04u000000HcNi_0EM700000004yKv.png       | Bin
 .../ka04u000000HcNi_0EM700000004yL0.png       | Bin
 .../ka04u000000HcNi_0EM700000004yL5.png       | Bin
 .../ka04u000000HcNm_0EM700000004xEI.png       | Bin
 .../ka04u000000HcNm_0EM700000004xEN.png       | Bin
 .../ka04u000000HcNm_0EM700000004xES.png       | Bin
 .../ka04u000000HcNo_0EM700000004xIo.png       | Bin
 .../ka04u000000HcNo_0EM700000004xIt.png       | Bin
 .../ka04u000000HcNo_0EM700000004xIy.png       | Bin
 .../ka04u000000HcNr_0EM4u000007qtQ1.png       | Bin
 .../ka04u000000HcOn_0EM700000005TB6.png       | Bin
 .../ka04u000000HcOn_0EM700000005TBB.png       | Bin
 .../ka04u000000HcOn_0EM700000005TBG.png       | Bin
 .../ka04u000000HcOn_0EM700000005TBL.png       | Bin
 .../ka04u000000HcOn_0EM700000005TBV.png       | Bin
 .../ka04u000000HcOn_0EM700000005TBa.png       | Bin
 .../ka04u000000HcOn_0EM700000005TBf.png       | Bin
 .../ka04u000000HcOn_0EM700000005TBk.png       | Bin
 .../ka04u000000HcOn_0EM700000005TBp.png       | Bin
 .../ka04u000000HcOn_0EM700000005TC4.png       | Bin
 .../ka04u000000HcOn_0EM700000005TC9.png       | Bin
 .../ka04u000000HcOn_0EM700000005TCE.png       | Bin
 .../ka04u000000HcP8_0EM7000000051Zt.png       | Bin
 .../ka04u000000HcPk_0EM7000000054Bf.png       | Bin
 .../ka04u000000HcPp_0EM4u000007qsVK.png       | Bin
 .../ka04u000000HcPp_0EM700000005DIQ.png       | Bin
 .../ka04u000000HcPz_0EM700000004y2I.png       | Bin
 .../ka04u000000HcPz_0EM700000004y2N.png       | Bin
 .../ka04u000000HcPz_0EM700000004y2S.png       | Bin
 .../ka04u000000HcPz_0EM700000004y2X.png       | Bin
 .../ka04u000000HcPz_0EM700000004y2c.png       | Bin
 .../ka04u000000HcPz_0EM700000004y2h.png       | Bin
 .../ka04u000000HcPz_0EM700000004y31.png       | Bin
 .../ka04u000000HcPz_0EM700000004y3B.png       | Bin
 .../ka04u000000HcPz_0EM700000004y3G.png       | Bin
 .../ka04u000000HcPz_0EM700000004y3V.png       | Bin
 .../ka04u000000HcPz_0EM700000004y3k.png       | Bin
 .../ka04u000000HcQv_0EM700000004wpw.png       | Bin
 .../ka04u000000HcQv_0EM700000004wq1.png       | Bin
 .../ka04u000000HcRE_0EM700000004xUB.png       | Bin
 .../ka04u000000HcRE_0EM700000004xUG.png       | Bin
 .../ka04u000000HcRH_0EM700000004wmJ.png       | Bin
 .../ka04u000000HcRU_0EM700000004x9r.png       | Bin
 .../ka04u000000HcRb_0EM70000000QI3C.png       | Bin
 .../ka04u000000HcRb_0EM70000000QI3H.png       | Bin
 .../ka04u000000HcRb_0EM70000000QI3M.png       | Bin
 .../ka04u000000HcRb_0EM70000000QI3W.png       | Bin
 .../ka04u000000HcRb_0EM70000000QI3b.png       | Bin
 .../ka04u000000HcRc_0EM700000004wxC.png       | Bin
 .../ka04u000000HcRc_0EM700000004wxH.png       | Bin
 .../ka04u000000HcRc_0EM700000004wxM.png       | Bin
 .../ka04u000000HcRc_0EM700000004wxR.png       | Bin
 .../ka04u000000HcRc_0EM7000000054jS.png       | Bin
 .../ka04u000000HcRc_0EM7000000054jX.png       | Bin
 .../ka04u000000HcRf_0EM70000000xMZN.png       | Bin
 .../ka04u000000HcRf_0EM70000000xMZS.png       | Bin
 .../ka04u000000HcRf_0EM70000000xMZc.png       | Bin
 .../ka04u000000HcRf_0EM70000000xMZr.png       | Bin
 .../ka04u000000HcRf_0EM70000000xMZw.png       | Bin
 .../ka04u000000HcRw_0EM700000008Dtg.png       | Bin
 .../ka04u000000HcS0_0EM700000005Cwt.png       | Bin
 .../ka04u000000HcS1_0EM700000007Jf8.png       | Bin
 .../ka04u000000HcS1_0EM700000007JfD.png       | Bin
 .../ka04u000000HcS3_0EM700000005HCR.png       | Bin
 .../ka04u000000HcSG_0EM7000000054Pc.png       | Bin
 .../ka04u000000HcSG_0EM7000000054Ph.png       | Bin
 .../ka04u000000HcSG_0EM7000000054Pm.png       | Bin
 .../ka04u000000HcSG_0EM700000005pJq.png       | Bin
 .../ka04u000000HcSR_0EM7000000053Be.png       | Bin
 .../ka04u000000HcSR_0EM7000000053Bj.png       | Bin
 .../ka04u000000HcSR_0EM7000000053Bo.png       | Bin
 .../ka04u000000HcSU_0EM700000006Hfg.png       | Bin
 .../ka04u000000HcSU_0EM700000006Hfl.png       | Bin
 .../ka04u000000HcSZ_0EM700000006XV3.png       | Bin
 .../ka04u000000HcSZ_0EM700000006XV8.png       | Bin
 .../ka04u000000HcSZ_0EM700000006XVD.png       | Bin
 .../ka04u000000HcSn_0EM700000005hNk.png       | Bin
 .../ka04u000000HcT2_0EM700000005kEC.png       | Bin
 .../ka04u000000HcT5_0EM700000008DPW.png       | Bin
 .../ka04u000000HcT5_0EM700000008DPb.png       | Bin
 .../ka04u000000HcT5_0EM700000008DPg.png       | Bin
 .../ka04u000000HcTw_0EM700000005BrO.png       | Bin
 .../ka04u000000HcTw_0EM700000005BrT.png       | Bin
 .../ka04u000000HcTw_0EM700000005BrY.png       | Bin
 .../ka04u000000HcTz_0EM700000005AFx.png       | Bin
 .../ka04u000000HcU6_0EM7000000054Ba.png       | Bin
 .../ka04u000000HcUL_0EM7000000053hV.png       | Bin
 .../ka04u000000HcUO_0EM7000000052im.png       | Bin
 .../ka04u000000HcUO_0EM7000000052ir.png       | Bin
 .../ka04u000000HcUT_0EM7000000052iw.png       | Bin
 .../ka04u000000HcUT_0EM7000000052jG.png       | Bin
 .../ka04u000000HcUW_0EM700000004x0B.png       | Bin
 .../ka04u000000HcUb_0EM7000000051QD.png       | Bin
 .../ka04u000000HcUb_0EM7000000051QI.png       | Bin
 .../ka04u000000HcUb_0EM7000000051QN.png       | Bin
 .../ka04u000000HcUd_0EM7000000051O7.png       | Bin
 .../ka04u000000HcUd_0EM7000000051OC.png       | Bin
 .../ka04u000000HcUe_0EM7000000050xL.png       | Bin
 .../ka04u000000HcUe_0EM7000000050xQ.png       | Bin
 .../ka04u000000HcUi_0EM700000004xfn.png       | Bin
 .../ka04u000000HcUi_0EM700000004xfx.png       | Bin
 .../ka04u000000HcUi_0EM700000004xg2.png       | Bin
 .../ka04u000000HcUi_0EM700000004xg7.png       | Bin
 .../ka04u000000HcUp_0EM700000004xfs.png       | Bin
 .../ka04u000000HcUv_0EM700000004wr4.png       | Bin
 .../ka04u000000HcUw_0EM700000004wlz.png       | Bin
 .../ka04u000000HcUw_0EM700000004wm4.png       | Bin
 .../ka04u000000HcUx_0EM700000004wyo.png       | Bin
 .../ka04u000000HcUx_0EM700000004wyt.png       | Bin
 .../ka04u000000HcUx_0EM700000004wyy.png       | Bin
 .../ka04u000000HcVz_0EM700000004wyU.png       | Bin
 .../ka04u000000HcW3_0EM700000004wqL.png       | Bin
 .../ka04u000000HcW3_0EM700000004wqQ.png       | Bin
 .../ka04u000000HcW3_0EM700000004wqV.png       | Bin
 .../ka04u000000HcW3_0EM700000004wqa.png       | Bin
 .../ka04u000000HcW3_0EM700000004wqf.png       | Bin
 .../ka04u000000HcW6_0EM700000004wzN.png       | Bin
 .../ka04u000000HcWD_0EM700000004udF.png       | Bin
 .../ka04u000000HcWD_0EM700000004wzc.png       | Bin
 .../ka04u000000HcWF_0EM700000004xUV.png       | Bin
 .../ka04u000000HcWK_0EM700000004wmE.png       | Bin
 .../ka04u000000HcWM_0EM700000004wyA.png       | Bin
 .../ka04u000000HcWP_0EM700000004wxl.png       | Bin
 .../ka04u000000HcXR_0EM700000004vPE.png       | Bin
 .../ka04u000000HcXR_0EM700000004vPJ.png       | Bin
 .../ka04u000000HcXR_0EM700000004vPO.png       | Bin
 .../ka04u000000HcXR_0EM700000004vPT.png       | Bin
 .../ka04u000000HcXR_0EM700000004vPn.png       | Bin
 .../ka04u000000HcXR_0EM700000004vPs.png       | Bin
 .../ka04u000000HcXd_0EM4u000002D96q.png       | Bin
 .../ka04u000000HcXd_0EM4u000002D975.png       | Bin
 .../ka04u000000HcXd_0EM4u000002D97U.png       | Bin
 .../ka04u000000HcXd_0EM4u000002D97j.png       | Bin
 .../ka04u000000HcXh_0EM4u000002Qx7U.png       | Bin
 .../ka04u000000HcXh_0EM4u000002Qx7Z.png       | Bin
 .../ka04u000000HcXh_0EM4u000002Qx7t.png       | Bin
 .../ka04u000000HcXh_0EM4u000002Qx8I.png       | Bin
 .../ka04u000000HcZ5_0EM0g000002CGLg.png       | Bin
 .../ka04u000000HcZ6_0EM4u000002P6Cl.png       | Bin
 .../ka04u000000HdDR_0EM4u0000084XpS.png       | Bin
 .../ka04u000000HdES_0EM4u000002CO3k.png       | Bin
 .../ka04u000000HdEa_0EM4u000002CmYD.png       | Bin
 .../ka04u000000HdEa_0EM4u000002CmYI.png       | Bin
 .../ka04u000000HdEa_0EM4u000002CmYN.png       | Bin
 .../ka04u000000HdEa_0EM4u000002CmYS.png       | Bin
 .../ka04u000000HdEa_0EM4u000002CsNQ.png       | Bin
 .../ka04u000000HdFq_0EM4u0000052m0m.png       | Bin
 .../ka04u000000HdFvAAK.jpeg                   | Bin
 .../ka04u000000HdPU_0EM4u0000084ozs.png       | Bin
 .../ka04u000000HdPU_0EM4u0000084ozx.png       | Bin
 .../ka04u000000HdPU_0EM4u0000084p07.png       | Bin
 .../ka04u000000HdPU_0EM4u0000084p0C.png       | Bin
 .../ka04u000000HdPU_0EM4u0000084p0D.png       | Bin
 .../ka04u000000HdPU_0EM4u0000084p0b.png       | Bin
 .../ka04u000000HdPU_0EM4u0000084p0l.png       | Bin
 .../ka04u000000HdPU_0EM4u0000084p0q.png       | Bin
 .../ka04u000000HdPU_0EM4u0000084p15.png       | Bin
 .../ka04u000000Qmg4_0EM4u000007cgGr.png       | Bin
 .../ka04u000000Qmg4_0EM4u000007cgOC.png       | Bin
 .../ka04u000000Qmg4_0EM4u000007cgPy.png       | Bin
 .../ka04u000000wvtY_0EM4u000008pRVW.png       | Bin
 .../ka04u000000wvy4_0EM4u000008LkB8.png       | Bin
 .../ka04u000000wvzg_0EM4u000008pVor.png       | Bin
 .../ka04u000000wvzg_0EM4u000008pVow.png       | Bin
 .../ka04u0000011688_0EM4u000008LCjZ.png       | Bin
 .../ka04u00000116G7_0EM4u000007ceka.png       | Bin
 .../ka04u00000116G7_0EM4u000007cekk.png       | Bin
 .../ka04u00000116GR_0EM4u000002PWPR.png       | Bin
 .../ka04u00000116Ju_0EM4u000008LKrz.png       | Bin
 .../ka04u00000116MV_0EM4u000007cekk.png       | Bin
 .../ka04u00000116R6_0EM0g000000hUdK.png       | Bin
 .../ka04u00000116gG_0EM4u000008LXT9.png       | Bin
 .../ka04u00000116iG_0EM4u000004bz9T.png       | Bin
 .../ka04u00000116xf_0EM4u000008Ljuv.png       | Bin
 .../ka04u00000116zv_0EM4u000008Ll2v.png       | Bin
 .../ka04u00000116zv_0EM4u000008LlzE.png       | Bin
 .../ka04u000001173i_0EM4u000008Liq9.png       | Bin
 .../ka04u000001173i_0EM4u000008LirC.png       | Bin
 .../ka04u0000011776_0EM4u000008Ls7s.png       | Bin
 .../ka04u000001177u_0EM4u000008Lr6o.png       | Bin
 .../ka04u000001179H_0EM4u000008Lt2y.png       | Bin
 .../ka04u00000117A1_0EM4u000008LuEC.png       | Bin
 .../ka04u00000117Ay_0EM70000000tnyM.png       | Bin
 .../ka04u00000117Ay_0EM70000000tnyW.png       | Bin
 .../ka04u00000117HQ_0EM4u000008M035.png       | Bin
 .../ka04u00000117HW_0EM4u000008LwaA.png       | Bin
 .../ka04u00000117L8_0EM4u000008LCum.png       | Bin
 .../ka04u00000117L8_0EM4u000008LCuw.png       | Bin
 .../ka04u00000117L8_0EM4u000008LCv1.png       | Bin
 .../ka04u00000117L8_0EM4u000008LCvL.png       | Bin
 .../ka04u00000117L8_0EM4u000008LCvk.png       | Bin
 .../ka04u00000117L8_0EM4u000008LCwE.png       | Bin
 .../ka04u00000117L8_0EM4u000008M2Tz.png       | Bin
 .../ka04u00000117TM_0EM4u000008M6Wx.png       | Bin
 .../ka04u00000117UP_0EM4u000008M7Sw.png       | Bin
 .../ka04u00000117Vm_0EM4u000008M8Pe.png       | Bin
 .../ka04u00000117ad_0EM4u000008LFeu.png       | Bin
 .../ka04u00000117bz_0EM0g000000hGVv.png       | Bin
 .../ka04u00000117bz_0EM0g000000hGWo.png       | Bin
 .../ka04u00000117bz_0EM4u000004dCnj.png       | Bin
 .../ka04u00000117bz_0EM4u000008LKwz.png       | Bin
 .../ka04u00000117bz_0EM70000000QIPr.png       | Bin
 .../ka04u00000117bz_0EM70000000QIQN.png       | Bin
 .../ka04u00000117cJ_0EM4u000008LXj2.png       | Bin
 .../ka04u00000117dv_0EM7000000050pb.png       | Bin
 .../ka04u00000117fh_0EM4u000008MBTP.png       | Bin
 .../ka04u00000117hE_0EM4u000007ccaS.png       | Bin
 .../ka04u00000117hE_0EM4u000007ccac.png       | Bin
 .../ka04u00000117kD_0EM4u000008MHts.png       | Bin
 .../ka04u00000117kD_0EM4u000008MHuC.png       | Bin
 .../ka04u00000117sv_0EM4u000008LXSz.png       | Bin
 .../ka04u00000117wO_0EM4u000008MQhR.png       | Bin
 .../ka04u00000117wO_0EM4u000008MQmb.png       | Bin
 .../ka04u00000117xM_0EM4u000002CKXg.png       | Bin
 .../ka04u00000117xM_0EM4u000007qlPA.png       | Bin
 .../ka04u00000117zS_0EM4u000008MT4S.png       | Bin
 .../ka04u00000118ES_0EM700000004udP.png       | Bin
 .../ka04u00000118GJ_0EM4u000008MgWU.png       | Bin
 .../ka0Qk0000000ws1_0EM4u000008MMXd.png       | Bin
 .../ka0Qk0000000ws1_0EM4u000008MMY1.png       | Bin
 .../ka0Qk0000000ws1_0EM4u000008MMY6.png       | Bin
 .../ka0Qk0000000ws1_0EM4u000008MMYB.png       | Bin
 .../ka0Qk0000001L8r_0EM4u000008MV3l.png       | Bin
 .../ka0Qk0000001LLl_0EM4u000008MMJG.png       | Bin
 .../ka0Qk0000001LLl_0EM4u000008MMJL.png       | Bin
 .../ka0Qk0000001LQb_0EM4u000004dDVg.png       | Bin
 .../ka0Qk0000001LQb_0EM4u000004dDVq.png       | Bin
 .../ka0Qk0000001LQb_0EM4u000004dDVr.png       | Bin
 .../ka0Qk0000001LQb_0EM4u000004dDVv.png       | Bin
 .../ka0Qk0000001LaH_0EM4u000008M5Wm.png       | Bin
 .../ka0Qk0000001OrV_0EMQk000002Tph8.png       | Bin
 .../ka0Qk0000001S2H_0EMQk000001wr0A.png       | Bin
 .../ka0Qk0000001VD3_0EMQk000002dT5q.png       | Bin
 .../ka0Qk0000001ZBp_0EMQk000002dUpt.png       | Bin
 .../ka0Qk0000001ZgT_0EM4u000008MF8u.png       | Bin
 .../ka0Qk0000001Zjh_0EMQk000002jqCb.png       | Bin
 .../ka0Qk0000001f7Z_0EM4u000002CQsV.png       | Bin
 .../ka0Qk0000001hxN_0EMQk000002u2KX.png       | Bin
 .../ka0Qk0000002jaX_0EMQk0000045bUT.png       | Bin
 .../ka0Qk0000002kpx_0EMQk000003xxWz.png       | Bin
 .../ka0Qk0000002slt_0EM0g000002BkNM.png       | Bin
 .../ka0Qk0000002slt_0EM0g000002BkO9.png       | Bin
 .../ka0Qk0000002slt_0EM4u000007chgj.png       | Bin
 .../ka0Qk0000002uxN_0EM4u000008LHag.png       | Bin
 .../ka0Qk00000031Iv_0EM4u000008LafD.png       | Bin
 .../ka0Qk00000031Iv_0EM4u000008LafI.png       | Bin
 .../ka0Qk0000003W1l_0EMQk000003oywv.png       | Bin
 .../ka0Qk00000045if_0EM700000004wzI.png       | Bin
 .../ka0Qk0000004pqL_0EM4u000008M4JN.png       | Bin
 .../ka0Qk0000004pqL_0EM4u000008M4JS.png       | Bin
 .../ka0Qk0000006sTx_0EMQk000008Iaq1.png       | Bin
 ...00Bei5_00N0g000004CA0p_0EMQk000008M3Qr.png | Bin
 ...00Bei5_00N0g000004CA0p_0EMQk000008M3U5.png | Bin
 .../ka0Qk000000Bei5_0EMQk000008M3Qr.png       | Bin
 .../ka0Qk000000Bei5_0EMQk000008M3U5.png       | Bin
 .../ka0Qk000000CoU5_0EM4u0000084Tco.png       | Bin
 .../ka0Qk000000Csfl_0EM4u0000084TwA.png       | Bin
 .../ka0Qk000000DRwr_0EM7000000051zm.png       | Bin
 .../ka0Qk000000DbzR_0EM4u000002PbUM.png       | Bin
 .../ka0Qk000000EAE1_0EM4u000008LFTc.png       | Bin
 .../ka0Qk000000EIjS_0EMQk000005FPXt.png       | Bin
 .../ka0Qk000000EIjS_0EMQk00000661ik.png       | Bin
 .../ka40g0000004KSJ_0EM700000004udP.png       | Bin
 .../ka40g000000kAbd_0EM700000004wzI.png       | Bin
 .../servlet_image_1166f08ea416.png            | Bin
 .../servlet_image_31a741be3a3d.png            | Bin
 .../servlet_image_3823966b1661.png            | Bin
 .../servlet_image_427ba59f8bbf.png            | Bin
 .../servlet_image_5badb1d5b327.png            | Bin
 .../servlet_image_61a97e6d04cc.png            | Bin
 .../servlet_image_69209af72eac.png            | Bin
 .../servlet_image_69af0d1737a5.png            | Bin
 .../servlet_image_94223e4b2a63.png            | Bin
 .../servlet_image_a2750b9c5910.png            | Bin
 .../servlet_image_a39f37f6c350.png            | Bin
 .../servlet_image_a59a6a87d3a0.png            | Bin
 .../servlet_image_b26ce25b201c.png            | Bin
 .../servlet_image_b60fe6913b2e.png            | Bin
 .../servlet_image_b88c6cd43443.png            | Bin
 .../servlet_image_bcb70814f4ea.png            | Bin
 .../servlet_image_c2e8b90bb7b7.png            | Bin
 .../servlet_image_cf580c3eff6f.png            | Bin
 .../servlet_image_d51a544506f7.png            | Bin
 .../servlet_image_dcd3919a2b21.png            | Bin
 .../servlet_image_df5aa01d204f.png            | Bin
 .../servlet_image_e00b5dadcf89.png            | Bin
 .../servlet_image_ea6adfe5aae7.png            | Bin
 .../servlet_image_ebe11c05eb6f.png            | Bin
 .../active-directory-object-restore.md        |   2 +-
 ...e-directory-and-entra-id-license-counts.md |   4 +-
 ...ed-error-in-file-server-monitoring-plan.md |   2 +-
 ...ort-in-netwrix-auditor-for-file-servers.md |   2 +-
 ...nid-in-netwrix-auditor-for-file-servers.md |   2 +-
 ...-is-unable-to-start-during-installation.md |   2 +-
 ...but-still-exists-in-the-services-overvi.md |   2 +-
 ...-configure-monitoring-of-local-accounts.md |   2 +-
 ...figure-netwrix-auditor-in-failover-mode.md |   4 +-
 .../how-to-install-access-reviews.md          |   2 +-
 ...nts-prior-to-further-clear-installation.md |   2 +-
 ...-to-repair-netwrix-auditor-installation.md |   6 +-
 ...ta-sources-to-use-proxy-server-settings.md |   8 +-
 ...es-with-error-validating-your-account-s.md |   2 +-
 ...tion-for-microsoft-365-service-accounts.md |   4 +-
 ...-auditing-a-microsoft-office-365-tenant.md |   2 +-
 ...soft_entra_id_(auditor_v10.0_and_older).md |   8 +-
 ...int-online-and-ms-teams-monitoring-plan.md |   2 +-
 ...arepoint-application-deployment-for-ndc.md |   8 +-
 ...llation-for-netwrix-data-classification.md |   8 +-
 ...hoot_sharepoint_serveron-premise_errors.md |  70 +++++++++---------
 ...ext-error-in-sql-server-monitoring-plan.md |   4 +-
 ...not-valid-in-sql-server-monitoring-plan.md |   4 +-
 ...-find-stored-procedure-getallproperties.md |   2 +-
 ...er-ms-sql-server-instance-lower-version.md |  24 +++---
 ...atabases-to-another-sql-server-instance.md |  10 +--
 ...port-for-netwrix-auditor-audit-database.md |   2 +-
 ...rver-express-database-size-reached-10gb.md |   6 +-
 ...-domain-controllers-in-monitored-domain.md |   6 +-
 .../high-cpu-usage-on-domain-controllers.md   |   4 +-
 ...lers-from-monitoring-in-netwrix-auditor.md |   2 +-
 ...moved-and-readded-to-domain-controllers.md |   2 +-
 ...s-server-auditing-service-pre-installed.md |   2 +-
 .../entitlement-reviews-event-id-6527.md      |   2 +-
 ...cation-errors-in-netwrix-auditor-server.md |   4 +-
 .../event-id-1024-in-health-log.md            |   4 +-
 .../event-id-1208-in-health-log.md            |   4 +-
 .../event-id-1225-in-health-log.md            |   8 +-
 .../event-id-1274-in-health-log.md            |   8 +-
 ...002-the-term-get-help-is-not-recognized.md |   2 +-
 ...count-lockouts-are-displayed-with-delay.md |   4 +-
 ...ice-is-busy-processing-activity-records.md |   4 +-
 ...status-shows-logon-auditing-is-disabled.md |   8 +-
 ...ion_services_(iis)_with_netwrix_auditor.md |   2 +-
 ...ing-account-password-in-netwrix-auditor.md |   2 +-
 .../configuring_proxy_scans.md                |  12 +--
 .../high-cpu-load-and-memory-usage.md         |   2 +-
 ...igh-cpu-usage-on-remote-desktop-servers.md |   4 +-
 .../how-do-i-monitor-hidden-file-shares.md    |   2 +-
 ...d-additional-space-to-long-term-archive.md |   2 +-
 ...dit-another-domain-with-netwrix-auditor.md |   4 +-
 ...check-the-netwrix-auditor-health-status.md |   6 +-
 ...r-network-devices-in-your-configuration.md |   2 +-
 ...ow-to-create-the-full-dump-of-a-process.md |   2 +-
 ...elete-old-entries-from-the-account-list.md |   2 +-
 ...ow-to-enable-ocr-for-non-english-images.md |   2 +-
 ...-monitoring-scope-in-netwrix-auditor-ui.md |   8 +-
 ...-to-find-out-my-netwrix-auditor-version.md |   2 +-
 ...server-can-receive-data-from-meraki-api.md |   2 +-
 ...mpression-services-from-audited-servers.md |   2 +-
 .../how-to-monitor-print-service-activity.md  |  18 ++---
 ...ove-long-term-archive-to-a-new-location.md |   2 +-
 ...ow-to-move-netwrix-auditor-to-the-cloud.md |   2 +-
 ...w-to-prevent-long-term-archive-overflow.md |   4 +-
 ...k-portal-and-the-administrative-console.md |   2 +-
 .../how-to-send-netwrix-auditor-logs.md       |   8 +-
 ...tive-file-categories-in-netwrix-auditor.md |   2 +-
 ...of_users_addedremoved_from_any_ad_group.md |   2 +-
 .../hyperlinks-in-custom-branding.md          |   2 +-
 .../images-are-not-shown.md                   |   2 +-
 ...ndexes_in_netwrix_access_analyzer_v12.0.md |   2 +-
 .../lockouts-are-not-tracked.md               |   4 +-
 .../log-overwrites-warnings.md                |  12 +--
 ...ta-collection-improving-the-performance.md |   6 +-
 .../malformed-control-request.md              |   2 +-
 .../migrating-auditor-to-new-server.md        |  28 +++----
 ...rt-too-many-methods-to-fire-events-from.md |  14 ++--
 ...tor-consumes-disk-space-recommendations.md |  16 ++--
 .../netwrix-auditor-licensing-faqs.md         |  20 ++---
 ...ing-after-upgrading-host-server-windows.md |   4 +-
 ...nitoring-plans-found-in-netwrix-auditor.md |   4 +-
 ...type-and-what-changed-columns-are-empty.md |   2 +-
 .../glossaries-and-faqs/reading-log-status.md |   4 +-
 ...oving-user-account-to-the-quarantine-ou.md |   2 +-
 ...tricted_access_to_users_of_your_domain..md |   4 +-
 ...s-not-compatible-with-this-code-version.md |   2 +-
 ...auditor-and-netwrix-data-classification.md |   4 +-
 ...main-param-parameter-is-missing-a-value.md |   2 +-
 ...-does-not-appear-in-examination-results.md |   2 +-
 ...ains-appear-in-the-managed-domains-list.md |   2 +-
 .../unable-to-connect-to-remote-server.md     |   4 +-
 ...y-key-is-missing-in-both-gpmc-and-local.md |   2 +-
 .../workstation-name-is-not-shown.md          |   2 +-
 ...erates-excessive-traffic-in-the-network.md |   2 +-
 ...ount-lockout-examiner-works-very-slowly.md |   2 +-
 ...s-netwrix-account-lockout-examiner-work.md |   2 +-
 ...nd-use-netwrix-account-lockout-examiner.md |   2 +-
 ...how-to-migrate-account-lockout-examiner.md |   2 +-
 ...ccount-lockout-examiner-service-account.md |   2 +-
 ...ccount-lockout-examiner-service-account.md |  10 +--
 ...d-error-in-event-log-manager-health-log.md |   4 +-
 ...s-and-stops-multi-lingual-configuration.md |   2 +-
 ...fic-applications-and-services-event-log.md |   4 +-
 ...netwrix-auditor-system-health-event-log.md |   4 +-
 ...rrors-while-configuring-a-monitoring-pl.md |   2 +-
 ...lel-redo-events-in-sql-server-event-log.md |   2 +-
 ...indows-server-does-not-contain-any-data.md |   2 +-
 ...ix-auditor-password-expiration-notifier.md |   4 +-
 ...reports-in-password-expiration-notifier.md |   4 +-
 ...-in-password-expiration-notifier-emails.md |  12 +--
 ...racters-in-password-expiration-notifier.md |   2 +-
 ...piration-notifier-to-a-different-server.md |   4 +-
 ...l-header-and-footer-reset-after-upgrade.md |   4 +-
 ...ration-notifier-stopped-showing-results.md |   2 +-
 ...in-netwrix-password-expiration-notifier.md |   2 +-
 ...-core-service-has-been-already-launched.md |   4 +-
 ...inactive-users-tracker-to-other-servers.md |   2 +-
 ...ually-update-user-activity-core-service.md |   4 +-
 ...deleted-in-inactive-user-tracker-report.md |   4 +-
 ...tified-in-user-activity-monitoring-plan.md |   4 +-
 ...wrix-auditor-user-activity-core-service.md |   6 +-
 .../setting-up-account-lockout-alert.md       |  10 +--
 .../unable-to-create-real-time-alerts.md      |   4 +-
 ...o-customize-email-notification-template.md |   2 +-
 ...ons-are-not-sent-to-distribution-groups.md |   8 +-
 ...ts-in-one-way-trust-forests-environment.md |   4 +-
 ...e-displayed-in-the-modification-reports.md |   2 +-
 ...rying-to-review-netwrix-auditor-reports.md |   4 +-
 ...3-reports-and-subscriptions-not-working.md |   8 +-
 ...serrorimpersonatinguser-running-reports.md |   4 +-
 ...ort-in-ssrs-http-error-401-unauthorized.md |   4 +-
 ...g-information-on-account-lockout-events.md |   2 +-
 ...letters-instead-of-command-text-in-ssrs.md |   2 +-
 ...o-filter-out-certain-users-from-reports.md |   2 +-
 ...prepare-for-printing-ssrs-based-reports.md |   2 +-
 ...se-wildcards-in-netwrix-auditor-reports.md |   2 +-
 .../impossible-to-export-a-report.md          |   2 +-
 ...account-running-netwrix-auditor-reports.md |   2 +-
 ...takes-a-while-and-completes-with-errors.md |   4 +-
 ...reports-do-not-show-gpo-settings-values.md |  10 +--
 ...address-column-in-the-enrollment-report.md |   6 +-
 ...s-system-cannot-find-the-file-specified.md |   2 +-
 ...-to-contract-or-subscription-expiration.md |   6 +-
 .../backup-recommendations.md                 |   6 +-
 ...ect-objectname-in-database-databasename.md |   2 +-
 ...-tables-not-compatible-with-the-product.md |   6 +-
 .../deploying-the-report-server-database.md   |   2 +-
 ...the-netwrix-auditor-self-audit-database.md |   2 +-
 ...ed_configuration_registry_database_is_.md" |   4 +-
 ...sql-instances-and-what-it-is-needed-for.md |   2 +-
 ...audit-database-size-for-netwrix-auditor.md |  12 +--
 ...d-in-reports-for-database-content-audit.md |   2 +-
 ...ix-license-usage-data-and-url-resources.md |   2 +-
 .../how-to-apply-netwrix-auditor-license.md   |   2 +-
 ...uditor-working-folder-to-a-new-location.md |  14 ++--
 ...o-prepare-netwrix-server-for-os-upgrade.md |   4 +-
 .../how-to-upgrade-netwrix-auditor.md         |   6 +-
 ...uditor_version_cannot_be_upgraded_error.md |   2 +-
 .../cannot-access-roles-page.md               |   4 +-
 .../cannot-access-the-help-desk-portal.md     |   6 +-
 ...e-to-an-incorrect-user-name-or-password.md |   2 +-
 ...credential-information-for-mapped-drive.md |   2 +-
 ...ttings-in-audit-configuration-assistant.md |   2 +-
 ...ell_data_collector_jobs_with_parameters.md |   6 +-
 .../error-0x80040605-connection-failed.md     |   4 +-
 ...or-0x800706ba-rpc-server-is-unavailable.md |   2 +-
 .../data-collection-errors/error-403.md       |  10 +--
 ...le-processing-the-request-on-the-server.md |   2 +-
 .../error-no-more-threads.md                  |   2 +-
 .../error-request-operation-timeout.md        |   8 +-
 ...ror-the-maximum-password-age-is-not-set.md |   2 +-
 ...error-the-pipe-endpoint-cannot-be-found.md |   2 +-
 .../error-the-remote-procedure-call-failed.md |   4 +-
 ...-recent-service-account-password-change.md |   2 +-
 .../failed-to-open-log.md                     |   6 +-
 ...p-policy-error-is-not-in-a-valid-format.md |   4 +-
 ...address-used-for-a-failed-logon-attempt.md |  24 +++---
 ...-find-destination-of-failed-ntlm-logons.md |   2 +-
 ...investigate-compression-services-errors.md |   2 +-
 ...-occurs-when-trying-to-store-audit-data.md |   2 +-
 ...3-003-failed-to-load-configuration-file.md |   2 +-
 ...permission-denied-error-code-2146828218.md |   6 +-
 ...ified-in-logon-activity-monitoring-plan.md |   4 +-
 ...-call-failed-error-when-collecting-logs.md |   2 +-
 ...rror-when-using-gmsa-in-netwrix-auditor.md |   2 +-
 ...eter-error-when-auditing-netapp-cluster.md |   2 +-
 ...incomplete-information-on-failed-logons.md |   2 +-
 ...-the-information-on-win32-printer-error.md |   2 +-
 ...uditor_upload_data_to_sql_using_tls_1.2.md |   4 +-
 ...certificates_and_their_expiration_dates.md |   2 +-
 ...een_auditor_and_ssrs_via_ssltls_channel.md |   6 +-
 497 files changed, 450 insertions(+), 450 deletions(-)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcMr_0EM0g000000hNsh.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcMv_0EM700000004wr9.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcMw_0EM700000004wzm.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcN0_0EM700000004wxW.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcN3_0EM700000004wrO.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcN7_00N0g000004CA0p_0EM700000004xgW.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcN7_00N0g000004CA0p_0EM700000004xgl.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNK_0EM700000004wzw.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNK_0EM700000004x01.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNT_0EM700000004wyK.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNU_0EM700000004xUL.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNV_0EM700000007LkF.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNW_0EM4u000002QzDA.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNX_0EM700000004wxg.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNZ_0EM700000004wyZ.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNZ_0EM700000004wye.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNi_0EM700000004yKg.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNi_0EM700000004yKq.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNi_0EM700000004yKv.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNi_0EM700000004yL0.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNi_0EM700000004yL5.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNm_0EM700000004xEI.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNm_0EM700000004xEN.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNm_0EM700000004xES.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNo_0EM700000004xIo.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNo_0EM700000004xIt.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNo_0EM700000004xIy.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcNr_0EM4u000007qtQ1.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcOn_0EM700000005TB6.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcOn_0EM700000005TBB.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcOn_0EM700000005TBG.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcOn_0EM700000005TBL.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcOn_0EM700000005TBV.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcOn_0EM700000005TBa.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcOn_0EM700000005TBf.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcOn_0EM700000005TBk.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcOn_0EM700000005TBp.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcOn_0EM700000005TC4.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcOn_0EM700000005TC9.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcOn_0EM700000005TCE.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcP8_0EM7000000051Zt.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPk_0EM7000000054Bf.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPp_0EM4u000007qsVK.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPp_0EM700000005DIQ.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPz_0EM700000004y2I.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPz_0EM700000004y2N.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPz_0EM700000004y2S.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPz_0EM700000004y2X.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPz_0EM700000004y2c.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPz_0EM700000004y2h.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPz_0EM700000004y31.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPz_0EM700000004y3B.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPz_0EM700000004y3G.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPz_0EM700000004y3V.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcPz_0EM700000004y3k.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcQv_0EM700000004wpw.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcQv_0EM700000004wq1.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRE_0EM700000004xUB.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRE_0EM700000004xUG.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRH_0EM700000004wmJ.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRU_0EM700000004x9r.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRb_0EM70000000QI3C.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRb_0EM70000000QI3H.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRb_0EM70000000QI3M.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRb_0EM70000000QI3W.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRb_0EM70000000QI3b.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRc_0EM700000004wxC.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRc_0EM700000004wxH.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRc_0EM700000004wxM.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRc_0EM700000004wxR.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRc_0EM7000000054jS.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRc_0EM7000000054jX.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRf_0EM70000000xMZN.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRf_0EM70000000xMZS.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRf_0EM70000000xMZc.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRf_0EM70000000xMZr.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRf_0EM70000000xMZw.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcRw_0EM700000008Dtg.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcS0_0EM700000005Cwt.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcS1_0EM700000007Jf8.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcS1_0EM700000007JfD.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcS3_0EM700000005HCR.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSG_0EM7000000054Pc.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSG_0EM7000000054Ph.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSG_0EM7000000054Pm.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSG_0EM700000005pJq.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSR_0EM7000000053Be.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSR_0EM7000000053Bj.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSR_0EM7000000053Bo.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSU_0EM700000006Hfg.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSU_0EM700000006Hfl.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSZ_0EM700000006XV3.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSZ_0EM700000006XV8.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSZ_0EM700000006XVD.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcSn_0EM700000005hNk.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcT2_0EM700000005kEC.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcT5_0EM700000008DPW.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcT5_0EM700000008DPb.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcT5_0EM700000008DPg.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcTw_0EM700000005BrO.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcTw_0EM700000005BrT.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcTw_0EM700000005BrY.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcTz_0EM700000005AFx.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcU6_0EM7000000054Ba.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUL_0EM7000000053hV.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUO_0EM7000000052im.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUO_0EM7000000052ir.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUT_0EM7000000052iw.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUT_0EM7000000052jG.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUW_0EM700000004x0B.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUb_0EM7000000051QD.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUb_0EM7000000051QI.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUb_0EM7000000051QN.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUd_0EM7000000051O7.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUd_0EM7000000051OC.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUe_0EM7000000050xL.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUe_0EM7000000050xQ.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUi_0EM700000004xfn.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUi_0EM700000004xfx.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUi_0EM700000004xg2.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUi_0EM700000004xg7.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUp_0EM700000004xfs.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUv_0EM700000004wr4.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUw_0EM700000004wlz.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUw_0EM700000004wm4.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUx_0EM700000004wyo.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUx_0EM700000004wyt.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcUx_0EM700000004wyy.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcVz_0EM700000004wyU.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcW3_0EM700000004wqL.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcW3_0EM700000004wqQ.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcW3_0EM700000004wqV.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcW3_0EM700000004wqa.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcW3_0EM700000004wqf.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcW6_0EM700000004wzN.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcWD_0EM700000004udF.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcWD_0EM700000004wzc.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcWF_0EM700000004xUV.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcWK_0EM700000004wmE.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcWM_0EM700000004wyA.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcWP_0EM700000004wxl.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXR_0EM700000004vPE.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXR_0EM700000004vPJ.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXR_0EM700000004vPO.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXR_0EM700000004vPT.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXR_0EM700000004vPn.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXR_0EM700000004vPs.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXd_0EM4u000002D96q.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXd_0EM4u000002D975.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXd_0EM4u000002D97U.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXd_0EM4u000002D97j.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXh_0EM4u000002Qx7U.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXh_0EM4u000002Qx7Z.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXh_0EM4u000002Qx7t.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcXh_0EM4u000002Qx8I.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcZ5_0EM0g000002CGLg.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HcZ6_0EM4u000002P6Cl.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdDR_0EM4u0000084XpS.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdES_0EM4u000002CO3k.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdEa_0EM4u000002CmYD.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdEa_0EM4u000002CmYI.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdEa_0EM4u000002CmYN.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdEa_0EM4u000002CmYS.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdEa_0EM4u000002CsNQ.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdFq_0EM4u0000052m0m.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdFvAAK.jpeg (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdPU_0EM4u0000084ozs.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdPU_0EM4u0000084ozx.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdPU_0EM4u0000084p07.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdPU_0EM4u0000084p0C.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdPU_0EM4u0000084p0D.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdPU_0EM4u0000084p0b.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdPU_0EM4u0000084p0l.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdPU_0EM4u0000084p0q.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000HdPU_0EM4u0000084p15.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000Qmg4_0EM4u000007cgGr.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000Qmg4_0EM4u000007cgOC.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000Qmg4_0EM4u000007cgPy.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000wvtY_0EM4u000008pRVW.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000wvy4_0EM4u000008LkB8.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000wvzg_0EM4u000008pVor.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000000wvzg_0EM4u000008pVow.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u0000011688_0EM4u000008LCjZ.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000116G7_0EM4u000007ceka.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000116G7_0EM4u000007cekk.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000116GR_0EM4u000002PWPR.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000116Ju_0EM4u000008LKrz.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000116MV_0EM4u000007cekk.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000116R6_0EM0g000000hUdK.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000116gG_0EM4u000008LXT9.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000116iG_0EM4u000004bz9T.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000116xf_0EM4u000008Ljuv.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000116zv_0EM4u000008Ll2v.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000116zv_0EM4u000008LlzE.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000001173i_0EM4u000008Liq9.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000001173i_0EM4u000008LirC.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u0000011776_0EM4u000008Ls7s.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000001177u_0EM4u000008Lr6o.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u000001179H_0EM4u000008Lt2y.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117A1_0EM4u000008LuEC.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117Ay_0EM70000000tnyM.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117Ay_0EM70000000tnyW.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117HQ_0EM4u000008M035.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117HW_0EM4u000008LwaA.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117L8_0EM4u000008LCum.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117L8_0EM4u000008LCuw.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117L8_0EM4u000008LCv1.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117L8_0EM4u000008LCvL.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117L8_0EM4u000008LCvk.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117L8_0EM4u000008LCwE.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117L8_0EM4u000008M2Tz.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117TM_0EM4u000008M6Wx.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117UP_0EM4u000008M7Sw.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117Vm_0EM4u000008M8Pe.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117ad_0EM4u000008LFeu.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117bz_0EM0g000000hGVv.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117bz_0EM0g000000hGWo.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117bz_0EM4u000004dCnj.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117bz_0EM4u000008LKwz.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117bz_0EM70000000QIPr.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117bz_0EM70000000QIQN.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117cJ_0EM4u000008LXj2.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117dv_0EM7000000050pb.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117fh_0EM4u000008MBTP.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117hE_0EM4u000007ccaS.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117hE_0EM4u000007ccac.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117kD_0EM4u000008MHts.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117kD_0EM4u000008MHuC.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117sv_0EM4u000008LXSz.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117wO_0EM4u000008MQhR.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117wO_0EM4u000008MQmb.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117xM_0EM4u000002CKXg.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117xM_0EM4u000007qlPA.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000117zS_0EM4u000008MT4S.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000118ES_0EM700000004udP.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka04u00000118GJ_0EM4u000008MgWU.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000000ws1_0EM4u000008MMXd.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000000ws1_0EM4u000008MMY1.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000000ws1_0EM4u000008MMY6.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000000ws1_0EM4u000008MMYB.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001L8r_0EM4u000008MV3l.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001LLl_0EM4u000008MMJG.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001LLl_0EM4u000008MMJL.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001LQb_0EM4u000004dDVg.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001LQb_0EM4u000004dDVq.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001LQb_0EM4u000004dDVr.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001LQb_0EM4u000004dDVv.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001LaH_0EM4u000008M5Wm.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001OrV_0EMQk000002Tph8.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001S2H_0EMQk000001wr0A.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001VD3_0EMQk000002dT5q.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001ZBp_0EMQk000002dUpt.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001ZgT_0EM4u000008MF8u.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001Zjh_0EMQk000002jqCb.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001f7Z_0EM4u000002CQsV.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000001hxN_0EMQk000002u2KX.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000002jaX_0EMQk0000045bUT.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000002kpx_0EMQk000003xxWz.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000002slt_0EM0g000002BkNM.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000002slt_0EM0g000002BkO9.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000002slt_0EM4u000007chgj.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000002uxN_0EM4u000008LHag.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk00000031Iv_0EM4u000008LafD.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk00000031Iv_0EM4u000008LafI.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000003W1l_0EMQk000003oywv.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk00000045if_0EM700000004wzI.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000004pqL_0EM4u000008M4JN.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000004pqL_0EM4u000008M4JS.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk0000006sTx_0EMQk000008Iaq1.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3Qr.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3U5.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk000000Bei5_0EMQk000008M3Qr.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk000000Bei5_0EMQk000008M3U5.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk000000CoU5_0EM4u0000084Tco.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk000000Csfl_0EM4u0000084TwA.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk000000DRwr_0EM7000000051zm.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk000000DbzR_0EM4u000002PbUM.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk000000EAE1_0EM4u000008LFTc.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk000000EIjS_0EMQk000005FPXt.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka0Qk000000EIjS_0EMQk00000661ik.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka40g0000004KSJ_0EM700000004udP.png (100%)
 rename docs/kb/auditor/{images => 0-images}/ka40g000000kAbd_0EM700000004wzI.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_1166f08ea416.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_31a741be3a3d.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_3823966b1661.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_427ba59f8bbf.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_5badb1d5b327.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_61a97e6d04cc.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_69209af72eac.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_69af0d1737a5.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_94223e4b2a63.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_a2750b9c5910.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_a39f37f6c350.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_a59a6a87d3a0.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_b26ce25b201c.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_b60fe6913b2e.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_b88c6cd43443.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_bcb70814f4ea.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_c2e8b90bb7b7.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_cf580c3eff6f.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_d51a544506f7.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_dcd3919a2b21.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_df5aa01d204f.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_e00b5dadcf89.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_ea6adfe5aae7.png (100%)
 rename docs/kb/auditor/{images => 0-images}/servlet_image_ebe11c05eb6f.png (100%)

diff --git a/docs/kb/auditor/images/ka04u000000HcMr_0EM0g000000hNsh.png b/docs/kb/auditor/0-images/ka04u000000HcMr_0EM0g000000hNsh.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcMr_0EM0g000000hNsh.png
rename to docs/kb/auditor/0-images/ka04u000000HcMr_0EM0g000000hNsh.png
diff --git a/docs/kb/auditor/images/ka04u000000HcMv_0EM700000004wr9.png b/docs/kb/auditor/0-images/ka04u000000HcMv_0EM700000004wr9.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcMv_0EM700000004wr9.png
rename to docs/kb/auditor/0-images/ka04u000000HcMv_0EM700000004wr9.png
diff --git a/docs/kb/auditor/images/ka04u000000HcMw_0EM700000004wzm.png b/docs/kb/auditor/0-images/ka04u000000HcMw_0EM700000004wzm.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcMw_0EM700000004wzm.png
rename to docs/kb/auditor/0-images/ka04u000000HcMw_0EM700000004wzm.png
diff --git a/docs/kb/auditor/images/ka04u000000HcN0_0EM700000004wxW.png b/docs/kb/auditor/0-images/ka04u000000HcN0_0EM700000004wxW.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcN0_0EM700000004wxW.png
rename to docs/kb/auditor/0-images/ka04u000000HcN0_0EM700000004wxW.png
diff --git a/docs/kb/auditor/images/ka04u000000HcN3_0EM700000004wrO.png b/docs/kb/auditor/0-images/ka04u000000HcN3_0EM700000004wrO.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcN3_0EM700000004wrO.png
rename to docs/kb/auditor/0-images/ka04u000000HcN3_0EM700000004wrO.png
diff --git a/docs/kb/auditor/images/ka04u000000HcN7_00N0g000004CA0p_0EM700000004xgW.png b/docs/kb/auditor/0-images/ka04u000000HcN7_00N0g000004CA0p_0EM700000004xgW.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcN7_00N0g000004CA0p_0EM700000004xgW.png
rename to docs/kb/auditor/0-images/ka04u000000HcN7_00N0g000004CA0p_0EM700000004xgW.png
diff --git a/docs/kb/auditor/images/ka04u000000HcN7_00N0g000004CA0p_0EM700000004xgl.png b/docs/kb/auditor/0-images/ka04u000000HcN7_00N0g000004CA0p_0EM700000004xgl.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcN7_00N0g000004CA0p_0EM700000004xgl.png
rename to docs/kb/auditor/0-images/ka04u000000HcN7_00N0g000004CA0p_0EM700000004xgl.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNK_0EM700000004wzw.png b/docs/kb/auditor/0-images/ka04u000000HcNK_0EM700000004wzw.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNK_0EM700000004wzw.png
rename to docs/kb/auditor/0-images/ka04u000000HcNK_0EM700000004wzw.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNK_0EM700000004x01.png b/docs/kb/auditor/0-images/ka04u000000HcNK_0EM700000004x01.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNK_0EM700000004x01.png
rename to docs/kb/auditor/0-images/ka04u000000HcNK_0EM700000004x01.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNT_0EM700000004wyK.png b/docs/kb/auditor/0-images/ka04u000000HcNT_0EM700000004wyK.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNT_0EM700000004wyK.png
rename to docs/kb/auditor/0-images/ka04u000000HcNT_0EM700000004wyK.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNU_0EM700000004xUL.png b/docs/kb/auditor/0-images/ka04u000000HcNU_0EM700000004xUL.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNU_0EM700000004xUL.png
rename to docs/kb/auditor/0-images/ka04u000000HcNU_0EM700000004xUL.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNV_0EM700000007LkF.png b/docs/kb/auditor/0-images/ka04u000000HcNV_0EM700000007LkF.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNV_0EM700000007LkF.png
rename to docs/kb/auditor/0-images/ka04u000000HcNV_0EM700000007LkF.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNW_0EM4u000002QzDA.png b/docs/kb/auditor/0-images/ka04u000000HcNW_0EM4u000002QzDA.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNW_0EM4u000002QzDA.png
rename to docs/kb/auditor/0-images/ka04u000000HcNW_0EM4u000002QzDA.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNX_0EM700000004wxg.png b/docs/kb/auditor/0-images/ka04u000000HcNX_0EM700000004wxg.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNX_0EM700000004wxg.png
rename to docs/kb/auditor/0-images/ka04u000000HcNX_0EM700000004wxg.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNZ_0EM700000004wyZ.png b/docs/kb/auditor/0-images/ka04u000000HcNZ_0EM700000004wyZ.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNZ_0EM700000004wyZ.png
rename to docs/kb/auditor/0-images/ka04u000000HcNZ_0EM700000004wyZ.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNZ_0EM700000004wye.png b/docs/kb/auditor/0-images/ka04u000000HcNZ_0EM700000004wye.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNZ_0EM700000004wye.png
rename to docs/kb/auditor/0-images/ka04u000000HcNZ_0EM700000004wye.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNi_0EM700000004yKg.png b/docs/kb/auditor/0-images/ka04u000000HcNi_0EM700000004yKg.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNi_0EM700000004yKg.png
rename to docs/kb/auditor/0-images/ka04u000000HcNi_0EM700000004yKg.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNi_0EM700000004yKq.png b/docs/kb/auditor/0-images/ka04u000000HcNi_0EM700000004yKq.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNi_0EM700000004yKq.png
rename to docs/kb/auditor/0-images/ka04u000000HcNi_0EM700000004yKq.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNi_0EM700000004yKv.png b/docs/kb/auditor/0-images/ka04u000000HcNi_0EM700000004yKv.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNi_0EM700000004yKv.png
rename to docs/kb/auditor/0-images/ka04u000000HcNi_0EM700000004yKv.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNi_0EM700000004yL0.png b/docs/kb/auditor/0-images/ka04u000000HcNi_0EM700000004yL0.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNi_0EM700000004yL0.png
rename to docs/kb/auditor/0-images/ka04u000000HcNi_0EM700000004yL0.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNi_0EM700000004yL5.png b/docs/kb/auditor/0-images/ka04u000000HcNi_0EM700000004yL5.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNi_0EM700000004yL5.png
rename to docs/kb/auditor/0-images/ka04u000000HcNi_0EM700000004yL5.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNm_0EM700000004xEI.png b/docs/kb/auditor/0-images/ka04u000000HcNm_0EM700000004xEI.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNm_0EM700000004xEI.png
rename to docs/kb/auditor/0-images/ka04u000000HcNm_0EM700000004xEI.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNm_0EM700000004xEN.png b/docs/kb/auditor/0-images/ka04u000000HcNm_0EM700000004xEN.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNm_0EM700000004xEN.png
rename to docs/kb/auditor/0-images/ka04u000000HcNm_0EM700000004xEN.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNm_0EM700000004xES.png b/docs/kb/auditor/0-images/ka04u000000HcNm_0EM700000004xES.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNm_0EM700000004xES.png
rename to docs/kb/auditor/0-images/ka04u000000HcNm_0EM700000004xES.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNo_0EM700000004xIo.png b/docs/kb/auditor/0-images/ka04u000000HcNo_0EM700000004xIo.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNo_0EM700000004xIo.png
rename to docs/kb/auditor/0-images/ka04u000000HcNo_0EM700000004xIo.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNo_0EM700000004xIt.png b/docs/kb/auditor/0-images/ka04u000000HcNo_0EM700000004xIt.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNo_0EM700000004xIt.png
rename to docs/kb/auditor/0-images/ka04u000000HcNo_0EM700000004xIt.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNo_0EM700000004xIy.png b/docs/kb/auditor/0-images/ka04u000000HcNo_0EM700000004xIy.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNo_0EM700000004xIy.png
rename to docs/kb/auditor/0-images/ka04u000000HcNo_0EM700000004xIy.png
diff --git a/docs/kb/auditor/images/ka04u000000HcNr_0EM4u000007qtQ1.png b/docs/kb/auditor/0-images/ka04u000000HcNr_0EM4u000007qtQ1.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcNr_0EM4u000007qtQ1.png
rename to docs/kb/auditor/0-images/ka04u000000HcNr_0EM4u000007qtQ1.png
diff --git a/docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TB6.png b/docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TB6.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TB6.png
rename to docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TB6.png
diff --git a/docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBB.png b/docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBB.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBB.png
rename to docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBB.png
diff --git a/docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBG.png b/docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBG.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBG.png
rename to docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBG.png
diff --git a/docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBL.png b/docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBL.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBL.png
rename to docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBL.png
diff --git a/docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBV.png b/docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBV.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBV.png
rename to docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBV.png
diff --git a/docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBa.png b/docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBa.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBa.png
rename to docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBa.png
diff --git a/docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBf.png b/docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBf.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBf.png
rename to docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBf.png
diff --git a/docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBk.png b/docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBk.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBk.png
rename to docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBk.png
diff --git a/docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBp.png b/docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBp.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TBp.png
rename to docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TBp.png
diff --git a/docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TC4.png b/docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TC4.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TC4.png
rename to docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TC4.png
diff --git a/docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TC9.png b/docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TC9.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TC9.png
rename to docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TC9.png
diff --git a/docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TCE.png b/docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TCE.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcOn_0EM700000005TCE.png
rename to docs/kb/auditor/0-images/ka04u000000HcOn_0EM700000005TCE.png
diff --git a/docs/kb/auditor/images/ka04u000000HcP8_0EM7000000051Zt.png b/docs/kb/auditor/0-images/ka04u000000HcP8_0EM7000000051Zt.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcP8_0EM7000000051Zt.png
rename to docs/kb/auditor/0-images/ka04u000000HcP8_0EM7000000051Zt.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPk_0EM7000000054Bf.png b/docs/kb/auditor/0-images/ka04u000000HcPk_0EM7000000054Bf.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPk_0EM7000000054Bf.png
rename to docs/kb/auditor/0-images/ka04u000000HcPk_0EM7000000054Bf.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPp_0EM4u000007qsVK.png b/docs/kb/auditor/0-images/ka04u000000HcPp_0EM4u000007qsVK.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPp_0EM4u000007qsVK.png
rename to docs/kb/auditor/0-images/ka04u000000HcPp_0EM4u000007qsVK.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPp_0EM700000005DIQ.png b/docs/kb/auditor/0-images/ka04u000000HcPp_0EM700000005DIQ.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPp_0EM700000005DIQ.png
rename to docs/kb/auditor/0-images/ka04u000000HcPp_0EM700000005DIQ.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y2I.png b/docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y2I.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y2I.png
rename to docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y2I.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y2N.png b/docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y2N.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y2N.png
rename to docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y2N.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y2S.png b/docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y2S.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y2S.png
rename to docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y2S.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y2X.png b/docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y2X.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y2X.png
rename to docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y2X.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y2c.png b/docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y2c.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y2c.png
rename to docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y2c.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y2h.png b/docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y2h.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y2h.png
rename to docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y2h.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y31.png b/docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y31.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y31.png
rename to docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y31.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y3B.png b/docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y3B.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y3B.png
rename to docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y3B.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y3G.png b/docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y3G.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y3G.png
rename to docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y3G.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y3V.png b/docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y3V.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y3V.png
rename to docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y3V.png
diff --git a/docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y3k.png b/docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y3k.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcPz_0EM700000004y3k.png
rename to docs/kb/auditor/0-images/ka04u000000HcPz_0EM700000004y3k.png
diff --git a/docs/kb/auditor/images/ka04u000000HcQv_0EM700000004wpw.png b/docs/kb/auditor/0-images/ka04u000000HcQv_0EM700000004wpw.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcQv_0EM700000004wpw.png
rename to docs/kb/auditor/0-images/ka04u000000HcQv_0EM700000004wpw.png
diff --git a/docs/kb/auditor/images/ka04u000000HcQv_0EM700000004wq1.png b/docs/kb/auditor/0-images/ka04u000000HcQv_0EM700000004wq1.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcQv_0EM700000004wq1.png
rename to docs/kb/auditor/0-images/ka04u000000HcQv_0EM700000004wq1.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRE_0EM700000004xUB.png b/docs/kb/auditor/0-images/ka04u000000HcRE_0EM700000004xUB.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRE_0EM700000004xUB.png
rename to docs/kb/auditor/0-images/ka04u000000HcRE_0EM700000004xUB.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRE_0EM700000004xUG.png b/docs/kb/auditor/0-images/ka04u000000HcRE_0EM700000004xUG.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRE_0EM700000004xUG.png
rename to docs/kb/auditor/0-images/ka04u000000HcRE_0EM700000004xUG.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRH_0EM700000004wmJ.png b/docs/kb/auditor/0-images/ka04u000000HcRH_0EM700000004wmJ.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRH_0EM700000004wmJ.png
rename to docs/kb/auditor/0-images/ka04u000000HcRH_0EM700000004wmJ.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRU_0EM700000004x9r.png b/docs/kb/auditor/0-images/ka04u000000HcRU_0EM700000004x9r.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRU_0EM700000004x9r.png
rename to docs/kb/auditor/0-images/ka04u000000HcRU_0EM700000004x9r.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRb_0EM70000000QI3C.png b/docs/kb/auditor/0-images/ka04u000000HcRb_0EM70000000QI3C.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRb_0EM70000000QI3C.png
rename to docs/kb/auditor/0-images/ka04u000000HcRb_0EM70000000QI3C.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRb_0EM70000000QI3H.png b/docs/kb/auditor/0-images/ka04u000000HcRb_0EM70000000QI3H.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRb_0EM70000000QI3H.png
rename to docs/kb/auditor/0-images/ka04u000000HcRb_0EM70000000QI3H.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRb_0EM70000000QI3M.png b/docs/kb/auditor/0-images/ka04u000000HcRb_0EM70000000QI3M.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRb_0EM70000000QI3M.png
rename to docs/kb/auditor/0-images/ka04u000000HcRb_0EM70000000QI3M.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRb_0EM70000000QI3W.png b/docs/kb/auditor/0-images/ka04u000000HcRb_0EM70000000QI3W.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRb_0EM70000000QI3W.png
rename to docs/kb/auditor/0-images/ka04u000000HcRb_0EM70000000QI3W.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRb_0EM70000000QI3b.png b/docs/kb/auditor/0-images/ka04u000000HcRb_0EM70000000QI3b.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRb_0EM70000000QI3b.png
rename to docs/kb/auditor/0-images/ka04u000000HcRb_0EM70000000QI3b.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRc_0EM700000004wxC.png b/docs/kb/auditor/0-images/ka04u000000HcRc_0EM700000004wxC.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRc_0EM700000004wxC.png
rename to docs/kb/auditor/0-images/ka04u000000HcRc_0EM700000004wxC.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRc_0EM700000004wxH.png b/docs/kb/auditor/0-images/ka04u000000HcRc_0EM700000004wxH.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRc_0EM700000004wxH.png
rename to docs/kb/auditor/0-images/ka04u000000HcRc_0EM700000004wxH.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRc_0EM700000004wxM.png b/docs/kb/auditor/0-images/ka04u000000HcRc_0EM700000004wxM.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRc_0EM700000004wxM.png
rename to docs/kb/auditor/0-images/ka04u000000HcRc_0EM700000004wxM.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRc_0EM700000004wxR.png b/docs/kb/auditor/0-images/ka04u000000HcRc_0EM700000004wxR.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRc_0EM700000004wxR.png
rename to docs/kb/auditor/0-images/ka04u000000HcRc_0EM700000004wxR.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRc_0EM7000000054jS.png b/docs/kb/auditor/0-images/ka04u000000HcRc_0EM7000000054jS.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRc_0EM7000000054jS.png
rename to docs/kb/auditor/0-images/ka04u000000HcRc_0EM7000000054jS.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRc_0EM7000000054jX.png b/docs/kb/auditor/0-images/ka04u000000HcRc_0EM7000000054jX.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRc_0EM7000000054jX.png
rename to docs/kb/auditor/0-images/ka04u000000HcRc_0EM7000000054jX.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRf_0EM70000000xMZN.png b/docs/kb/auditor/0-images/ka04u000000HcRf_0EM70000000xMZN.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRf_0EM70000000xMZN.png
rename to docs/kb/auditor/0-images/ka04u000000HcRf_0EM70000000xMZN.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRf_0EM70000000xMZS.png b/docs/kb/auditor/0-images/ka04u000000HcRf_0EM70000000xMZS.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRf_0EM70000000xMZS.png
rename to docs/kb/auditor/0-images/ka04u000000HcRf_0EM70000000xMZS.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRf_0EM70000000xMZc.png b/docs/kb/auditor/0-images/ka04u000000HcRf_0EM70000000xMZc.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRf_0EM70000000xMZc.png
rename to docs/kb/auditor/0-images/ka04u000000HcRf_0EM70000000xMZc.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRf_0EM70000000xMZr.png b/docs/kb/auditor/0-images/ka04u000000HcRf_0EM70000000xMZr.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRf_0EM70000000xMZr.png
rename to docs/kb/auditor/0-images/ka04u000000HcRf_0EM70000000xMZr.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRf_0EM70000000xMZw.png b/docs/kb/auditor/0-images/ka04u000000HcRf_0EM70000000xMZw.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRf_0EM70000000xMZw.png
rename to docs/kb/auditor/0-images/ka04u000000HcRf_0EM70000000xMZw.png
diff --git a/docs/kb/auditor/images/ka04u000000HcRw_0EM700000008Dtg.png b/docs/kb/auditor/0-images/ka04u000000HcRw_0EM700000008Dtg.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcRw_0EM700000008Dtg.png
rename to docs/kb/auditor/0-images/ka04u000000HcRw_0EM700000008Dtg.png
diff --git a/docs/kb/auditor/images/ka04u000000HcS0_0EM700000005Cwt.png b/docs/kb/auditor/0-images/ka04u000000HcS0_0EM700000005Cwt.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcS0_0EM700000005Cwt.png
rename to docs/kb/auditor/0-images/ka04u000000HcS0_0EM700000005Cwt.png
diff --git a/docs/kb/auditor/images/ka04u000000HcS1_0EM700000007Jf8.png b/docs/kb/auditor/0-images/ka04u000000HcS1_0EM700000007Jf8.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcS1_0EM700000007Jf8.png
rename to docs/kb/auditor/0-images/ka04u000000HcS1_0EM700000007Jf8.png
diff --git a/docs/kb/auditor/images/ka04u000000HcS1_0EM700000007JfD.png b/docs/kb/auditor/0-images/ka04u000000HcS1_0EM700000007JfD.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcS1_0EM700000007JfD.png
rename to docs/kb/auditor/0-images/ka04u000000HcS1_0EM700000007JfD.png
diff --git a/docs/kb/auditor/images/ka04u000000HcS3_0EM700000005HCR.png b/docs/kb/auditor/0-images/ka04u000000HcS3_0EM700000005HCR.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcS3_0EM700000005HCR.png
rename to docs/kb/auditor/0-images/ka04u000000HcS3_0EM700000005HCR.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSG_0EM7000000054Pc.png b/docs/kb/auditor/0-images/ka04u000000HcSG_0EM7000000054Pc.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSG_0EM7000000054Pc.png
rename to docs/kb/auditor/0-images/ka04u000000HcSG_0EM7000000054Pc.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSG_0EM7000000054Ph.png b/docs/kb/auditor/0-images/ka04u000000HcSG_0EM7000000054Ph.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSG_0EM7000000054Ph.png
rename to docs/kb/auditor/0-images/ka04u000000HcSG_0EM7000000054Ph.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSG_0EM7000000054Pm.png b/docs/kb/auditor/0-images/ka04u000000HcSG_0EM7000000054Pm.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSG_0EM7000000054Pm.png
rename to docs/kb/auditor/0-images/ka04u000000HcSG_0EM7000000054Pm.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSG_0EM700000005pJq.png b/docs/kb/auditor/0-images/ka04u000000HcSG_0EM700000005pJq.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSG_0EM700000005pJq.png
rename to docs/kb/auditor/0-images/ka04u000000HcSG_0EM700000005pJq.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSR_0EM7000000053Be.png b/docs/kb/auditor/0-images/ka04u000000HcSR_0EM7000000053Be.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSR_0EM7000000053Be.png
rename to docs/kb/auditor/0-images/ka04u000000HcSR_0EM7000000053Be.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSR_0EM7000000053Bj.png b/docs/kb/auditor/0-images/ka04u000000HcSR_0EM7000000053Bj.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSR_0EM7000000053Bj.png
rename to docs/kb/auditor/0-images/ka04u000000HcSR_0EM7000000053Bj.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSR_0EM7000000053Bo.png b/docs/kb/auditor/0-images/ka04u000000HcSR_0EM7000000053Bo.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSR_0EM7000000053Bo.png
rename to docs/kb/auditor/0-images/ka04u000000HcSR_0EM7000000053Bo.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSU_0EM700000006Hfg.png b/docs/kb/auditor/0-images/ka04u000000HcSU_0EM700000006Hfg.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSU_0EM700000006Hfg.png
rename to docs/kb/auditor/0-images/ka04u000000HcSU_0EM700000006Hfg.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSU_0EM700000006Hfl.png b/docs/kb/auditor/0-images/ka04u000000HcSU_0EM700000006Hfl.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSU_0EM700000006Hfl.png
rename to docs/kb/auditor/0-images/ka04u000000HcSU_0EM700000006Hfl.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSZ_0EM700000006XV3.png b/docs/kb/auditor/0-images/ka04u000000HcSZ_0EM700000006XV3.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSZ_0EM700000006XV3.png
rename to docs/kb/auditor/0-images/ka04u000000HcSZ_0EM700000006XV3.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSZ_0EM700000006XV8.png b/docs/kb/auditor/0-images/ka04u000000HcSZ_0EM700000006XV8.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSZ_0EM700000006XV8.png
rename to docs/kb/auditor/0-images/ka04u000000HcSZ_0EM700000006XV8.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSZ_0EM700000006XVD.png b/docs/kb/auditor/0-images/ka04u000000HcSZ_0EM700000006XVD.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSZ_0EM700000006XVD.png
rename to docs/kb/auditor/0-images/ka04u000000HcSZ_0EM700000006XVD.png
diff --git a/docs/kb/auditor/images/ka04u000000HcSn_0EM700000005hNk.png b/docs/kb/auditor/0-images/ka04u000000HcSn_0EM700000005hNk.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcSn_0EM700000005hNk.png
rename to docs/kb/auditor/0-images/ka04u000000HcSn_0EM700000005hNk.png
diff --git a/docs/kb/auditor/images/ka04u000000HcT2_0EM700000005kEC.png b/docs/kb/auditor/0-images/ka04u000000HcT2_0EM700000005kEC.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcT2_0EM700000005kEC.png
rename to docs/kb/auditor/0-images/ka04u000000HcT2_0EM700000005kEC.png
diff --git a/docs/kb/auditor/images/ka04u000000HcT5_0EM700000008DPW.png b/docs/kb/auditor/0-images/ka04u000000HcT5_0EM700000008DPW.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcT5_0EM700000008DPW.png
rename to docs/kb/auditor/0-images/ka04u000000HcT5_0EM700000008DPW.png
diff --git a/docs/kb/auditor/images/ka04u000000HcT5_0EM700000008DPb.png b/docs/kb/auditor/0-images/ka04u000000HcT5_0EM700000008DPb.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcT5_0EM700000008DPb.png
rename to docs/kb/auditor/0-images/ka04u000000HcT5_0EM700000008DPb.png
diff --git a/docs/kb/auditor/images/ka04u000000HcT5_0EM700000008DPg.png b/docs/kb/auditor/0-images/ka04u000000HcT5_0EM700000008DPg.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcT5_0EM700000008DPg.png
rename to docs/kb/auditor/0-images/ka04u000000HcT5_0EM700000008DPg.png
diff --git a/docs/kb/auditor/images/ka04u000000HcTw_0EM700000005BrO.png b/docs/kb/auditor/0-images/ka04u000000HcTw_0EM700000005BrO.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcTw_0EM700000005BrO.png
rename to docs/kb/auditor/0-images/ka04u000000HcTw_0EM700000005BrO.png
diff --git a/docs/kb/auditor/images/ka04u000000HcTw_0EM700000005BrT.png b/docs/kb/auditor/0-images/ka04u000000HcTw_0EM700000005BrT.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcTw_0EM700000005BrT.png
rename to docs/kb/auditor/0-images/ka04u000000HcTw_0EM700000005BrT.png
diff --git a/docs/kb/auditor/images/ka04u000000HcTw_0EM700000005BrY.png b/docs/kb/auditor/0-images/ka04u000000HcTw_0EM700000005BrY.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcTw_0EM700000005BrY.png
rename to docs/kb/auditor/0-images/ka04u000000HcTw_0EM700000005BrY.png
diff --git a/docs/kb/auditor/images/ka04u000000HcTz_0EM700000005AFx.png b/docs/kb/auditor/0-images/ka04u000000HcTz_0EM700000005AFx.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcTz_0EM700000005AFx.png
rename to docs/kb/auditor/0-images/ka04u000000HcTz_0EM700000005AFx.png
diff --git a/docs/kb/auditor/images/ka04u000000HcU6_0EM7000000054Ba.png b/docs/kb/auditor/0-images/ka04u000000HcU6_0EM7000000054Ba.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcU6_0EM7000000054Ba.png
rename to docs/kb/auditor/0-images/ka04u000000HcU6_0EM7000000054Ba.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUL_0EM7000000053hV.png b/docs/kb/auditor/0-images/ka04u000000HcUL_0EM7000000053hV.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUL_0EM7000000053hV.png
rename to docs/kb/auditor/0-images/ka04u000000HcUL_0EM7000000053hV.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUO_0EM7000000052im.png b/docs/kb/auditor/0-images/ka04u000000HcUO_0EM7000000052im.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUO_0EM7000000052im.png
rename to docs/kb/auditor/0-images/ka04u000000HcUO_0EM7000000052im.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUO_0EM7000000052ir.png b/docs/kb/auditor/0-images/ka04u000000HcUO_0EM7000000052ir.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUO_0EM7000000052ir.png
rename to docs/kb/auditor/0-images/ka04u000000HcUO_0EM7000000052ir.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUT_0EM7000000052iw.png b/docs/kb/auditor/0-images/ka04u000000HcUT_0EM7000000052iw.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUT_0EM7000000052iw.png
rename to docs/kb/auditor/0-images/ka04u000000HcUT_0EM7000000052iw.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUT_0EM7000000052jG.png b/docs/kb/auditor/0-images/ka04u000000HcUT_0EM7000000052jG.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUT_0EM7000000052jG.png
rename to docs/kb/auditor/0-images/ka04u000000HcUT_0EM7000000052jG.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUW_0EM700000004x0B.png b/docs/kb/auditor/0-images/ka04u000000HcUW_0EM700000004x0B.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUW_0EM700000004x0B.png
rename to docs/kb/auditor/0-images/ka04u000000HcUW_0EM700000004x0B.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUb_0EM7000000051QD.png b/docs/kb/auditor/0-images/ka04u000000HcUb_0EM7000000051QD.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUb_0EM7000000051QD.png
rename to docs/kb/auditor/0-images/ka04u000000HcUb_0EM7000000051QD.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUb_0EM7000000051QI.png b/docs/kb/auditor/0-images/ka04u000000HcUb_0EM7000000051QI.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUb_0EM7000000051QI.png
rename to docs/kb/auditor/0-images/ka04u000000HcUb_0EM7000000051QI.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUb_0EM7000000051QN.png b/docs/kb/auditor/0-images/ka04u000000HcUb_0EM7000000051QN.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUb_0EM7000000051QN.png
rename to docs/kb/auditor/0-images/ka04u000000HcUb_0EM7000000051QN.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUd_0EM7000000051O7.png b/docs/kb/auditor/0-images/ka04u000000HcUd_0EM7000000051O7.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUd_0EM7000000051O7.png
rename to docs/kb/auditor/0-images/ka04u000000HcUd_0EM7000000051O7.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUd_0EM7000000051OC.png b/docs/kb/auditor/0-images/ka04u000000HcUd_0EM7000000051OC.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUd_0EM7000000051OC.png
rename to docs/kb/auditor/0-images/ka04u000000HcUd_0EM7000000051OC.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUe_0EM7000000050xL.png b/docs/kb/auditor/0-images/ka04u000000HcUe_0EM7000000050xL.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUe_0EM7000000050xL.png
rename to docs/kb/auditor/0-images/ka04u000000HcUe_0EM7000000050xL.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUe_0EM7000000050xQ.png b/docs/kb/auditor/0-images/ka04u000000HcUe_0EM7000000050xQ.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUe_0EM7000000050xQ.png
rename to docs/kb/auditor/0-images/ka04u000000HcUe_0EM7000000050xQ.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUi_0EM700000004xfn.png b/docs/kb/auditor/0-images/ka04u000000HcUi_0EM700000004xfn.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUi_0EM700000004xfn.png
rename to docs/kb/auditor/0-images/ka04u000000HcUi_0EM700000004xfn.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUi_0EM700000004xfx.png b/docs/kb/auditor/0-images/ka04u000000HcUi_0EM700000004xfx.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUi_0EM700000004xfx.png
rename to docs/kb/auditor/0-images/ka04u000000HcUi_0EM700000004xfx.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUi_0EM700000004xg2.png b/docs/kb/auditor/0-images/ka04u000000HcUi_0EM700000004xg2.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUi_0EM700000004xg2.png
rename to docs/kb/auditor/0-images/ka04u000000HcUi_0EM700000004xg2.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUi_0EM700000004xg7.png b/docs/kb/auditor/0-images/ka04u000000HcUi_0EM700000004xg7.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUi_0EM700000004xg7.png
rename to docs/kb/auditor/0-images/ka04u000000HcUi_0EM700000004xg7.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUp_0EM700000004xfs.png b/docs/kb/auditor/0-images/ka04u000000HcUp_0EM700000004xfs.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUp_0EM700000004xfs.png
rename to docs/kb/auditor/0-images/ka04u000000HcUp_0EM700000004xfs.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUv_0EM700000004wr4.png b/docs/kb/auditor/0-images/ka04u000000HcUv_0EM700000004wr4.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUv_0EM700000004wr4.png
rename to docs/kb/auditor/0-images/ka04u000000HcUv_0EM700000004wr4.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUw_0EM700000004wlz.png b/docs/kb/auditor/0-images/ka04u000000HcUw_0EM700000004wlz.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUw_0EM700000004wlz.png
rename to docs/kb/auditor/0-images/ka04u000000HcUw_0EM700000004wlz.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUw_0EM700000004wm4.png b/docs/kb/auditor/0-images/ka04u000000HcUw_0EM700000004wm4.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUw_0EM700000004wm4.png
rename to docs/kb/auditor/0-images/ka04u000000HcUw_0EM700000004wm4.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUx_0EM700000004wyo.png b/docs/kb/auditor/0-images/ka04u000000HcUx_0EM700000004wyo.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUx_0EM700000004wyo.png
rename to docs/kb/auditor/0-images/ka04u000000HcUx_0EM700000004wyo.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUx_0EM700000004wyt.png b/docs/kb/auditor/0-images/ka04u000000HcUx_0EM700000004wyt.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUx_0EM700000004wyt.png
rename to docs/kb/auditor/0-images/ka04u000000HcUx_0EM700000004wyt.png
diff --git a/docs/kb/auditor/images/ka04u000000HcUx_0EM700000004wyy.png b/docs/kb/auditor/0-images/ka04u000000HcUx_0EM700000004wyy.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcUx_0EM700000004wyy.png
rename to docs/kb/auditor/0-images/ka04u000000HcUx_0EM700000004wyy.png
diff --git a/docs/kb/auditor/images/ka04u000000HcVz_0EM700000004wyU.png b/docs/kb/auditor/0-images/ka04u000000HcVz_0EM700000004wyU.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcVz_0EM700000004wyU.png
rename to docs/kb/auditor/0-images/ka04u000000HcVz_0EM700000004wyU.png
diff --git a/docs/kb/auditor/images/ka04u000000HcW3_0EM700000004wqL.png b/docs/kb/auditor/0-images/ka04u000000HcW3_0EM700000004wqL.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcW3_0EM700000004wqL.png
rename to docs/kb/auditor/0-images/ka04u000000HcW3_0EM700000004wqL.png
diff --git a/docs/kb/auditor/images/ka04u000000HcW3_0EM700000004wqQ.png b/docs/kb/auditor/0-images/ka04u000000HcW3_0EM700000004wqQ.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcW3_0EM700000004wqQ.png
rename to docs/kb/auditor/0-images/ka04u000000HcW3_0EM700000004wqQ.png
diff --git a/docs/kb/auditor/images/ka04u000000HcW3_0EM700000004wqV.png b/docs/kb/auditor/0-images/ka04u000000HcW3_0EM700000004wqV.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcW3_0EM700000004wqV.png
rename to docs/kb/auditor/0-images/ka04u000000HcW3_0EM700000004wqV.png
diff --git a/docs/kb/auditor/images/ka04u000000HcW3_0EM700000004wqa.png b/docs/kb/auditor/0-images/ka04u000000HcW3_0EM700000004wqa.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcW3_0EM700000004wqa.png
rename to docs/kb/auditor/0-images/ka04u000000HcW3_0EM700000004wqa.png
diff --git a/docs/kb/auditor/images/ka04u000000HcW3_0EM700000004wqf.png b/docs/kb/auditor/0-images/ka04u000000HcW3_0EM700000004wqf.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcW3_0EM700000004wqf.png
rename to docs/kb/auditor/0-images/ka04u000000HcW3_0EM700000004wqf.png
diff --git a/docs/kb/auditor/images/ka04u000000HcW6_0EM700000004wzN.png b/docs/kb/auditor/0-images/ka04u000000HcW6_0EM700000004wzN.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcW6_0EM700000004wzN.png
rename to docs/kb/auditor/0-images/ka04u000000HcW6_0EM700000004wzN.png
diff --git a/docs/kb/auditor/images/ka04u000000HcWD_0EM700000004udF.png b/docs/kb/auditor/0-images/ka04u000000HcWD_0EM700000004udF.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcWD_0EM700000004udF.png
rename to docs/kb/auditor/0-images/ka04u000000HcWD_0EM700000004udF.png
diff --git a/docs/kb/auditor/images/ka04u000000HcWD_0EM700000004wzc.png b/docs/kb/auditor/0-images/ka04u000000HcWD_0EM700000004wzc.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcWD_0EM700000004wzc.png
rename to docs/kb/auditor/0-images/ka04u000000HcWD_0EM700000004wzc.png
diff --git a/docs/kb/auditor/images/ka04u000000HcWF_0EM700000004xUV.png b/docs/kb/auditor/0-images/ka04u000000HcWF_0EM700000004xUV.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcWF_0EM700000004xUV.png
rename to docs/kb/auditor/0-images/ka04u000000HcWF_0EM700000004xUV.png
diff --git a/docs/kb/auditor/images/ka04u000000HcWK_0EM700000004wmE.png b/docs/kb/auditor/0-images/ka04u000000HcWK_0EM700000004wmE.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcWK_0EM700000004wmE.png
rename to docs/kb/auditor/0-images/ka04u000000HcWK_0EM700000004wmE.png
diff --git a/docs/kb/auditor/images/ka04u000000HcWM_0EM700000004wyA.png b/docs/kb/auditor/0-images/ka04u000000HcWM_0EM700000004wyA.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcWM_0EM700000004wyA.png
rename to docs/kb/auditor/0-images/ka04u000000HcWM_0EM700000004wyA.png
diff --git a/docs/kb/auditor/images/ka04u000000HcWP_0EM700000004wxl.png b/docs/kb/auditor/0-images/ka04u000000HcWP_0EM700000004wxl.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcWP_0EM700000004wxl.png
rename to docs/kb/auditor/0-images/ka04u000000HcWP_0EM700000004wxl.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXR_0EM700000004vPE.png b/docs/kb/auditor/0-images/ka04u000000HcXR_0EM700000004vPE.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXR_0EM700000004vPE.png
rename to docs/kb/auditor/0-images/ka04u000000HcXR_0EM700000004vPE.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXR_0EM700000004vPJ.png b/docs/kb/auditor/0-images/ka04u000000HcXR_0EM700000004vPJ.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXR_0EM700000004vPJ.png
rename to docs/kb/auditor/0-images/ka04u000000HcXR_0EM700000004vPJ.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXR_0EM700000004vPO.png b/docs/kb/auditor/0-images/ka04u000000HcXR_0EM700000004vPO.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXR_0EM700000004vPO.png
rename to docs/kb/auditor/0-images/ka04u000000HcXR_0EM700000004vPO.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXR_0EM700000004vPT.png b/docs/kb/auditor/0-images/ka04u000000HcXR_0EM700000004vPT.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXR_0EM700000004vPT.png
rename to docs/kb/auditor/0-images/ka04u000000HcXR_0EM700000004vPT.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXR_0EM700000004vPn.png b/docs/kb/auditor/0-images/ka04u000000HcXR_0EM700000004vPn.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXR_0EM700000004vPn.png
rename to docs/kb/auditor/0-images/ka04u000000HcXR_0EM700000004vPn.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXR_0EM700000004vPs.png b/docs/kb/auditor/0-images/ka04u000000HcXR_0EM700000004vPs.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXR_0EM700000004vPs.png
rename to docs/kb/auditor/0-images/ka04u000000HcXR_0EM700000004vPs.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXd_0EM4u000002D96q.png b/docs/kb/auditor/0-images/ka04u000000HcXd_0EM4u000002D96q.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXd_0EM4u000002D96q.png
rename to docs/kb/auditor/0-images/ka04u000000HcXd_0EM4u000002D96q.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXd_0EM4u000002D975.png b/docs/kb/auditor/0-images/ka04u000000HcXd_0EM4u000002D975.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXd_0EM4u000002D975.png
rename to docs/kb/auditor/0-images/ka04u000000HcXd_0EM4u000002D975.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXd_0EM4u000002D97U.png b/docs/kb/auditor/0-images/ka04u000000HcXd_0EM4u000002D97U.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXd_0EM4u000002D97U.png
rename to docs/kb/auditor/0-images/ka04u000000HcXd_0EM4u000002D97U.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXd_0EM4u000002D97j.png b/docs/kb/auditor/0-images/ka04u000000HcXd_0EM4u000002D97j.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXd_0EM4u000002D97j.png
rename to docs/kb/auditor/0-images/ka04u000000HcXd_0EM4u000002D97j.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXh_0EM4u000002Qx7U.png b/docs/kb/auditor/0-images/ka04u000000HcXh_0EM4u000002Qx7U.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXh_0EM4u000002Qx7U.png
rename to docs/kb/auditor/0-images/ka04u000000HcXh_0EM4u000002Qx7U.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXh_0EM4u000002Qx7Z.png b/docs/kb/auditor/0-images/ka04u000000HcXh_0EM4u000002Qx7Z.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXh_0EM4u000002Qx7Z.png
rename to docs/kb/auditor/0-images/ka04u000000HcXh_0EM4u000002Qx7Z.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXh_0EM4u000002Qx7t.png b/docs/kb/auditor/0-images/ka04u000000HcXh_0EM4u000002Qx7t.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXh_0EM4u000002Qx7t.png
rename to docs/kb/auditor/0-images/ka04u000000HcXh_0EM4u000002Qx7t.png
diff --git a/docs/kb/auditor/images/ka04u000000HcXh_0EM4u000002Qx8I.png b/docs/kb/auditor/0-images/ka04u000000HcXh_0EM4u000002Qx8I.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcXh_0EM4u000002Qx8I.png
rename to docs/kb/auditor/0-images/ka04u000000HcXh_0EM4u000002Qx8I.png
diff --git a/docs/kb/auditor/images/ka04u000000HcZ5_0EM0g000002CGLg.png b/docs/kb/auditor/0-images/ka04u000000HcZ5_0EM0g000002CGLg.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcZ5_0EM0g000002CGLg.png
rename to docs/kb/auditor/0-images/ka04u000000HcZ5_0EM0g000002CGLg.png
diff --git a/docs/kb/auditor/images/ka04u000000HcZ6_0EM4u000002P6Cl.png b/docs/kb/auditor/0-images/ka04u000000HcZ6_0EM4u000002P6Cl.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HcZ6_0EM4u000002P6Cl.png
rename to docs/kb/auditor/0-images/ka04u000000HcZ6_0EM4u000002P6Cl.png
diff --git a/docs/kb/auditor/images/ka04u000000HdDR_0EM4u0000084XpS.png b/docs/kb/auditor/0-images/ka04u000000HdDR_0EM4u0000084XpS.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdDR_0EM4u0000084XpS.png
rename to docs/kb/auditor/0-images/ka04u000000HdDR_0EM4u0000084XpS.png
diff --git a/docs/kb/auditor/images/ka04u000000HdES_0EM4u000002CO3k.png b/docs/kb/auditor/0-images/ka04u000000HdES_0EM4u000002CO3k.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdES_0EM4u000002CO3k.png
rename to docs/kb/auditor/0-images/ka04u000000HdES_0EM4u000002CO3k.png
diff --git a/docs/kb/auditor/images/ka04u000000HdEa_0EM4u000002CmYD.png b/docs/kb/auditor/0-images/ka04u000000HdEa_0EM4u000002CmYD.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdEa_0EM4u000002CmYD.png
rename to docs/kb/auditor/0-images/ka04u000000HdEa_0EM4u000002CmYD.png
diff --git a/docs/kb/auditor/images/ka04u000000HdEa_0EM4u000002CmYI.png b/docs/kb/auditor/0-images/ka04u000000HdEa_0EM4u000002CmYI.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdEa_0EM4u000002CmYI.png
rename to docs/kb/auditor/0-images/ka04u000000HdEa_0EM4u000002CmYI.png
diff --git a/docs/kb/auditor/images/ka04u000000HdEa_0EM4u000002CmYN.png b/docs/kb/auditor/0-images/ka04u000000HdEa_0EM4u000002CmYN.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdEa_0EM4u000002CmYN.png
rename to docs/kb/auditor/0-images/ka04u000000HdEa_0EM4u000002CmYN.png
diff --git a/docs/kb/auditor/images/ka04u000000HdEa_0EM4u000002CmYS.png b/docs/kb/auditor/0-images/ka04u000000HdEa_0EM4u000002CmYS.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdEa_0EM4u000002CmYS.png
rename to docs/kb/auditor/0-images/ka04u000000HdEa_0EM4u000002CmYS.png
diff --git a/docs/kb/auditor/images/ka04u000000HdEa_0EM4u000002CsNQ.png b/docs/kb/auditor/0-images/ka04u000000HdEa_0EM4u000002CsNQ.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdEa_0EM4u000002CsNQ.png
rename to docs/kb/auditor/0-images/ka04u000000HdEa_0EM4u000002CsNQ.png
diff --git a/docs/kb/auditor/images/ka04u000000HdFq_0EM4u0000052m0m.png b/docs/kb/auditor/0-images/ka04u000000HdFq_0EM4u0000052m0m.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdFq_0EM4u0000052m0m.png
rename to docs/kb/auditor/0-images/ka04u000000HdFq_0EM4u0000052m0m.png
diff --git a/docs/kb/auditor/images/ka04u000000HdFvAAK.jpeg b/docs/kb/auditor/0-images/ka04u000000HdFvAAK.jpeg
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdFvAAK.jpeg
rename to docs/kb/auditor/0-images/ka04u000000HdFvAAK.jpeg
diff --git a/docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084ozs.png b/docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084ozs.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084ozs.png
rename to docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084ozs.png
diff --git a/docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084ozx.png b/docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084ozx.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084ozx.png
rename to docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084ozx.png
diff --git a/docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p07.png b/docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p07.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p07.png
rename to docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p07.png
diff --git a/docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p0C.png b/docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p0C.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p0C.png
rename to docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p0C.png
diff --git a/docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p0D.png b/docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p0D.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p0D.png
rename to docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p0D.png
diff --git a/docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p0b.png b/docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p0b.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p0b.png
rename to docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p0b.png
diff --git a/docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p0l.png b/docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p0l.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p0l.png
rename to docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p0l.png
diff --git a/docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p0q.png b/docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p0q.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p0q.png
rename to docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p0q.png
diff --git a/docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p15.png b/docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p15.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000HdPU_0EM4u0000084p15.png
rename to docs/kb/auditor/0-images/ka04u000000HdPU_0EM4u0000084p15.png
diff --git a/docs/kb/auditor/images/ka04u000000Qmg4_0EM4u000007cgGr.png b/docs/kb/auditor/0-images/ka04u000000Qmg4_0EM4u000007cgGr.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000Qmg4_0EM4u000007cgGr.png
rename to docs/kb/auditor/0-images/ka04u000000Qmg4_0EM4u000007cgGr.png
diff --git a/docs/kb/auditor/images/ka04u000000Qmg4_0EM4u000007cgOC.png b/docs/kb/auditor/0-images/ka04u000000Qmg4_0EM4u000007cgOC.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000Qmg4_0EM4u000007cgOC.png
rename to docs/kb/auditor/0-images/ka04u000000Qmg4_0EM4u000007cgOC.png
diff --git a/docs/kb/auditor/images/ka04u000000Qmg4_0EM4u000007cgPy.png b/docs/kb/auditor/0-images/ka04u000000Qmg4_0EM4u000007cgPy.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000Qmg4_0EM4u000007cgPy.png
rename to docs/kb/auditor/0-images/ka04u000000Qmg4_0EM4u000007cgPy.png
diff --git a/docs/kb/auditor/images/ka04u000000wvtY_0EM4u000008pRVW.png b/docs/kb/auditor/0-images/ka04u000000wvtY_0EM4u000008pRVW.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000wvtY_0EM4u000008pRVW.png
rename to docs/kb/auditor/0-images/ka04u000000wvtY_0EM4u000008pRVW.png
diff --git a/docs/kb/auditor/images/ka04u000000wvy4_0EM4u000008LkB8.png b/docs/kb/auditor/0-images/ka04u000000wvy4_0EM4u000008LkB8.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000wvy4_0EM4u000008LkB8.png
rename to docs/kb/auditor/0-images/ka04u000000wvy4_0EM4u000008LkB8.png
diff --git a/docs/kb/auditor/images/ka04u000000wvzg_0EM4u000008pVor.png b/docs/kb/auditor/0-images/ka04u000000wvzg_0EM4u000008pVor.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000wvzg_0EM4u000008pVor.png
rename to docs/kb/auditor/0-images/ka04u000000wvzg_0EM4u000008pVor.png
diff --git a/docs/kb/auditor/images/ka04u000000wvzg_0EM4u000008pVow.png b/docs/kb/auditor/0-images/ka04u000000wvzg_0EM4u000008pVow.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000000wvzg_0EM4u000008pVow.png
rename to docs/kb/auditor/0-images/ka04u000000wvzg_0EM4u000008pVow.png
diff --git a/docs/kb/auditor/images/ka04u0000011688_0EM4u000008LCjZ.png b/docs/kb/auditor/0-images/ka04u0000011688_0EM4u000008LCjZ.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u0000011688_0EM4u000008LCjZ.png
rename to docs/kb/auditor/0-images/ka04u0000011688_0EM4u000008LCjZ.png
diff --git a/docs/kb/auditor/images/ka04u00000116G7_0EM4u000007ceka.png b/docs/kb/auditor/0-images/ka04u00000116G7_0EM4u000007ceka.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000116G7_0EM4u000007ceka.png
rename to docs/kb/auditor/0-images/ka04u00000116G7_0EM4u000007ceka.png
diff --git a/docs/kb/auditor/images/ka04u00000116G7_0EM4u000007cekk.png b/docs/kb/auditor/0-images/ka04u00000116G7_0EM4u000007cekk.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000116G7_0EM4u000007cekk.png
rename to docs/kb/auditor/0-images/ka04u00000116G7_0EM4u000007cekk.png
diff --git a/docs/kb/auditor/images/ka04u00000116GR_0EM4u000002PWPR.png b/docs/kb/auditor/0-images/ka04u00000116GR_0EM4u000002PWPR.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000116GR_0EM4u000002PWPR.png
rename to docs/kb/auditor/0-images/ka04u00000116GR_0EM4u000002PWPR.png
diff --git a/docs/kb/auditor/images/ka04u00000116Ju_0EM4u000008LKrz.png b/docs/kb/auditor/0-images/ka04u00000116Ju_0EM4u000008LKrz.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000116Ju_0EM4u000008LKrz.png
rename to docs/kb/auditor/0-images/ka04u00000116Ju_0EM4u000008LKrz.png
diff --git a/docs/kb/auditor/images/ka04u00000116MV_0EM4u000007cekk.png b/docs/kb/auditor/0-images/ka04u00000116MV_0EM4u000007cekk.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000116MV_0EM4u000007cekk.png
rename to docs/kb/auditor/0-images/ka04u00000116MV_0EM4u000007cekk.png
diff --git a/docs/kb/auditor/images/ka04u00000116R6_0EM0g000000hUdK.png b/docs/kb/auditor/0-images/ka04u00000116R6_0EM0g000000hUdK.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000116R6_0EM0g000000hUdK.png
rename to docs/kb/auditor/0-images/ka04u00000116R6_0EM0g000000hUdK.png
diff --git a/docs/kb/auditor/images/ka04u00000116gG_0EM4u000008LXT9.png b/docs/kb/auditor/0-images/ka04u00000116gG_0EM4u000008LXT9.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000116gG_0EM4u000008LXT9.png
rename to docs/kb/auditor/0-images/ka04u00000116gG_0EM4u000008LXT9.png
diff --git a/docs/kb/auditor/images/ka04u00000116iG_0EM4u000004bz9T.png b/docs/kb/auditor/0-images/ka04u00000116iG_0EM4u000004bz9T.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000116iG_0EM4u000004bz9T.png
rename to docs/kb/auditor/0-images/ka04u00000116iG_0EM4u000004bz9T.png
diff --git a/docs/kb/auditor/images/ka04u00000116xf_0EM4u000008Ljuv.png b/docs/kb/auditor/0-images/ka04u00000116xf_0EM4u000008Ljuv.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000116xf_0EM4u000008Ljuv.png
rename to docs/kb/auditor/0-images/ka04u00000116xf_0EM4u000008Ljuv.png
diff --git a/docs/kb/auditor/images/ka04u00000116zv_0EM4u000008Ll2v.png b/docs/kb/auditor/0-images/ka04u00000116zv_0EM4u000008Ll2v.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000116zv_0EM4u000008Ll2v.png
rename to docs/kb/auditor/0-images/ka04u00000116zv_0EM4u000008Ll2v.png
diff --git a/docs/kb/auditor/images/ka04u00000116zv_0EM4u000008LlzE.png b/docs/kb/auditor/0-images/ka04u00000116zv_0EM4u000008LlzE.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000116zv_0EM4u000008LlzE.png
rename to docs/kb/auditor/0-images/ka04u00000116zv_0EM4u000008LlzE.png
diff --git a/docs/kb/auditor/images/ka04u000001173i_0EM4u000008Liq9.png b/docs/kb/auditor/0-images/ka04u000001173i_0EM4u000008Liq9.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000001173i_0EM4u000008Liq9.png
rename to docs/kb/auditor/0-images/ka04u000001173i_0EM4u000008Liq9.png
diff --git a/docs/kb/auditor/images/ka04u000001173i_0EM4u000008LirC.png b/docs/kb/auditor/0-images/ka04u000001173i_0EM4u000008LirC.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000001173i_0EM4u000008LirC.png
rename to docs/kb/auditor/0-images/ka04u000001173i_0EM4u000008LirC.png
diff --git a/docs/kb/auditor/images/ka04u0000011776_0EM4u000008Ls7s.png b/docs/kb/auditor/0-images/ka04u0000011776_0EM4u000008Ls7s.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u0000011776_0EM4u000008Ls7s.png
rename to docs/kb/auditor/0-images/ka04u0000011776_0EM4u000008Ls7s.png
diff --git a/docs/kb/auditor/images/ka04u000001177u_0EM4u000008Lr6o.png b/docs/kb/auditor/0-images/ka04u000001177u_0EM4u000008Lr6o.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000001177u_0EM4u000008Lr6o.png
rename to docs/kb/auditor/0-images/ka04u000001177u_0EM4u000008Lr6o.png
diff --git a/docs/kb/auditor/images/ka04u000001179H_0EM4u000008Lt2y.png b/docs/kb/auditor/0-images/ka04u000001179H_0EM4u000008Lt2y.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u000001179H_0EM4u000008Lt2y.png
rename to docs/kb/auditor/0-images/ka04u000001179H_0EM4u000008Lt2y.png
diff --git a/docs/kb/auditor/images/ka04u00000117A1_0EM4u000008LuEC.png b/docs/kb/auditor/0-images/ka04u00000117A1_0EM4u000008LuEC.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117A1_0EM4u000008LuEC.png
rename to docs/kb/auditor/0-images/ka04u00000117A1_0EM4u000008LuEC.png
diff --git a/docs/kb/auditor/images/ka04u00000117Ay_0EM70000000tnyM.png b/docs/kb/auditor/0-images/ka04u00000117Ay_0EM70000000tnyM.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117Ay_0EM70000000tnyM.png
rename to docs/kb/auditor/0-images/ka04u00000117Ay_0EM70000000tnyM.png
diff --git a/docs/kb/auditor/images/ka04u00000117Ay_0EM70000000tnyW.png b/docs/kb/auditor/0-images/ka04u00000117Ay_0EM70000000tnyW.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117Ay_0EM70000000tnyW.png
rename to docs/kb/auditor/0-images/ka04u00000117Ay_0EM70000000tnyW.png
diff --git a/docs/kb/auditor/images/ka04u00000117HQ_0EM4u000008M035.png b/docs/kb/auditor/0-images/ka04u00000117HQ_0EM4u000008M035.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117HQ_0EM4u000008M035.png
rename to docs/kb/auditor/0-images/ka04u00000117HQ_0EM4u000008M035.png
diff --git a/docs/kb/auditor/images/ka04u00000117HW_0EM4u000008LwaA.png b/docs/kb/auditor/0-images/ka04u00000117HW_0EM4u000008LwaA.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117HW_0EM4u000008LwaA.png
rename to docs/kb/auditor/0-images/ka04u00000117HW_0EM4u000008LwaA.png
diff --git a/docs/kb/auditor/images/ka04u00000117L8_0EM4u000008LCum.png b/docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008LCum.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117L8_0EM4u000008LCum.png
rename to docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008LCum.png
diff --git a/docs/kb/auditor/images/ka04u00000117L8_0EM4u000008LCuw.png b/docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008LCuw.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117L8_0EM4u000008LCuw.png
rename to docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008LCuw.png
diff --git a/docs/kb/auditor/images/ka04u00000117L8_0EM4u000008LCv1.png b/docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008LCv1.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117L8_0EM4u000008LCv1.png
rename to docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008LCv1.png
diff --git a/docs/kb/auditor/images/ka04u00000117L8_0EM4u000008LCvL.png b/docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008LCvL.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117L8_0EM4u000008LCvL.png
rename to docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008LCvL.png
diff --git a/docs/kb/auditor/images/ka04u00000117L8_0EM4u000008LCvk.png b/docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008LCvk.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117L8_0EM4u000008LCvk.png
rename to docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008LCvk.png
diff --git a/docs/kb/auditor/images/ka04u00000117L8_0EM4u000008LCwE.png b/docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008LCwE.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117L8_0EM4u000008LCwE.png
rename to docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008LCwE.png
diff --git a/docs/kb/auditor/images/ka04u00000117L8_0EM4u000008M2Tz.png b/docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008M2Tz.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117L8_0EM4u000008M2Tz.png
rename to docs/kb/auditor/0-images/ka04u00000117L8_0EM4u000008M2Tz.png
diff --git a/docs/kb/auditor/images/ka04u00000117TM_0EM4u000008M6Wx.png b/docs/kb/auditor/0-images/ka04u00000117TM_0EM4u000008M6Wx.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117TM_0EM4u000008M6Wx.png
rename to docs/kb/auditor/0-images/ka04u00000117TM_0EM4u000008M6Wx.png
diff --git a/docs/kb/auditor/images/ka04u00000117UP_0EM4u000008M7Sw.png b/docs/kb/auditor/0-images/ka04u00000117UP_0EM4u000008M7Sw.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117UP_0EM4u000008M7Sw.png
rename to docs/kb/auditor/0-images/ka04u00000117UP_0EM4u000008M7Sw.png
diff --git a/docs/kb/auditor/images/ka04u00000117Vm_0EM4u000008M8Pe.png b/docs/kb/auditor/0-images/ka04u00000117Vm_0EM4u000008M8Pe.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117Vm_0EM4u000008M8Pe.png
rename to docs/kb/auditor/0-images/ka04u00000117Vm_0EM4u000008M8Pe.png
diff --git a/docs/kb/auditor/images/ka04u00000117ad_0EM4u000008LFeu.png b/docs/kb/auditor/0-images/ka04u00000117ad_0EM4u000008LFeu.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117ad_0EM4u000008LFeu.png
rename to docs/kb/auditor/0-images/ka04u00000117ad_0EM4u000008LFeu.png
diff --git a/docs/kb/auditor/images/ka04u00000117bz_0EM0g000000hGVv.png b/docs/kb/auditor/0-images/ka04u00000117bz_0EM0g000000hGVv.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117bz_0EM0g000000hGVv.png
rename to docs/kb/auditor/0-images/ka04u00000117bz_0EM0g000000hGVv.png
diff --git a/docs/kb/auditor/images/ka04u00000117bz_0EM0g000000hGWo.png b/docs/kb/auditor/0-images/ka04u00000117bz_0EM0g000000hGWo.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117bz_0EM0g000000hGWo.png
rename to docs/kb/auditor/0-images/ka04u00000117bz_0EM0g000000hGWo.png
diff --git a/docs/kb/auditor/images/ka04u00000117bz_0EM4u000004dCnj.png b/docs/kb/auditor/0-images/ka04u00000117bz_0EM4u000004dCnj.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117bz_0EM4u000004dCnj.png
rename to docs/kb/auditor/0-images/ka04u00000117bz_0EM4u000004dCnj.png
diff --git a/docs/kb/auditor/images/ka04u00000117bz_0EM4u000008LKwz.png b/docs/kb/auditor/0-images/ka04u00000117bz_0EM4u000008LKwz.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117bz_0EM4u000008LKwz.png
rename to docs/kb/auditor/0-images/ka04u00000117bz_0EM4u000008LKwz.png
diff --git a/docs/kb/auditor/images/ka04u00000117bz_0EM70000000QIPr.png b/docs/kb/auditor/0-images/ka04u00000117bz_0EM70000000QIPr.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117bz_0EM70000000QIPr.png
rename to docs/kb/auditor/0-images/ka04u00000117bz_0EM70000000QIPr.png
diff --git a/docs/kb/auditor/images/ka04u00000117bz_0EM70000000QIQN.png b/docs/kb/auditor/0-images/ka04u00000117bz_0EM70000000QIQN.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117bz_0EM70000000QIQN.png
rename to docs/kb/auditor/0-images/ka04u00000117bz_0EM70000000QIQN.png
diff --git a/docs/kb/auditor/images/ka04u00000117cJ_0EM4u000008LXj2.png b/docs/kb/auditor/0-images/ka04u00000117cJ_0EM4u000008LXj2.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117cJ_0EM4u000008LXj2.png
rename to docs/kb/auditor/0-images/ka04u00000117cJ_0EM4u000008LXj2.png
diff --git a/docs/kb/auditor/images/ka04u00000117dv_0EM7000000050pb.png b/docs/kb/auditor/0-images/ka04u00000117dv_0EM7000000050pb.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117dv_0EM7000000050pb.png
rename to docs/kb/auditor/0-images/ka04u00000117dv_0EM7000000050pb.png
diff --git a/docs/kb/auditor/images/ka04u00000117fh_0EM4u000008MBTP.png b/docs/kb/auditor/0-images/ka04u00000117fh_0EM4u000008MBTP.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117fh_0EM4u000008MBTP.png
rename to docs/kb/auditor/0-images/ka04u00000117fh_0EM4u000008MBTP.png
diff --git a/docs/kb/auditor/images/ka04u00000117hE_0EM4u000007ccaS.png b/docs/kb/auditor/0-images/ka04u00000117hE_0EM4u000007ccaS.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117hE_0EM4u000007ccaS.png
rename to docs/kb/auditor/0-images/ka04u00000117hE_0EM4u000007ccaS.png
diff --git a/docs/kb/auditor/images/ka04u00000117hE_0EM4u000007ccac.png b/docs/kb/auditor/0-images/ka04u00000117hE_0EM4u000007ccac.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117hE_0EM4u000007ccac.png
rename to docs/kb/auditor/0-images/ka04u00000117hE_0EM4u000007ccac.png
diff --git a/docs/kb/auditor/images/ka04u00000117kD_0EM4u000008MHts.png b/docs/kb/auditor/0-images/ka04u00000117kD_0EM4u000008MHts.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117kD_0EM4u000008MHts.png
rename to docs/kb/auditor/0-images/ka04u00000117kD_0EM4u000008MHts.png
diff --git a/docs/kb/auditor/images/ka04u00000117kD_0EM4u000008MHuC.png b/docs/kb/auditor/0-images/ka04u00000117kD_0EM4u000008MHuC.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117kD_0EM4u000008MHuC.png
rename to docs/kb/auditor/0-images/ka04u00000117kD_0EM4u000008MHuC.png
diff --git a/docs/kb/auditor/images/ka04u00000117sv_0EM4u000008LXSz.png b/docs/kb/auditor/0-images/ka04u00000117sv_0EM4u000008LXSz.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117sv_0EM4u000008LXSz.png
rename to docs/kb/auditor/0-images/ka04u00000117sv_0EM4u000008LXSz.png
diff --git a/docs/kb/auditor/images/ka04u00000117wO_0EM4u000008MQhR.png b/docs/kb/auditor/0-images/ka04u00000117wO_0EM4u000008MQhR.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117wO_0EM4u000008MQhR.png
rename to docs/kb/auditor/0-images/ka04u00000117wO_0EM4u000008MQhR.png
diff --git a/docs/kb/auditor/images/ka04u00000117wO_0EM4u000008MQmb.png b/docs/kb/auditor/0-images/ka04u00000117wO_0EM4u000008MQmb.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117wO_0EM4u000008MQmb.png
rename to docs/kb/auditor/0-images/ka04u00000117wO_0EM4u000008MQmb.png
diff --git a/docs/kb/auditor/images/ka04u00000117xM_0EM4u000002CKXg.png b/docs/kb/auditor/0-images/ka04u00000117xM_0EM4u000002CKXg.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117xM_0EM4u000002CKXg.png
rename to docs/kb/auditor/0-images/ka04u00000117xM_0EM4u000002CKXg.png
diff --git a/docs/kb/auditor/images/ka04u00000117xM_0EM4u000007qlPA.png b/docs/kb/auditor/0-images/ka04u00000117xM_0EM4u000007qlPA.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117xM_0EM4u000007qlPA.png
rename to docs/kb/auditor/0-images/ka04u00000117xM_0EM4u000007qlPA.png
diff --git a/docs/kb/auditor/images/ka04u00000117zS_0EM4u000008MT4S.png b/docs/kb/auditor/0-images/ka04u00000117zS_0EM4u000008MT4S.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000117zS_0EM4u000008MT4S.png
rename to docs/kb/auditor/0-images/ka04u00000117zS_0EM4u000008MT4S.png
diff --git a/docs/kb/auditor/images/ka04u00000118ES_0EM700000004udP.png b/docs/kb/auditor/0-images/ka04u00000118ES_0EM700000004udP.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000118ES_0EM700000004udP.png
rename to docs/kb/auditor/0-images/ka04u00000118ES_0EM700000004udP.png
diff --git a/docs/kb/auditor/images/ka04u00000118GJ_0EM4u000008MgWU.png b/docs/kb/auditor/0-images/ka04u00000118GJ_0EM4u000008MgWU.png
similarity index 100%
rename from docs/kb/auditor/images/ka04u00000118GJ_0EM4u000008MgWU.png
rename to docs/kb/auditor/0-images/ka04u00000118GJ_0EM4u000008MgWU.png
diff --git a/docs/kb/auditor/images/ka0Qk0000000ws1_0EM4u000008MMXd.png b/docs/kb/auditor/0-images/ka0Qk0000000ws1_0EM4u000008MMXd.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000000ws1_0EM4u000008MMXd.png
rename to docs/kb/auditor/0-images/ka0Qk0000000ws1_0EM4u000008MMXd.png
diff --git a/docs/kb/auditor/images/ka0Qk0000000ws1_0EM4u000008MMY1.png b/docs/kb/auditor/0-images/ka0Qk0000000ws1_0EM4u000008MMY1.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000000ws1_0EM4u000008MMY1.png
rename to docs/kb/auditor/0-images/ka0Qk0000000ws1_0EM4u000008MMY1.png
diff --git a/docs/kb/auditor/images/ka0Qk0000000ws1_0EM4u000008MMY6.png b/docs/kb/auditor/0-images/ka0Qk0000000ws1_0EM4u000008MMY6.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000000ws1_0EM4u000008MMY6.png
rename to docs/kb/auditor/0-images/ka0Qk0000000ws1_0EM4u000008MMY6.png
diff --git a/docs/kb/auditor/images/ka0Qk0000000ws1_0EM4u000008MMYB.png b/docs/kb/auditor/0-images/ka0Qk0000000ws1_0EM4u000008MMYB.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000000ws1_0EM4u000008MMYB.png
rename to docs/kb/auditor/0-images/ka0Qk0000000ws1_0EM4u000008MMYB.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001L8r_0EM4u000008MV3l.png b/docs/kb/auditor/0-images/ka0Qk0000001L8r_0EM4u000008MV3l.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001L8r_0EM4u000008MV3l.png
rename to docs/kb/auditor/0-images/ka0Qk0000001L8r_0EM4u000008MV3l.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001LLl_0EM4u000008MMJG.png b/docs/kb/auditor/0-images/ka0Qk0000001LLl_0EM4u000008MMJG.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001LLl_0EM4u000008MMJG.png
rename to docs/kb/auditor/0-images/ka0Qk0000001LLl_0EM4u000008MMJG.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001LLl_0EM4u000008MMJL.png b/docs/kb/auditor/0-images/ka0Qk0000001LLl_0EM4u000008MMJL.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001LLl_0EM4u000008MMJL.png
rename to docs/kb/auditor/0-images/ka0Qk0000001LLl_0EM4u000008MMJL.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001LQb_0EM4u000004dDVg.png b/docs/kb/auditor/0-images/ka0Qk0000001LQb_0EM4u000004dDVg.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001LQb_0EM4u000004dDVg.png
rename to docs/kb/auditor/0-images/ka0Qk0000001LQb_0EM4u000004dDVg.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001LQb_0EM4u000004dDVq.png b/docs/kb/auditor/0-images/ka0Qk0000001LQb_0EM4u000004dDVq.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001LQb_0EM4u000004dDVq.png
rename to docs/kb/auditor/0-images/ka0Qk0000001LQb_0EM4u000004dDVq.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001LQb_0EM4u000004dDVr.png b/docs/kb/auditor/0-images/ka0Qk0000001LQb_0EM4u000004dDVr.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001LQb_0EM4u000004dDVr.png
rename to docs/kb/auditor/0-images/ka0Qk0000001LQb_0EM4u000004dDVr.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001LQb_0EM4u000004dDVv.png b/docs/kb/auditor/0-images/ka0Qk0000001LQb_0EM4u000004dDVv.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001LQb_0EM4u000004dDVv.png
rename to docs/kb/auditor/0-images/ka0Qk0000001LQb_0EM4u000004dDVv.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001LaH_0EM4u000008M5Wm.png b/docs/kb/auditor/0-images/ka0Qk0000001LaH_0EM4u000008M5Wm.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001LaH_0EM4u000008M5Wm.png
rename to docs/kb/auditor/0-images/ka0Qk0000001LaH_0EM4u000008M5Wm.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001OrV_0EMQk000002Tph8.png b/docs/kb/auditor/0-images/ka0Qk0000001OrV_0EMQk000002Tph8.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001OrV_0EMQk000002Tph8.png
rename to docs/kb/auditor/0-images/ka0Qk0000001OrV_0EMQk000002Tph8.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001S2H_0EMQk000001wr0A.png b/docs/kb/auditor/0-images/ka0Qk0000001S2H_0EMQk000001wr0A.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001S2H_0EMQk000001wr0A.png
rename to docs/kb/auditor/0-images/ka0Qk0000001S2H_0EMQk000001wr0A.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001VD3_0EMQk000002dT5q.png b/docs/kb/auditor/0-images/ka0Qk0000001VD3_0EMQk000002dT5q.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001VD3_0EMQk000002dT5q.png
rename to docs/kb/auditor/0-images/ka0Qk0000001VD3_0EMQk000002dT5q.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001ZBp_0EMQk000002dUpt.png b/docs/kb/auditor/0-images/ka0Qk0000001ZBp_0EMQk000002dUpt.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001ZBp_0EMQk000002dUpt.png
rename to docs/kb/auditor/0-images/ka0Qk0000001ZBp_0EMQk000002dUpt.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001ZgT_0EM4u000008MF8u.png b/docs/kb/auditor/0-images/ka0Qk0000001ZgT_0EM4u000008MF8u.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001ZgT_0EM4u000008MF8u.png
rename to docs/kb/auditor/0-images/ka0Qk0000001ZgT_0EM4u000008MF8u.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001Zjh_0EMQk000002jqCb.png b/docs/kb/auditor/0-images/ka0Qk0000001Zjh_0EMQk000002jqCb.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001Zjh_0EMQk000002jqCb.png
rename to docs/kb/auditor/0-images/ka0Qk0000001Zjh_0EMQk000002jqCb.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001f7Z_0EM4u000002CQsV.png b/docs/kb/auditor/0-images/ka0Qk0000001f7Z_0EM4u000002CQsV.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001f7Z_0EM4u000002CQsV.png
rename to docs/kb/auditor/0-images/ka0Qk0000001f7Z_0EM4u000002CQsV.png
diff --git a/docs/kb/auditor/images/ka0Qk0000001hxN_0EMQk000002u2KX.png b/docs/kb/auditor/0-images/ka0Qk0000001hxN_0EMQk000002u2KX.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000001hxN_0EMQk000002u2KX.png
rename to docs/kb/auditor/0-images/ka0Qk0000001hxN_0EMQk000002u2KX.png
diff --git a/docs/kb/auditor/images/ka0Qk0000002jaX_0EMQk0000045bUT.png b/docs/kb/auditor/0-images/ka0Qk0000002jaX_0EMQk0000045bUT.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000002jaX_0EMQk0000045bUT.png
rename to docs/kb/auditor/0-images/ka0Qk0000002jaX_0EMQk0000045bUT.png
diff --git a/docs/kb/auditor/images/ka0Qk0000002kpx_0EMQk000003xxWz.png b/docs/kb/auditor/0-images/ka0Qk0000002kpx_0EMQk000003xxWz.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000002kpx_0EMQk000003xxWz.png
rename to docs/kb/auditor/0-images/ka0Qk0000002kpx_0EMQk000003xxWz.png
diff --git a/docs/kb/auditor/images/ka0Qk0000002slt_0EM0g000002BkNM.png b/docs/kb/auditor/0-images/ka0Qk0000002slt_0EM0g000002BkNM.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000002slt_0EM0g000002BkNM.png
rename to docs/kb/auditor/0-images/ka0Qk0000002slt_0EM0g000002BkNM.png
diff --git a/docs/kb/auditor/images/ka0Qk0000002slt_0EM0g000002BkO9.png b/docs/kb/auditor/0-images/ka0Qk0000002slt_0EM0g000002BkO9.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000002slt_0EM0g000002BkO9.png
rename to docs/kb/auditor/0-images/ka0Qk0000002slt_0EM0g000002BkO9.png
diff --git a/docs/kb/auditor/images/ka0Qk0000002slt_0EM4u000007chgj.png b/docs/kb/auditor/0-images/ka0Qk0000002slt_0EM4u000007chgj.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000002slt_0EM4u000007chgj.png
rename to docs/kb/auditor/0-images/ka0Qk0000002slt_0EM4u000007chgj.png
diff --git a/docs/kb/auditor/images/ka0Qk0000002uxN_0EM4u000008LHag.png b/docs/kb/auditor/0-images/ka0Qk0000002uxN_0EM4u000008LHag.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000002uxN_0EM4u000008LHag.png
rename to docs/kb/auditor/0-images/ka0Qk0000002uxN_0EM4u000008LHag.png
diff --git a/docs/kb/auditor/images/ka0Qk00000031Iv_0EM4u000008LafD.png b/docs/kb/auditor/0-images/ka0Qk00000031Iv_0EM4u000008LafD.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk00000031Iv_0EM4u000008LafD.png
rename to docs/kb/auditor/0-images/ka0Qk00000031Iv_0EM4u000008LafD.png
diff --git a/docs/kb/auditor/images/ka0Qk00000031Iv_0EM4u000008LafI.png b/docs/kb/auditor/0-images/ka0Qk00000031Iv_0EM4u000008LafI.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk00000031Iv_0EM4u000008LafI.png
rename to docs/kb/auditor/0-images/ka0Qk00000031Iv_0EM4u000008LafI.png
diff --git a/docs/kb/auditor/images/ka0Qk0000003W1l_0EMQk000003oywv.png b/docs/kb/auditor/0-images/ka0Qk0000003W1l_0EMQk000003oywv.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000003W1l_0EMQk000003oywv.png
rename to docs/kb/auditor/0-images/ka0Qk0000003W1l_0EMQk000003oywv.png
diff --git a/docs/kb/auditor/images/ka0Qk00000045if_0EM700000004wzI.png b/docs/kb/auditor/0-images/ka0Qk00000045if_0EM700000004wzI.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk00000045if_0EM700000004wzI.png
rename to docs/kb/auditor/0-images/ka0Qk00000045if_0EM700000004wzI.png
diff --git a/docs/kb/auditor/images/ka0Qk0000004pqL_0EM4u000008M4JN.png b/docs/kb/auditor/0-images/ka0Qk0000004pqL_0EM4u000008M4JN.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000004pqL_0EM4u000008M4JN.png
rename to docs/kb/auditor/0-images/ka0Qk0000004pqL_0EM4u000008M4JN.png
diff --git a/docs/kb/auditor/images/ka0Qk0000004pqL_0EM4u000008M4JS.png b/docs/kb/auditor/0-images/ka0Qk0000004pqL_0EM4u000008M4JS.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000004pqL_0EM4u000008M4JS.png
rename to docs/kb/auditor/0-images/ka0Qk0000004pqL_0EM4u000008M4JS.png
diff --git a/docs/kb/auditor/images/ka0Qk0000006sTx_0EMQk000008Iaq1.png b/docs/kb/auditor/0-images/ka0Qk0000006sTx_0EMQk000008Iaq1.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk0000006sTx_0EMQk000008Iaq1.png
rename to docs/kb/auditor/0-images/ka0Qk0000006sTx_0EMQk000008Iaq1.png
diff --git a/docs/kb/auditor/images/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3Qr.png b/docs/kb/auditor/0-images/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3Qr.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3Qr.png
rename to docs/kb/auditor/0-images/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3Qr.png
diff --git a/docs/kb/auditor/images/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3U5.png b/docs/kb/auditor/0-images/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3U5.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3U5.png
rename to docs/kb/auditor/0-images/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3U5.png
diff --git a/docs/kb/auditor/images/ka0Qk000000Bei5_0EMQk000008M3Qr.png b/docs/kb/auditor/0-images/ka0Qk000000Bei5_0EMQk000008M3Qr.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk000000Bei5_0EMQk000008M3Qr.png
rename to docs/kb/auditor/0-images/ka0Qk000000Bei5_0EMQk000008M3Qr.png
diff --git a/docs/kb/auditor/images/ka0Qk000000Bei5_0EMQk000008M3U5.png b/docs/kb/auditor/0-images/ka0Qk000000Bei5_0EMQk000008M3U5.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk000000Bei5_0EMQk000008M3U5.png
rename to docs/kb/auditor/0-images/ka0Qk000000Bei5_0EMQk000008M3U5.png
diff --git a/docs/kb/auditor/images/ka0Qk000000CoU5_0EM4u0000084Tco.png b/docs/kb/auditor/0-images/ka0Qk000000CoU5_0EM4u0000084Tco.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk000000CoU5_0EM4u0000084Tco.png
rename to docs/kb/auditor/0-images/ka0Qk000000CoU5_0EM4u0000084Tco.png
diff --git a/docs/kb/auditor/images/ka0Qk000000Csfl_0EM4u0000084TwA.png b/docs/kb/auditor/0-images/ka0Qk000000Csfl_0EM4u0000084TwA.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk000000Csfl_0EM4u0000084TwA.png
rename to docs/kb/auditor/0-images/ka0Qk000000Csfl_0EM4u0000084TwA.png
diff --git a/docs/kb/auditor/images/ka0Qk000000DRwr_0EM7000000051zm.png b/docs/kb/auditor/0-images/ka0Qk000000DRwr_0EM7000000051zm.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk000000DRwr_0EM7000000051zm.png
rename to docs/kb/auditor/0-images/ka0Qk000000DRwr_0EM7000000051zm.png
diff --git a/docs/kb/auditor/images/ka0Qk000000DbzR_0EM4u000002PbUM.png b/docs/kb/auditor/0-images/ka0Qk000000DbzR_0EM4u000002PbUM.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk000000DbzR_0EM4u000002PbUM.png
rename to docs/kb/auditor/0-images/ka0Qk000000DbzR_0EM4u000002PbUM.png
diff --git a/docs/kb/auditor/images/ka0Qk000000EAE1_0EM4u000008LFTc.png b/docs/kb/auditor/0-images/ka0Qk000000EAE1_0EM4u000008LFTc.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk000000EAE1_0EM4u000008LFTc.png
rename to docs/kb/auditor/0-images/ka0Qk000000EAE1_0EM4u000008LFTc.png
diff --git a/docs/kb/auditor/images/ka0Qk000000EIjS_0EMQk000005FPXt.png b/docs/kb/auditor/0-images/ka0Qk000000EIjS_0EMQk000005FPXt.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk000000EIjS_0EMQk000005FPXt.png
rename to docs/kb/auditor/0-images/ka0Qk000000EIjS_0EMQk000005FPXt.png
diff --git a/docs/kb/auditor/images/ka0Qk000000EIjS_0EMQk00000661ik.png b/docs/kb/auditor/0-images/ka0Qk000000EIjS_0EMQk00000661ik.png
similarity index 100%
rename from docs/kb/auditor/images/ka0Qk000000EIjS_0EMQk00000661ik.png
rename to docs/kb/auditor/0-images/ka0Qk000000EIjS_0EMQk00000661ik.png
diff --git a/docs/kb/auditor/images/ka40g0000004KSJ_0EM700000004udP.png b/docs/kb/auditor/0-images/ka40g0000004KSJ_0EM700000004udP.png
similarity index 100%
rename from docs/kb/auditor/images/ka40g0000004KSJ_0EM700000004udP.png
rename to docs/kb/auditor/0-images/ka40g0000004KSJ_0EM700000004udP.png
diff --git a/docs/kb/auditor/images/ka40g000000kAbd_0EM700000004wzI.png b/docs/kb/auditor/0-images/ka40g000000kAbd_0EM700000004wzI.png
similarity index 100%
rename from docs/kb/auditor/images/ka40g000000kAbd_0EM700000004wzI.png
rename to docs/kb/auditor/0-images/ka40g000000kAbd_0EM700000004wzI.png
diff --git a/docs/kb/auditor/images/servlet_image_1166f08ea416.png b/docs/kb/auditor/0-images/servlet_image_1166f08ea416.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_1166f08ea416.png
rename to docs/kb/auditor/0-images/servlet_image_1166f08ea416.png
diff --git a/docs/kb/auditor/images/servlet_image_31a741be3a3d.png b/docs/kb/auditor/0-images/servlet_image_31a741be3a3d.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_31a741be3a3d.png
rename to docs/kb/auditor/0-images/servlet_image_31a741be3a3d.png
diff --git a/docs/kb/auditor/images/servlet_image_3823966b1661.png b/docs/kb/auditor/0-images/servlet_image_3823966b1661.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_3823966b1661.png
rename to docs/kb/auditor/0-images/servlet_image_3823966b1661.png
diff --git a/docs/kb/auditor/images/servlet_image_427ba59f8bbf.png b/docs/kb/auditor/0-images/servlet_image_427ba59f8bbf.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_427ba59f8bbf.png
rename to docs/kb/auditor/0-images/servlet_image_427ba59f8bbf.png
diff --git a/docs/kb/auditor/images/servlet_image_5badb1d5b327.png b/docs/kb/auditor/0-images/servlet_image_5badb1d5b327.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_5badb1d5b327.png
rename to docs/kb/auditor/0-images/servlet_image_5badb1d5b327.png
diff --git a/docs/kb/auditor/images/servlet_image_61a97e6d04cc.png b/docs/kb/auditor/0-images/servlet_image_61a97e6d04cc.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_61a97e6d04cc.png
rename to docs/kb/auditor/0-images/servlet_image_61a97e6d04cc.png
diff --git a/docs/kb/auditor/images/servlet_image_69209af72eac.png b/docs/kb/auditor/0-images/servlet_image_69209af72eac.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_69209af72eac.png
rename to docs/kb/auditor/0-images/servlet_image_69209af72eac.png
diff --git a/docs/kb/auditor/images/servlet_image_69af0d1737a5.png b/docs/kb/auditor/0-images/servlet_image_69af0d1737a5.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_69af0d1737a5.png
rename to docs/kb/auditor/0-images/servlet_image_69af0d1737a5.png
diff --git a/docs/kb/auditor/images/servlet_image_94223e4b2a63.png b/docs/kb/auditor/0-images/servlet_image_94223e4b2a63.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_94223e4b2a63.png
rename to docs/kb/auditor/0-images/servlet_image_94223e4b2a63.png
diff --git a/docs/kb/auditor/images/servlet_image_a2750b9c5910.png b/docs/kb/auditor/0-images/servlet_image_a2750b9c5910.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_a2750b9c5910.png
rename to docs/kb/auditor/0-images/servlet_image_a2750b9c5910.png
diff --git a/docs/kb/auditor/images/servlet_image_a39f37f6c350.png b/docs/kb/auditor/0-images/servlet_image_a39f37f6c350.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_a39f37f6c350.png
rename to docs/kb/auditor/0-images/servlet_image_a39f37f6c350.png
diff --git a/docs/kb/auditor/images/servlet_image_a59a6a87d3a0.png b/docs/kb/auditor/0-images/servlet_image_a59a6a87d3a0.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_a59a6a87d3a0.png
rename to docs/kb/auditor/0-images/servlet_image_a59a6a87d3a0.png
diff --git a/docs/kb/auditor/images/servlet_image_b26ce25b201c.png b/docs/kb/auditor/0-images/servlet_image_b26ce25b201c.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_b26ce25b201c.png
rename to docs/kb/auditor/0-images/servlet_image_b26ce25b201c.png
diff --git a/docs/kb/auditor/images/servlet_image_b60fe6913b2e.png b/docs/kb/auditor/0-images/servlet_image_b60fe6913b2e.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_b60fe6913b2e.png
rename to docs/kb/auditor/0-images/servlet_image_b60fe6913b2e.png
diff --git a/docs/kb/auditor/images/servlet_image_b88c6cd43443.png b/docs/kb/auditor/0-images/servlet_image_b88c6cd43443.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_b88c6cd43443.png
rename to docs/kb/auditor/0-images/servlet_image_b88c6cd43443.png
diff --git a/docs/kb/auditor/images/servlet_image_bcb70814f4ea.png b/docs/kb/auditor/0-images/servlet_image_bcb70814f4ea.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_bcb70814f4ea.png
rename to docs/kb/auditor/0-images/servlet_image_bcb70814f4ea.png
diff --git a/docs/kb/auditor/images/servlet_image_c2e8b90bb7b7.png b/docs/kb/auditor/0-images/servlet_image_c2e8b90bb7b7.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_c2e8b90bb7b7.png
rename to docs/kb/auditor/0-images/servlet_image_c2e8b90bb7b7.png
diff --git a/docs/kb/auditor/images/servlet_image_cf580c3eff6f.png b/docs/kb/auditor/0-images/servlet_image_cf580c3eff6f.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_cf580c3eff6f.png
rename to docs/kb/auditor/0-images/servlet_image_cf580c3eff6f.png
diff --git a/docs/kb/auditor/images/servlet_image_d51a544506f7.png b/docs/kb/auditor/0-images/servlet_image_d51a544506f7.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_d51a544506f7.png
rename to docs/kb/auditor/0-images/servlet_image_d51a544506f7.png
diff --git a/docs/kb/auditor/images/servlet_image_dcd3919a2b21.png b/docs/kb/auditor/0-images/servlet_image_dcd3919a2b21.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_dcd3919a2b21.png
rename to docs/kb/auditor/0-images/servlet_image_dcd3919a2b21.png
diff --git a/docs/kb/auditor/images/servlet_image_df5aa01d204f.png b/docs/kb/auditor/0-images/servlet_image_df5aa01d204f.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_df5aa01d204f.png
rename to docs/kb/auditor/0-images/servlet_image_df5aa01d204f.png
diff --git a/docs/kb/auditor/images/servlet_image_e00b5dadcf89.png b/docs/kb/auditor/0-images/servlet_image_e00b5dadcf89.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_e00b5dadcf89.png
rename to docs/kb/auditor/0-images/servlet_image_e00b5dadcf89.png
diff --git a/docs/kb/auditor/images/servlet_image_ea6adfe5aae7.png b/docs/kb/auditor/0-images/servlet_image_ea6adfe5aae7.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_ea6adfe5aae7.png
rename to docs/kb/auditor/0-images/servlet_image_ea6adfe5aae7.png
diff --git a/docs/kb/auditor/images/servlet_image_ebe11c05eb6f.png b/docs/kb/auditor/0-images/servlet_image_ebe11c05eb6f.png
similarity index 100%
rename from docs/kb/auditor/images/servlet_image_ebe11c05eb6f.png
rename to docs/kb/auditor/0-images/servlet_image_ebe11c05eb6f.png
diff --git a/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-object-restore.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-object-restore.md
index a77f4c3db5..4ab113311d 100644
--- a/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-object-restore.md
+++ b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-object-restore.md
@@ -38,7 +38,7 @@ The Netwrix Active Directory Object Restore tool recovers removed Active Directo
 
 The account used for recovery and restore is the same account used for data collection in your Netwrix Auditor Active Directory monitoring plan.
 
-<div>![Active](./images/servlet_image_3823966b1661.png)</div>
+<div>![Active]./../0-images/servlet_image_3823966b1661.png)</div>
 
 > **NOTE:** This tool should **NOT** be used to revert the changes caused by raising the forest functional level. For additional information, refer to the following article: Object Restore for Active Directory.
 
diff --git a/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md
index 4fb1b28af0..9dd7ad971e 100644
--- a/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md
+++ b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md
@@ -58,11 +58,11 @@ Refer to the following steps to exclude OUs and user objects from the monitoring
 2. Select the relevant AD monitoring plan and click **Edit**.
 3. Select the data source and click **Edit data source**.
 
-![Edit data source](./images/ka0Qk000000EIjS_0EMQk00000661ik.png)
+![Edit data source]./../0-images/ka0Qk000000EIjS_0EMQk00000661ik.png)
 
 4. In the left pane, select the **Objects** tab. Select the **Exclude these objects** checkbox, then click **Add** to exclude objects from the monitoring scope. After adding the objects, click **Save & Close**.
 
-![Exclude these objects](./images/ka0Qk000000EIjS_0EMQk000005FPXt.png)
+![Exclude these objects]./../0-images/ka0Qk000000EIjS_0EMQk000005FPXt.png)
 
 Refer to the following examples to learn about how the exclusion rules work for **Objects**. The same logic applies to the inclusion rules:
 
diff --git a/docs/kb/auditor/configuration-and-setup/file-server-auditing/symbolic-link-cannot-be-followed-error-in-file-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/symbolic-link-cannot-be-followed-error-in-file-server-monitoring-plan.md
index d6909b7429..1dc8cb075a 100644
--- a/docs/kb/auditor/configuration-and-setup/file-server-auditing/symbolic-link-cannot-be-followed-error-in-file-server-monitoring-plan.md
+++ b/docs/kb/auditor/configuration-and-setup/file-server-auditing/symbolic-link-cannot-be-followed-error-in-file-server-monitoring-plan.md
@@ -52,7 +52,7 @@ Enable all symbolic link types.
 
     Once executed, you'll see the settings for symbolic links (enabled or disabled).
 
-    ![SymlinkEvaluation output](./images/servlet_image_3823966b1661.png)
+    ![SymlinkEvaluation output]./../0-images/servlet_image_3823966b1661.png)
 
 2. To enable a symlink type, run the following command:
 
diff --git a/docs/kb/auditor/configuration-and-setup/file-server-auditing/volume-shadow-copy-service-support-in-netwrix-auditor-for-file-servers.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/volume-shadow-copy-service-support-in-netwrix-auditor-for-file-servers.md
index 98fb46a650..0e606ec4c4 100644
--- a/docs/kb/auditor/configuration-and-setup/file-server-auditing/volume-shadow-copy-service-support-in-netwrix-auditor-for-file-servers.md
+++ b/docs/kb/auditor/configuration-and-setup/file-server-auditing/volume-shadow-copy-service-support-in-netwrix-auditor-for-file-servers.md
@@ -32,7 +32,7 @@ The **Volume Shadow Copy Service** (hereafter **VSS**) can be enabled via **Netw
 1. Navigate to **Managed Objects -> your_File_Servers_Managed_Object_name -> File Servers.**
 2. Click **Configure** next to **Advanced Settings** and select the **Enable file versioning and rollback capabilities (based on Volume Shadow Copy).**
 
-![User-added image](./images/ka04u000000HcNV_0EM700000007LkF.png)
+![User-added image]./../0-images/ka04u000000HcNV_0EM700000007LkF.png)
 
 ## Where Shadow Copy data is stored
 
diff --git a/docs/kb/auditor/configuration-and-setup/file-server-auditing/what-is-sessionid-in-netwrix-auditor-for-file-servers.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/what-is-sessionid-in-netwrix-auditor-for-file-servers.md
index 687909607f..8a0c895fe1 100644
--- a/docs/kb/auditor/configuration-and-setup/file-server-auditing/what-is-sessionid-in-netwrix-auditor-for-file-servers.md
+++ b/docs/kb/auditor/configuration-and-setup/file-server-auditing/what-is-sessionid-in-netwrix-auditor-for-file-servers.md
@@ -33,7 +33,7 @@ This attribute is based on the user’s logon ID within the current session. Bei
 
 Session IDs are used to identify changes made by users with unique logon ID's. Session IDs are a combination of both the logon ID itself and the current session associated with this logon ID, to help identifying who made the change. Thus, session ID can be changed due to the fact that Netwrix would count that as a separate activity record too.
 
-![User-added image](./images/ka0Qk0000001OrV_0EMQk000002Tph8.png)
+![User-added image]./../0-images/ka0Qk0000001OrV_0EMQk000002Tph8.png)
 
 In addition, Netwrix Auditor generates the following attribute besides Session ID, associated with the object and reserved for internal use:
 
diff --git a/docs/kb/auditor/configuration-and-setup/general-configuration/ale-service-is-unable-to-start-during-installation.md b/docs/kb/auditor/configuration-and-setup/general-configuration/ale-service-is-unable-to-start-during-installation.md
index cde6545158..b2dc4d55b1 100644
--- a/docs/kb/auditor/configuration-and-setup/general-configuration/ale-service-is-unable-to-start-during-installation.md
+++ b/docs/kb/auditor/configuration-and-setup/general-configuration/ale-service-is-unable-to-start-during-installation.md
@@ -23,7 +23,7 @@ knowledge_article_id: kA00g000000H9YCCA0
 
 During installation of NetWrix Account Lockout Examiner on **Windows 2003**, a "Service 'NetWrix Account Lockout Examiner' (ALService) failed to start" message is received that the service cannot be started due to insufficient permissions. The account in use is a domain admin.
 
-![User-added image](./images/ka04u000000HcRH_0EM700000004wmJ.png)
+![User-added image]./../0-images/ka04u000000HcRH_0EM700000004wmJ.png)
 
 ## Cause
 
diff --git a/docs/kb/auditor/configuration-and-setup/general-configuration/compression-service-does-not-appear-under-installed-programs-but-still-exists-in-the-services-overvi.md b/docs/kb/auditor/configuration-and-setup/general-configuration/compression-service-does-not-appear-under-installed-programs-but-still-exists-in-the-services-overvi.md
index bf3dd4bc10..ca45a87beb 100644
--- a/docs/kb/auditor/configuration-and-setup/general-configuration/compression-service-does-not-appear-under-installed-programs-but-still-exists-in-the-services-overvi.md
+++ b/docs/kb/auditor/configuration-and-setup/general-configuration/compression-service-does-not-appear-under-installed-programs-but-still-exists-in-the-services-overvi.md
@@ -38,7 +38,7 @@ You can manually delete the Service and its components. For that:
 
 1. Open the **Services** snap-in and open properties of the problematic service.
 2. Copy the full name of the service and the path to executable, for example, to a **Notepad** document.  
-   ![User-added image](./images/ka0Qk0000001hxN_0EMQk000002u2KX.png)
+   ![User-added image]./../0-images/ka0Qk0000001hxN_0EMQk000002u2KX.png)
 3. Run the command prompt as administrator and run the following command:
 
    ```bat
diff --git a/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-monitoring-of-local-accounts.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-monitoring-of-local-accounts.md
index c5e5c873cb..62c7d97a84 100644
--- a/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-monitoring-of-local-accounts.md
+++ b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-monitoring-of-local-accounts.md
@@ -29,7 +29,7 @@ Netwrix Account Lockout Examiner can be set to monitor local machine event logs
 5. In the next dialog box, select the **Domain Controller** radio button and enter the the name of workstation local events of which you want to monitor  
 6. Press the **OK** button. Press the **OK** button again.
 
-[![User-added image](./images/ka04u000000HcWP_0EM700000004wxl.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAbY&feoid=00N700000032Pj2&refid=0EM700000004wxl)
+[![User-added image]./../0-images/ka04u000000HcWP_0EM700000004wxl.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAbY&feoid=00N700000032Pj2&refid=0EM700000004wxl)
 
 **Note:** Make sure that the account used to run the Account Lockout Examiner service has administrative access to the machine you are adding.
 
diff --git a/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-netwrix-auditor-in-failover-mode.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-netwrix-auditor-in-failover-mode.md
index 8fd1bbe7de..0a461a8345 100644
--- a/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-netwrix-auditor-in-failover-mode.md
+++ b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-netwrix-auditor-in-failover-mode.md
@@ -36,7 +36,7 @@ Refer to the following steps to configure Netwrix Auditor in failover mode:
 
    > **NOTE:** If Netwrix Auditor is already installed on a physical machine, consider migrating it to a virtual box. Some vendors support "physical to VM" migration."
 
-2. Configure the Long-Term Archive (LTA) to be stored on a remote location, such as a shared iSCSI volume. Refer to the following Netwrix knowledge base article for instructions on how to move LTA to a new location: [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location)
+2. Configure the Long-Term Archive (LTA) to be stored on a remote location, such as a shared iSCSI volume. Refer to the following Netwrix knowledge base article for instructions on how to move LTA to a new location: [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location)
 
 3. For setting up backup and failover, ensure that the volume under LTA and Working Folder is redundant enough to survive failure.
 
@@ -60,7 +60,7 @@ For alternative backup and failover options, refer to the steps below.
 
 ## Related Articles
 
-- How to Move Long-Term Archive to a New Location: [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location)
+- How to Move Long-Term Archive to a New Location: [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location)
 
 
 
diff --git a/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-install-access-reviews.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-install-access-reviews.md
index 5829d0a57e..219714356b 100644
--- a/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-install-access-reviews.md
+++ b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-install-access-reviews.md
@@ -35,7 +35,7 @@ In case you're planning the on-premise deployment, click **On-premises Deploymen
 
 For the VM deployment, proceed with the **Virtual Appliance** option and select the suitable package. Netwrix Auditor Access Reviews will come preinstalled for the VM of your choice.
 
-![pI1UIaaJkT.png](./images/ka04u00000116Ju_0EM4u000008LKrz.png)
+![pI1UIaaJkT.png]./../0-images/ka04u00000116Ju_0EM4u000008LKrz.png)
 
 
 
diff --git a/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-properly-remove-auditor-components-prior-to-further-clear-installation.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-properly-remove-auditor-components-prior-to-further-clear-installation.md
index 9700df0a29..8e0100d20e 100644
--- a/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-properly-remove-auditor-components-prior-to-further-clear-installation.md
+++ b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-properly-remove-auditor-components-prior-to-further-clear-installation.md
@@ -53,7 +53,7 @@ In most cases, yes it does. However, for the proper uninstallation of all compre
 
 ### Related Article
 
-- [Migrating Auditor to New Server](/docs/kb/auditor/migrating-auditor-to-new-server)
+- [Migrating Auditor to New Server](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server)
 
 
 
diff --git a/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-repair-netwrix-auditor-installation.md b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-repair-netwrix-auditor-installation.md
index 3f545c6222..0743644ed5 100644
--- a/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-repair-netwrix-auditor-installation.md
+++ b/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-repair-netwrix-auditor-installation.md
@@ -33,11 +33,11 @@ How to repair a Netwrix Auditor installation in our environment?
 > Stop-Service -Displayname Netwrix*
 > ```
 
-1. Establish the Netwrix Auditor version and build you're currently running in your environment. Refer to the following article for additional information: [How to Find Out My Netwrix Auditor Version](/docs/kb/auditor/how-to-find-out-my-netwrix-auditor-version).
+1. Establish the Netwrix Auditor version and build you're currently running in your environment. Refer to the following article for additional information: [How to Find Out My Netwrix Auditor Version](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-find-out-my-netwrix-auditor-version).
 2. Proceed to your **My Products** page to download the executable for the corresponding version. Refer to the following link: [Netwrix — My Products](https://www.netwrix.com/my_products.html).
 3. Run the downloaded executable. Once the files are extracted, a setup screen will be prompted.
 
-   ![Install Netwrix Auditor setup screen](./images/ka04u00000117fh_0EM4u000008MBTP.png)
+   ![Install Netwrix Auditor setup screen]./../0-images/ka04u00000117fh_0EM4u000008MBTP.png)
 
 4. Select **Install** under **Install Netwrix Auditor**.
 5. Click **Next**, and select **Repair**.
@@ -47,7 +47,7 @@ How to repair a Netwrix Auditor installation in our environment?
 
 ## Related articles
 
-- [How to Find Out My Netwrix Auditor Version](/docs/kb/auditor/how-to-find-out-my-netwrix-auditor-version)
+- [How to Find Out My Netwrix Auditor Version](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-find-out-my-netwrix-auditor-version)
 
 
 
diff --git a/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/configure-microsoft-365-data-sources-to-use-proxy-server-settings.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/configure-microsoft-365-data-sources-to-use-proxy-server-settings.md
index e4923e0950..f54835d1a4 100644
--- a/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/configure-microsoft-365-data-sources-to-use-proxy-server-settings.md
+++ b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/configure-microsoft-365-data-sources-to-use-proxy-server-settings.md
@@ -41,7 +41,7 @@ Exchange Online relies on PowerShell gathering proxy settings from the network a
    netsh winhttp show proxy
    ```
 
-   ![netsh winhttp show proxy output](./images/ka0Qk0000000ws1_0EM4u000008MMY1.png)
+   ![netsh winhttp show proxy output]./../0-images/ka0Qk0000000ws1_0EM4u000008MMY1.png)
 
 2. If the system prompts **Direct settings**, configure the network adapter to use the correct proxy settings:
 
@@ -51,7 +51,7 @@ Exchange Online relies on PowerShell gathering proxy settings from the network a
 
    Replace the proxy server settings in the line with your actual settings.
 
-   ![netsh winhttp set proxy example](./images/ka0Qk0000000ws1_0EM4u000008MMY6.png)
+   ![netsh winhttp set proxy example]./../0-images/ka0Qk0000000ws1_0EM4u000008MMY6.png)
 
 ### Microsoft Entra ID (formerly Azure AD)
 
@@ -84,11 +84,11 @@ After editing:
 
 Before editing image:
 
-![Before editing configuration](./images/ka0Qk0000000ws1_0EM4u000008MMXd.png)
+![Before editing configuration]./../0-images/ka0Qk0000000ws1_0EM4u000008MMXd.png)
 
 After editing image:
 
-![After editing configuration](./images/ka0Qk0000000ws1_0EM4u000008MMYB.png)
+![After editing configuration]./../0-images/ka0Qk0000000ws1_0EM4u000008MMYB.png)
 
 Replace `***.***.***.***:port` with your actual proxy settings.
 
diff --git a/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/connection-to-microsoft-365-tenant-in-netwrix-auditor-completes-with-error-validating-your-account-s.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/connection-to-microsoft-365-tenant-in-netwrix-auditor-completes-with-error-validating-your-account-s.md
index 08589dcf16..0566589aa0 100644
--- a/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/connection-to-microsoft-365-tenant-in-netwrix-auditor-completes-with-error-validating-your-account-s.md
+++ b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/connection-to-microsoft-365-tenant-in-netwrix-auditor-completes-with-error-validating-your-account-s.md
@@ -45,7 +45,7 @@ Make sure you provided the same parameters in a Netwrix Auditor monitoring plan
 1. **Tenant name** in Netwrix should equal the `Directory (tenant) ID` in Microsoft Office 365 Admin center.
 2. **Modern authentication application ID** should equal `Application (client) ID` in Microsoft Office 365 Admin center.
 
-![00371273 O365 Tenant.PNG](./images/ka04u00000117A1_0EM4u000008LuEC.png)
+![00371273 O365 Tenant.PNG]./../0-images/ka04u00000117A1_0EM4u000008LuEC.png)
 
 For additional information on configuring Office 365 tenant, refer to the following article: Microsoft 365. Select the data source you want to audit and review the corresponding section.
 
diff --git a/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/disable-multi-factor-authentication-for-microsoft-365-service-accounts.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/disable-multi-factor-authentication-for-microsoft-365-service-accounts.md
index a55329db65..f4cd0ded02 100644
--- a/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/disable-multi-factor-authentication-for-microsoft-365-service-accounts.md
+++ b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/disable-multi-factor-authentication-for-microsoft-365-service-accounts.md
@@ -46,7 +46,7 @@ To disable MFA for your data-collecting account in any Microsoft 365 source, use
      3. Select the service user to be used in the **Select excluded users and groups** window, and click **Select**.
      4. To complete the setup, click **Save** in the bottom left corner.
 
-     ![Exclude user from MFA policy](./images/ka0Qk0000001LLl_0EM4u000008MMJG.png)
+     ![Exclude user from MFA policy]./../0-images/ka0Qk0000001LLl_0EM4u000008MMJG.png)
 
    - To exclude an app from the MFA policy:
      1. Click the highlighted text under the **Target sources** section.
@@ -54,7 +54,7 @@ To disable MFA for your data-collecting account in any Microsoft 365 source, use
      3. Select the app to be used in the **Select excluded cloud apps** window, and click **Select**.
      4. To complete the setup, click **Save** in the bottom left corner.
 
-     ![Exclude app from MFA policy](./images/ka0Qk0000001LLl_0EM4u000008MMJL.png)
+     ![Exclude app from MFA policy]./../0-images/ka0Qk0000001LLl_0EM4u000008MMJL.png)
 
 Refer to the following articles for additional information on data-collecting account setup for your Microsoft 365 sources:
 
diff --git a/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant.md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant.md
index febd9975d8..728e593bd4 100644
--- a/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant.md
+++ b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant.md
@@ -44,7 +44,7 @@ To determine the actual number of licenses you need to purchase from Netwrix, do
 3. Enter your Office 365 account credentials when prompted and click **OK**.
 4. When the script completes, you will see the number of mailbox accounts for which you need to purchase licenses:
 
-![User-added image](./images/ka04u000000HcMr_0EM0g000000hNsh.png)
+![User-added image]./../0-images/ka04u000000HcMr_0EM0g000000hNsh.png)
 
 ## For MFA-enabled account
 
diff --git a/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/permission_manifests_for_auditing_office_365_and_microsoft_entra_id_(auditor_v10.0_and_older).md b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/permission_manifests_for_auditing_office_365_and_microsoft_entra_id_(auditor_v10.0_and_older).md
index a7a0415060..5bee28bf2c 100644
--- a/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/permission_manifests_for_auditing_office_365_and_microsoft_entra_id_(auditor_v10.0_and_older).md
+++ b/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/permission_manifests_for_auditing_office_365_and_microsoft_entra_id_(auditor_v10.0_and_older).md
@@ -32,7 +32,7 @@ This article contains permission manifests for Microsoft 365 and Microsoft Entra
 3. Select the app you would like to configure.
 4. In the left pane of the new **Overview** window, select the **Manifest** tab. You can either edit the manifest in the web-based manifest editor, or select **Download** to edit the manifest locally to **Upload** it to reapply it to your application.
 
-   ![Manifest tab in the Overview window](./images/servlet_image_31a741be3a3d.png)
+   ![Manifest tab in the Overview window]./../0-images/servlet_image_31a741be3a3d.png)
 
 5. After opening the manifest file, replace the contents of **requiredResourceAccess** with the data provided below.
 6. Once changes are introduced, save the manifest and grant administrator permissions in the **API Permissions** tab.
@@ -41,15 +41,15 @@ You can use the following screenshots for permissions reference:
 
 - **SharePoint Online**
 
-  ![SharePoint Online permissions](./images/servlet_image_b88c6cd43443.png)
+  ![SharePoint Online permissions]./../0-images/servlet_image_b88c6cd43443.png)
 
 - **Exchange Online**
 
-  ![Exchange Online permissions](./images/servlet_image_a59a6a87d3a0.png)
+  ![Exchange Online permissions]./../0-images/servlet_image_a59a6a87d3a0.png)
 
 - **Microsoft Entra ID**
 
-  ![Microsoft Entra ID permissions](./images/servlet_image_bcb70814f4ea.png)
+  ![Microsoft Entra ID permissions]./../0-images/servlet_image_bcb70814f4ea.png)
 
 ### Manifest for SharePoint Online
 
diff --git a/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/cannot-find-the-application-error-in-sharepoint-online-and-ms-teams-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/cannot-find-the-application-error-in-sharepoint-online-and-ms-teams-monitoring-plan.md
index d24050ae8a..b04a105e2e 100644
--- a/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/cannot-find-the-application-error-in-sharepoint-online-and-ms-teams-monitoring-plan.md
+++ b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/cannot-find-the-application-error-in-sharepoint-online-and-ms-teams-monitoring-plan.md
@@ -50,7 +50,7 @@ Cannot find the application.
 
 - Review the Application ID provided. You can find the Application ID of your app in the **Overview** page once you select the app in the **App registrations** section. Refer to the following Netwrix Auditor article for additional information on the initial Azure app setup: Netwrix Auditor — Permissions for SharePoint Online Auditing − Creating and registering a new app in Microsoft Entra ID ⸱ v10.6. For additional information on creating an app for Teams auditing, refer to the following Netwrix Auditor article: Netwrix Auditor — Permissions for Teams Auditing − Create and Register a New App in Microsoft Entra ID ⸱ v10.6.
 
-![SPOAppID](./images/ka0Qk0000001L8r_0EM4u000008MV3l.png)
+![SPOAppID]./../0-images/ka0Qk0000001L8r_0EM4u000008MV3l.png)
 
 - Review the app API permissions granted. You can either specify API permissions manually or use a manifest. Refer to the following Netwrix Auditor article for additional information on granting permissions: Netwrix Auditor — Permissions for SharePoint Online Auditing − Granting required permissions ⸱ v10.6. For additional information on permissions for Teams auditing, refer to the following Netwrix Auditor article: Netwrix Auditor — Permissions for Teams Auditing − Grant Required Permissions ⸱ v10.6.
 
diff --git a/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-application-deployment-for-ndc.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-application-deployment-for-ndc.md
index 070eb2d2f3..b6b8276c7c 100644
--- a/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-application-deployment-for-ndc.md
+++ b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-application-deployment-for-ndc.md
@@ -31,19 +31,19 @@ To enable the app you will need to add the app to the **App Catalog** then deplo
 1. Navigate to the **App Catalog** → **Site Contents** and ensure you are using the classic experience.
 2. Click **Add an app** and select `conceptClassifierApp`.
 
-![User-added image](./images/ka04u000000HcXd_0EM4u000002D96q.png)
+![User-added image]./../0-images/ka04u000000HcXd_0EM4u000002D96q.png)
 
 3. Click **Trust It** to accept the app permissions and allow the app to be installed into the App Catalog.  
-   ![User-added image](./images/ka04u000000HcXd_0EM4u000002D975.png)
+   ![User-added image]./../0-images/ka04u000000HcXd_0EM4u000002D975.png)
 4. Once the app has been added to the App Catalog, configure the deployment by hovering over the app then clicking on the ellipsis in the top right corner of the app and clicking **Deployment**.  
-   ![User-added image](./images/ka04u000000HcXd_0EM4u000002D97U.png)
+   ![User-added image]./../0-images/ka04u000000HcXd_0EM4u000002D97U.png)
 5. Select how to deploy the app to a combination of specific Sire Collections, by pats, and by a template. Click **OK**.
 
    **Note:** The default order of the page is to show the newest app first, so you should see the app as one of the first options (if you do not you can search for “conceptClassifierApp”):
 
 6. The app will then be scheduled for deployment to the chosen Site Collections. This can take a few minutes and on completion, `conceptClassifierApp` will appear in the Site Contents of these Site Collections.
 
-![User-added image](./images/ka04u000000HcXd_0EM4u000002D97j.png)
+![User-added image]./../0-images/ka04u000000HcXd_0EM4u000002D97j.png)
 
 7. To complete the setup, navigate to the **Site Collection** → **Site Contents** and select `conceptClassifierApp`. This will complete the installation of the app on the Site Collection and allow you to configure the writing of classifications (if licensed).
 
diff --git a/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-application-installation-for-netwrix-data-classification.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-application-installation-for-netwrix-data-classification.md
index 9b2967a7f7..1427305ba1 100644
--- a/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-application-installation-for-netwrix-data-classification.md
+++ b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-application-installation-for-netwrix-data-classification.md
@@ -32,22 +32,22 @@ The `conceptClassifierAppInstaller.exe` can be used to install or upgrade the `c
 
 Extract the files and run `conceptClassifierAppInstaller.exe`.
 
-![User-added image](./images/ka04u000000HcXh_0EM4u000002Qx7U.png)
+![User-added image]./../0-images/ka04u000000HcXh_0EM4u000002Qx7U.png)
 
 1. Click *next* after reading the wizard introduction and recommendations.
 
 Read and confirm that you accept the EULA and click *next*.
 
-![User-added image](./images/ka04u000000HcXh_0EM4u000002Qx7Z.png)
+![User-added image]./../0-images/ka04u000000HcXh_0EM4u000002Qx7Z.png)
 
 Specify connection details for your organization's app catalog (you may have more than one of these if you are working across multiple web applications; if so, you will need to run the installer once per app catalog).
 
-![User-added image](./images/ka04u000000HcXh_0EM4u000002Qx7t.png)
+![User-added image]./../0-images/ka04u000000HcXh_0EM4u000002Qx7t.png)
 
 Enter the location of the conceptSearching server (which must be installed onto a secure server with a secure (HTTPS) endpoint): in the case of SharePoint Online, the certificate used must be externally verifiable (from a trusted source).  
 Select the **Use SharePoint Online Login** checkbox if you want to use the new authentication method.
 
-![User-added image](./images/ka04u000000HcXh_0EM4u000002Qx8I.png)
+![User-added image]./../0-images/ka04u000000HcXh_0EM4u000002Qx8I.png)
 
 Please also note, the HTTPS binding in IIS should have the host header specified — in the case of the above example the host header would be `secure.conceptsearching.com`. To do this please follow these steps:
 
diff --git a/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/troubleshoot_sharepoint_serveron-premise_errors.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/troubleshoot_sharepoint_serveron-premise_errors.md
index 9872e6d1b7..2361b09397 100644
--- a/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/troubleshoot_sharepoint_serveron-premise_errors.md
+++ b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/troubleshoot_sharepoint_serveron-premise_errors.md
@@ -21,42 +21,42 @@ This is a reference list of articles on troubleshooting errors in SharePoint Ser
 
 ### Related Articles
 
-- [SharePoint Core Service Deployment Failed](/docs/kb/auditor/sharepoint-core-service-deployment-failed)
-- [Timeout Expired Error on SharePoint Core Service D](/docs/kb/auditor/timeout-expired-error-on-sharepoint-core-service-deployment)
-- [Event ID 1204 in Health Log](/docs/kb/auditor/event-id-1204-in-health-log)
-- [Event ID 1205 in Health Log](/docs/kb/auditor/event-id-1205-in-health-log)
-- [Error: Event ID 1206 in Health Log](/docs/kb/auditor/error-event-id-1206-in-health-log)
-- [Event ID 1208 in Health Log](/docs/kb/auditor/event-id-1208-in-health-log)
-- [Event ID 1209 in Health Log](/docs/kb/auditor/event-id-1209-in-health-log)
-- [Event ID 1210 in Health Log](/docs/kb/auditor/event-id-1210-in-health-log)
-- [Event ID 1214 in Health Log](/docs/kb/auditor/event-id-1214-in-health-log)
-- [Event ID 1223 in Health Log](/docs/kb/auditor/event-id-1223-in-health-log)
-- [Event ID 1225 in Health Log](/docs/kb/auditor/event-id-1225-in-health-log)
-- [Event ID 1236 in Health Log](/docs/kb/auditor/event-id-1236-in-health-log)
+- [SharePoint Core Service Deployment Failed](/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/sharepoint-core-service-deployment-failed)
+- [Timeout Expired Error on SharePoint Core Service D](/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/timeout-expired-error-on-sharepoint-core-service-deployment)
+- [Event ID 1204 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1204-in-health-log)
+- [Event ID 1205 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1205-in-health-log)
+- [Error: Event ID 1206 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/error-event-id-1206-in-health-log)
+- [Event ID 1208 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1208-in-health-log)
+- [Event ID 1209 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1209-in-health-log)
+- [Event ID 1210 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1210-in-health-log)
+- [Event ID 1214 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1214-in-health-log)
+- [Event ID 1223 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1223-in-health-log)
+- [Event ID 1225 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1225-in-health-log)
+- [Event ID 1236 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1236-in-health-log)
 - [Event ID 1237/1238 in Health Log](/docs/kb/auditor/event_id_12371238_in_health_log)
-- [Event ID 1239 in Health Log](/docs/kb/auditor/event-id-1239-in-health-log)
-- [Event ID 1240 in Health Log](/docs/kb/auditor/event-id-1240-in-health-log)
-- [Event ID 1241 in Health Log](/docs/kb/auditor/event-id-1241-in-health-log)
-- [Event ID 1242 in Health Log](/docs/kb/auditor/event-id-1242-in-health-log)
-- [Event ID 1243 in Health Log](/docs/kb/auditor/event-id-1243-in-health-log)
-- [Event ID 1244 in Health Log](/docs/kb/auditor/event-id-1244-in-health-log)
-- [Event ID 1245 in Health Log](/docs/kb/auditor/event-id-1245-in-health-log)
-- [Event ID 1249 in Health Log](/docs/kb/auditor/event-id-1249-in-health-log)
-- [Event ID 1250 in Health Log](/docs/kb/auditor/event-id-1250-in-health-log)
-- [Event ID 1251 - 1254, 1256 - 1258 in Health Log](/docs/kb/auditor/event-id-1251-1254-1256-1258-in-health-log)
-- [Event ID 1255 in Health Log](/docs/kb/auditor/event-id-1255-in-health-log)
-- [Event ID 1259 in Health Log](/docs/kb/auditor/event-id-1259-in-health-log)
-- [Event ID 1260 − 1266 in Health Log](/docs/kb/auditor/event-id-1260-1266-in-health-log)
-- [Event ID 1267 − 1273 in Health Log](/docs/kb/auditor/event-id-1267-1273-in-health-log)
-- [Event ID 1274 in Health Log](/docs/kb/auditor/event-id-1274-in-health-log)
-- [Event ID 1275 in Health Log](/docs/kb/auditor/event-id-1275-in-health-log)
-- [Event ID 1276 in Health Log](/docs/kb/auditor/event-id-1276-in-health-log)
-- [Event ID 1280 in Health Log](/docs/kb/auditor/event-id-1280-in-health-log)
-- [Event ID 1285 in Health Log](/docs/kb/auditor/event-id-1285-in-health-log)
-- [Event ID 1286 in Health Log](/docs/kb/auditor/event-id-1286-in-health-log)
-- [Event ID 1287 in Health Log](/docs/kb/auditor/event-id-1287-in-health-log)
-- [Event ID 1288 in Health Log](/docs/kb/auditor/event-id-1288-in-health-log)
-- [Event ID 1289 in Health Log](/docs/kb/auditor/event-id-1289-in-health-log)
+- [Event ID 1239 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1239-in-health-log)
+- [Event ID 1240 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1240-in-health-log)
+- [Event ID 1241 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1241-in-health-log)
+- [Event ID 1242 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1242-in-health-log)
+- [Event ID 1243 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1243-in-health-log)
+- [Event ID 1244 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1244-in-health-log)
+- [Event ID 1245 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1245-in-health-log)
+- [Event ID 1249 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1249-in-health-log)
+- [Event ID 1250 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1250-in-health-log)
+- [Event ID 1251 - 1254, 1256 - 1258 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1251-1254-1256-1258-in-health-log)
+- [Event ID 1255 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1255-in-health-log)
+- [Event ID 1259 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1259-in-health-log)
+- [Event ID 1260 − 1266 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1260-1266-in-health-log)
+- [Event ID 1267 − 1273 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1267-1273-in-health-log)
+- [Event ID 1274 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1274-in-health-log)
+- [Event ID 1275 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1275-in-health-log)
+- [Event ID 1276 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1276-in-health-log)
+- [Event ID 1280 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1280-in-health-log)
+- [Event ID 1285 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1285-in-health-log)
+- [Event ID 1286 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1286-in-health-log)
+- [Event ID 1287 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1287-in-health-log)
+- [Event ID 1288 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1288-in-health-log)
+- [Event ID 1289 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1289-in-health-log)
 
 
 
diff --git a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md
index fbcb7856bb..05313949ab 100644
--- a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md
+++ b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md
@@ -102,7 +102,7 @@ Allow the operating systems to select the protocol for incoming and outgoing com
 
 ### Cause #4 – SQL and Netwrix Auditor Servers Time Difference
 
-Synchronize the time on both SQL and Netwrix Auditor servers to eliminate clock skew. For more information, see Clock Skew Is Too Great: [Clock Skew Is Too Great](/docs/kb/auditor/clock-skew-is-too-great)
+Synchronize the time on both SQL and Netwrix Auditor servers to eliminate clock skew. For more information, see Clock Skew Is Too Great: [Clock Skew Is Too Great](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/clock-skew-is-too-great)
 
 ## Related Articles
 
@@ -110,7 +110,7 @@ Synchronize the time on both SQL and Netwrix Auditor servers to eliminate clock
 - Cannot Generate SSPI Context – Fix the Error with Kerberos Configuration Manager · Microsoft: https://learn.microsoft.com/en-US/troubleshoot/sql/database-engine/connect/cannot-generate-sspi-context-error#fix-the-error-with-kerberos-configuration-manager-recommended
 - Register Service Principal Name for Kerberos Connections – Automatic SPN Registration · Microsoft: https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/register-a-service-principal-name-for-kerberos-connections?view=sql-server-ver16#Auto
 - [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm)
-- [Clock Skew Is Too Great](/docs/kb/auditor/clock-skew-is-too-great)
+- [Clock Skew Is Too Great](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/clock-skew-is-too-great)
 
 
 
diff --git a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/connection-string-is-not-valid-in-sql-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/connection-string-is-not-valid-in-sql-server-monitoring-plan.md
index ae72952be9..8cb80f4b24 100644
--- a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/connection-string-is-not-valid-in-sql-server-monitoring-plan.md
+++ b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/connection-string-is-not-valid-in-sql-server-monitoring-plan.md
@@ -53,11 +53,11 @@ Review the affected item in your SQL Server monitoring plan:
 4. Review the instance name specified:
    - For a default SQL instance name (`MSSQLSERVER`), only specify the server FQDN or NetBIOS name. See the example for a reference.
 
-     ![Default instance example](./images/ka04u000000wvzg_0EM4u000008pVor.png)
+     ![Default instance example]./../0-images/ka04u000000wvzg_0EM4u000008pVor.png)
 
    - For a named SQL instance, specify `FQDN\Instance_name`.
 
-     ![Named instance example](./images/ka04u000000wvzg_0EM4u000008pVow.png)
+     ![Named instance example]./../0-images/ka04u000000wvzg_0EM4u000008pVow.png)
 
 5. Once the changes are introduced, click **Save & Close**.
 
diff --git a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/could-not-find-stored-procedure-getallproperties.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/could-not-find-stored-procedure-getallproperties.md
index 90ddf6647b..fb22225e70 100644
--- a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/could-not-find-stored-procedure-getallproperties.md
+++ b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/could-not-find-stored-procedure-getallproperties.md
@@ -46,7 +46,7 @@ The ReportServer database is corrupted and has to be rebuilt.
    1. Once you've opened SSMS, unfold the **Databases** folder in the **Object Explorer** pane on the left.
    2. Right-click each (`ReportServer` and `ReportServerTemp`) database and select **Delete**.
    3. Before confirming the deletion, make sure to check the **Close existing connections** checkbox.
-3. Once the databases are deleted, regenerate the `ReportServer` database. Refer to the following article for additional information: [Deploying the Report Server Database](/docs/kb/auditor/deploying-the-report-server-database)
+3. Once the databases are deleted, regenerate the `ReportServer` database. Refer to the following article for additional information: [Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)
 4. After you've configured the `ReportServer` database, grant the roles to the SSRS service account the roles required. Refer to the following article for additional information: [Configure SSRS Account](https://docs.netwrix.com/docs/auditor/10_8/requirements/sqlserverreportingservice#configure-ssrs-account)
 5. Restart **Netwrix Auditor Archive Service** and **Netwrix Auditor Management Service** via **Services**.
 
diff --git a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-do-i-migrate-the-reporting-database-to-another-ms-sql-server-instance-lower-version.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-do-i-migrate-the-reporting-database-to-another-ms-sql-server-instance-lower-version.md
index 39376f5bd1..16e2bed955 100644
--- a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-do-i-migrate-the-reporting-database-to-another-ms-sql-server-instance-lower-version.md
+++ b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-do-i-migrate-the-reporting-database-to-another-ms-sql-server-instance-lower-version.md
@@ -34,49 +34,49 @@ There are a few options to downgrade the database from a higher version of SQL S
 
 1.1 In Object Explorer connect to the SQL server, right-click the database, expand **Tasks** and choose **Generate Scripts**.
 
-![User-added image](./images/ka04u000000HcOn_0EM700000005TB6.png)
+![User-added image]./../0-images/ka04u000000HcOn_0EM700000005TB6.png)
 
 1.2 This launches the **Generate and Publish Scripts** wizard. Click **Next** to skip the Introduction screen and proceed to the Choose Objects page.
 
-![User-added image](./images/ka04u000000HcOn_0EM700000005TBB.png)
+![User-added image]./../0-images/ka04u000000HcOn_0EM700000005TBB.png)
 
 1.3 On the Choose Objects page, choose **Script entire database and all database objects**, and then click **Next** to proceed to the **Set Scripting Options** page.
 
-![User-added image](./images/ka04u000000HcOn_0EM700000005TBG.png)
+![User-added image]./../0-images/ka04u000000HcOn_0EM700000005TBG.png)
 
 1.4 On the **Set Scripting Options** page, specify the location where you want to save the script file, and then click the **Advanced** button.
 
-![User-added image](./images/ka04u000000HcOn_0EM700000005TBL.png)
+![User-added image]./../0-images/ka04u000000HcOn_0EM700000005TBL.png)
 
 1.5 In the **Advanced Scripting Options** dialog box, set `Script Triggers`, `Indexes` and `Primary Key` options to `True`, set `Script for Server Version` to ``&lt;version of the destination SQL server instance&gt;``, and set `Types of data to script` to `Schema and Data`. This last option is key because this is what generates the data per table.
 
-![User-added image](./images/ka04u000000HcOn_0EM700000005TC4.png)
+![User-added image]./../0-images/ka04u000000HcOn_0EM700000005TC4.png)
 
 1.6 Once done, click **OK** to close the **Advanced Scripting Options** dialog box and return to the **Set Scripting Options** page. In the **Set Scripting Options** page, click **Next** to continue to the Summary page.
 
 1.7 After reviewing your selections on the Summary page, click **Next** to generate scripts.
 
-![User-added image](./images/ka04u000000HcOn_0EM700000005TBV.png)
+![User-added image]./../0-images/ka04u000000HcOn_0EM700000005TBV.png)
 
 1.8 Once scripts are generated successfully, choose the **Finish** button to close the **Generate and Publish Scripts** wizard.
 
-![User-added image](./images/ka04u000000HcOn_0EM700000005TBa.png)
+![User-added image]./../0-images/ka04u000000HcOn_0EM700000005TBa.png)
 
 2. Connect to the destination SQL Server instance, and then run the SQL scripts that were generated, to create the database schema and copy its data.
 
 2.1 In Object Explorer connect to the destination SQL Server instance and then in SQL Server Management Studio open the SQL Server script you saved in Step 1.
 
-![User-added image](./images/ka04u000000HcOn_0EM700000005TBf.png)
+![User-added image]./../0-images/ka04u000000HcOn_0EM700000005TBf.png)
 
-![User-added image](./images/ka04u000000HcOn_0EM700000005TBk.png)
+![User-added image]./../0-images/ka04u000000HcOn_0EM700000005TBk.png)
 
-![User-added image](./images/ka04u000000HcOn_0EM700000005TBp.png)
+![User-added image]./../0-images/ka04u000000HcOn_0EM700000005TBp.png)
 
 2.2 Modify the script to specify the correct location for the database data and log files. Once done, run the script to create the database on the destination SQL Server instance.
 
-![User-added image](./images/ka04u000000HcOn_0EM700000005TCE.png)
+![User-added image]./../0-images/ka04u000000HcOn_0EM700000005TCE.png)
 
 2.3 Upon successful execution, refresh the Database folder in Object Explorer.
 
-![User-added image](./images/ka04u000000HcOn_0EM700000005TC9.png)
+![User-added image]./../0-images/ka04u000000HcOn_0EM700000005TC9.png)
 
diff --git a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md
index 3c75446460..6ce36eb752 100644
--- a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md
+++ b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md
@@ -50,16 +50,16 @@ Yes, you are able to migrate audit databases to another Microsoft SQL Server ins
    3. Under the **Source** section, select the **Device** option, and click **...** to browse for databases.
    4. In the **Specify Backup Devices** window, click **Add** and select the backup database file. Click **OK**.
    5. Specify the database name and check the **Restore** checkbox under the **Backup sets to restore** section.
-5. Deploy the new Report Database. For more information, see [Deploying the Report Server Database](/docs/kb/auditor/deploying-the-report-server-database)
+5. Deploy the new Report Database. For more information, see [Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)
 6. Stop the old **SQL Server (%instance_name%)** service.
 7. Start `Netwrix Auditor Archive Service` and `Netwrix Auditor Management Service`.
 8. In the main Netwrix Auditor menu, select **Settings** > **Audit Database** tab, and specify the new SQL Server and Reporting Service settings.
 
 > **NOTE:** If you receive the following pop-up message, click **Yes** to proceed with modifying the Audit Database settings:
-> ![Audit Database modification prompt](./images/servlet_image_3823966b1661.png)
+> ![Audit Database modification prompt]./../0-images/servlet_image_3823966b1661.png)
 
 9. Click **Yes** when the following message appears:
-   ![Confirmation dialog: Data will become unavailable until the new database is configured](./images/servlet_image_3823966b1661.png)
+   ![Confirmation dialog: Data will become unavailable until the new database is configured]./../0-images/servlet_image_3823966b1661.png)
 10. In the main Netwrix Auditor menu, select **Settings** > **Investigations** tab. Click **Modify** to specify the new SQL Server settings.
 11. Run a search with the filter **When | Equals | Last 7 days**. If you see the relevant data, the databases were migrated successfully and the new SQL Server is being used.
 12. **Optional:** Start the old SQL Server instance if it is used for any other tasks.
@@ -68,6 +68,6 @@ Yes, you are able to migrate audit databases to another Microsoft SQL Server ins
 
 - [How to Assign db_owner Permissions](docs/kb/auditor/how-to-assign-db-owner-permissions.md)
 - [SQL Server Reporting Services](https://docs.netwrix.com/docs/auditor/10_8/requirements/overview)
-- [How to Prepare the Netwrix Server for a SQL Upgrade](/docs/kb/auditor/how-to-prepare-the-netwrix-server-for-a-sql-upgrade)
-- [Deploying the Report Server Database](/docs/kb/auditor/deploying-the-report-server-database)
+- [How to Prepare the Netwrix Server for a SQL Upgrade](/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-prepare-the-netwrix-server-for-a-sql-upgrade)
+- [Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)
 
diff --git a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/specify-custom-sql-server-port-for-netwrix-auditor-audit-database.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/specify-custom-sql-server-port-for-netwrix-auditor-audit-database.md
index 23187c92fa..9180d7570b 100644
--- a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/specify-custom-sql-server-port-for-netwrix-auditor-audit-database.md
+++ b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/specify-custom-sql-server-port-for-netwrix-auditor-audit-database.md
@@ -35,5 +35,5 @@ How to specify a custom port for Netwrix Auditor to communicate with the SQL Ser
 SERVER-SQL\TEST-SQL,14337
 ```
 
-![Specify custom SQL Server port image](./images/ka04u00000117sv_0EM4u000008LXSz.png)
+![Specify custom SQL Server port image]./../0-images/ka04u00000117sv_0EM4u000008LXSz.png)
 
diff --git a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/sql-server-express-database-size-reached-10gb.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/sql-server-express-database-size-reached-10gb.md
index 86bd14b8c2..2f6070a3ce 100644
--- a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/sql-server-express-database-size-reached-10gb.md
+++ b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/sql-server-express-database-size-reached-10gb.md
@@ -68,11 +68,11 @@ While it is highly recommended to implement either a SQL Server Standard or Ente
 
 - Split items in multiple monitoring plans to decrease the amount of data written to a single database.
 
-- Decrease the database retention period. Refer to the following article for additional information: [How to Reduce Audit Database Size for Netwrix Auditor](/docs/kb/auditor/how-to-reduce-audit-database-size-for-netwrix-auditor)
+- Decrease the database retention period. Refer to the following article for additional information: [How to Reduce Audit Database Size for Netwrix Auditor](/docs/kb/auditor/system-administration/database-management/how-to-reduce-audit-database-size-for-netwrix-auditor)
 
 ## Related Articles
 
 - [Investigations](https://docs.netwrix.com/docs/auditor/10_8/admin/settings/investigations)
-- [How to Reduce Audit Database Size for Netwrix Auditor](/docs/kb/auditor/how-to-reduce-audit-database-size-for-netwrix-auditor) 
-- [Could Not Allocate Space for Object (ObjectName) in Database (DatabaseName)](/docs/kb/auditor/could-not-allocate-space-for-object-objectname-in-database-databasename)
+- [How to Reduce Audit Database Size for Netwrix Auditor](/docs/kb/auditor/system-administration/database-management/how-to-reduce-audit-database-size-for-netwrix-auditor) 
+- [Could Not Allocate Space for Object (ObjectName) in Database (DatabaseName)](/docs/kb/auditor/system-administration/database-management/could-not-allocate-space-for-object-objectname-in-database-databasename)
 
diff --git a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/auditing-policies-are-not-being-enabled-on-all-or-several-domain-controllers-in-monitored-domain.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/auditing-policies-are-not-being-enabled-on-all-or-several-domain-controllers-in-monitored-domain.md
index a2dc302363..6fe446c68a 100644
--- a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/auditing-policies-are-not-being-enabled-on-all-or-several-domain-controllers-in-monitored-domain.md
+++ b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/auditing-policies-are-not-being-enabled-on-all-or-several-domain-controllers-in-monitored-domain.md
@@ -38,11 +38,11 @@ The reasons why the auditing policies are not being enabled on domain controller
 - Run Resultant Set of Policy (RSoP): `Start > Run` > type `rsop.msc` and press Enter.
 - Expand Audit Policy as shown in the picture below and make sure you see the corresponding source GPO (the GPO which you enabled auditing policies in) for auditing policies and ensure there are no warnings or errors. In our case we see that Audit Account Management policy is set to Failure, while for successful auditing we need to have this policy set to Success.
 
-![rsop](./images/ka04u000000HcSR_0EM7000000053Be.png)
+![rsop]./../0-images/ka04u000000HcSR_0EM7000000053Be.png)
 
 - To fix this problem open **Group Policy Management Console** (**Start > Administrative Tools > Group Policy Management**), select the **Domain Controllers** node, open the **Group Policy Inheritance** tab and in the right pane review the order the GPOs are being applied to the Domain Controllers OU. In our case the Default Domain Policy is enforced and being applied first which causes a GPO conflict. Manage your GPO inheritance to exclude the necessary policy settings from being overridden. For more details regarding GPO inheritance please refer to the following Microsoft KB article: http://technet.microsoft.com/en-us/library/cc757050(v=ws.10).aspx
 
-![gpmc](./images/ka04u000000HcSR_0EM7000000053Bj.png)
+![gpmc]./../0-images/ka04u000000HcSR_0EM7000000053Bj.png)
 
 ## If GPO distribution is correct but auditing settings still not applied
 
@@ -52,7 +52,7 @@ If you resolved the inheritance issue and corresponding GPOs are being distribut
 2. Open Local Group Policy Editor: `Start > Run` > `secpol.msc`.
 3. Expand Audit Policy as shown in the picture below and make sure that the necessary auditing policies are set to Success (for example, Audit Account Management, Audit Directory Service Access) and are equal to the ones you see in Resultant Set of Policy (RSoP).
 
-![secpol](./images/ka04u000000HcSR_0EM7000000053Bo.png)
+![secpol]./../0-images/ka04u000000HcSR_0EM7000000053Bo.png)
 
 - If the Local Group Policy Editor indicates different auditing settings (different from the ones you configured and see in Resultant Set of Policy (RSoP)), this may indicate an issue with GPO applying on that particular domain controller. To troubleshoot this issue please refer to the following Microsoft KB articles:
 
diff --git a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/high-cpu-usage-on-domain-controllers.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/high-cpu-usage-on-domain-controllers.md
index e9535f1114..f6ac14fb72 100644
--- a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/high-cpu-usage-on-domain-controllers.md
+++ b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/high-cpu-usage-on-domain-controllers.md
@@ -39,7 +39,7 @@ There are two options to fix the issue:
    3. Create a DWORD called `UseWatcher` with value `1`
    4. Restart the **Netwrix Account Lockout Examiner service** via **Services.msc**
 
-   ![User-added image](./images/ka04u000000HcUT_0EM7000000052iw.png)
+   ![User-added image]./../0-images/ka04u000000HcUT_0EM7000000052iw.png)
 
 2. If the above does not help, disable usage of WMI to communicate with domain controllers. (A .Net-based mechanism will be used for it.)
 
@@ -50,5 +50,5 @@ There are two options to fix the issue:
    3. Change the `UseWMI` value to `0`
    4. Restart the **Netwrix Account Lockout Examiner service** via **Services.msc**
 
-   ![User-added image](./images/ka04u000000HcUT_0EM7000000052jG.png)
+   ![User-added image]./../0-images/ka04u000000HcUT_0EM7000000052jG.png)
 
diff --git a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/how-to-exclude-non-operable-domain-controllers-from-monitoring-in-netwrix-auditor.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/how-to-exclude-non-operable-domain-controllers-from-monitoring-in-netwrix-auditor.md
index f2152a9437..a9dd858060 100644
--- a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/how-to-exclude-non-operable-domain-controllers-from-monitoring-in-netwrix-auditor.md
+++ b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/how-to-exclude-non-operable-domain-controllers-from-monitoring-in-netwrix-auditor.md
@@ -51,7 +51,7 @@ To exclude domain controllers from monitoring, refer to the following steps:
    MYDC.MYDOMAIN.LOCAL
    ```
 
-   ![User-added image](./images/ka0Qk0000003W1l_0EMQk000003oywv.png)
+   ![User-added image]./../0-images/ka0Qk0000003W1l_0EMQk000003oywv.png)
 
 3. Save the changes. Inactive User Tracker will exclude this domain controller.
 
diff --git a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/nwx-executables-removed-and-readded-to-domain-controllers.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/nwx-executables-removed-and-readded-to-domain-controllers.md
index 166953875b..0760f0fd83 100644
--- a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/nwx-executables-removed-and-readded-to-domain-controllers.md
+++ b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/nwx-executables-removed-and-readded-to-domain-controllers.md
@@ -30,6 +30,6 @@ The same Netwrix Auditor-related executable files are being regularly removed an
 
 ## Answer
 
-Yes, this behavior is to be expected — these executable files represent the network traffic compression service running on domain controllers. The use of the up-to-date version of compression service executables is ensured when copying these files on every data collection. The compression service collects and pre-filters data to send it to your Netwrix Auditor server in a highly compressed format. For additional information on network traffic compression service, refer to the following article: [How the Network Traffic Compression Service Works](/docs/kb/auditor/how-the-network-traffic-compression-service-works).
+Yes, this behavior is to be expected — these executable files represent the network traffic compression service running on domain controllers. The use of the up-to-date version of compression service executables is ensured when copying these files on every data collection. The compression service collects and pre-filters data to send it to your Netwrix Auditor server in a highly compressed format. For additional information on network traffic compression service, refer to the following article: [How the Network Traffic Compression Service Works](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-the-network-traffic-compression-service-works).
 
 > **IMPORTANT:** While not recommended, you can disable the compression service. Refer to the following article for additional information on monitoring plan setup: Monitoring Plans — Create a New Plan.
diff --git a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/workstations-cloned-with-windows-server-auditing-service-pre-installed.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/workstations-cloned-with-windows-server-auditing-service-pre-installed.md
index 25d87efd04..b9d01d7952 100644
--- a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/workstations-cloned-with-windows-server-auditing-service-pre-installed.md
+++ b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/workstations-cloned-with-windows-server-auditing-service-pre-installed.md
@@ -46,7 +46,7 @@ To establish the affected servers, refer to the following steps:
 
    Copy the **AgentID** value.
 
-   ![Registry AgentID screenshot](./images/ka04u000001177u_0EM4u000008Lr6o.png)
+   ![Registry AgentID screenshot]./../0-images/ka04u000001177u_0EM4u000008Lr6o.png)
 
 2. In your Netwrix Auditor host, navigate to the `C:\ProgramData\Netwrix Auditor\ShortTerm\WSA\Agents\` folder. Look for a folder named after **AgentID** (e.g.,52656fc3-d325-424d-9bef-fb68d14bc919). The **RemoteAgentState.xml** file contains a list of affected servers.
 
diff --git a/docs/kb/auditor/event-id-reference/health-log-events/entitlement-reviews-event-id-6527.md b/docs/kb/auditor/event-id-reference/health-log-events/entitlement-reviews-event-id-6527.md
index 2b8efe852a..433b72a8a0 100644
--- a/docs/kb/auditor/event-id-reference/health-log-events/entitlement-reviews-event-id-6527.md
+++ b/docs/kb/auditor/event-id-reference/health-log-events/entitlement-reviews-event-id-6527.md
@@ -35,7 +35,7 @@ License name: Entitlement reviews.
 Your subscription plan for Netwrix Auditor has expired.
 ```
 
-![image001.png](./images/ka04u0000011688_0EM4u000008LCjZ.png)
+![image001.png]./../0-images/ka04u0000011688_0EM4u000008LCjZ.png)
 
 ## Cause
 
diff --git a/docs/kb/auditor/event-id-reference/health-log-events/event-id-1000-application-errors-in-netwrix-auditor-server.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1000-application-errors-in-netwrix-auditor-server.md
index c27e17efa1..c73e618292 100644
--- a/docs/kb/auditor/event-id-reference/health-log-events/event-id-1000-application-errors-in-netwrix-auditor-server.md
+++ b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1000-application-errors-in-netwrix-auditor-server.md
@@ -80,9 +80,9 @@ The **Faulting module name** dynamic-link library file was corrupted. This could
 
    3. Once the commands are completed and components are restored, restart the server.
 
-3. In case the **Faulting module path** links a Netwrix-related folder (e.g., `C:\Program Files (x86)\Netwrix Auditor\Active Directory Auditing`), repair your Netwrix Auditor installation. Refer to the following article for additional information: [How to Repair Netwrix Auditor Installation](/docs/kb/auditor/how-to-repair-netwrix-auditor-installation)
+3. In case the **Faulting module path** links a Netwrix-related folder (e.g., `C:\Program Files (x86)\Netwrix Auditor\Active Directory Auditing`), repair your Netwrix Auditor installation. Refer to the following article for additional information: [How to Repair Netwrix Auditor Installation](/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-repair-netwrix-auditor-installation)
 
 ## Related articles
 
 - [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
-- [How to Repair Netwrix Auditor Installation](/docs/kb/auditor/how-to-repair-netwrix-auditor-installation)
+- [How to Repair Netwrix Auditor Installation](/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-repair-netwrix-auditor-installation)
diff --git a/docs/kb/auditor/event-id-reference/health-log-events/event-id-1024-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1024-in-health-log.md
index 6f755ba562..fef0270c5a 100644
--- a/docs/kb/auditor/event-id-reference/health-log-events/event-id-1024-in-health-log.md
+++ b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1024-in-health-log.md
@@ -58,9 +58,9 @@ Regenerate the Activity Summary:
 > wevtutil epl "Netwrix Auditor" %userprofile%\desktop\NASH.evtx
 > ```
 >
-> Refer to the following article for additional information for an option to manually save the Auditor event log: [How to Save and Zip Netwrix Auditor System Health Event Log](/docs/kb/auditor/how-to-save-and-zip-netwrix-auditor-system-health-event-log).
+> Refer to the following article for additional information for an option to manually save the Auditor event log: [How to Save and Zip Netwrix Auditor System Health Event Log](/docs/kb/auditor/monitoring-plans/event-log-management/how-to-save-and-zip-netwrix-auditor-system-health-event-log).
 
 ## Related articles
 
-- [How to Save and Zip Netwrix Auditor System Health Event Log](/docs/kb/auditor/how-to-save-and-zip-netwrix-auditor-system-health-event-log)
+- [How to Save and Zip Netwrix Auditor System Health Event Log](/docs/kb/auditor/monitoring-plans/event-log-management/how-to-save-and-zip-netwrix-auditor-system-health-event-log)
 - [My Tickets · Netwrix](https://www.netwrix.com/tickets.html#/tickets/open)
diff --git a/docs/kb/auditor/event-id-reference/health-log-events/event-id-1208-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1208-in-health-log.md
index 27bbaf6439..c6e864ab9a 100644
--- a/docs/kb/auditor/event-id-reference/health-log-events/event-id-1208-in-health-log.md
+++ b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1208-in-health-log.md
@@ -34,7 +34,7 @@ Refer to the entries below for possible causes and resolutions based on event de
 ### `Fatal error during installation`
 
 - Cause: The **Timeout expired** error is prompted after SharePoint Core Service installation has taken over 10 minutes.
-  **Resolution:** Refer to the following article for additional information: [Timeout Expired Error on SharePoint Core Service Deployment](/docs/kb/auditor/timeout-expired-error-on-sharepoint-core-service-deployment)
+  **Resolution:** Refer to the following article for additional information: [Timeout Expired Error on SharePoint Core Service Deployment](/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/timeout-expired-error-on-sharepoint-core-service-deployment)
 
 - Cause: An invalid SharePoint Central Administration URL was specified during monitoring plan creation.
   **Resolution:**
@@ -114,7 +114,7 @@ Refer to the entries below for possible causes and resolutions based on event de
 
 ## Related articles
 
-- [Timeout Expired Error on SharePoint Core Service Deployment](/docs/kb/auditor/timeout-expired-error-on-sharepoint-core-service-deployment)
+- [Timeout Expired Error on SharePoint Core Service Deployment](/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/timeout-expired-error-on-sharepoint-core-service-deployment)
 - [Permissions for SharePoint Auditing](https://docs.netwrix.com/docs/auditor/10_8/configuration/sharepoint/permissions)
 - [SharePoint Ports](https://docs.netwrix.com/docs/auditor/10_8/configuration/sharepoint/ports)
 - [Install for SharePoint Core Service](https://docs.netwrix.com/docs/auditor/10_8/install/sharepointcoreservice)
diff --git a/docs/kb/auditor/event-id-reference/health-log-events/event-id-1225-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1225-in-health-log.md
index 6461cee970..5ab2449c28 100644
--- a/docs/kb/auditor/event-id-reference/health-log-events/event-id-1225-in-health-log.md
+++ b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1225-in-health-log.md
@@ -41,10 +41,10 @@ Netwrix Auditor is unable to collect farm configuration changes due to network c
 
 Refer to the corresponding article for additional information on resolution:
 
-- [Event ID 1204 in Health Log](/docs/kb/auditor/event-id-1204-in-health-log)
-- [Event ID 1205 in Health Log](/docs/kb/auditor/event-id-1205-in-health-log)
+- [Event ID 1204 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1204-in-health-log)
+- [Event ID 1205 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1205-in-health-log)
 
 ## Related articles
 
-- [Event ID 1204 in Health Log](/docs/kb/auditor/event-id-1204-in-health-log)
-- [Event ID 1205 in Health Log](/docs/kb/auditor/event-id-1205-in-health-log)
+- [Event ID 1204 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1204-in-health-log)
+- [Event ID 1205 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1205-in-health-log)
diff --git a/docs/kb/auditor/event-id-reference/health-log-events/event-id-1274-in-health-log.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1274-in-health-log.md
index 7b79d1fcd0..051da07a92 100644
--- a/docs/kb/auditor/event-id-reference/health-log-events/event-id-1274-in-health-log.md
+++ b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1274-in-health-log.md
@@ -43,11 +43,11 @@ because the product is unable to detect the forest where the audited SharePoint
 
 - Cause #1 − Verify the **SharePoint Central Administration** site is reachable by opening the URL in a browser.
 - Cause #2 − Refer to the following articles for additional information:
-  - [Event ID 1204 in Health Log](/docs/kb/auditor/event-id-1204-in-health-log)
-  - [Event ID 1205 in Health Log](/docs/kb/auditor/event-id-1205-in-health-log)
+  - [Event ID 1204 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1204-in-health-log)
+  - [Event ID 1205 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1205-in-health-log)
 - Cause #3 − Verify the global catalog domain controller is reachable.
 
 ## Related articles
 
-- [Event ID 1204 in Health Log](/docs/kb/auditor/event-id-1204-in-health-log)
-- [Event ID 1205 in Health Log](/docs/kb/auditor/event-id-1205-in-health-log)
+- [Event ID 1204 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1204-in-health-log)
+- [Event ID 1205 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1205-in-health-log)
diff --git a/docs/kb/auditor/event-id-reference/health-log-events/event-id-2002-the-term-get-help-is-not-recognized.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-2002-the-term-get-help-is-not-recognized.md
index 731e27d91a..a4828517bd 100644
--- a/docs/kb/auditor/event-id-reference/health-log-events/event-id-2002-the-term-get-help-is-not-recognized.md
+++ b/docs/kb/auditor/event-id-reference/health-log-events/event-id-2002-the-term-get-help-is-not-recognized.md
@@ -43,4 +43,4 @@ To resolve the issue, upgrade Netwrix Auditor to the version 10.6 build 12322 an
 
 ### Related article:
 
-- [Administrator Audit Logging (AAL) configuration details](/docs/kb/auditor/administrator-audit-logging-aal-configuration-details)
+- [Administrator Audit Logging (AAL) configuration details](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/administrator-audit-logging-aal-configuration-details)
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/account-lockouts-are-displayed-with-delay.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/account-lockouts-are-displayed-with-delay.md
index 8605fa7f8b..1ec7eff118 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/account-lockouts-are-displayed-with-delay.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/account-lockouts-are-displayed-with-delay.md
@@ -46,7 +46,7 @@ To change to all DCs mode, perform the following steps:
 2. Select your domain and click **Edit**.
 3. Select **All DCs** radio button and click **OK** to save the changes.
 
-![User-added image](./images/ka04u000000HcUw_0EM700000004wlz.png)
+![User-added image]./../0-images/ka04u000000HcUw_0EM700000004wlz.png)
 
 ### Change event processing method
 
@@ -56,5 +56,5 @@ To change to all DCs mode, perform the following steps:
 4. Create a new value called `UseWatcher`, set its type to `DWORD` and value to `1`.
 5. Restart NetWrix Account Lockout Examiner Service via `services.msc`.
 
-![User-added image](./images/ka04u000000HcUw_0EM700000004wm4.png)
+![User-added image]./../0-images/ka04u000000HcUw_0EM700000004wm4.png)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/archive-service-is-busy-processing-activity-records.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/archive-service-is-busy-processing-activity-records.md
index 016dab553f..741f795b72 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/archive-service-is-busy-processing-activity-records.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/archive-service-is-busy-processing-activity-records.md
@@ -53,7 +53,7 @@ Refer to the following steps to troubleshoot the SQL Server-based causes:
    1. In the main Netwrix Auditor screen, select **Health Status** and click **View details** in the **Database Statistics** pane.
    2. Review the database states. If a database state reads **Failed to store data**, review the database details.
 
-      > **IMPORTANT:** The SQL Server Express databases have a 10 GB size limit. In case the affected database states **Failed to store data** with the size limit of **10 GB**, refer to the following article: [SQL Server Express Database Size Reached 10GB](/docs/kb/auditor/sql-server-express-database-size-reached-10gb)
+      > **IMPORTANT:** The SQL Server Express databases have a 10 GB size limit. In case the affected database states **Failed to store data** with the size limit of **10 GB**, refer to the following article: [SQL Server Express Database Size Reached 10GB](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/sql-server-express-database-size-reached-10gb)
    3. If multiple or all databases state **Failed to store data** with no size limits, refer to the following troubleshooting steps.
 2. Verify that the SQL Server instance is available.
 3. Verify the credentials of the SQL Server instance account:
@@ -82,6 +82,6 @@ Verify that the Audit Database account has the correct permissions—refer to th
 
 ## Related Articles
 
-- [SQL Server Express Database Size Reached 10GB](/docs/kb/auditor/sql-server-express-database-size-reached-10gb)
+- [SQL Server Express Database Size Reached 10GB](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/sql-server-express-database-size-reached-10gb)
 - [Configure Audit Database Account](https://docs.netwrix.com/docs/auditor/10_8/requirements/sqlserver#configure-audit-database-account)
 - [Configure Long-Term Archive Account](https://docs.netwrix.com/docs/auditor/10_8/requirements/longtermarchive#configure-long-term-archive-account)
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit-status-shows-logon-auditing-is-disabled.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit-status-shows-logon-auditing-is-disabled.md
index 27ac5919d7..7e1b8816a3 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit-status-shows-logon-auditing-is-disabled.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit-status-shows-logon-auditing-is-disabled.md
@@ -25,7 +25,7 @@ knowledge_article_id: kA00g000000H9YbCAK
 
 Audit status of some Domain controllers in the list shows that some auditing is disabled, for example "Logon Auditing is disabled, some funcionality will be unavailable for this DC. Please turn on auditing of invalid logons in audit policy for this DC"
 
-![User-added image](./images/ka04u000000HcRc_0EM700000004wxR.png)
+![User-added image]./../0-images/ka04u000000HcRc_0EM700000004wxR.png)
 
 ---
 
@@ -49,7 +49,7 @@ To resolve the issue configure audit policies/ advanced audit policies.
    - **Audit account logon events: Failure**
    - **Audit logon events: Failure**
 
-   ![User-added image](./images/ka04u000000HcRc_0EM700000004wxC.png)
+   ![User-added image]./../0-images/ka04u000000HcRc_0EM700000004wxC.png)
 
 5. Update group policy an all monitored DCs (for example run `gpupdate /force`)
 
@@ -60,7 +60,7 @@ To resolve the issue configure audit policies/ advanced audit policies.
 3. Expand the **Computer Configuration** -> **Policies** -> **Windows Settings** -> **Security Settings** -> **Advanced Audit Policy Configuration** node.
 4. Configure audit policies according to page 12, Section 4.2: Enabling Audit Policy, of the [Account Lockout Examiner Administrator Guide](https://www.netwrix.com/download/documents/NetWrix_Account_Lockout_Examiner_Administrator_Guide.pdf?_ga=2.126161166.2092059225.1569427026-1766003445.1557946744).
 
-![User-added image](./images/ka04u000000HcRc_0EM7000000054jS.png) ![User-added image](./images/ka04u000000HcRc_0EM7000000054jX.png) ![User-added image](./images/ka04u000000HcRc_0EM700000004wxH.png)
+![User-added image]./../0-images/ka04u000000HcRc_0EM7000000054jS.png) ![User-added image]./../0-images/ka04u000000HcRc_0EM7000000054jX.png) ![User-added image]./../0-images/ka04u000000HcRc_0EM700000004wxH.png)
 
 5. Update group policy an all monitored DCs (for example run `gpupdate /force`)
 
@@ -77,5 +77,5 @@ In order to do this:
 3. Change the value of **UseWMI_Audit** to `0`,
 4. In the Account Lockout Examiner console go to **File - Settings** and click **OK** to apply registry changes.
 
-![User-added image](./images/ka04u000000HcRc_0EM700000004wxM.png)
+![User-added image]./../0-images/ka04u000000HcRc_0EM700000004wxM.png)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit_internet_information_services_(iis)_with_netwrix_auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit_internet_information_services_(iis)_with_netwrix_auditor.md
index a61f71e47d..0bdb7e8156 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit_internet_information_services_(iis)_with_netwrix_auditor.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/audit_internet_information_services_(iis)_with_netwrix_auditor.md
@@ -43,6 +43,6 @@ How to configure Internet Information Services (IIS) events monitoring?
 
    3. Switch the **Write to** switch to **Both**. Refer to the following screenshot for reference.
 
-   ![Configuration of Audit Archiving Filters with the Write to switch set to Both](./images/servlet_image_69af0d1737a5.png)
+   ![Configuration of Audit Archiving Filters with the Write to switch set to Both]./../0-images/servlet_image_69af0d1737a5.png)
 
 Dedicated predefined reports are available in Netwrix Auditor. Follow **Reports** > **Predefined** > **Windows Server** > **Event Log** to see both IIS reports, **IIS Application Pool Changes** and **IIS Website Changes**.
\ No newline at end of file
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/change-data-collecting-account-password-in-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/change-data-collecting-account-password-in-netwrix-auditor.md
index 96a5e79432..755a7c7656 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/change-data-collecting-account-password-in-netwrix-auditor.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/change-data-collecting-account-password-in-netwrix-auditor.md
@@ -37,4 +37,4 @@ Refer to the following steps to update the password for your data-collection acc
 5. Provide a new password, and click **OK** to save changes.
 6. In some cases, you might need to restart Netwrix services for the changes to take effect.
 
-> **NOTE:** A new password won't be applied to Netwrix Password Reset, Event Log Manager, or Inactive User Tracker data-collection accounts. Refer to the following article for additional information: [Failed Logon Attempts after Recent Service Account Password Change](/docs/kb/auditor/failed-logon-attempts-after-recent-service-account-password-change).
+> **NOTE:** A new password won't be applied to Netwrix Password Reset, Event Log Manager, or Inactive User Tracker data-collection accounts. Refer to the following article for additional information: [Failed Logon Attempts after Recent Service Account Password Change](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-logon-attempts-after-recent-service-account-password-change).
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/configuring_proxy_scans.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/configuring_proxy_scans.md
index 36b1a74bf9..247360ea54 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/configuring_proxy_scans.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/configuring_proxy_scans.md
@@ -31,7 +31,7 @@ When using a proxy host list in Netwrix Access Analyzer (formerly Enterprise Aud
    - This is the number of file systems being targeted by the scan.
    - To find this, open the host list assigned to the job and note the total number of rows in the top-right corner.
 
-   ![Host list showing total number of target hosts in Access Analyzer](./images/servlet_image_5badb1d5b327.png)
+   ![Host list showing total number of target hosts in Access Analyzer]./../0-images/servlet_image_5badb1d5b327.png)
 
 ### Step 2: Configure Applet Settings
 
@@ -40,7 +40,7 @@ When using a proxy host list in Netwrix Access Analyzer (formerly Enterprise Aud
 
    > **NOTE:** The default value is 10 hosts per proxy.
 
-   ![Applet Settings page showing Maximum Concurrent Scans option](./images/servlet_image_ea6adfe5aae7.png)
+   ![Applet Settings page showing Maximum Concurrent Scans option]./../0-images/servlet_image_ea6adfe5aae7.png)
 
 ### Step 3: Select Proxy Hosts for Scanning
 
@@ -48,7 +48,7 @@ When using a proxy host list in Netwrix Access Analyzer (formerly Enterprise Aud
 2. Select **Specific Remote Servers by Host List**.
 3. Check the box for your **Proxy Host List** to assign it to the scan job.
 
-   ![Scan Server Selection page with Proxy Host List selected](./images/servlet_image_b60fe6913b2e.png)
+   ![Scan Server Selection page with Proxy Host List selected]./../0-images/servlet_image_b60fe6913b2e.png)
 
 ### Step 4: Set Job Properties
 
@@ -58,7 +58,7 @@ When using a proxy host list in Netwrix Access Analyzer (formerly Enterprise Aud
 
    > **NOTE:** This ensures all proxies are actively scanning and no capacity is wasted.
 
-   ![Job Properties Performance tab showing Worker Threads setting](./images/servlet_image_61a97e6d04cc.png)
+   ![Job Properties Performance tab showing Worker Threads setting]./../0-images/servlet_image_61a97e6d04cc.png)
 
 ## Configuration Examples
 
@@ -69,7 +69,7 @@ When using a proxy host list in Netwrix Access Analyzer (formerly Enterprise Aud
 - **Max Concurrent Scans:** 10
 - **Worker Threads:** 5 × 10 = 50
 
-![Configuration example for large deployment](./images/servlet_image_1166f08ea416.png)
+![Configuration example for large deployment]./../0-images/servlet_image_1166f08ea416.png)
 
 ### Example 2: Small Deployment
 
@@ -78,7 +78,7 @@ When using a proxy host list in Netwrix Access Analyzer (formerly Enterprise Aud
 - **Max Concurrent Scans:** 2
 - **Worker Threads:** 3 × 2 = 6
 
-![Configuration example for small deployment](./images/servlet_image_a2750b9c5910.png)
+![Configuration example for small deployment]./../0-images/servlet_image_a2750b9c5910.png)
 
 ## Related Link
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-cpu-load-and-memory-usage.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-cpu-load-and-memory-usage.md
index 880ff19a80..467244d8a2 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-cpu-load-and-memory-usage.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-cpu-load-and-memory-usage.md
@@ -37,5 +37,5 @@ In order to reduce CPU load and memory usage, perform the following steps:
 
 If this does not help, set the `LockoutStatusRefreshPeriod` key value to `0`, but in this case the Account Lockout Examiner will not verify accounts status via Active Directory, so account lockouts will not be reported if a corresponding event is not found in the event log.
 
-![User-added image](./images/ka04u000000HcN0_0EM700000004wxW.png)
+![User-added image]./../0-images/ka04u000000HcN0_0EM700000004wxW.png)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-cpu-usage-on-remote-desktop-servers.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-cpu-usage-on-remote-desktop-servers.md
index 3142a65b3f..f915319ad9 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-cpu-usage-on-remote-desktop-servers.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/high-cpu-usage-on-remote-desktop-servers.md
@@ -47,7 +47,7 @@ To change this on the machine where ALE is installed:
 3. Change the `UseWMI_Workstations` value to `0`.
 4. Restart the Netwrix Account Lockout Examiner service via `Services.msc`.
 
-![User-added image](./images/ka04u000000HcUO_0EM7000000052ir.png)
+![User-added image]./../0-images/ka04u000000HcUO_0EM7000000052ir.png)
 
 ### Option 2 — Disable searching for detailed info about invalid logons
 
@@ -60,5 +60,5 @@ To change this on the machine where ALE is installed:
 3. Create a new DWORD called `PF_Enabled` and set its value to `0`.
 4. Restart the Netwrix Account Lockout Examiner service via `Services.msc`.
 
-![User-added image](./images/ka04u000000HcUO_0EM7000000052im.png)
+![User-added image]./../0-images/ka04u000000HcUO_0EM7000000052im.png)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-do-i-monitor-hidden-file-shares.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-do-i-monitor-hidden-file-shares.md
index d4734bc9e3..e1e5b68a76 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-do-i-monitor-hidden-file-shares.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-do-i-monitor-hidden-file-shares.md
@@ -26,7 +26,7 @@ If you specified **Computer** as an Item in the Netwrix Auditor Windows File Ser
 
 If you would like to audit all hidden shares on the server, check the corresponding option at the **Scope** tab of your **Computer** item:
 
-![image.png](./images/ka04u000000HcNr_0EM4u000007qtQ1.png)
+![image.png]./../0-images/ka04u000000HcNr_0EM4u000007qtQ1.png)
 
 **NOTE:** It is not recommended to specify the system drive (`\server\c$`) as an Item. This will force Netwrix to audit local folders including the system ones that produce a lot of noise and degrade the product performance.
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-add-additional-space-to-long-term-archive.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-add-additional-space-to-long-term-archive.md
index 2b2c8d2d73..519aef28be 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-add-additional-space-to-long-term-archive.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-add-additional-space-to-long-term-archive.md
@@ -53,4 +53,4 @@ It is up to you to decide how long you want to keep historical data. If you know
 
 Learn more about Investigations in the following article: [Investigations](https://docs.netwrix.com/docs/auditor/10_8/admin/settings/investigations)
 
-Review additional recommendations for preventing Long-Term Archive overflow in the following article: [How to Prevent Long-Term Archive Overflow](/docs/kb/auditor/how-to-prevent-long-term-archive-overflow)
+Review additional recommendations for preventing Long-Term Archive overflow in the following article: [How to Prevent Long-Term Archive Overflow](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-prevent-long-term-archive-overflow)
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-another-domain-with-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-another-domain-with-netwrix-auditor.md
index bb326c39a6..dd2cbd9d95 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-another-domain-with-netwrix-auditor.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-another-domain-with-netwrix-auditor.md
@@ -30,12 +30,12 @@ Can I audit another domain with Netwrix Auditor?
 With Netwrix Auditor you can audit domains different from the one where the Netwrix Auditor host resides. Refer to the following scenarios:
 
 - If there is a two-way trust set up between the audited domain and the domain where the Netwrix Auditor host is installed, no limitations apply. Learn more about trusts in [How trust relationships work for forests in Active Directory ⸱ Microsoft 🤝](https://learn.microsoft.com/en-us/azure/active-directory-domain-services/concepts-forest-trust).
-- For audit of non-trusted domains, refer to the following article for additional information: [How to Audit a Non-Trusted Domain](/docs/kb/auditor/how-to-audit-a-non-trusted-domain).
+- For audit of non-trusted domains, refer to the following article for additional information: [How to Audit a Non-Trusted Domain](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-a-non-trusted-domain).
 
 > **NOTE:** The data collecting account should have required permissions in the monitored domain. Refer to the following article for additional information on Data Collecting Account and group Managed Service Account (gMSA) requirements: Monitoring Plans — Data Collecting Account ⸱ v10.6.
 
 ### Related articles
 
 - [How trust relationships work for forests in Active Directory ⸱ Microsoft 🤝](https://learn.microsoft.com/en-us/azure/active-directory-domain-services/concepts-forest-trust)
-- [How to Audit a Non-Trusted Domain](/docs/kb/auditor/how-to-audit-a-non-trusted-domain)
+- [How to Audit a Non-Trusted Domain](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-audit-a-non-trusted-domain)
 - Monitoring Plans — Data Collecting Account ⸱ v10.6
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-check-the-netwrix-auditor-health-status.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-check-the-netwrix-auditor-health-status.md
index dc410b6249..57012f73bf 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-check-the-netwrix-auditor-health-status.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-check-the-netwrix-auditor-health-status.md
@@ -46,7 +46,7 @@ There is also the chance that the Health Log is relaying an error received from
 
 The Health Log also provides the option for filtering, allowing administrators to view messages from specific data sources/monitoring plans, as well as different types of messages (Information, warning, errors).
 
-There may be times where Netwrix Auditor Technical Support requests a copy of your Health Log. To provide this file, please view the steps [How to Save and Zip Netwrix Auditor System Health Event Log](/docs/kb/auditor/how-to-save-and-zip-netwrix-auditor-system-health-event-log). More details on the Health Log can be obtained here.
+There may be times where Netwrix Auditor Technical Support requests a copy of your Health Log. To provide this file, please view the steps [How to Save and Zip Netwrix Auditor System Health Event Log](/docs/kb/auditor/monitoring-plans/event-log-management/how-to-save-and-zip-netwrix-auditor-system-health-event-log). More details on the Health Log can be obtained here.
 
 ### Database Statistics
 
@@ -58,8 +58,8 @@ This dashboard can assist with troubleshooting in instances where data may not b
 
 ### Long Term Archive
 
-This simple, yet effective, tile gives administrators insight on Long Term Archive storage usage. You may hear Technical Support refer to this as the "LTA". If you notice rapid growth and you have not placed the Long Term Archive on a drive independent of the System Drive, please follow the steps [here](https://docs.netwrix.com/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location) to migrate your Long Term Archive.
+This simple, yet effective, tile gives administrators insight on Long Term Archive storage usage. You may hear Technical Support refer to this as the "LTA". If you notice rapid growth and you have not placed the Long Term Archive on a drive independent of the System Drive, please follow the steps [here](https://docs.netwrix.com/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location) to migrate your Long Term Archive.
 
 ### Working Folder
 
-The Working Folder is a structure of files that plays an integral part in event processing. Similar to the LTA tile, this tile will provide visibility on Working Folder growth. Expect this directory to grow and shrink periodically as it receives data, processes, and then sends it off for storage in SQL and the LTA. This directory can also be migrated to a drive independent to the system drive. The steps to migrate the Working Folder can be viewed [How to Migrate Netwrix Auditor Working Folder to a New Location](/docs/kb/auditor/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location).
+The Working Folder is a structure of files that plays an integral part in event processing. Similar to the LTA tile, this tile will provide visibility on Working Folder growth. Expect this directory to grow and shrink periodically as it receives data, processes, and then sends it off for storage in SQL and the LTA. This directory can also be migrated to a drive independent to the system drive. The steps to migrate the Working Folder can be viewed [How to Migrate Netwrix Auditor Working Folder to a New Location](/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location).
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-count-the-number-of-your-network-devices-in-your-configuration.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-count-the-number-of-your-network-devices-in-your-configuration.md
index 788ed25788..7fdc140abe 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-count-the-number-of-your-network-devices-in-your-configuration.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-count-the-number-of-your-network-devices-in-your-configuration.md
@@ -25,7 +25,7 @@ knowledge_article_id: kA00g000000H9SnCAK
 
 The licensing **does not depend** on your Syslog forwarding configuration. In the example below, Netwrix Auditor collects audit data from five devices, one of them (6) also serving as a relay:
 
-![User-added](./images/servlet_image_3823966b1661.png)
+![User-added]./../0-images/servlet_image_3823966b1661.png)
 
 The computer (5) does not send any data, so it does not count for a licensed object. Therefore, for this example configuration, purchase Netwrix Auditor license for five network devices.   Original KB Article 2122
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-create-the-full-dump-of-a-process.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-create-the-full-dump-of-a-process.md
index f658811bb3..8ebe4f7f64 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-create-the-full-dump-of-a-process.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-create-the-full-dump-of-a-process.md
@@ -31,7 +31,7 @@ Netwrix technical support may ask you to create a dump of a particular process (
 5. Specify location to save the dump file.
 6. Provide the dump file to the technical support.
 
-![User-added image](./images/ka0Qk000000DRwr_0EM7000000051zm.png)
+![User-added image]./../0-images/ka0Qk000000DRwr_0EM7000000051zm.png)
 
 **NOTE:** If you receive Access Denied error during the process, please check the ["Debug Programs" Computer Policy](https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/debug-programs). Consider adding the account that you use to the list of allowed users or use an Account which has this permission (e.g. local administrator account)"
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-delete-old-entries-from-the-account-list.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-delete-old-entries-from-the-account-list.md
index d48cc58882..6e1c9db0ea 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-delete-old-entries-from-the-account-list.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-delete-old-entries-from-the-account-list.md
@@ -31,5 +31,5 @@ The account list is stored in the `alinfo.xml` file and you can manually delete
 4. Save the `alinfo.xml` file.
 5. Start the Netwrix Auditor service.
 
-![User-added image](./images/ka04u000000HcNX_0EM700000004wxg.png)
+![User-added image]./../0-images/ka04u000000HcNX_0EM700000004wxg.png)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-enable-ocr-for-non-english-images.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-enable-ocr-for-non-english-images.md
index eb6e269694..9f6009365f 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-enable-ocr-for-non-english-images.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-enable-ocr-for-non-english-images.md
@@ -30,7 +30,7 @@ How can I enable OCR for non-English images?
 
 ## Answer
 
-The steps below explain how to deploy additional **OCR language pack(s)** and how to identify which **files** should be processed via the installed **pack(s)**. This assumes that you have enabled **OCR** correctly. More details can be found in the following KB article: [Process Document Images results in no extracted text or invalid text](/docs/kb/auditor/process-document-images-results-in-no-extracted-text-or-invalid-text).
+The steps below explain how to deploy additional **OCR language pack(s)** and how to identify which **files** should be processed via the installed **pack(s)**. This assumes that you have enabled **OCR** correctly. More details can be found in the following KB article: [Process Document Images results in no extracted text or invalid text](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/process-document-images-results-in-no-extracted-text-or-invalid-text).
 
 Select the language you wish to use from the list below to download the corresponding language pack:
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui.md
index f96f50276e..0a35955e88 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui.md
@@ -39,13 +39,13 @@ You can exclude specific users and objects from your monitoring scope using the
 2. Select the relevant monitoring plan, select the data source and click **Edit**.
 3. Select the data source and click **Edit data source**.
 
-   ![bM2zhsogPP.png](./images/ka04u000000Qmg4_0EM4u000007cgGr.png)
+   ![bM2zhsogPP.png]./../0-images/ka04u000000Qmg4_0EM4u000007cgGr.png)
 4. In the left pane, select **Users**. Check the **Exclude these users:** checkbox and click **Add** to add users to be excluded from the monitoring plan. Once all the users are added, click **Save & Close** in the bottom left corner.
 
-   ![UwJqLVpUZx.png](./images/ka04u000000Qmg4_0EM4u000007cgOC.png)
+   ![UwJqLVpUZx.png]./../0-images/ka04u000000Qmg4_0EM4u000007cgOC.png)
 5. For objects, select the **Objects** tab in the left pane, check the **Exclude these objects** checkbox and click **Add** to exclude objects from the monitoring scope. Once you've added the objects, click **Save & Close**.
 
-   ![RmVD0BXEc0.png](./images/ka04u000000Qmg4_0EM4u000007cgPy.png)
+   ![RmVD0BXEc0.png]./../0-images/ka04u000000Qmg4_0EM4u000007cgPy.png)
 
 The following examples explain how the exclusion rules work for **Objects**. Same logic applies to the inclusion rules:
 
@@ -53,5 +53,5 @@ The following examples explain how the exclusion rules work for **Objects**. Sam
 - `dc11.local/OU/*` will exclude objects within the OU. However, the OU itself will not be excluded.
 - `dc11.local/OU*` will exclude the OU itself, all objects within it, and also all objects whose path begins with `dc11.local/OU` (like `dc11.local/OU_HQ`).
 
-For additional information on omit lists and excluding data sources, refer to the following article: [How to Use Omit Lists](https://docs.netwrix.com/docs/kb/auditor/how-to-use-omit-lists)
+For additional information on omit lists and excluding data sources, refer to the following article: [How to Use Omit Lists](https://docs.netwrix.com/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-find-out-my-netwrix-auditor-version.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-find-out-my-netwrix-auditor-version.md
index 56bc64fe03..2497608585 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-find-out-my-netwrix-auditor-version.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-find-out-my-netwrix-auditor-version.md
@@ -34,5 +34,5 @@ To establish the version and build of your Netwrix Auditor instance, refer to th
 2. In the left pane, select **About Netwrix Auditor**.
 3. Your current version and build will be available in the right section.
 
-![About Netwrix Auditor dialog showing version and build](./images/ka04u00000116gG_0EM4u000008LXT9.png)
+![About Netwrix Auditor dialog showing version and build]./../0-images/ka04u00000116gG_0EM4u000008LXT9.png)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-identify-whether-auditor-server-can-receive-data-from-meraki-api.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-identify-whether-auditor-server-can-receive-data-from-meraki-api.md
index 70a79ce277..8a4a303bd3 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-identify-whether-auditor-server-can-receive-data-from-meraki-api.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-identify-whether-auditor-server-can-receive-data-from-meraki-api.md
@@ -53,7 +53,7 @@ curl https://api.meraki.com/api/v1 > 1.html
 
 This is an example of a response when the product cannot access the Meraki API:
 
-![User-added image](./images/ka0Qk0000002jaX_0EMQk0000045bUT.png)
+![User-added image]./../0-images/ka0Qk0000002jaX_0EMQk0000045bUT.png)
 
 In this case, check the ports required to audit the Meraki dashboard source and your internal firewall. Learn more about required ports and protocols in this article: Data Source Configuration — Network Devices — Network Devices Ports — v10.6 https://docs.netwrix.com/docs/auditor/10_8).
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-manually-remove-compression-services-from-audited-servers.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-manually-remove-compression-services-from-audited-servers.md
index f20de76674..f722909582 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-manually-remove-compression-services-from-audited-servers.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-manually-remove-compression-services-from-audited-servers.md
@@ -93,7 +93,7 @@ Do make sure to replace `*PATH TO FILESHARE*` with a relevant path.
 
 If you'd like to remove Compression Service from a single server, replace `@"*PATH TO FILESHARE*\serverlist.txt"` with `\Servername`. Refer to the following screenshot for the output reference:
 
-![Output reference](./images/ka04u00000116iG_0EM4u000004bz9T.png)
+![Output reference]./../0-images/ka04u00000116iG_0EM4u000004bz9T.png)
 
 The script calls upon the functions in the msi to upgrade the Compression Service to the version of .msi installer and then to remove said Compression Service, since it only can execute remove command on a Compression Service of the same version.
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-monitor-print-service-activity.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-monitor-print-service-activity.md
index 4e1ff381d4..df944c7f3b 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-monitor-print-service-activity.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-monitor-print-service-activity.md
@@ -31,22 +31,22 @@ You can enable the print event logging by following the steps below:
 1. Enable logging for the print service of the print server — open **Event Viewer** > **Applications and Services Logs** > **Microsoft** > **Windows** > **PrintService**.
 2. Right-click the **Operational** item to select **Properties**.
 
-   ![1.png](./images/ka04u000000HdPU_0EM4u0000084ozs.png)
+   ![1.png]./../0-images/ka04u000000HdPU_0EM4u0000084ozs.png)
 
 3. Check the **Enable logging** checkbox — print service events will now be logged. Click **OK** to save changes.
 
-   ![2.png](./images/ka04u000000HdPU_0EM4u0000084ozx.png)
+   ![2.png]./../0-images/ka04u000000HdPU_0EM4u0000084ozx.png)
 
 Create an inclusive filter in Netwrix Auditor Event Log Manager:
 
 1. Create a new monitoring plan by clicking **Add** or select the preexisting monitoring plan and click **Edit**.
 2. Click the **Configure** button for Audit archiving filters.
 
-   ![1.png](./images/ka04u000000HdPU_0EM4u0000084p07.png)
+   ![1.png]./../0-images/ka04u000000HdPU_0EM4u0000084p07.png)
 
 3. Click **Add** for Inclusive Filters.
 
-   ![2.png](./images/ka04u000000HdPU_0EM4u0000084p0C.png)
+   ![2.png]./../0-images/ka04u000000HdPU_0EM4u0000084p0C.png)
 
 4. Fill in the filter name and description with the **Event Log** field to contain the following line:
 
@@ -56,7 +56,7 @@ Create an inclusive filter in Netwrix Auditor Event Log Manager:
 
    Verify the location for the print server event logs via Event Viewer — the Log Name should correspond with the actual event logs location.
 
-   ![3.png](./images/ka04u000000HdPU_0EM4u0000084p0D.png)
+   ![3.png]./../0-images/ka04u000000HdPU_0EM4u0000084p0D.png)
 
 5. You can specify Event IDs in the **Event Fields** tab to filter the events (e.g. Event ID 307 for **Printing a document**). Additionally you can filter the events via **Insertion Strings**, refer to the index numbers specified in event details (e.g. Param1 stands for Index 1 with "Job #" value).
 
@@ -65,7 +65,7 @@ Download the **Printed Documents RDL.zip** archive provided below and extract th
 1. Open the Reports Server URL in your browser and navigate to the folder you'd like to upload the report to (e.g. **Home** > **Netwrix Auditor** > **Netwrix Auditor for Event Log** > **Change Reports**).
 2. Click **Upload** to upload the report to the folder.
 
-   ![1.png](./images/ka04u000000HdPU_0EM4u0000084p0b.png)
+   ![1.png]./../0-images/ka04u000000HdPU_0EM4u0000084p0b.png)
 
 Configure the report to use the `Netwrix_Auditor_EventLog` database:
 
@@ -79,15 +79,15 @@ Configure the report to use the `Netwrix_Auditor_EventLog` database:
 
    NOTE: `SQLINSTANCE` should be replaced with the name of your SQL Server instance.
 
-   ![2.png](./images/ka04u000000HdPU_0EM4u0000084p0l.png)
+   ![2.png]./../0-images/ka04u000000HdPU_0EM4u0000084p0l.png)
 
 4. Input your credentials, test the connection and save the changes.
 
-   ![3.png](./images/ka04u000000HdPU_0EM4u0000084p0q.png)
+   ![3.png]./../0-images/ka04u000000HdPU_0EM4u0000084p0q.png)
 
 5. The report is now available via the web interface of your Report Server. It will not appear under Reports in the Netwrix Auditor console.
 
-   ![4.png](./images/ka04u000000HdPU_0EM4u0000084p15.png)
+   ![4.png]./../0-images/ka04u000000HdPU_0EM4u0000084p15.png)
 
 Printed Documents RDL: https://www.netwrix.com/download/Printed-Documents-RDL.zip
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location.md
index ce6962dda5..94daf35f63 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location.md
@@ -37,7 +37,7 @@ For a clean installation of Netwrix Auditor 8.5 or newer, follow these steps:
      - Navigate to **Start** > **All Programs** > **Task Scheduler** > **Task Scheduler Library** and locate the tasks named Netwrix Auditor with descriptions mentioning the Netwrix Password Reset, Inactive User Tracker, or Event Log Manager applications.
      - Select these tasks (if any) and click **Disable** in the right pane.
      
-     ![lta_mig_1.png](./images/ka04u00000117ad_0EM4u000008LFeu.png)
+     ![lta_mig_1.png]./../0-images/ka04u00000117ad_0EM4u000008LFeu.png)
 
 2. Copy all files from the old Long-Term-Archive folder into the new Long-Term-Archive folder except for the `ActivityRecords` folder.
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-netwrix-auditor-to-the-cloud.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-netwrix-auditor-to-the-cloud.md
index fe2e1dc743..e347983874 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-netwrix-auditor-to-the-cloud.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-netwrix-auditor-to-the-cloud.md
@@ -32,7 +32,7 @@ Consider it to simply be an installation on another network. Netwrix recommends
 
 1. Spin up a new Windows Server VM in your cloud environment, provision it based on the Auditor Requirements: [Requirements](https://docs.netwrix.com/docs/auditor/10_8/requirements/overview)
 
-2. After that, migrate your old instance according to the following article: Migrating Netwrix Auditor to New Server: [Migrating Auditor to New Server](/docs/kb/auditor/migrating-auditor-to-new-server).
+2. After that, migrate your old instance according to the following article: Migrating Netwrix Auditor to New Server: [Migrating Auditor to New Server](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server).
 
    > **NOTE:** When you go to migrate, both the old and new instances of Netwrix Auditor must be exactly the same version and build. In Netwrix Auditor, navigate to **Settings** -> **About Netwrix Auditor** and check the build number.
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-prevent-long-term-archive-overflow.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-prevent-long-term-archive-overflow.md
index 8b23ea002b..576fbdfb40 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-prevent-long-term-archive-overflow.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-prevent-long-term-archive-overflow.md
@@ -34,8 +34,8 @@ You can deal with this issue in one of the following ways:
 1. Modify Long-Term Archive retention period. For that:
    - In Netwrix Auditor, navigate to **Settings**.
    - Select the **Long-Term Archive** page and modify the archive retention settings – provide the value in months.
-2. Move the archive to another drive. Learn more in the following article: [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location)
-3. Exclude Data from the Auditing Scope. For additional information, refer to the following article: [How to Exclude Users and Objects from Monitoring Scope in Netwrix Auditor UI](/docs/kb/auditor/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui)
+2. Move the archive to another drive. Learn more in the following article: [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location)
+3. Exclude Data from the Auditing Scope. For additional information, refer to the following article: [How to Exclude Users and Objects from Monitoring Scope in Netwrix Auditor UI](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui)
 
 You can also fine tune your monitoring scope via omit lists — this allows you to proactively decrease the DB loads as changes for omitted items are not recorded. For additional information on available omit lists, review the corresponding article applicable to your target system. For example, for Active Directory omit lists, refer to the following article: [Active Directory Monitoring Scope](https://docs.netwrix.com/docs/auditor/10_8/admin/monitoringplans/activedirectory/scope)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-restrict-access-to-the-help-desk-portal-and-the-administrative-console.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-restrict-access-to-the-help-desk-portal-and-the-administrative-console.md
index 6221713ac7..c4e16f2226 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-restrict-access-to-the-help-desk-portal-and-the-administrative-console.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-restrict-access-to-the-help-desk-portal-and-the-administrative-console.md
@@ -39,5 +39,5 @@ By default, the **Administrator** role includes users belonging to the local `Ad
 2. Click the **Modify** button next to the group that you want to edit.
 3. In the dialog that opens, click **Add** to add a member to the selected security role, or select a user and click **Remove** to exclude them.
 
-[![User-added image](./images/ka04u000000HcVz_0EM700000004wyU.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAd1&feoid=00N700000032Pj2&refid=0EM700000004wyU)
+[![User-added image]./../0-images/ka04u000000HcVz_0EM700000004wyU.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAd1&feoid=00N700000032Pj2&refid=0EM700000004wyU)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-send-netwrix-auditor-logs.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-send-netwrix-auditor-logs.md
index 823df3c91f..2f0b943f7f 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-send-netwrix-auditor-logs.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-send-netwrix-auditor-logs.md
@@ -34,7 +34,7 @@ knowledge_article_id: kA00g000000H9efCAC
 
 Netwrix Technical Support might request a collection of your Netwrix Auditor logs for troubleshooting purposes. Make sure you gather the following items to help your Technical Support Engineer resolve your issue.
 
-- **Netwrix Auditor System Health event log**. Refer to the following article for additional information on exporting the System Health event log: [How to Save and Zip Netwrix Auditor System Health Event Log](/docs/kb/auditor/how-to-save-and-zip-netwrix-auditor-system-health-event-log)
+- **Netwrix Auditor System Health event log**. Refer to the following article for additional information on exporting the System Health event log: [How to Save and Zip Netwrix Auditor System Health Event Log](/docs/kb/auditor/monitoring-plans/event-log-management/how-to-save-and-zip-netwrix-auditor-system-health-event-log)
 
 - **Netwrix Auditor configuration files**. Navigate to ` %Working Folder%\AuditCore\ConfigServer ` and copy the **ConfigServer** folder. The default location of the **ConfigServer** folder is `C:\ProgramData\Netwrix Auditor\AuditCore\ConfigServer`.
 
@@ -71,13 +71,13 @@ Netwrix Technical Support might request a collection of your Netwrix Auditor log
 > **NOTE:** Once you have opened the **Open Tickets** page and identified the corresponding ticket (with a matching ticket #), you can attach the logs via one of the following ways:
 >
 > - Click the **Add attachments** button located under the **Actions** column of the ticket.
->   ![Customer Portal Attachments 1](./images/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3Qr.png)
+>   ![Customer Portal Attachments 1]./../0-images/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3Qr.png)
 >
 > - Expand the ticket details by clicking the **down carat (▼)** button and click the **plus (+)** button next to **Attachments**.
->   ![Customer Portal Attachments 2](./images/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3U5.png)
+>   ![Customer Portal Attachments 2]./../0-images/ka0Qk000000Bei5_00N0g000004CA0p_0EMQk000008M3U5.png)
 
 ## Related links
 
-- [How to Save and Zip Netwrix Auditor System Health Event Log](/docs/kb/auditor/how-to-save-and-zip-netwrix-auditor-system-health-event-log)
+- [How to Save and Zip Netwrix Auditor System Health Event Log](/docs/kb/auditor/monitoring-plans/event-log-management/how-to-save-and-zip-netwrix-auditor-system-health-event-log)
 - [Netwrix Customer Portal](https://www.netwrix.com/tickets.html#/tickets/open)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-view-custom-sensitive-file-categories-in-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-view-custom-sensitive-file-categories-in-netwrix-auditor.md
index 216b66e298..4331c9b5a4 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-view-custom-sensitive-file-categories-in-netwrix-auditor.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-view-custom-sensitive-file-categories-in-netwrix-auditor.md
@@ -50,7 +50,7 @@ Refer to the following steps:
    > **NOTE:** To delete parent terms, first delete the children terms.
 3. Once the built-in terms are cleared, create a new child term under the root taxonomy term. Right-click the root term and click **Add Child Term(s)**. Then, insert the new clues to the child term.
 
-   ![User-added image](./images/ka0Qk0000002kpx_0EMQk000003xxWz.png)
+   ![User-added image]./../0-images/ka0Qk0000002kpx_0EMQk000003xxWz.png)
 4. Set up your sources to include target files for the modified taxonomy. Wait for the files to be crawled and classified.
 
 The corresponding Netwrix Auditor report will include the used taxonomy and file owner.
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how_to_get_a_daily_list_of_users_addedremoved_from_any_ad_group.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how_to_get_a_daily_list_of_users_addedremoved_from_any_ad_group.md
index 44e09d39b8..c83511f99d 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how_to_get_a_daily_list_of_users_addedremoved_from_any_ad_group.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how_to_get_a_daily_list_of_users_addedremoved_from_any_ad_group.md
@@ -24,7 +24,7 @@ How to get the list of users added/removed from an Active Directory group on a r
 Create a subscription to Netwrix search results with the following parameters:
 
 1. **Filters**  
-   ![User-added image](./images/servlet_image_ebe11c05eb6f.png)  
+   ![User-added image]./../0-images/servlet_image_ebe11c05eb6f.png)  
 
    Windows records users adding or removing as a change to the group itself, since the group is an AD object. Therefore, the **Action** filter type is suggested to be *Modified*.
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/hyperlinks-in-custom-branding.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/hyperlinks-in-custom-branding.md
index 2b04a7a115..1b8f9853ee 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/hyperlinks-in-custom-branding.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/hyperlinks-in-custom-branding.md
@@ -37,5 +37,5 @@ This can be done by using html tags.
 
 3. Modify the URL (`https://netwrix.com/`) and caption (`Support link`) as needed
 
-![User-added image](./images/ka04u000000HcNU_0EM700000004xUL.png)
+![User-added image]./../0-images/ka04u000000HcNU_0EM700000004xUL.png)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/images-are-not-shown.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/images-are-not-shown.md
index dd697210bf..546c666d1d 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/images-are-not-shown.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/images-are-not-shown.md
@@ -25,7 +25,7 @@ knowledge_article_id: kA00g000000H9YHCA0
 ## Question
 Web Portal shows no images just red boxes. Whats the case?
 
-![User-added image](./images/ka04u00000117dv_0EM7000000050pb.png)
+![User-added image]./../0-images/ka04u00000117dv_0EM7000000050pb.png)
 
 ## Answer
 The issue occurs because IIS cannot display images because of configuration.  
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/improving_file_system_bulk_import_performance_by_adding_indexes_in_netwrix_access_analyzer_v12.0.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/improving_file_system_bulk_import_performance_by_adding_indexes_in_netwrix_access_analyzer_v12.0.md
index 4c0df808ef..b2d8780f1a 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/improving_file_system_bulk_import_performance_by_adding_indexes_in_netwrix_access_analyzer_v12.0.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/improving_file_system_bulk_import_performance_by_adding_indexes_in_netwrix_access_analyzer_v12.0.md
@@ -60,7 +60,7 @@ CREATE INDEX SA_FSAA_ResourceMap_DLPID_IDX ON SA_FSAA_ResourceMap (HOST, DLPID);
 SELECT name FROM sys.indexes WHERE object_id = OBJECT_ID('SA_FSAA_ResourceMap');
 ```
 
-![SQL Server Management Studio showing index names for the SA_FSAA_ResourceMap table](./images/servlet_image_69209af72eac.png)
+![SQL Server Management Studio showing index names for the SA_FSAA_ResourceMap table]./../0-images/servlet_image_69209af72eac.png)
 
 7. **Restart File System Bulk Imports**  
    Once indexes are confirmed, resume any imports that were previously paused.
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/lockouts-are-not-tracked.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/lockouts-are-not-tracked.md
index 34a45f9a98..607a2ff174 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/lockouts-are-not-tracked.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/lockouts-are-not-tracked.md
@@ -36,9 +36,9 @@ First, make sure the Windows security log on your DC is reachable: connect via *
 4. Create a new DWORD named `UseWatcher` and set its value to `1`.
 5. Restart the Netwrix Account Lockout Examiner service via the Services snap-in.
 
-[![User-added image](./images/ka04u000000HcWD_0EM700000004udF.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAcl&feoid=00N700000032Pj2&refid=0EM700000004udF)
+[![User-added image]./../0-images/ka04u000000HcWD_0EM700000004udF.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAcl&feoid=00N700000032Pj2&refid=0EM700000004udF)
 
 If the above doesn't help, try to change the value of the `UseWMI` registry key to `0`.
 
-[![User-added image](./images/ka04u000000HcWD_0EM700000004wzc.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAcl&feoid=00N700000032Pj2&refid=0EM700000004wzc)
+[![User-added image]./../0-images/ka04u000000HcWD_0EM700000004wzc.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAcl&feoid=00N700000032Pj2&refid=0EM700000004wzc)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/log-overwrites-warnings.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/log-overwrites-warnings.md
index aab0a680ce..3d0bace826 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/log-overwrites-warnings.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/log-overwrites-warnings.md
@@ -56,14 +56,14 @@ NOTE: for **Security** and **System** event logs, you can figure out who cleared
    IMPORTANT: Before changing `Maximum log size`, make sure that the system drive has enough free space to store the event log of the maximum size. If not, the event log will grow and fill up all free space on the system drive and the system will stop responding.
 4. Make sure the **Overwrite events as needed** option is selected and click **Apply**.
 
-![Configuring maximum log size](./images/ka04u000000HcXR_0EM700000004vPE.png)
+![Configuring maximum log size]./../0-images/ka04u000000HcXR_0EM700000004vPE.png)
 
 ## Procedure 2: Increase `Maximum log size` via Group Policy Object
 
 1. Go to **Start** / **Administrative Tools** / **Group Policy Management**.
 2. In the window displayed, go to **Group Policy Management** / **Forest Name** / **Domains** / **Group Policy Objects** / right-click the appropriate policy (or create new) and select **Edit**. **Group Policy Management Editor** starts.
 
-![Group Policy Management](./images/ka04u000000HcXR_0EM700000004vPJ.png)
+![Group Policy Management]./../0-images/ka04u000000HcXR_0EM700000004vPJ.png)
 
 3. In the left pane, go to **Computer Configuration** / **Policies** / **Windows Settings** / **Security Settings** / **Event Log**. Right-click **Retention method for `<problematic event log>`**, choose **Properties**.
 4. In the **Security Policy Setting** tab, check the **Define this policy setting** box and select **Do not overwrite events (clear log manually)**. Click OK.
@@ -71,7 +71,7 @@ NOTE: for **Security** and **System** event logs, you can figure out who cleared
 6. In the **Security Policy Setting** tab, check the **Define this policy setting** box and set the size to `4194240` Kb as recommended by Microsoft: http://support.microsoft.com/kb/957662  
    IMPORTANT: The affected machines must have enough free space on their system drives for storing the event log of the maximum size. If not, the event log will grow and fill up all free space on the system drive and the system will stop responding.
 
-![Group Policy Management Editor](./images/ka04u000000HcXR_0EM700000004vPO.png)
+![Group Policy Management Editor]./../0-images/ka04u000000HcXR_0EM700000004vPO.png)
 
 7. Close **Group Policy Object Editor** and link the configured GPO to the required OUs and containers in **Group Policy Management**.
 8. OPTIONAL: Upgrade the group policies on the problematic servers by performing the following command:  
@@ -85,7 +85,7 @@ NOTE: for **Security** and **System** event logs, you can figure out who cleared
 2. When the **Resultant Set of Policy** is processed, expand **Computer Configuration** / **Windows Setting** / **Security Settings** / **Event Log**.
 3. Make sure that the **Retention method for `<problematic log>`** policy setting has the **Not Defined** or **Manually** value set. If not, change this setting using **Group Policy Management Editor** as described in **Procedure 2**.
 
-![RSOP Results](./images/ka04u000000HcXR_0EM700000004vPT.png)
+![RSOP Results]./../0-images/ka04u000000HcXR_0EM700000004vPT.png)
 
 4. Perform the following steps:
    - Click **Start** / **Run**, type `eventvwr.msc` and press **Enter**. The **Event Viewer** window will be displayed.
@@ -94,7 +94,7 @@ NOTE: for **Security** and **System** event logs, you can figure out who cleared
    - Select the **Archive the log when full, do not overwrite events** radio button.
    - Click the **Clear Log** button. Click the **Apply** button.
 
-![Event Viewer Settings on Windows 2008](./images/ka04u000000HcXR_0EM700000004vPn.png)
+![Event Viewer Settings on Windows 2008]./../0-images/ka04u000000HcXR_0EM700000004vPn.png)
 
 NOTE: These maximum sizes are recommended by Microsoft: http://support.microsoft.com/kb/957662  
 IMPORTANT: Before you change `Maximum log size` and enable the **Archive events when full** option, make sure that the system drive has enough free space to store the event log and log's backup files of the maximum size. If not, the event log will grow and fill up all free space on the system drive and the system will stop responding.
@@ -110,5 +110,5 @@ IMPORTANT: Before you change `Maximum log size` and enable the **Archive events
 - `ProcessBackupLogs` set to `1`
 - `CleanAutoBackupLogs` set to `X` (if you want the archives to be removed when all events in them are older than `X` hours, for example: `24` hours).
 
-![Event Log Manager Registry Settings](./images/ka04u000000HcXR_0EM700000004vPs.png)
+![Event Log Manager Registry Settings]./../0-images/ka04u000000HcXR_0EM700000004vPs.png)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/long-data-collection-improving-the-performance.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/long-data-collection-improving-the-performance.md
index e6ed3c217b..255ef614bf 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/long-data-collection-improving-the-performance.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/long-data-collection-improving-the-performance.md
@@ -89,7 +89,7 @@ In case you have an Event Log Manager plan set up, make sure it doesn't monitor
 
 ### Omit lists
 
-You can limit the monitoring scope in your environment via omit lists — this allows to proactively decrease the DB loads as changes for omitted items are not recorded. For additional information on how to exclude users and objects via Netwrix Auditor UI, refer to the following article: [How to Exclude Users and Objects from Monitoring Scope in Netwrix Auditor UI](/docs/kb/auditor/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui). For additional information on how to use omit lists, refer to the following article: [How to Use Omit Lists](https://docs.netwrix.com/docs/kb/auditor/how-to-use-omit-lists)
+You can limit the monitoring scope in your environment via omit lists — this allows to proactively decrease the DB loads as changes for omitted items are not recorded. For additional information on how to exclude users and objects via Netwrix Auditor UI, refer to the following article: [How to Exclude Users and Objects from Monitoring Scope in Netwrix Auditor UI](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui). For additional information on how to use omit lists, refer to the following article: [How to Use Omit Lists](https://docs.netwrix.com/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists)
 
 ### Related articles
 
@@ -99,5 +99,5 @@ You can limit the monitoring scope in your environment via omit lists — this a
 - [Configure Database Retention](https://docs.netwrix.com/docs/auditor/10_8/admin/settings/auditdatabase#configure-database-retention)
 - [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
 - [Manage Data Sources](https://docs.netwrix.com/docs/auditor/10_8/admin/monitoringplans/datasources)
-- [How to Exclude Users and Objects from Monitoring Scope in Netwrix Auditor UI](/docs/kb/auditor/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui)
-- [How to Use Omit Lists](https://docs.netwrix.com/docs/kb/auditor/how-to-use-omit-lists)
+- [How to Exclude Users and Objects from Monitoring Scope in Netwrix Auditor UI](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui)
+- [How to Use Omit Lists](https://docs.netwrix.com/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists)
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/malformed-control-request.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/malformed-control-request.md
index f5207e5b9e..fef13bd066 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/malformed-control-request.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/malformed-control-request.md
@@ -34,7 +34,7 @@ It should be a reply to lockout notification and shall have the code specified a
 
 For example:
 
-![User-added image](./images/ka04u000000HcT2_0EM700000005kEC.png)
+![User-added image]./../0-images/ka04u000000HcT2_0EM700000005kEC.png)
 
 ---
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md
index 696e2a6bfd..118cfdf386 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md
@@ -73,12 +73,12 @@ By default, Long-Term Archive is located at `C:\ProgramData\Netwrix Auditor\Data
 
 Navigate to your Long-Term Archive location and copy the entire folder. Proceed by transferring Long-Term Archive to the new Netwrix Auditor server. While you can migrate it to the default location, it is recommended to keep Long-Term Archive on a separate drive. This will prevent rapid storage consumption on the C drive. Take note of where you have placed Long-Term Archive on the new Netwrix Auditor server.
 
-> **NOTE:** You can split the Long-Term Archive migration into two steps if the size of your ActivityRecords folder doesn't allow for a quick migration. For additional information, refer to the following article: How to Move Long-Term Archive to a New Location: [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location)
+> **NOTE:** You can split the Long-Term Archive migration into two steps if the size of your ActivityRecords folder doesn't allow for a quick migration. For additional information, refer to the following article: How to Move Long-Term Archive to a New Location: [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location)
 
 ### SQL Databases
 
-It is important to decide on migration of your SQL databases or keeping them in your current SQL Server instance during the Netwrix Auditor migration. In case you'd like to migrate your SQL Server databases, refer to the following article for additional information:[How to Migrate Netwrix Auditor Databases to Another SQL Server Instance](/docs/kb/auditor/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance)
-Once SQL migration is complete, refer to the following article for additional information on Report Server Database deployment:[Deploying the Report Server Database](/docs/kb/auditor/deploying-the-report-server-database)
+It is important to decide on migration of your SQL databases or keeping them in your current SQL Server instance during the Netwrix Auditor migration. In case you'd like to migrate your SQL Server databases, refer to the following article for additional information:[How to Migrate Netwrix Auditor Databases to Another SQL Server Instance](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance)
+Once SQL migration is complete, refer to the following article for additional information on Report Server Database deployment:[Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)
 
 ### Final Steps
 
@@ -110,16 +110,16 @@ Start-Service -Displayname Netwrix*
    3. In Netwrix Auditor **Settings** menu, select **Audit Databse** in the left pane and click **Modify** under **Audit database settings**.
    4. Specify the SQL Server instance name and credentials of the account used to write data to SQL databases. Refer to the following articles for additional information on SQL permissions and report server database deployment:
       - [Requirements for SQL Server to Store Audit Data](https://docs.netwrix.com/docs/auditor/10_8/requirements/sqlserver)
-      - [Deploying the Report Server Database](/docs/kb/auditor/deploying-the-report-server-database)
+      - [Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)
 
 ### Important Notes Post-Migration
 
-- If you've previously had any omit lists configured, you will have to either copy the contents of these omit lists or copy the files to the new server. For additional information on omit lists and their locations, refer to the following article: [How to Use Omit Lists](/docs/kb/auditor/how-to-use-omit-lists)
+- If you've previously had any omit lists configured, you will have to either copy the contents of these omit lists or copy the files to the new server. For additional information on omit lists and their locations, refer to the following article: [How to Use Omit Lists](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists)
 - You cannot migrate Event Log Manager or its configuration files. Remember to manually copy the configuration over to the new server. Event Log Manager data will be migrated in case you've migrated SQL databases.
 - Netwrix Password Expiration Notifier and Netwrix Inactive Users Tracker do not store any data — their reports are sent daily via email. For more information on how to migrate these Netwrix tools, refer to the following articles:
-  - [Migrate PEN to a Different Server](/docs/kb/auditor/migrate-netwrix-password-expiration-notifier-to-a-different-server)
-  - How to migrate Netwrix Inactive Users Tracker to other servers: [How to Migrate Netwrix Inactive Users Tracker to Other Servers](/docs/kb/auditor/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers)
-- User Activity data will not be collected until the Core Service is redeployed after migration. For more information on how to reset Netwrix Auditor User Activity Core Service to allow the monitoring plan to redeploy with the new configuration settings and registry keys, review the following article: [Uninstalling User Activity Monitoring Agents](/docs/kb/auditor/uninstalling-user-activity-monitoring-agents)
+  - [Migrate PEN to a Different Server](/docs/kb/auditor/monitoring-plans/password-expiration-notifier/migrate-netwrix-password-expiration-notifier-to-a-different-server)
+  - How to migrate Netwrix Inactive Users Tracker to other servers: [How to Migrate Netwrix Inactive Users Tracker to Other Servers](/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers)
+- User Activity data will not be collected until the Core Service is redeployed after migration. For more information on how to reset Netwrix Auditor User Activity Core Service to allow the monitoring plan to redeploy with the new configuration settings and registry keys, review the following article: [Uninstalling User Activity Monitoring Agents](/docs/kb/auditor/monitoring-plans/user-activity-monitoring/uninstalling-user-activity-monitoring-agents)
 
 ### Validation Checklist
 
@@ -138,12 +138,12 @@ Monitor the system over the next few days to confirm the migration has been comp
 
 - [Software Requirements](https://docs.netwrix.com/docs/auditor/10_8/requirements/software)
 - [Hardware Requirements](https://docs.netwrix.com/docs/auditor/10_8/requirements/console)
-- [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location)
-- [How to Migrate Netwrix Auditor Databases to Another SQL Server Instance](/docs/kb/auditor/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance)
-- [Deploying the Report Server Database](/docs/kb/auditor/deploying-the-report-server-database)
+- [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location)
+- [How to Migrate Netwrix Auditor Databases to Another SQL Server Instance](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance)
+- [Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)
 - [Requirements for SQL Server to Store Audit Data](https://docs.netwrix.com/docs/auditor/10_8/requirements/sqlserver)
 [Integration API](https://docs.netwrix.com/docs/auditor/10_8/api/overview)
-- [Specified Logon Session Does Not Exist Error in Netwrix Auditor](/docs/kb/auditor/specified-logon-session-does-not-exist-error-in-netwrix-auditor)
+- [Specified Logon Session Does Not Exist Error in Netwrix Auditor](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/specified-logon-session-does-not-exist-error-in-netwrix-auditor)
 - [How to Apply Netwrix Auditor License](/docs/kb/auditor/how-to-apply-netwrix-auditor-license)
-- [Migrate PEN to a Different Server](/docs/kb/auditor/migrate-netwrix-password-expiration-notifier-to-a-different-server)
-- [How to Migrate Netwrix Inactive Users Tracker to Other Servers](/docs/kb/auditor/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers)
+- [Migrate PEN to a Different Server](/docs/kb/auditor/monitoring-plans/password-expiration-notifier/migrate-netwrix-password-expiration-notifier-to-a-different-server)
+- [How to Migrate Netwrix Inactive Users Tracker to Other Servers](/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers)
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-configuration-server-service-fails-to-start-too-many-methods-to-fire-events-from.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-configuration-server-service-fails-to-start-too-many-methods-to-fire-events-from.md
index 1af621e19d..aac87634b7 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-configuration-server-service-fails-to-start-too-many-methods-to-fire-events-from.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-configuration-server-service-fails-to-start-too-many-methods-to-fire-events-from.md
@@ -32,11 +32,11 @@ Windows could not start the Netwrix Auditor Configuration Server Service service
 Error 0x80040209: An interface has too many methods to fire events from.
 ```
 
-![Screenshot 1](./images/ka04u00000117L8_0EM4u000008LCum.png)
+![Screenshot 1]./../0-images/ka04u00000117L8_0EM4u000008LCum.png)
 
 Other services are running as expected.
 
-![Screenshot 2](./images/ka04u00000117L8_0EM4u000008LCuw.png)
+![Screenshot 2]./../0-images/ka04u00000117L8_0EM4u000008LCuw.png)
 
 - The following error is prompted in the main Netwrix Auditor screen:
 
@@ -45,7 +45,7 @@ Connection failed
 Access is denied
 ```
 
-![Screenshot 3](./images/ka04u00000117L8_0EM4u000008M2Tz.png)
+![Screenshot 3]./../0-images/ka04u00000117L8_0EM4u000008M2Tz.png)
 
 Upon checking Services running, Netwrix Auditor Configuration Server Service appears to have stopped. When attempting to restart the service, the same error is prompted.
 
@@ -64,7 +64,7 @@ Refer to the following steps to troubleshoot the issue:
 1. Back up the ConfigServer folder located in ` %Working Folder%\AuditCore\ConfigServer`.
 2. Delete all files in the original ConfigServer folder except for the StorageBackups folder and the Configuration.xml file.
 
-![ConfigServer folder contents](./images/ka04u00000117L8_0EM4u000008LCv1.png)
+![ConfigServer folder contents]./../0-images/ka04u00000117L8_0EM4u000008LCv1.png)
 
 3. Restart Netwrix Auditor Configuration Server Service.
 4. Make sure the following services are running (including all the monitoring plan-related services):
@@ -77,11 +77,11 @@ In case the aforementioned steps did not help, refer to the following steps to t
 1. Back up the ConfigServer folder located in ` %Working Folder%\AuditCore\ConfigServer`.
 2. Delete all files in the original ConfigServer folder except for the StorageBackups folder. It is located in ` %Working Folder%\AuditCore\ConfigServer`.
 
-![ConfigServer StorageBackups folder](./images/ka04u00000117L8_0EM4u000008LCvL.png)
+![ConfigServer StorageBackups folder]./../0-images/ka04u00000117L8_0EM4u000008LCvL.png)
 
 3. Copy the Configuration.xml file from the latest **BACKUP_%DATE%**\%GUID% folder.
 
-![Backup folder selection](./images/ka04u00000117L8_0EM4u000008LCvk.png)
+![Backup folder selection]./../0-images/ka04u00000117L8_0EM4u000008LCvk.png)
 
 4. Paste the copied Configuration.xml file to ` %Working Folder%\AuditCore\ConfigServer`.
 5. Restart Netwrix Auditor Configuration Server Service.
@@ -92,7 +92,7 @@ In case the aforementioned steps did not help, refer to the following steps to t
 
 > **NOTE:** If these steps did not help, try using the Configuration.xml file from the second to the last **BACKUP_%DATE%**\%GUID% folder. Paste the file to ` %Working Folder%\AuditCore\ConfigServer` and restart Netwrix Auditor services.
 
-![Configuration restored](./images/ka04u00000117L8_0EM4u000008LCwE.png)
+![Configuration restored]./../0-images/ka04u00000117L8_0EM4u000008LCwE.png)
 
 > **NOTE:** If the issue reoccurs after some time, contact [Netwrix Technical Support](https://www.netwrix.com/open_a_ticket.html).
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-consumes-disk-space-recommendations.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-consumes-disk-space-recommendations.md
index edeebacf8c..cef7fb3313 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-consumes-disk-space-recommendations.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-consumes-disk-space-recommendations.md
@@ -42,20 +42,20 @@ The following recommendations will allow you to reduce disk space consumption:
 
    Follow these Knowledge Base articles for additional information:
 
-   - [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location)
-   - [How to Prevent Long-Term Archive Overflow](/docs/kb/auditor/how-to-prevent-long-term-archive-overflow)
+   - [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location)
+   - [How to Prevent Long-Term Archive Overflow](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-prevent-long-term-archive-overflow)
 
 3. Migrate Working Folder to a new location.
 
    The size of your Working Folder may grow significantly (normally, up to `10 – 20GB`) depending on the workload, especially during activity peaks. If your system drive capacity is limited, you might want to keep the temporary files and trace logs on another drive, i.e. change the Working Folder default location.
 
-   For additional information on how to move the Working Folder, refer to the following article: [How to Migrate Netwrix Auditor Working Folder to a New Location](/docs/kb/auditor/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location).
+   For additional information on how to move the Working Folder, refer to the following article: [How to Migrate Netwrix Auditor Working Folder to a New Location](/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location).
 
 4. Remove the **Netwrix Backup** folder. Netwrix strongly recommends keeping the backups for supported product versions.
 
-   For additional information about the Backup folder, refer to the following article: [Backups Folder in Netwrix Auditor](/docs/kb/auditor/backups-folder-in-netwrix-auditor).
+   For additional information about the Backup folder, refer to the following article: [Backups Folder in Netwrix Auditor](/docs/kb/auditor/system-administration/backup-and-recovery/backups-folder-in-netwrix-auditor).
 
-5. Additional space might be consumed by the **Local DB** in the **ShortTerm** folder; this can occur when the SQL communication is not working properly or the DB files getting corrupted. Follow the resolution steps in the article: [Netwrix Auditor System Health Log Contains EventID 2002](https://docs.netwrix.com/docs/kb/auditor/netwrix-auditor-health-log-contains-eventid-2002).
+5. Additional space might be consumed by the **Local DB** in the **ShortTerm** folder; this can occur when the SQL communication is not working properly or the DB files getting corrupted. Follow the resolution steps in the article: [Netwrix Auditor System Health Log Contains EventID 2002](https://docs.netwrix.com/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-health-log-contains-eventid-2002).
 
 6. Check the size of the Windows page file. If it grows big, this indicates lack of RAM and Windows tries to compensate it with disk space. Adding more RAM helps fixing disk space consumption by page files.
 
@@ -73,7 +73,7 @@ The following recommendations will allow you to reduce disk space consumption:
 
 ## Related Articles
 
-- [Error: Netwrix Auditor for File Servers Audit Service Terminated Unexpectedly](/docs/kb/auditor/error-netwrix-auditor-for-file-servers-audit-service-terminated-unexpectedly)
+- [Error: Netwrix Auditor for File Servers Audit Service Terminated Unexpectedly](/docs/kb/auditor/configuration-and-setup/file-server-auditing/error-netwrix-auditor-for-file-servers-audit-service-terminated-unexpectedly)
 - [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
-- [How to Add Additional Space to Long-Term Archive](/docs/kb/auditor/how-to-add-additional-space-to-long-term-archive)
-- [Netwrix Auditor System Health Log Contains EventID 2002](https://docs.netwrix.com/docs/kb/auditor/netwrix-auditor-health-log-contains-eventid-2002)
+- [How to Add Additional Space to Long-Term Archive](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-add-additional-space-to-long-term-archive)
+- [Netwrix Auditor System Health Log Contains EventID 2002](https://docs.netwrix.com/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-health-log-contains-eventid-2002)
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-licensing-faqs.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-licensing-faqs.md
index 2b3823d4f2..93df3f0b00 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-licensing-faqs.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-licensing-faqs.md
@@ -67,10 +67,10 @@ To count the number of licenses, you should provide the number of `enabled AD us
 > **IMPORTANT:**
 > - Service accounts are also counted. The accounts under which the services run in your infrastructure are included in the license count and, eventually, in the cost of a license.
 > - Deleted, disabled, group, or computer accounts are not included in the license count.
-> - You can use either `Omitallowedpathlist` omit list to reduce user count by omitting certain OUs from being audited or specify omitted OUs in the Netwrix Auditor UI. You will not gain any information from these OUs; however, the amount of licenses will be reduced. For additional information on reducing the user count via Netwrix Auditor UI, refer to the following article: [Reducing the Used Active Directory and Entra ID License Counts](/docs/kb/auditor/reducing-the-used-active-directory-and-entra-id-license-counts). For additional information on omit lists, refer to the following article: [How to Use Omit Lists](/docs/kb/auditor/how-to-use-omit-lists).
+> - You can use either `Omitallowedpathlist` omit list to reduce user count by omitting certain OUs from being audited or specify omitted OUs in the Netwrix Auditor UI. You will not gain any information from these OUs; however, the amount of licenses will be reduced. For additional information on reducing the user count via Netwrix Auditor UI, refer to the following article: [Reducing the Used Active Directory and Entra ID License Counts](/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts). For additional information on omit lists, refer to the following article: [How to Use Omit Lists](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists).
 
 ## What Should I Provide for Netwrix Auditor for Network Devices Licensing?
-You should provide the number of `source IP addresses` of your network devices. This count is used to estimate the number of licenses required to audit the Network Devices data source. To learn more, read the How to Count the Number of Your Network Devices in Your Configuration article: [How to count the number of your network devices in your configuration?](/docs/kb/auditor/how-to-count-the-number-of-your-network-devices-in-your-configuration).
+You should provide the number of `source IP addresses` of your network devices. This count is used to estimate the number of licenses required to audit the Network Devices data source. To learn more, read the How to Count the Number of Your Network Devices in Your Configuration article: [How to count the number of your network devices in your configuration?](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-count-the-number-of-your-network-devices-in-your-configuration).
 > **IMPORTANT:** You should count all physical devices regardless of your forwarding configuration.
 
 ## What Should I Provide for Netwrix Auditor for Oracle Database Licensing?
@@ -89,7 +89,7 @@ For per-server licensing, count and provide the total number of the servers (phy
 ## What Should I Provide for Netwrix Auditor for Microsoft Entra ID Licensing?
 You should provide the number of `enabled Microsoft Entra ID user accounts`. Starting from version 9.96, guest/external users are not included in the license count. Follow the instructions outlined in the How to Determine the Count of Enabled Microsoft Entra ID Accounts article: /docs/kb/auditor/determining-the-number-of-enabled-microsoft-entra-id-accounts.
 
-You can use `omitUPNlist.txt` omit list to reduce user count by omitting certain user UPNs from being audited. You will not gain any information on these users; however, the amount of licenses will be reduced. For additional information on reducing the user count via Netwrix Auditor UI, refer to the following article: [Reducing the Used Active Directory and Entra ID License Counts](/docs/kb/auditor/reducing-the-used-active-directory-and-entra-id-license-counts). For additional information on omit lists, refer to the following article: [How to Use Omit Lists](/docs/kb/auditor/how-to-use-omit-lists).
+You can use `omitUPNlist.txt` omit list to reduce user count by omitting certain user UPNs from being audited. You will not gain any information on these users; however, the amount of licenses will be reduced. For additional information on reducing the user count via Netwrix Auditor UI, refer to the following article: [Reducing the Used Active Directory and Entra ID License Counts](/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts). For additional information on omit lists, refer to the following article: [How to Use Omit Lists](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists).
 
 ## What Should I Provide for Netwrix Auditor for Exchange Licensing?
 For the Exchange data source, Netwrix Auditor offers a convenient hybrid pricing model specifically designed for prospects with a hybrid Exchange (on-premises Exchange Server and Exchange Online) deployment. You can also have an on-premises-only or a cloud-only Exchange environment.
@@ -97,7 +97,7 @@ To get a hybrid Exchange license, you need to provide the `total number of user
 
 For example, if you have 200 online mailboxes and 300 on-premises Exchange mailboxes, you need to purchase a license for 500 mailboxes.
 
-To calculate the number of user mailboxes used in your Microsoft Office 365 tenants, refer to the guidelines presented in the article titled How to Count Number of Licenses Required for Auditing a Microsoft Office 365 Tenant: [How to count number of licenses required for auditing a Microsoft Office 365 tenant?](/docs/kb/auditor/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant).
+To calculate the number of user mailboxes used in your Microsoft Office 365 tenants, refer to the guidelines presented in the article titled How to Count Number of Licenses Required for Auditing a Microsoft Office 365 Tenant: [How to count number of licenses required for auditing a Microsoft Office 365 tenant?](/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant).
 
 > **IMPORTANT:** A **user mailbox** can be a personal mailbox, an Online Archive mailbox, or both. Shared and resource mailboxes do not count. For example, if an Exchange Online user has one personal mailbox and one Online Archive mailbox, this user will be counted as a single licensed object. If a user has no Online Archive mailbox but three personal mailboxes, this will be counted as three licensed objects.
 
@@ -126,7 +126,7 @@ To request more licensing information, please contact licensing@netwrix.com.
 You can use the **Licenses** window to review the status of your current licenses, update them, and add new licenses.
 On the Netwrix Auditor main screen, click the **Settings** tile and then select **Licenses**. The window will look as shown below.
 
-![Licenses window in Auditor UI showing license status and counts](./images/ka0Qk000000DbzR_0EM4u000002PbUM.png)
+![Licenses window in Auditor UI showing license status and counts]./../0-images/ka0Qk000000DbzR_0EM4u000002PbUM.png)
 
 Here:
 
@@ -140,11 +140,11 @@ You may choose to no longer audit a data source, and thus not renew the license
 
 ## Related Articles
 - [Determining the Number of Enabled Active Directory User Accounts](/docs/kb/auditor/determining-the-number-of-enabled-active-directory-user-accounts)
-- [Reducing the Used Active Directory and Entra ID License Counts](/docs/kb/auditor/reducing-the-used-active-directory-and-entra-id-license-counts)
-- [How to Use Omit Lists](/docs/kb/auditor/how-to-use-omit-lists)
-- [How to count the number of your network devices in your configuration?](/docs/kb/auditor/how-to-count-the-number-of-your-network-devices-in-your-configuration)
+- [Reducing the Used Active Directory and Entra ID License Counts](/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts)
+- [How to Use Omit Lists](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists)
+- [How to count the number of your network devices in your configuration?](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-count-the-number-of-your-network-devices-in-your-configuration)
 - [Oracle Processor Core Factor Table](http://www.oracle.com/us/corporate/contracts/processor-core-factor-table-070634.pdf)
-- [How to Count Number of CPU Cores on Your Oracle Database Deployment](https://docs.netwrix.com/docs/kb/auditor/how-to-count-number-of-cpu-cores-on-your-oracle-database-deployment)
+- [How to Count Number of CPU Cores on Your Oracle Database Deployment](https://docs.netwrix.com/docs/kb/auditor/system-administration/database-management/how-to-count-number-of-cpu-cores-on-your-oracle-database-deployment)
 - [How to Determine the Count of Enabled Microsoft Entra ID Accounts](https://docs.netwrix.com/docs/kb/auditor/determining-the-number-of-enabled-microsoft-entra-id-accounts#instructions)
-- [How to count number of licenses required for auditing a Microsoft Office 365 tenant?](/docs/kb/auditor/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant)
+- [How to count number of licenses required for auditing a Microsoft Office 365 tenant?](/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/how-to-count-number-of-licenses-required-for-auditing-a-microsoft-office-365-tenant)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-stops-working-after-upgrading-host-server-windows.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-stops-working-after-upgrading-host-server-windows.md
index 142c5ac083..3ff8f2d83f 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-stops-working-after-upgrading-host-server-windows.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-stops-working-after-upgrading-host-server-windows.md
@@ -29,7 +29,7 @@ knowledge_article_id: kA04u000000PoKECA0
 - Netwrix Auditor stops working after the Windows version on the Netwrix host server was upgraded.
 - Monitoring plans are disabled.
 - License status for a product states **Unavailable**.  
-  ![1.png](./images/ka04u00000116G7_0EM4u000007ceka.png)
+  ![1.png]./../0-images/ka04u00000116G7_0EM4u000007ceka.png)
 
 ## Cause
 
@@ -42,7 +42,7 @@ Windows Setup suite overwrites license-related settings of Netwrix Auditor durin
 Re-apply your license:
 
 1. In the main Netwrix Auditor screen, go to **Settings** > **Licenses** and click **Update**.  
-   ![2.png](./images/ka04u00000116G7_0EM4u000007cekk.png)
+   ![2.png]./../0-images/ka04u00000116G7_0EM4u000007cekk.png)
 2. Navigate to your `.lic` file and select the file.
 3. Click **Open**.
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/no-monitoring-plans-found-in-netwrix-auditor.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/no-monitoring-plans-found-in-netwrix-auditor.md
index c8d60368b6..460d91c67e 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/no-monitoring-plans-found-in-netwrix-auditor.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/no-monitoring-plans-found-in-netwrix-auditor.md
@@ -30,7 +30,7 @@ When attempting to view a report, the **Monitoring Plan** dropdown list reads as
 NO MONITORING PLANS FOUND
 ```
 
-![Monitoring Plan dropdown showing NO MONITORING PLANS FOUND](./images/ka04u00000117TM_0EM4u000008M6Wx.png)
+![Monitoring Plan dropdown showing NO MONITORING PLANS FOUND]./../0-images/ka04u00000117TM_0EM4u000008M6Wx.png)
 
 ## Causes
 
@@ -95,7 +95,7 @@ NO MONITORING PLANS FOUND
 >
 > - The account specified in **Audit database settings** for Report Server should have local admin permissions, as well as permissions to create folders, and upload folders.
 > - Any folder/report access permissions set up in Report Manager directly instead of monitoring plans delegation will have to be reconfigured. Alternatively, you can delete a particular affected report instead of deleting the entire **Netwrix Auditor** reports folder.
-> - In case you've previously added a custom report, you will have to manually set it up again. This could apply to the report provided in the following article: [How to Monitor Print Service Activity](/docs/kb/auditor/how-to-monitor-print-service-activity).
+> - In case you've previously added a custom report, you will have to manually set it up again. This could apply to the report provided in the following article: [How to Monitor Print Service Activity](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-monitor-print-service-activity).
 
 ## Related articles
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/object-type-and-what-changed-columns-are-empty.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/object-type-and-what-changed-columns-are-empty.md
index f68c515ddc..8e39fd29bb 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/object-type-and-what-changed-columns-are-empty.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/object-type-and-what-changed-columns-are-empty.md
@@ -22,7 +22,7 @@ knowledge_article_id: kA00g000000H9ZpCAK
 
 # Object type" and "What Changed" columns are empty
 
-![User-added](./images/servlet_image_3823966b1661.png)
+![User-added]./../0-images/servlet_image_3823966b1661.png)
 
 ---
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/reading-log-status.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/reading-log-status.md
index a7d303e40b..1f397eb89a 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/reading-log-status.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/reading-log-status.md
@@ -26,7 +26,7 @@ knowledge_article_id: kA00g000000H9TZCA0
 
 In NetWrix Account Lockout Examiner Console, a domain controller has a yellow exclamation mark in front of the **DC Name** column of the **Monitored Domain Controllers** grid. Connection status is shown **Reading log**. Lockout events from this domain controller cannot be read by the program as well.
 
-![User-added image](./images/ka04u000000HcNK_0EM700000004x01.png)
+![User-added image]./../0-images/ka04u000000HcNK_0EM700000004x01.png)
 
 ---
 
@@ -43,5 +43,5 @@ To fix the issue, do the following:
 3. In the right pane, double-click `readLog`, specify `0` in the Value data field and click **OK**.
 4. In NetWrix Account Lockout Examiner Console main menu bar, navigate to **File - Settings** and click **OK** to apply registry changes.
 
-![User-added image](./images/ka04u000000HcNK_0EM700000004wzw.png)
+![User-added image]./../0-images/ka04u000000HcNK_0EM700000004wzw.png)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/response-action-example-moving-user-account-to-the-quarantine-ou.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/response-action-example-moving-user-account-to-the-quarantine-ou.md
index bf0b026b7e..16490e212e 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/response-action-example-moving-user-account-to-the-quarantine-ou.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/response-action-example-moving-user-account-to-the-quarantine-ou.md
@@ -87,7 +87,7 @@ foreach ($item in $Who)
 2. On the **General** tab, turn alerting on.  
 3. On the **Recipients** tab, specify your email address to get a notification on the alert triggering.  
 4. On the **Filters** tab, in the **Where** field, specify the name of file server you will be monitoring:  
-   ![response_action_filter.png](./images/ka0Qk000000EAE1_0EM4u000008LFTc.png)
+   ![response_action_filter.png]./../0-images/ka0Qk000000EAE1_0EM4u000008LFTc.png)
 5. On the **Thresholds** tab, leave the default values — the alert will be triggered if _10+_ files are created by the same user within _600_ seconds.  
 6. On the **Response Action** tab, do the following:
    - Enable the response action by switching the slider ON.
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/result_administrator_restricted_access_to_users_of_your_domain..md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/result_administrator_restricted_access_to_users_of_your_domain..md
index a655a0ec66..52ab8c45d4 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/result_administrator_restricted_access_to_users_of_your_domain..md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/result_administrator_restricted_access_to_users_of_your_domain..md
@@ -19,7 +19,7 @@ products:
 
 This article addresses the error message "Result: Administrator restricted access to users of your domain" encountered during the enrollment or password reset process on the Self-Service portal.
 
-![Error message indicating restricted access](./images/servlet_image_427ba59f8bbf.png)
+![Error message indicating restricted access]./../0-images/servlet_image_427ba59f8bbf.png)
 
 ## Symptom
 
@@ -43,4 +43,4 @@ To resolve the issue, ensure that the domain of the user account that receives t
 4. Ensure there are no additional symbols in the domain name (spaces, unnecessary characters).
 5. Add the domain if necessary.
 
-![Domains management in the Administrative portal](./images/servlet_image_cf580c3eff6f.png)
\ No newline at end of file
+![Domains management in the Administrative portal]./../0-images/servlet_image_cf580c3eff6f.png)
\ No newline at end of file
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/rif-document-is-not-compatible-with-this-code-version.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/rif-document-is-not-compatible-with-this-code-version.md
index 9f32351ef2..0fe022ad07 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/rif-document-is-not-compatible-with-this-code-version.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/rif-document-is-not-compatible-with-this-code-version.md
@@ -23,7 +23,7 @@ knowledge_article_id: kA00g000000H9Z2CAK
 
 You receive the following pop-up related to Reporting:
 
-![User-added image](./images/ka04u000000HcS3_0EM700000005HCR.png)
+![User-added image]./../0-images/ka04u000000HcS3_0EM700000005HCR.png)
 
 ---
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/set-up-direct-send-for-netwrix-auditor-and-netwrix-data-classification.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/set-up-direct-send-for-netwrix-auditor-and-netwrix-data-classification.md
index e604813b4a..02cc42f857 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/set-up-direct-send-for-netwrix-auditor-and-netwrix-data-classification.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/set-up-direct-send-for-netwrix-auditor-and-netwrix-data-classification.md
@@ -44,7 +44,7 @@ In the main Netwrix Auditor menu, click **Settings**. In the left pane, select t
 - Specify any email address for one of your Microsoft 365 or Office 365 accepted domains in the **Sender address** field. This email does not need to have a mailbox.
 - The use of SSL/TLS is optional.
 
-![Netwrix Auditor SMTP settings](./images/ka04u00000116zv_0EM4u000008Ll2v.png)
+![Netwrix Auditor SMTP settings]./../0-images/ka04u00000116zv_0EM4u000008Ll2v.png)
 
 > **NOTE:** When sending messages from a static IP, add the IP to your SPF record in your domain registrar's DNS settings to avoid having messages flagged as spam:
 >
@@ -61,7 +61,7 @@ In the main Netwrix Data Classification screen, click **Settings**. In the left
 - Specify any email address for one of your Microsoft 365 or Office 365 accepted domains in the **Sender address** field. This email does not need to have a mailbox.
 - The use of SSL is optional.
 
-![Netwrix Data Classification Email Server settings](./images/ka04u00000116zv_0EM4u000008LlzE.png)
+![Netwrix Data Classification Email Server settings]./../0-images/ka04u00000116zv_0EM4u000008LlzE.png)
 
 > **NOTE:** Direct send does not support SMTP AUTH. You can enter any SMTP credentials to proceed.
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-domain-param-parameter-is-missing-a-value.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-domain-param-parameter-is-missing-a-value.md
index dae4456b30..f860c14e94 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-domain-param-parameter-is-missing-a-value.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-domain-param-parameter-is-missing-a-value.md
@@ -25,7 +25,7 @@ knowledge_article_id: kA00g000000H9bECAS
 
 You are getting the following warning during AD snapshot report generation:
 
-![User-added image](./images/ka04u000000HcTz_0EM700000005AFx.png)
+![User-added image]./../0-images/ka04u000000HcTz_0EM700000005AFx.png)
 
 ---
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-name-of-the-process-that-caused-an-account-lockout-does-not-appear-in-examination-results.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-name-of-the-process-that-caused-an-account-lockout-does-not-appear-in-examination-results.md
index a11b618be3..da95d1c16b 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-name-of-the-process-that-caused-an-account-lockout-does-not-appear-in-examination-results.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-name-of-the-process-that-caused-an-account-lockout-does-not-appear-in-examination-results.md
@@ -27,7 +27,7 @@ Netwrix Account Lockout Examiner relies on the Windows audit system.
 
 The name of the process is logged in the invalid logon event (`4625` in Windows Vista/2008/7/2008R2, events `529-539` in older versions).
 
-[![User-added image](./images/ka04u000000HcW6_0EM700000004wzN.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAcv&amp;feoid=00N700000032Pj2&amp;refid=0EM700000004wzN)
+[![User-added image]./../0-images/ka04u000000HcW6_0EM700000004wzN.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAcv&amp;feoid=00N700000032Pj2&amp;refid=0EM700000004wzN)
 
 **Account Lockout Examiner** will not show the name of the process if either there is no corresponding invalid logon event or the name of the process is not tracked by Windows Audit.
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-order-in-which-domains-appear-in-the-managed-domains-list.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-order-in-which-domains-appear-in-the-managed-domains-list.md
index b4f54d5246..ddc6d65b9a 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-order-in-which-domains-appear-in-the-managed-domains-list.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/the-order-in-which-domains-appear-in-the-managed-domains-list.md
@@ -26,5 +26,5 @@ The list of managed domains shown on the **Self-Service Portal** is sorted alpha
 
 To sort domains, specify the domain name you want at the top in capital letters in the **Domains** section of the **Administrative Portal**.
 
-[![User-added image](./images/ka04u000000HcWF_0EM700000004xUV.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xdsq&feoid=00N700000032Pj2&refid=0EM700000004xUV)
+[![User-added image]./../0-images/ka04u000000HcWF_0EM700000004xUV.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xdsq&feoid=00N700000032Pj2&refid=0EM700000004xUV)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/unable-to-connect-to-remote-server.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/unable-to-connect-to-remote-server.md
index bc690a366c..cddb6ccb71 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/unable-to-connect-to-remote-server.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/unable-to-connect-to-remote-server.md
@@ -48,11 +48,11 @@ In case the **SQL Server Reporting Services** service has stopped − enable the
 
 In case of the failed SQL Server upgrade, repair your SQL Server installation. Learn more in [Repair a Failed SQL Server Installation · Microsoft 🤝](https://learn.microsoft.com/en-us/sql/database-engine/install-windows/repair-a-failed-sql-server-installation?view=sql-server-ver16).
 
-For additional information on expired evaluation license in SSRS, refer to the following article: [Error 503 − Reports and Subscriptions Not Working](/docs/kb/auditor/error-503-reports-and-subscriptions-not-working).
+For additional information on expired evaluation license in SSRS, refer to the following article: [Error 503 − Reports and Subscriptions Not Working](/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-503-reports-and-subscriptions-not-working).
 
 ## Related articles
 
-- [Error 503 − Reports and Subscriptions Not Working](/docs/kb/auditor/error-503-reports-and-subscriptions-not-working)
+- [Error 503 − Reports and Subscriptions Not Working](/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-503-reports-and-subscriptions-not-working)
 - [Start and Stop the Report Server Service · Microsoft 🤝](https://learn.microsoft.com/en-us/sql/reporting-services/report-server/start-and-stop-the-report-server-service?view=sql-server-ver16)
 - [Setting Time-out Values for Report and Shared Dataset Processing (SSRS) · Microsoft 🤝](https://learn.microsoft.com/en-us/sql/reporting-services/report-server/setting-time-out-values-for-report-and-shared-dataset-processing-ssrs?view=sql-server-ver16)
 - [Repair a Failed SQL Server Installation · Microsoft 🤝](https://learn.microsoft.com/en-us/sql/database-engine/install-windows/repair-a-failed-sql-server-installation?view=sql-server-ver16)
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/why-a-registry-key-is-missing-in-both-gpmc-and-local.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/why-a-registry-key-is-missing-in-both-gpmc-and-local.md
index f9bdf9fe93..005df246d6 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/why-a-registry-key-is-missing-in-both-gpmc-and-local.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/why-a-registry-key-is-missing-in-both-gpmc-and-local.md
@@ -39,7 +39,7 @@ Registry audit settings are required for some data sources, for example, for Log
 5. On this screen that pops up, add the required permissions.
 6. On the next screen, you’ll be prompted to configure the key, then how you want the settings to be applied; or not allow permission to be replaced.
 7. Manually add the path to the Registry Key in the **Selected Key** dialog.  
-   ![User-added image](./images/ka0Qk0000001VD3_0EMQk000002dT5q.png)
+   ![User-added image]./../0-images/ka0Qk0000001VD3_0EMQk000002dT5q.png)
 
 This will apply the key settings to the GPO, and all computers affected by the GPO.
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/workstation-name-is-not-shown.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/workstation-name-is-not-shown.md
index aed193f8ae..4dd36ec50d 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/workstation-name-is-not-shown.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/workstation-name-is-not-shown.md
@@ -30,7 +30,7 @@ Netwrix Account Lockout Examiner shows no data in the **Workstation** field, whi
 
 Because Netwrix Account Lockout Examiner processes Windows security logs, it only gets the data that is present in those logs. This issue means that the Account locked out event (ID `644` for Windows XP/2003, ID `4740` for the later versions of Windows) contains an empty **Caller Machine Name** field. Here is an example of the Account locked out event `644` with the empty **Caller Machine Name** field:
 
-[![User-added image](./images/ka04u00000118ES_0EM700000004udP.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g0000004KSJ&feoid=00N700000032Pj2&refid=0EM700000004udP)
+[![User-added image]./../0-images/ka04u00000118ES_0EM700000004udP.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g0000004KSJ&feoid=00N700000032Pj2&refid=0EM700000004udP)
 
 The field can be empty for events where a local computer account was locked out due to a local policy or as a result of computer synchronization with a mobile device.
 
diff --git a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/account-lockout-examiner-generates-excessive-traffic-in-the-network.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/account-lockout-examiner-generates-excessive-traffic-in-the-network.md
index 0202e77dc7..19b87bf827 100644
--- a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/account-lockout-examiner-generates-excessive-traffic-in-the-network.md
+++ b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/account-lockout-examiner-generates-excessive-traffic-in-the-network.md
@@ -45,5 +45,5 @@ There is also an option to disable examination of workstations. In this case nam
 3. Create a new DWORD value `PF_Enabled` and set its value to `0`.
 4. Restart Netwrix Account Lockout Examiner Service via the **Services** snap-in.
 
-![User-added image](./images/ka04u000000HcUv_0EM700000004wr4.png)
+![User-added image]./../0-images/ka04u000000HcUv_0EM700000004wr4.png)
 
diff --git a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/account-lockout-examiner-works-very-slowly.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/account-lockout-examiner-works-very-slowly.md
index d19b4f7fb4..cfe2735020 100644
--- a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/account-lockout-examiner-works-very-slowly.md
+++ b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/account-lockout-examiner-works-very-slowly.md
@@ -35,5 +35,5 @@ To address the slow performance issue, perform the following steps:
    **NOTE**: This will remove info about all old lockouts from Account Lockout Examiner. Backup this files if you need them for the further access.
 4. Start Netwrix Account Lockout Examiner Service
 
-[![User-added image](./images/ka04u000000HcWK_0EM700000004wmE.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAbJ&amp;feoid=00N700000032Pj2&amp;refid=0EM700000004wmE)
+[![User-added image]./../0-images/ka04u000000HcWK_0EM700000004wmE.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAbJ&amp;feoid=00N700000032Pj2&amp;refid=0EM700000004wmE)
 
diff --git a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-does-netwrix-account-lockout-examiner-work.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-does-netwrix-account-lockout-examiner-work.md
index e194bd983f..6289e0945a 100644
--- a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-does-netwrix-account-lockout-examiner-work.md
+++ b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-does-netwrix-account-lockout-examiner-work.md
@@ -38,5 +38,5 @@ To run an examination:
 1. Click the **Examine** button at the bottom of the list in the **Summary** tab, or
 2. Right-click an account and select **Examine**.
 
-When you run an examination, it shows a list of invalid logons, specifies the names of the processes that used invalid credentials, and checks the most common reasons for lockouts: mapped drives, scheduled tasks, RDP sessions, and services running under the credentials of the account in question. Examination results look like this: [![User-added image](./images/ka0Qk00000045if_0EM700000004wzI.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAbd&feoid=00N700000032Pj2&refid=0EM700000004wzI)
+When you run an examination, it shows a list of invalid logons, specifies the names of the processes that used invalid credentials, and checks the most common reasons for lockouts: mapped drives, scheduled tasks, RDP sessions, and services running under the credentials of the account in question. Examination results look like this: [![User-added image]./../0-images/ka0Qk00000045if_0EM700000004wzI.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAbd&feoid=00N700000032Pj2&refid=0EM700000004wzI)
 
diff --git a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-install-and-use-netwrix-account-lockout-examiner.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-install-and-use-netwrix-account-lockout-examiner.md
index 2bdb5a2605..41a71988fa 100644
--- a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-install-and-use-netwrix-account-lockout-examiner.md
+++ b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-install-and-use-netwrix-account-lockout-examiner.md
@@ -32,7 +32,7 @@ Once you've downloaded ALE, open the folder. Here you will find the following it
 1. Right click the `Netwrix_Account_Lockout_Examiner.exe` and click **Run as Administrator**.
 2. A window will appear with a License Agreement and EULA. Please read the contents carefully and then choose to **Accept**.
 
-![User-added image](./images/ka04u000000HdES_0EM4u000002CO3k.png)
+![User-added image]./../0-images/ka04u000000HdES_0EM4u000002CO3k.png)
 
 ## Operating Netwrix Account Lockout Examiner
 The next page that appears the the starting page for ALE. Here is a brief description of the options available to you.
diff --git a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-migrate-account-lockout-examiner.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-migrate-account-lockout-examiner.md
index 00ebe4f035..7af9655f80 100644
--- a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-migrate-account-lockout-examiner.md
+++ b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-migrate-account-lockout-examiner.md
@@ -43,5 +43,5 @@ To migrate NetWrix Account Lockout Examiner to a different server, perform the f
 5. Start the NetWrix Account Lockout Examiner service on the new server.
 6. If you are using the NetWrix Account Lockout Examiner Web Help-Desk Portal, install it on the new server.
 
-![User-added image](./images/ka04u000000HcNT_0EM700000004wyK.png)
+![User-added image]./../0-images/ka04u000000HcNT_0EM700000004wyK.png)
 
diff --git a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-modify-the-account-lockout-examiner-service-account.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-modify-the-account-lockout-examiner-service-account.md
index 6b395d9e30..43e6d8a2a2 100644
--- a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-modify-the-account-lockout-examiner-service-account.md
+++ b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/how-to-modify-the-account-lockout-examiner-service-account.md
@@ -31,5 +31,5 @@ The Netwrix Account Lockout Examiner service account you entered during installa
 4. Change the account, click **OK**.  
 5. Restart the **Account Lockout Examiner** service.
 
-![User-added](./images/servlet_image_3823966b1661.png)
+![User-added]./../0-images/servlet_image_3823966b1661.png)
 
diff --git a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/the-account-lockout-examiner-service-account.md b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/the-account-lockout-examiner-service-account.md
index 3ec925216e..647eed6ac7 100644
--- a/docs/kb/auditor/monitoring-plans/account-lockout-examiner/the-account-lockout-examiner-service-account.md
+++ b/docs/kb/auditor/monitoring-plans/account-lockout-examiner/the-account-lockout-examiner-service-account.md
@@ -35,7 +35,7 @@ On any Domain Controller that has Group Policy Management:
 5. Double-click the **Manage auditing and security log** policy  
 6. Click **Add user or group**, specify the Account Lockout Examiner **service account**, and click **OK**
 
-[![User-added image](./images/ka04u000000HcW3_0EM700000004wqQ.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xdsb&feoid=00N700000032Pj2&refid=0EM700000004wqQ)
+[![User-added image]./../0-images/ka04u000000HcW3_0EM700000004wqQ.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xdsb&feoid=00N700000032Pj2&refid=0EM700000004wqQ)
 
 ## Step 2. Add the service account to the required security groups
 1. Run **Active Directory Users and Computers**  
@@ -44,7 +44,7 @@ On any Domain Controller that has Group Policy Management:
 4. Go to the **Members** tab and add the user account you want to use for the Account Lockout Examiner service to the list  
 5. For **Windows 2008 and above** Domain Controllers, add the service account to the **Event Log Readers** group
 
-[![User-added image](./images/ka04u000000HcW3_0EM700000004wqL.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xdsb&feoid=00N700000032Pj2&refid=0EM700000004wqL)
+[![User-added image]./../0-images/ka04u000000HcW3_0EM700000004wqL.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xdsb&feoid=00N700000032Pj2&refid=0EM700000004wqL)
 
 ## Step 3. On every monitored Domain Controller, enable WMI access
 1. Run **Computer Management** (Start -> Administrative Tools -> Computer Management)  
@@ -55,7 +55,7 @@ On any Domain Controller that has Group Policy Management:
 6. Add the user account you want to use for the Account Lockout Examiner service to the list  
 7. Grant it the **Remote Enable** permission (put a check in the **Allow** checkbox)
 
-[![User-added image](./images/ka04u000000HcW3_0EM700000004wqV.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xdsb&feoid=00N700000032Pj2&refid=0EM700000004wqV)
+[![User-added image]./../0-images/ka04u000000HcW3_0EM700000004wqV.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xdsb&feoid=00N700000032Pj2&refid=0EM700000004wqV)
 
 ## Step 4. Configure DCOM settings
 1. Open **Component Services** (Start -> Programs -> Administrative Tools -> Component Services)  
@@ -65,7 +65,7 @@ On any Domain Controller that has Group Policy Management:
 5. Add the user account you want to use for the Account Lockout Examiner service to the top window  
 6. Set the **Allow** checkbox for the **Remote Activation** option
 
-[![User-added image](./images/ka04u000000HcW3_0EM700000004wqa.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xdsb&feoid=00N700000032Pj2&refid=0EM700000004wqa)
+[![User-added image]./../0-images/ka04u000000HcW3_0EM700000004wqa.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xdsb&feoid=00N700000032Pj2&refid=0EM700000004wqa)
 
 **NOTE:** Steps 3 and 4 might require a reboot to apply the new settings.
 
@@ -75,7 +75,7 @@ On any Domain Controller that has Group Policy Management:
 3. Right-click the **Administrators** group and select **Add to group**  
 4. Click **Add** and specify the service account. Click **OK**
 
-[![User-added image](./images/ka04u000000HcW3_0EM700000004wqf.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xdsb&feoid=00N700000032Pj2&refid=0EM700000004wqf)
+[![User-added image]./../0-images/ka04u000000HcW3_0EM700000004wqf.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000Xdsb&feoid=00N700000032Pj2&refid=0EM700000004wqf)
 
 ## Step 6. On all machines that need to be examined by Account Lockout Examiner, grant local administrator rights to the service account
 - Grant local administrator rights either manually or by Group Policy.  
diff --git a/docs/kb/auditor/monitoring-plans/event-log-management/access-is-denied-error-in-event-log-manager-health-log.md b/docs/kb/auditor/monitoring-plans/event-log-management/access-is-denied-error-in-event-log-manager-health-log.md
index 6764ec0dac..a6d269dd4b 100644
--- a/docs/kb/auditor/monitoring-plans/event-log-management/access-is-denied-error-in-event-log-manager-health-log.md
+++ b/docs/kb/auditor/monitoring-plans/event-log-management/access-is-denied-error-in-event-log-manager-health-log.md
@@ -44,9 +44,9 @@ Error details: Access is denied.
 ## Resolution
 
 - Configure the permissions for the data collection account used in the Event Log Manager. For additional information, refer to the following article: Windows Server — Permissions for Windows Server Auditing.
-- Configure the password for your data collection account in Event Log Manager. Refer to the following article for additional information: [Failed Logon Attempts after Recent Service Account Password Change](/docs/kb/auditor/failed-logon-attempts-after-recent-service-account-password-change).
+- Configure the password for your data collection account in Event Log Manager. Refer to the following article for additional information: [Failed Logon Attempts after Recent Service Account Password Change](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-logon-attempts-after-recent-service-account-password-change).
 
 ## Related articles
 
 - Windows Server — Permissions for Windows Server Auditing — 10.6
-- [Failed Logon Attempts after Recent Service Account Password Change](/docs/kb/auditor/failed-logon-attempts-after-recent-service-account-password-change)
+- [Failed Logon Attempts after Recent Service Account Password Change](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-logon-attempts-after-recent-service-account-password-change)
diff --git a/docs/kb/auditor/monitoring-plans/event-log-management/event-log-manager-report-service-starts-and-stops-multi-lingual-configuration.md b/docs/kb/auditor/monitoring-plans/event-log-management/event-log-manager-report-service-starts-and-stops-multi-lingual-configuration.md
index 793bd8d778..379a3abfe4 100644
--- a/docs/kb/auditor/monitoring-plans/event-log-management/event-log-manager-report-service-starts-and-stops-multi-lingual-configuration.md
+++ b/docs/kb/auditor/monitoring-plans/event-log-management/event-log-manager-report-service-starts-and-stops-multi-lingual-configuration.md
@@ -33,7 +33,7 @@ If your servers are configured in any language other than English, the Event Log
    - `C:\ProgramData\Netwrix Auditor\Reports\Netwrix Auditor for Event Log\Change Reports\Service Starts and Stops.rdl`
 2. Use `Control + F` to find the English words `Running`, `Start`, and `Stop`. Add the correct words in the alternative language to the string values. Example:
    - `('RUNNING', 'START', 'WORD3', 'WORD4')`
-   - ![User-added image](./images/ka04u000000HdFvAAK.jpeg)
+   - ![User-added image]./../0-images/ka04u000000HdFvAAK.jpeg)
 3. Save the file.
 4. Navigate to the SSRS Report Manager URL, which you can find under **Netwrix Auditor Settings** > **Audit Database** tab.
 5. Drill down through the **Netwrix Auditor Report** folder on the homepage.
diff --git a/docs/kb/auditor/monitoring-plans/event-log-management/how-to-force-netwrix-auditor-to-collect-a-specific-applications-and-services-event-log.md b/docs/kb/auditor/monitoring-plans/event-log-management/how-to-force-netwrix-auditor-to-collect-a-specific-applications-and-services-event-log.md
index 0266eadc91..cec8a6a7ac 100644
--- a/docs/kb/auditor/monitoring-plans/event-log-management/how-to-force-netwrix-auditor-to-collect-a-specific-applications-and-services-event-log.md
+++ b/docs/kb/auditor/monitoring-plans/event-log-management/how-to-force-netwrix-auditor-to-collect-a-specific-applications-and-services-event-log.md
@@ -30,9 +30,9 @@ When creating a new filter for **Event Log Manager**, you can select the log nam
 2. Right click on it and select **Log Properties**.
 3. On the **Properties** window, copy **Full Name** of the event log.
 
-![EventViewer - select desired log](./images/ka04u000000HcPp_0EM700000005DIQ.png)
+![EventViewer - select desired log]./../0-images/ka04u000000HcPp_0EM700000005DIQ.png)
 
 4. Paste that name to the **Event Log** field of the filter:
 
-![image.png](./images/ka04u000000HcPp_0EM4u000007qsVK.png)
+![image.png]./../0-images/ka04u000000HcPp_0EM4u000007qsVK.png)
 
diff --git a/docs/kb/auditor/monitoring-plans/event-log-management/how-to-save-and-zip-netwrix-auditor-system-health-event-log.md b/docs/kb/auditor/monitoring-plans/event-log-management/how-to-save-and-zip-netwrix-auditor-system-health-event-log.md
index 01f5a176e2..ac4d702d37 100644
--- a/docs/kb/auditor/monitoring-plans/event-log-management/how-to-save-and-zip-netwrix-auditor-system-health-event-log.md
+++ b/docs/kb/auditor/monitoring-plans/event-log-management/how-to-save-and-zip-netwrix-auditor-system-health-event-log.md
@@ -44,12 +44,12 @@ The exported System Health event log will appear on your Desktop.
 1. Open **Event Viewer**.
 2. Expand the **Applications and Services Logs** folder.
 
-   ![Netwrix Auditor System Health Logs](./images/ka04u00000117Ay_0EM70000000tnyM.png)
+   ![Netwrix Auditor System Health Logs]./../0-images/ka04u00000117Ay_0EM70000000tnyM.png)
 
 3. Right-click the **Netwrix Auditor System Health** log file and select **Save All Events As...**.
 4. Name the file and click **Save**.
 
-   ![Save All Events As](./images/ka04u00000117Ay_0EM70000000tnyW.png)
+   ![Save All Events As]./../0-images/ka04u00000117Ay_0EM70000000tnyW.png)
 
 5. Select the option to **Display information for these languages**, check the **English (United States)** checkbox, and click **OK**.
 6. Once the file is saved, right-click it and zip the file.
diff --git a/docs/kb/auditor/monitoring-plans/event-log-management/netwrix-auditor-event-log-manager-shows-smtp-authentication-errors-while-configuring-a-monitoring-pl.md b/docs/kb/auditor/monitoring-plans/event-log-management/netwrix-auditor-event-log-manager-shows-smtp-authentication-errors-while-configuring-a-monitoring-pl.md
index 7081906138..dfa5eca594 100644
--- a/docs/kb/auditor/monitoring-plans/event-log-management/netwrix-auditor-event-log-manager-shows-smtp-authentication-errors-while-configuring-a-monitoring-pl.md
+++ b/docs/kb/auditor/monitoring-plans/event-log-management/netwrix-auditor-event-log-manager-shows-smtp-authentication-errors-while-configuring-a-monitoring-pl.md
@@ -26,7 +26,7 @@ knowledge_article_id: kA04u00000110xFCAQ
 ## Symptom
 
 1. Netwrix Auditor Event Log Manager does not collect logs and shows the following error while trying to 'verify' if the messages were being sent in the Event Log Manager monitoring plan.  
-   ![User-added image](./images/ka04u00000116xf_0EM4u000008Ljuv.png)
+   ![User-added image]./../0-images/ka04u00000116xf_0EM4u000008Ljuv.png)
 
 2. When providing credentials for the Netwrix Auditor Event Log Manager monitoring plan, the following dialog appears:
 
diff --git a/docs/kb/auditor/monitoring-plans/event-log-management/parallel-redo-events-in-sql-server-event-log.md b/docs/kb/auditor/monitoring-plans/event-log-management/parallel-redo-events-in-sql-server-event-log.md
index d9477838a7..64693e8a32 100644
--- a/docs/kb/auditor/monitoring-plans/event-log-management/parallel-redo-events-in-sql-server-event-log.md
+++ b/docs/kb/auditor/monitoring-plans/event-log-management/parallel-redo-events-in-sql-server-event-log.md
@@ -60,7 +60,7 @@ Disable the AUTO_CLOSE option for the affected database:
 3. Right-click the affected database and select **Properties**.
 4. In the left pane, select the **Options** tab, locate the **Auto Close** option under the **Automatic** section, and select the **False** option from the drop-down list.
 
-![Auto Close option screenshot](./images/ka04u00000118GJ_0EM4u000008MgWU.png)
+![Auto Close option screenshot]./../0-images/ka04u00000118GJ_0EM4u000008MgWU.png)
 
 5. Click **OK** to save changes.
 
diff --git a/docs/kb/auditor/monitoring-plans/event-log-management/the-event-logs-reports-for-windows-server-does-not-contain-any-data.md b/docs/kb/auditor/monitoring-plans/event-log-management/the-event-logs-reports-for-windows-server-does-not-contain-any-data.md
index 8779387354..8a1e9809db 100644
--- a/docs/kb/auditor/monitoring-plans/event-log-management/the-event-logs-reports-for-windows-server-does-not-contain-any-data.md
+++ b/docs/kb/auditor/monitoring-plans/event-log-management/the-event-logs-reports-for-windows-server-does-not-contain-any-data.md
@@ -36,7 +36,7 @@ To review your data in these reports, you should configure a monitoring plan for
 
 1. On the computer that hosts Netwrix Auditor Server, run Netwrix Auditor Event Log Manager.
 2. Navigate to Audit Archiving filters and configure them as described in Configure Audit Archiving Filters for Event Log.  
-   ![User-added image](./images/ka04u0000011776_0EM4u000008Ls7s.png)
+   ![User-added image]./../0-images/ka04u0000011776_0EM4u000008Ls7s.png)
 3. Perform any test changes, for example, log in to a server for which you want to review data in reports.
 4. Wait for 10 - 15 minutes for changes to take effect and run reports.
 
diff --git a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/account-and-password-expiration-mismatch-in-netwrix-auditor-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/account-and-password-expiration-mismatch-in-netwrix-auditor-password-expiration-notifier.md
index 6c966d8a8a..f2b014653d 100644
--- a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/account-and-password-expiration-mismatch-in-netwrix-auditor-password-expiration-notifier.md
+++ b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/account-and-password-expiration-mismatch-in-netwrix-auditor-password-expiration-notifier.md
@@ -35,7 +35,7 @@ Password Expiration Notifier may include data on expiring accounts, if enabled.
 3. Select the **Advanced** tab, and either check or uncheck the **Include data on expiring accounts**.
 4. The next report will be affected.
 
-![Include data on expiring accounts](./images/ka04u00000117wO_0EM4u000008MQhR.png)
+![Include data on expiring accounts]./../0-images/ka04u00000117wO_0EM4u000008MQhR.png)
 
 To verify the account expiration date, refer to the following steps:
 
@@ -43,7 +43,7 @@ To verify the account expiration date, refer to the following steps:
 2. Right-click the user, and select **Properties**.
 3. The account expiration date is provided in the **Account** tab > **Account expires**, and the **Attribute Editor** tab > `accountExpires` attribute.
 
-![Account expires and accountExpires attribute](./images/ka04u00000117wO_0EM4u000008MQmb.png)
+![Account expires and accountExpires attribute]./../0-images/ka04u00000117wO_0EM4u000008MQmb.png)
 
 ### Related articles
 
diff --git a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/customize-notifications-and-reports-in-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/customize-notifications-and-reports-in-password-expiration-notifier.md
index 67626267fa..28f0d2e33e 100644
--- a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/customize-notifications-and-reports-in-password-expiration-notifier.md
+++ b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/customize-notifications-and-reports-in-password-expiration-notifier.md
@@ -117,9 +117,9 @@ You can edit and customize the notification and report templates in Netwrix Pass
 
 ### Edit email header and footer
 
-You can disable header and footer in Netwrix Password Reset emails. Refer to the following article for additional information: [Hide and Disable Header and Footer in Netwrix Password Reset Emails](/docs/kb/auditor/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails).
+You can disable header and footer in Netwrix Password Reset emails. Refer to the following article for additional information: [Hide and Disable Header and Footer in Netwrix Password Reset Emails](/docs/kb/auditor/monitoring-plans/password-expiration-notifier/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails).
 
 ## Related articles
 
-- [Hide and Disable Header and Footer in Netwrix Password Reset Emails](/docs/kb/auditor/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails)
+- [Hide and Disable Header and Footer in Netwrix Password Reset Emails](/docs/kb/auditor/monitoring-plans/password-expiration-notifier/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails)
 - [All attributes ⸱ Microsoft 🡺](https://learn.microsoft.com/en-us/windows/win32/adschema/attributes-all)
diff --git a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails.md
index 9ad0a03da8..9ba420680f 100644
--- a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails.md
+++ b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails.md
@@ -28,29 +28,29 @@ You'd like to remove the Netwrix header and footer from emails sent to users and
 
 ## Resolution
 
-> **IMPORTANT:** In some cases both header and footer reset after your Netwrix Auditor instance has been upgraded to v10.6. For additional information, refer to the following article: [Netwrix Password Reset Email Header and Footer Reset After Upgrade](/docs/kb/auditor/password-expiration-notifier-email-header-and-footer-reset-after-upgrade)
+> **IMPORTANT:** In some cases both header and footer reset after your Netwrix Auditor instance has been upgraded to v10.6. For additional information, refer to the following article: [Netwrix Password Reset Email Header and Footer Reset After Upgrade](/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-email-header-and-footer-reset-after-upgrade)
 
 1. Open Registry Editor on the Netwrix Auditor Server host.
 2. Navigate to `HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\Password Expiration Notifier`.
 3. Right-click the **Password Expiration Notifier** hive and click **New**.
 4. Select **DWORD (32-bit) Value**.
 
-   ![New DWORD (32-bit) Value](./images/ka04u00000117kD_0EM4u000008MHts.png)
+   ![New DWORD (32-bit) Value]./../0-images/ka04u00000117kD_0EM4u000008MHts.png)
 
 5. Name the key `HideEmailAdditionalInfo`.
 6. Right-click the key and select **Modify**.
 7. Set the value data to `1` (Hexadecimal).
 
-   ![Modify DWORD value to 1](./images/ka04u00000117kD_0EM4u000008MHuC.png)
+   ![Modify DWORD value to 1]./../0-images/ka04u00000117kD_0EM4u000008MHuC.png)
 
 8. The next round of emails will be sent without the header and footer.
 
 > **NOTE:** If you'd like to re-enable the header and footer, simply change the value data to `0`.
 
-To further customize Netwrix Password Reset emails, refer to the following article: [Customize Notifications and Reports in Netwrix Password Reset](/docs/kb/auditor/customize-notifications-and-reports-in-password-expiration-notifier).
+To further customize Netwrix Password Reset emails, refer to the following article: [Customize Notifications and Reports in Netwrix Password Reset](/docs/kb/auditor/monitoring-plans/password-expiration-notifier/customize-notifications-and-reports-in-password-expiration-notifier).
 
 ### Related articles
 
-- [Customize Notifications and Reports in Netwrix Password Reset](/docs/kb/auditor/customize-notifications-and-reports-in-password-expiration-notifier)
-- [Netwrix Password Reset Email Header and Footer Reset After Upgrade](/docs/kb/auditor/password-expiration-notifier-email-header-and-footer-reset-after-upgrade)
+- [Customize Notifications and Reports in Netwrix Password Reset](/docs/kb/auditor/monitoring-plans/password-expiration-notifier/customize-notifications-and-reports-in-password-expiration-notifier)
+- [Netwrix Password Reset Email Header and Footer Reset After Upgrade](/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-email-header-and-footer-reset-after-upgrade)
 
diff --git a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/illegible-notification-contents-and-characters-in-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/illegible-notification-contents-and-characters-in-password-expiration-notifier.md
index 3253cb962a..6ba288fe83 100644
--- a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/illegible-notification-contents-and-characters-in-password-expiration-notifier.md
+++ b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/illegible-notification-contents-and-characters-in-password-expiration-notifier.md
@@ -26,7 +26,7 @@ knowledge_article_id: kA0Qk0000000Q8zKAE
 
 When previewing or viewing notifications sent by Netwrix Auditor Netwrix Password Reset (PEN), the contents are illegible. The text and particular characters do not correspond to the intended language.
 
-![IllegibleCharacters](./images/ka0Qk0000001Zjh_0EMQk000002jqCb.png)
+![IllegibleCharacters]./../0-images/ka0Qk0000001Zjh_0EMQk000002jqCb.png)
 
 ## Cause
 
diff --git a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/migrate-netwrix-password-expiration-notifier-to-a-different-server.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/migrate-netwrix-password-expiration-notifier-to-a-different-server.md
index 3c66662603..1289e4d4e6 100644
--- a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/migrate-netwrix-password-expiration-notifier-to-a-different-server.md
+++ b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/migrate-netwrix-password-expiration-notifier-to-a-different-server.md
@@ -35,7 +35,7 @@ In Netwrix Auditor versions 9.0 and newer, Netwrix Password Reset is installed a
 2. Copy the following data from the old server to the new server:
    - Templates folder from `C:\Program Files (x86)\Netwrix Auditor\Password Expiration Alerting\Templates`.
    - Screenshot all four tabs of the Netwrix Password Reset interface for configuration details.  
-     ![tIfrvbFLMt.png](./images/ka04u00000117hE_0EM4u000007ccaS.png)
+     ![tIfrvbFLMt.png]./../0-images/ka04u00000117hE_0EM4u000007ccaS.png)
 3. Reconfigure Netwrix Password Reset according to the screenshots you captured.
 4. Apply your Netwrix Auditor License to the new instance of Netwrix Auditor.
 
@@ -43,5 +43,5 @@ In Netwrix Auditor versions 9.0 and newer, Netwrix Password Reset is installed a
 
 Message templates customized via the Netwrix Password Reset UI should be transferred manually — make sure to copy the contents of the **Actions** tab reports highlighted in the screenshot.
 
-![CslItbePFg.png](./images/ka04u00000117hE_0EM4u000007ccac.png)
+![CslItbePFg.png]./../0-images/ka04u00000117hE_0EM4u000007ccac.png)
 
diff --git a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-email-header-and-footer-reset-after-upgrade.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-email-header-and-footer-reset-after-upgrade.md
index 6f0388be87..41dd2e2235 100644
--- a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-email-header-and-footer-reset-after-upgrade.md
+++ b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-email-header-and-footer-reset-after-upgrade.md
@@ -26,7 +26,7 @@ knowledge_article_id: kA04u000001116CCAQ
 
 ## Symptoms
 
-- The Netwrix Password Expiration Notifier (PEN) email header and footer were reset after the recent upgrade. [Hide and Disable Header and Footer in PEN Emails](/docs/kb/auditor/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails).
+- The Netwrix Password Expiration Notifier (PEN) email header and footer were reset after the recent upgrade. [Hide and Disable Header and Footer in PEN Emails](/docs/kb/auditor/monitoring-plans/password-expiration-notifier/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails).
 - The **HideEmailAdditionalInfo** key in `HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix Auditor\Password Expiration Notifier` is still present.
 
 ## Resolution
@@ -42,4 +42,4 @@ knowledge_article_id: kA04u000001116CCAQ
 
 ## Related articles
 
-- [Hide and Disable Header and Footer in PEN Emails](/docs/kb/auditor/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails)
+- [Hide and Disable Header and Footer in PEN Emails](/docs/kb/auditor/monitoring-plans/password-expiration-notifier/hide-and-disable-header-and-footer-in-password-expiration-notifier-emails)
diff --git a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-stopped-showing-results.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-stopped-showing-results.md
index b79b651572..392d9a664c 100644
--- a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-stopped-showing-results.md
+++ b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/password-expiration-notifier-stopped-showing-results.md
@@ -30,5 +30,5 @@ A possible cause is blank lines accidentally added at the beginning, in the midd
 2. Remove any blank lines at the beginning, middle, or end of the file.
 3. Save the file.
 
-![image.png](./images/ka04u000000HdDR_0EM4u0000084XpS.png)
+![image.png]./../0-images/ka04u000000HdDR_0EM4u0000084XpS.png)
 
diff --git a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/support-for-fine-grained-password-policies-in-netwrix-password-expiration-notifier.md b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/support-for-fine-grained-password-policies-in-netwrix-password-expiration-notifier.md
index bf3dc79cb5..e13b88282e 100644
--- a/docs/kb/auditor/monitoring-plans/password-expiration-notifier/support-for-fine-grained-password-policies-in-netwrix-password-expiration-notifier.md
+++ b/docs/kb/auditor/monitoring-plans/password-expiration-notifier/support-for-fine-grained-password-policies-in-netwrix-password-expiration-notifier.md
@@ -33,6 +33,6 @@ Yes, PEN supports Fine-Grained Password Policies. To configure PEN to work only
 2. Select or create a **Monitoring Plan** that will apply Fine-Grained Password Policies.
 3. Click the **Advanced Tab**.
 4. At the bottom of the Advanced Options window, select the **Only report on users with Fine-Grained Password Policies** applied box.  
-   ![Fine-grained password policies applied](./images/ka0Qk0000006sTx_0EMQk000008Iaq1.png)
+   ![Fine-grained password policies applied]./../0-images/ka0Qk0000006sTx_0EMQk000008Iaq1.png)
 5. Click **Save**.
 
diff --git a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/error-user-activity-core-service-has-been-already-launched.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/error-user-activity-core-service-has-been-already-launched.md
index 38c30bd0e2..4968b0a9a2 100644
--- a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/error-user-activity-core-service-has-been-already-launched.md
+++ b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/error-user-activity-core-service-has-been-already-launched.md
@@ -38,7 +38,7 @@ The computer is included in this or another monitoring plan
 
 - The list of monitored computers in your User Activity monitoring plan states the **Duplicate** status for one or multiple servers.
 
-![Duplicate status screenshot](./images/ka0Qk0000004pqL_0EM4u000008M4JN.png)
+![Duplicate status screenshot]./../0-images/ka0Qk0000004pqL_0EM4u000008M4JN.png)
 
 - No monitoring data is available for the **Duplicate** servers.
 
@@ -70,7 +70,7 @@ Stop-Service -Name "NwUserActivitySvc"
 Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Netwrix\User Activity Video Reporter Agent
 ```
 
-   ![Registry key screenshot](./images/ka0Qk0000004pqL_0EM4u000008M4JS.png)
+   ![Registry key screenshot]./../0-images/ka0Qk0000004pqL_0EM4u000008M4JS.png)
 
    Locate the `UniqID` value. Copy the value data and refer to it in the future steps—right-click the key and select **Modify...**. Once you copy the value, delete the `UniqID` value.
 
diff --git a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers.md
index a1367373e2..9c7b5b3d16 100644
--- a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers.md
+++ b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers.md
@@ -30,7 +30,7 @@ On Netwrix Auditor Versions 9.0 and Newer, Inactive Users Tracker is installed a
 2. Copy the following files to the same location on the new server:
    - Contents of `C:\ProgramData\Netwrix Auditor\Inactive Users Tracker`
    - Screenshot all four tabs of the Inactive Users Tracker interface for configuration  
-     ![User-added image](./images/ka04u000000HcNW_0EM4u000002QzDA.png)
+     ![User-added image]./../0-images/ka04u000000HcNW_0EM4u000002QzDA.png)
 3. Paste the contents of original `C:\ProgramData\Netwrix Auditor\Inactive Users Tracker` folder to the `C:\ProgramData\Netwrix Auditor\Inactive Users Tracker` folder on the new server
 4. Reconfigure Inactive Users Tracker using the screenshots you captured
 5. Apply your Netwrix Auditor License to the new instance of Netwrix Auditor.
diff --git a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/manually-update-user-activity-core-service.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/manually-update-user-activity-core-service.md
index d3090db07b..d87e6ac0e4 100644
--- a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/manually-update-user-activity-core-service.md
+++ b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/manually-update-user-activity-core-service.md
@@ -29,7 +29,7 @@ The Netwrix Auditor User Activity Core Service version in a target server does n
 
 ## Answer
 
-> **NOTE:** Refer to the following article for additional information on establishing the version of your Auditor server: [How to Find Out My Netwrix Auditor Version](/docs/kb/auditor/how-to-find-out-my-netwrix-auditor-version)
+> **NOTE:** Refer to the following article for additional information on establishing the version of your Auditor server: [How to Find Out My Netwrix Auditor Version](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-find-out-my-netwrix-auditor-version)
 
 > **IMPORTANT:** It is recommended to stop User Activity services in the Netwrix server before making changes to installed Core Services in targets. Run the following command in elevated PowerShell to stop User Activity Core Service and Audit Service:
 >
@@ -117,5 +117,5 @@ User Activity Core Service is designed to be deployed automatically when adding
 
 ## Related links
 
-- [How to Find Out My Netwrix Auditor Version](/docs/kb/auditor/how-to-find-out-my-netwrix-auditor-version)
+- [How to Find Out My Netwrix Auditor Version](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-find-out-my-netwrix-auditor-version)
 - [Uninstall Netwrix Product](https://www.netwrix.com/download/products/KnowledgeBase/Uninstall-NetwrixProduct.ps1)
diff --git a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/some-accounts-were-not-moved-or-deleted-in-inactive-user-tracker-report.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/some-accounts-were-not-moved-or-deleted-in-inactive-user-tracker-report.md
index 76819839c5..c689465747 100644
--- a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/some-accounts-were-not-moved-or-deleted-in-inactive-user-tracker-report.md
+++ b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/some-accounts-were-not-moved-or-deleted-in-inactive-user-tracker-report.md
@@ -28,13 +28,13 @@ Your report states some accounts were not moved or deleted. Why were they not af
 
 ## Answer
 
-Since Inactive User Tracker (IUT) in Netwrix Auditor has the ability to make actual changes within your Active Directory, it has requirements to meet to introduce these changes. IUT requires all DCs to be operating, otherwise it cannot verify that a user is truly inactive. In case there are non-operable or decommissioned domain controllers in your network, you can omit them — refer to the following article for additional information: [How to Exclude Non-operable Domain Controllers from Monitoring in Netwrix Auditor](/docs/kb/auditor/how-to-exclude-non-operable-domain-controllers-from-monitoring-in-netwrix-auditor).
+Since Inactive User Tracker (IUT) in Netwrix Auditor has the ability to make actual changes within your Active Directory, it has requirements to meet to introduce these changes. IUT requires all DCs to be operating, otherwise it cannot verify that a user is truly inactive. In case there are non-operable or decommissioned domain controllers in your network, you can omit them — refer to the following article for additional information: [How to Exclude Non-operable Domain Controllers from Monitoring in Netwrix Auditor](/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/how-to-exclude-non-operable-domain-controllers-from-monitoring-in-netwrix-auditor).
 
 If you still encounter reports showing the `Cannot delete the account` status for accounts after omitting the inoperable DCs, refer to the following steps:
 
 - This error might appear if the targeted computer account is not an end object but a container for other objects. IUT won't be able to remove those accounts unless the **Delete account with all its subnodes** checkbox is checked.
 
-  ![Delete account with all its subnodes checkbox](./images/ka04u000001179H_0EM4u000008Lt2y.png)
+  ![Delete account with all its subnodes checkbox]./../0-images/ka04u000001179H_0EM4u000008Lt2y.png)
 
   > **IMPORTANT:** This will lead to the deletion of the entire container considered as inactive by IUT.
 
diff --git a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md
index bd08043c20..a7a55e010c 100644
--- a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md
+++ b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md
@@ -49,7 +49,7 @@ Make sure that it is online and reachable, Remote Registry service is enabled.
 - Review the allowed connections in the affected server in accordance with the following article guidelines: User Activity − User Activity Ports ⸱ v10.6.
 - Exclude the Netwrix-related folders from the monitoring scope of your antivirus suite — refer to the following article for additional information: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor).
 - Enable the SMB v2/v3 protocol in both the client and server — learn more in [Detect, Enable and Disable SMBv1, SMBv2, and SMBv3 ⸱ Windows Learn](https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3?tabs=server#how-to-detect-status-enable-and-disable-smb-protocols).
-- Review the list of apps installed in the affected server. If User Activity Core Service is either missing or is outdated, refer to the following articles for additional information: Installation − Install for User Activity Core Service · v10.6 and [Manually Update User Activity Core Service](/docs/kb/auditor/manually-update-user-activity-core-service).
+- Review the list of apps installed in the affected server. If User Activity Core Service is either missing or is outdated, refer to the following articles for additional information: Installation − Install for User Activity Core Service · v10.6 and [Manually Update User Activity Core Service](/docs/kb/auditor/monitoring-plans/user-activity-monitoring/manually-update-user-activity-core-service).
 
 ## Related articles
 
@@ -58,4 +58,4 @@ Make sure that it is online and reachable, Remote Registry service is enabled.
 - [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
 - [Detect, Enable and Disable SMBv1, SMBv2, and SMBv3 ⸱ Windows Learn](https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3?tabs=server#how-to-detect-status-enable-and-disable-smb-protocols)
 - Installation − Install for User Activity Core Service · v10.6
-- [Manually Update User Activity Core Service](/docs/kb/auditor/manually-update-user-activity-core-service)
+- [Manually Update User Activity Core Service](/docs/kb/auditor/monitoring-plans/user-activity-monitoring/manually-update-user-activity-core-service)
diff --git a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/unable-to-launch-netwrix-auditor-user-activity-core-service.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/unable-to-launch-netwrix-auditor-user-activity-core-service.md
index 7cb7b8d8de..6f0b31c248 100644
--- a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/unable-to-launch-netwrix-auditor-user-activity-core-service.md
+++ b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/unable-to-launch-netwrix-auditor-user-activity-core-service.md
@@ -62,14 +62,14 @@ where `yourservername` is the name of your SMTP server in the FQDN format and `9
 3. Follow the installation prompts up to the **Specify User Activity Video Reporter server and TCP port** step.
 4. On this step, provide your SMTP server name in the FQDN format in the **Host server** field and provide the port number **9004**.
 
-![User-added image](./images/ka0Qk0000001S2H_0EMQk000001wr0A.png)
+![User-added image]./../0-images/ka0Qk0000001S2H_0EMQk000001wr0A.png)
 
 5. Complete the installation.
 
-> NOTE: In case User Activity Core Service is installed in target servers, make sure to check the Core Service version in **Apps & Features**. In case of version mismatch, refer to the following article for additional information: [Manually Update User Activity Core Service](/docs/kb/auditor/manually-update-user-activity-core-service).
+> NOTE: In case User Activity Core Service is installed in target servers, make sure to check the Core Service version in **Apps & Features**. In case of version mismatch, refer to the following article for additional information: [Manually Update User Activity Core Service](/docs/kb/auditor/monitoring-plans/user-activity-monitoring/manually-update-user-activity-core-service).
 
 ### Related articles
 
 - Configuration — User Activity — User Activity Ports — v10.6
-- [Manually Update User Activity Core Service](/docs/kb/auditor/manually-update-user-activity-core-service)
+- [Manually Update User Activity Core Service](/docs/kb/auditor/monitoring-plans/user-activity-monitoring/manually-update-user-activity-core-service)
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/setting-up-account-lockout-alert.md b/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/setting-up-account-lockout-alert.md
index 3844f4696b..eadb37b3da 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/setting-up-account-lockout-alert.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/setting-up-account-lockout-alert.md
@@ -28,19 +28,19 @@ This article explains how to set up an account lockout alert in Netwrix Auditor
 
 ## Steps
 1. Select **New Real-Time Alert** by clicking on **Real-Time Alert** and then right-clicking on **Real-Time Alert**  
-   ![User-added image](./images/ka04u000000HcRf_0EM70000000xMZN.png)
+   ![User-added image]./../0-images/ka04u000000HcRf_0EM70000000xMZN.png)
 
 2. Name the alert, then click **Next**. Click **Add** to add the alert filters needed.  
-   ![User-added image](./images/ka04u000000HcRf_0EM70000000xMZS.png)
+   ![User-added image]./../0-images/ka04u000000HcRf_0EM70000000xMZS.png)
 
 3. Here, if you would like to see lockouts for a specific OU, select the highlighted box. This can also be left as `*` for a wildcard to monitor all user account lockouts.  
-   ![User-added image](./images/ka04u000000HcRf_0EM70000000xMZc.png)
+   ![User-added image]./../0-images/ka04u000000HcRf_0EM70000000xMZc.png)
 
 4. Select the existing attribute filter that is added by default and select **Edit**.  
-   ![User-added image](./images/ka04u000000HcRf_0EM70000000xMZr.png)
+   ![User-added image]./../0-images/ka04u000000HcRf_0EM70000000xMZr.png)
 
 5. Place in the following attribute filters to see all account lockouts.  
-   ![User-added image](./images/ka04u000000HcRf_0EM70000000xMZw.png)
+   ![User-added image]./../0-images/ka04u000000HcRf_0EM70000000xMZw.png)
 
 6. Hit **OK** and follow the rest of the prompts for filling in the specified e-mail address the alert will go to.
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/unable-to-create-real-time-alerts.md b/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/unable-to-create-real-time-alerts.md
index 70d13f55dd..7fe9fbc004 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/unable-to-create-real-time-alerts.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/alerts-and-rules/unable-to-create-real-time-alerts.md
@@ -26,9 +26,9 @@ knowledge_article_id: kA00g000000H9btCAC
 
 The first time you create a real-time alert, you see the following errors:
 
-![Error 1](./images/ka04u000000HcUe_0EM7000000050xL.png)
+![Error 1]./../0-images/ka04u000000HcUe_0EM7000000050xL.png)
 
-![Error 2](./images/ka04u000000HcUe_0EM7000000050xQ.png)
+![Error 2]./../0-images/ka04u000000HcUe_0EM7000000050xQ.png)
 
 Also in the event viewer System log you can find events like this:
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/how-to-customize-email-notification-template.md b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/how-to-customize-email-notification-template.md
index 82aaf5f93a..f35747d856 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/how-to-customize-email-notification-template.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/how-to-customize-email-notification-template.md
@@ -52,5 +52,5 @@ You can modify the template in the following ways:
   - ` %Link%` - shows the link to the web portal.
 
 ## Example
-[![User-added image](./images/ka04u000000HcWM_0EM700000004wyA.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAdA&feoid=00N700000032Pj2&refid=0EM700000004wyA)
+[![User-added image]./../0-images/ka04u000000HcWM_0EM700000004wyA.png)](https://netwrix.secure.force.com/kb/servlet/rtaImage?eid=ka40g000000kAdA&feoid=00N700000032Pj2&refid=0EM700000004wyA)
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/notifications-are-not-sent-to-distribution-groups.md b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/notifications-are-not-sent-to-distribution-groups.md
index f4a62999b0..54d1996c7e 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/notifications-are-not-sent-to-distribution-groups.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/notifications-are-not-sent-to-distribution-groups.md
@@ -39,7 +39,7 @@ There are two solutions:
 
 1. Configure SMTP authentication in the settings of the **Netwrix Auditor** management console
 
-   ![SMTP authentication settings in Netwrix Auditor](./images/ka04u000000HcSG_0EM700000005pJq.png)
+   ![SMTP authentication settings in Netwrix Auditor]./../0-images/ka04u000000HcSG_0EM700000005pJq.png)
 
 2. Disable the "require authentication" option in distribution group options as follows
 
@@ -47,16 +47,16 @@ There are two solutions:
    2. Navigate to **MS Exchange - Recipient configuration - Distribution groups**  
    3. Select the required distribution group and open its **Properties**
 
-      ![User-added image](./images/ka04u000000HcSG_0EM7000000054Pc.png)
+      ![User-added image]./../0-images/ka04u000000HcSG_0EM7000000054Pc.png)
 
    4. Go to **Mail Flow Setting** tab  
    5. Select **Message Delivery Restrictions** from the list and open its **Properties**
 
-      ![User-added image](./images/ka04u000000HcSG_0EM7000000054Ph.png)
+      ![User-added image]./../0-images/ka04u000000HcSG_0EM7000000054Ph.png)
 
    6. Uncheck **Require that all senders are authenticated** and click **OK**
 
-      ![User-added image](./images/ka04u000000HcSG_0EM7000000054Pm.png)
+      ![User-added image]./../0-images/ka04u000000HcSG_0EM7000000054Pm.png)
 
    Alternatively, you can run the following command via Exchange Management Shell:
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/ad-hoc-and-email-reports-shows-different-results-in-one-way-trust-forests-environment.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/ad-hoc-and-email-reports-shows-different-results-in-one-way-trust-forests-environment.md
index 94bfb2e81f..73d31b7240 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/ad-hoc-and-email-reports-shows-different-results-in-one-way-trust-forests-environment.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/ad-hoc-and-email-reports-shows-different-results-in-one-way-trust-forests-environment.md
@@ -46,7 +46,7 @@ To check if the Data Processing Account has enough permissions please perform th
 
 If you do not see the `CN=Password Settings Container` under the `CN=System` node or cannot read the properties this indicates Data Processing Account does have read rights (see the screenshot below: the account does not have rights to access the Password Settings Container).
 
-![User-added image](./images/ka04u000000HcS1_0EM700000007Jf8.png)
+![User-added image]./../0-images/ka04u000000HcS1_0EM700000007Jf8.png)
 
 ## To provide read permissions to the Data Processing Account
 1. Run ADSI Edit as a domain Administrator.
@@ -56,5 +56,5 @@ If you do not see the `CN=Password Settings Container` under the `CN=System` nod
 
 Once the read permission for the Data Processing Account is set, verify the access by opening the `CN=Password Settings Container` properties with the Data Processing Account. This time you should be able to see `CN=Password Settings Container` under the `CN=System` node and read its properties (see the screenshot below).
 
-![User-added image](./images/ka04u000000HcS1_0EM700000007JfD.png)
+![User-added image]./../0-images/ka04u000000HcS1_0EM700000007JfD.png)
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/can-any-additional-attribites-be-displayed-in-the-modification-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/can-any-additional-attribites-be-displayed-in-the-modification-reports.md
index ede18babea..e1d7d3c787 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/can-any-additional-attribites-be-displayed-in-the-modification-reports.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/can-any-additional-attribites-be-displayed-in-the-modification-reports.md
@@ -49,7 +49,7 @@ objectType:Attribute:
 ```
 Examples:
 
-![Attr](./images/ka04u000000HcP8_0EM7000000051Zt.png)
+![Attr]./../0-images/ka04u000000HcP8_0EM7000000051Zt.png)
 
 **NOTE:** Each attribute should be put in a separate line. The pound key at the beginning of a line means exclusion of the line.
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/certificate-related-and-unauthorized-errors-occur-when-trying-to-review-netwrix-auditor-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/certificate-related-and-unauthorized-errors-occur-when-trying-to-review-netwrix-auditor-reports.md
index a898caa296..701b3ddc95 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/certificate-related-and-unauthorized-errors-occur-when-trying-to-review-netwrix-auditor-reports.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/certificate-related-and-unauthorized-errors-occur-when-trying-to-review-netwrix-auditor-reports.md
@@ -31,7 +31,7 @@ An error occurred while enrolling for a certificate, the certificate request cou
 ```
 
 2. Symptom 2. Unauthorized error while accessing a report.  
-   ![User-added image](./images/ka04u000001173i_0EM4u000008Liq9.png)
+   ![User-added image]./../0-images/ka04u000001173i_0EM4u000008Liq9.png)
 
 ## Causes
 
@@ -52,5 +52,5 @@ Here are possible options to resolve the issue:
 - Check that the account used for data collection is on the same domain as the Netwrix Auditor Server or another domain.
 - Check if those domains are trusted. If not, add the Netwrix Site to the trusted list.
 
-![User-added image](./images/ka04u000001173i_0EM4u000008LirC.png)
+![User-added image]./../0-images/ka04u000001173i_0EM4u000008LirC.png)
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-503-reports-and-subscriptions-not-working.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-503-reports-and-subscriptions-not-working.md
index 4b8b0002bf..4664cad6c7 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-503-reports-and-subscriptions-not-working.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-503-reports-and-subscriptions-not-working.md
@@ -56,10 +56,10 @@ HTTP Error 503. The service is unavailable.
 
 ## Resolutions
 
-- Review Web Service and Web Portal URLs — refer to the following article for additional information: [Deploying the Report Server Database](/docs/kb/auditor/deploying-the-report-server-database)
+- Review Web Service and Web Portal URLs — refer to the following article for additional information: [Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)
 - Verify the `SQL Server Reporting Services` service on your SSRS server is running. You can also run **Report Server Configuration Manager** > the **Report Server Status** tab to verify the report server status.
 
-  IMPORTANT: Refer to the following article if you're unable to start the `SQL Server Reporting Services` service: [Error: Service Did Not Respond to Start or Control Request in SSRS](/docs/kb/auditor/error-service-did-not-respond-to-start-or-control-request-in-ssrs)
+  IMPORTANT: Refer to the following article if you're unable to start the `SQL Server Reporting Services` service: [Error: Service Did Not Respond to Start or Control Request in SSRS](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-service-did-not-respond-to-start-or-control-request-in-ssrs)
 
 - Remove the SSRS account from the Protected Users security group. Learn more about Protected Users in Protected Users Security Group ⸱ Microsoft.
   - https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/protected-users-security-group
@@ -86,6 +86,6 @@ A license is now required.
 
 ## Related articles
 
-- [Deploying the Report Server Database](/docs/kb/auditor/deploying-the-report-server-database)
+- [Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)
 
-- [Error: Service Did Not Respond to Start or Control Request in SSRS](/docs/kb/auditor/error-service-did-not-respond-to-start-or-control-request-in-ssrs)
+- [Error: Service Did Not Respond to Start or Control Request in SSRS](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-service-did-not-respond-to-start-or-control-request-in-ssrs)
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-during-report-processing-rserrorimpersonatinguser-running-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-during-report-processing-rserrorimpersonatinguser-running-reports.md
index 7839290a0b..f4d2fb57ee 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-during-report-processing-rserrorimpersonatinguser-running-reports.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-during-report-processing-rserrorimpersonatinguser-running-reports.md
@@ -49,7 +49,7 @@ SQL Server Reporting Services (SSRS) connection issues or insufficient permissio
 
    If you use a `gMSA` account for data collection, refer to the following article for additional information: [GMSA](https://docs.netwrix.com/docs/auditor/10_8/requirements/gmsa)
 
-4. Check your Report Services configuration. [Deploying the Report Server Database](/docs/kb/auditor/deploying-the-report-server-database)
+4. Check your Report Services configuration. [Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)
 
 5. Check the permissions for your SSRS Account. Refer to the following article:[Configure SSRS Account](https://docs.netwrix.com/docs/auditor/10_8/requirements/sqlserverreportingservice#configure-ssrs-account)
 
@@ -67,5 +67,5 @@ SQL Server Reporting Services (SSRS) connection issues or insufficient permissio
 - [Configure Audit Database Account](https://docs.netwrix.com/docs/auditor/10_8/requirements/sqlserver#configure-audit-database-account)
 - [Data Collecting Accounts](https://docs.netwrix.com/docs/auditor/10_8/admin/monitoringplans/dataaccounts)
 - [Requirements – Use Group Managed Service Account (gMSA](https://docs.netwrix.com/docs/auditor/10_8/requirements/gmsa)
-- [Deploying the Report Server Database](/docs/kb/auditor/deploying-the-report-server-database)
+- [Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)
 - [Configure SSRS Account](https://docs.netwrix.com/docs/auditor/10_8/requirements/sqlserverreportingservice#configure-ssrs-account)
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-generating-a-report-in-ssrs-http-error-401-unauthorized.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-generating-a-report-in-ssrs-http-error-401-unauthorized.md
index c2306c304a..20a5c882f0 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-generating-a-report-in-ssrs-http-error-401-unauthorized.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/error-generating-a-report-in-ssrs-http-error-401-unauthorized.md
@@ -57,12 +57,12 @@ HTTP Error 401 - Unauthorized. Provide another credentials or change security se
   2. In the left pane, click **Local server**.
   3. Click **On** to the right of **IE Enhanced Security Configuration**.
 
-  ![](./images/ka0Qk00000031Iv_0EM4u000008LafD.png)
+  ![]./../0-images/ka0Qk00000031Iv_0EM4u000008LafD.png)
 
   4. In the configuration window, switch both **Administrators** and **Users** categories to **Off**.
   5. Click **OK** to save changes.
 
-  ![](./images/ka0Qk00000031Iv_0EM4u000008LafI.png)
+  ![]./../0-images/ka0Qk00000031Iv_0EM4u000008LafI.png)
 
 - Review your SSRS account permissions. For additional information, refer to: SQL Server Reporting Services: Configure SSRS Account · v10.6 — https://docs.netwrix.com/docs/auditor/10_8/requirements/overview
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/exporting-information-on-account-lockout-events.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/exporting-information-on-account-lockout-events.md
index 2ef8c5ecaa..b3784f5498 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/exporting-information-on-account-lockout-events.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/exporting-information-on-account-lockout-events.md
@@ -29,7 +29,7 @@ Can I export information on account lockout events for audit purposes?
 
 The Netwrix Account Lockout Examiner console does not have an export feature. However, all lockout information is stored in the `allinfo.xml` file located in the product installation directory. It can be easily parsed by a third-party tool or script to get the required information. However account names are not stored in the `allinfo.xml`; all accounts are referred to as SIDs.
 
-![User-added image](./images/ka04u000000HcN3_0EM700000004wrO.png)
+![User-added image]./../0-images/ka04u000000HcN3_0EM700000004wrO.png)
 
 Netwrix also has another product called Netwrix Event Log Manager for this purpose. This product is able to collect event log entries from multiple computers across the network and centrally store all events in a central location in a compressed format.
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/fixing-reports-displaying-letters-instead-of-command-text-in-ssrs.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/fixing-reports-displaying-letters-instead-of-command-text-in-ssrs.md
index d0d8e40585..d44bf49e05 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/fixing-reports-displaying-letters-instead-of-command-text-in-ssrs.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/fixing-reports-displaying-letters-instead-of-command-text-in-ssrs.md
@@ -26,7 +26,7 @@ knowledge_article_id: kA04u000000Tt80CAC
 ## Scenario
 Upon opening reports, the command buttons have been replaced by text symbols and it looks similar to this:
 
-![Screenshot_1.png](./images/ka04u000000HdFq_0EM4u0000052m0m.png)
+![Screenshot_1.png]./../0-images/ka04u000000HdFq_0EM4u0000052m0m.png)
 
 ## Solution
 The issue is with Internet Explorer's handling of permissions. To fix the issue you need to add the reporting server to the **Trusted Sites** and disable the **Protected Mode** for Admins on the Netwrix Server.
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-filter-out-certain-users-from-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-filter-out-certain-users-from-reports.md
index f58971542a..1fbc6e39ed 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-filter-out-certain-users-from-reports.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-filter-out-certain-users-from-reports.md
@@ -38,7 +38,7 @@ How do I filter out certain users from mailbox access reports?
 
 ## Image
 
-![User-added image](./images/ka04u000000HcPk_0EM7000000054Bf.png)
+![User-added image]./../0-images/ka04u000000HcPk_0EM7000000054Bf.png)
 
 ## Note
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-prepare-for-printing-ssrs-based-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-prepare-for-printing-ssrs-based-reports.md
index ee29280a88..2a8f69c22f 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-prepare-for-printing-ssrs-based-reports.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-prepare-for-printing-ssrs-based-reports.md
@@ -36,7 +36,7 @@ Take the following steps:
    - **Script ActiveX controls marked safe for scripting**
    - **Download signed ActiveX controls**
 
-![User-added image](./images/ka04u000000HcZ6_0EM4u000002P6Cl.png)
+![User-added image]./../0-images/ka04u000000HcZ6_0EM4u000002P6Cl.png)
 
 6. Click **OK**.
 7. Open any SSRS-based report using Internet Explorer and click **Print**.
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-use-wildcards-in-netwrix-auditor-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-use-wildcards-in-netwrix-auditor-reports.md
index 5b33280e3d..e709ab780f 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-use-wildcards-in-netwrix-auditor-reports.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/how-to-use-wildcards-in-netwrix-auditor-reports.md
@@ -72,5 +72,5 @@ Netwrix Auditor reports are based on SQL Server Reporting Services — the same
   - `AOE`
   - Not `ABE`, `ACE`, `AAE`, `ADE`.
 
-![Wildcards image](./images/ka04u00000117UP_0EM4u000008M7Sw.png)
+![Wildcards image]./../0-images/ka04u00000117UP_0EM4u000008M7Sw.png)
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/impossible-to-export-a-report.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/impossible-to-export-a-report.md
index f18359a0f9..faf1db4ff3 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/impossible-to-export-a-report.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/impossible-to-export-a-report.md
@@ -49,7 +49,7 @@ Refer to the following options to save the report:
 
   1. In Netwrix Auditor, navigate to the **Reports** menu and run a report.
   2. Click the **Print** icon, select the appropriate format, and click **Print**.  
-     ![Print dialog or options](./images/ka0Qk000000CoU5_0EM4u0000084Tco.png)
+     ![Print dialog or options]./../0-images/ka0Qk000000CoU5_0EM4u0000084Tco.png)
   3. Proceed with the further steps to save the report.
 
 ## Related Articles
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/logon-failed-for-unattended-execution-account-running-netwrix-auditor-reports.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/logon-failed-for-unattended-execution-account-running-netwrix-auditor-reports.md
index ba0cccfb92..3eabd69aa5 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/logon-failed-for-unattended-execution-account-running-netwrix-auditor-reports.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/logon-failed-for-unattended-execution-account-running-netwrix-auditor-reports.md
@@ -64,7 +64,7 @@ If no credentials are visible in Report Server Configuration Manager, follow the
 
 2. Open the `rsreportserver.config` file in a text editor, and locate the `<UnattendedExecutionAccount>` node.
 
-   ![UnattendedExecutionAccount node](./images/ka04u00000117zS_0EM4u000008MT4S.png)
+   ![UnattendedExecutionAccount node]./../0-images/ka04u00000117zS_0EM4u000008MT4S.png)
 
 3. Delete the credentials specified in `<UserName>`, `<Password>`, and `<Domain>` fields.
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/reports-generation-takes-a-while-and-completes-with-errors.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/reports-generation-takes-a-while-and-completes-with-errors.md
index a8447164c5..77ff9bd0d7 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/reports-generation-takes-a-while-and-completes-with-errors.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/reports-generation-takes-a-while-and-completes-with-errors.md
@@ -51,7 +51,7 @@ To resolve the issue, do one of the following:
 
 - On your SQL Server host, restart the **SQL Server (Instance name)** windows service.
 
-- Follow the recommendations to improve the overall Netwrix Auditor performance. Learn more in [Long Data Collection — Improving the Performance](/docs/kb/auditor/long-data-collection-improving-the-performance).
+- Follow the recommendations to improve the overall Netwrix Auditor performance. Learn more in [Long Data Collection — Improving the Performance](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/long-data-collection-improving-the-performance).
 
 - Disable the report generating timeout by following these steps:
   1. Open the **ReportManager URL** and click the **Site Settings** link in the top-right corner.
@@ -64,4 +64,4 @@ To resolve the issue, do one of the following:
 
 ### Related Articles
 
-- [Long Data Collection — Improving the Performance](/docs/kb/auditor/long-data-collection-improving-the-performance)
+- [Long Data Collection — Improving the Performance](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/long-data-collection-improving-the-performance)
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/state-in-time-reports-do-not-show-gpo-settings-values.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/state-in-time-reports-do-not-show-gpo-settings-values.md
index a8a51f1cfe..7670854cf8 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/state-in-time-reports-do-not-show-gpo-settings-values.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/state-in-time-reports-do-not-show-gpo-settings-values.md
@@ -28,7 +28,7 @@ knowledge_article_id: kA04u000000Pcy9CAC
 GPO SIT reports do not show GPO settings values. Only GPO summary information is present.  
 For example: “Empty Group Policy Objects” report lists Policies that actually contain some settings set.
 
-![User-added image](./images/ka04u000000HdEa_0EM4u000002CmYD.png)
+![User-added image]./../0-images/ka04u000000HdEa_0EM4u000002CmYD.png)
 
 Another example: “Group Policy Objects by Policy Name” report lists only settings of the following sections:
 
@@ -37,10 +37,10 @@ Another example: “Group Policy Objects by Policy Name” report lists only set
 - General/Links
 - General/Security Filtering
 
-![User-added image](./images/ka04u000000HdEa_0EM4u000002CmYI.png)
+![User-added image]./../0-images/ka04u000000HdEa_0EM4u000002CmYI.png)
 
 All the other data is missing from the report:  
-![User-added image](./images/ka04u000000HdEa_0EM4u000002CmYN.png)
+![User-added image]./../0-images/ka04u000000HdEa_0EM4u000002CmYN.png)
 
 ## Affected environment
 
@@ -60,7 +60,7 @@ The conditions below must take place altogether:
 
 3. Domain Item Data Processing Account in the Netwrix Auditor configuration setting for the monitored domain is set in a format of `NETBIOSDOMAINNAME\ACCOUNTSAMACCOUNTMANE` (e.g. `corp\administrator`).
 
-![User-added image](./images/ka04u000000HdEa_0EM4u000002CmYS.png)
+![User-added image]./../0-images/ka04u000000HdEa_0EM4u000002CmYS.png)
 
 ## Cause
 
@@ -70,4 +70,4 @@ By default NetBios names cannot be resolved across different subnets using broad
 
 Set the data processing account for the monitored domain item in a format of `FQDNDOMAINNAME\ACCOUNTSAMACCOUNTNAME` (e.g. `corp.local\administrator`)
 
-![User-added image](./images/ka04u000000HdEa_0EM4u000002CsNQ.png)
+![User-added image]./../0-images/ka04u000000HdEa_0EM4u000002CsNQ.png)
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/the-email-address-column-in-the-enrollment-report.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/the-email-address-column-in-the-enrollment-report.md
index 2004d19488..34c190982d 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/the-email-address-column-in-the-enrollment-report.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/the-email-address-column-in-the-enrollment-report.md
@@ -25,7 +25,7 @@ knowledge_article_id: kA00g000000H9U3CAK
 
 When you run the Enrollment report, the Email Address column fields are blank for all user accounts. What should this column show and what can you do to make this work?
 
-![User-added image](./images/ka04u000000HcNo_0EM700000004xIo.png)
+![User-added image]./../0-images/ka04u000000HcNo_0EM700000004xIo.png)
 
 ---
 
@@ -33,11 +33,11 @@ The **Email Address** column returns the email address used for **Additional aut
 
 An email with a unique link to the password reset page is sent to this address after the user answers secret questions. The user then should follow the link to complete password reset. The Email Address field contains data for the enrolled users only, because this email is specified during the enrollment procedure if the Authentication policy feature is enabled.
 
-![User-added image](./images/ka04u000000HcNo_0EM700000004xIy.png)
+![User-added image]./../0-images/ka04u000000HcNo_0EM700000004xIy.png)
 
 To enable this feature:
 
 1. On the **Administrative portal - Settings - Authentication Policy** tab, select the **Additional authentication using the user email** check box.
 
-![User-added image](./images/ka04u000000HcNo_0EM700000004xIt.png)
+![User-added image]./../0-images/ka04u000000HcNo_0EM700000004xIt.png)
 
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-run-reports-system-cannot-find-the-file-specified.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-run-reports-system-cannot-find-the-file-specified.md
index 4dbe138bde..e973808405 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-run-reports-system-cannot-find-the-file-specified.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-run-reports-system-cannot-find-the-file-specified.md
@@ -49,6 +49,6 @@ A report server database is missing.
 Refer to the following steps to resolve the issue:
 
 1. In your Netwrix Auditor server, disable **Netwrix Auditor Archive Service** and **Netwrix Auditor Management Service** via **Services**.
-2. Deploy the report server database — refer to the following article for in-depth instructions: [Deploying the Report Server Database](/docs/kb/auditor/deploying-the-report-server-database)
+2. Deploy the report server database — refer to the following article for in-depth instructions: [Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)
 3. Once you've configured the report server database, grant the roles to the SSRS service account the roles required. Refer to the following article for additional information: [Configure SSRS account](https://docs.netwrix.com/docs/auditor/10_8/requirements/sqlserverreportingservice) and [How to Assign db_owner Permissions](docs\kb\auditor\how-to-assign-db-owner-permissions.md)
 4. Restart **Netwrix Auditor Archive Service** and **Netwrix Auditor Management Service** on your Netwrix Auditor server via **Services**.
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/unable-to-update-netwrix-auditor-due-to-contract-or-subscription-expiration.md b/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/unable-to-update-netwrix-auditor-due-to-contract-or-subscription-expiration.md
index c88ffe6699..50264a149b 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/unable-to-update-netwrix-auditor-due-to-contract-or-subscription-expiration.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/unable-to-update-netwrix-auditor-due-to-contract-or-subscription-expiration.md
@@ -33,7 +33,7 @@ To be able to download and install the new version, renew your maintenance contr
 Your subscription plan for Netwrix Auditor has expired
 ```
 
-![AboutNetwrixAuditor.png](./images/ka0Qk0000002uxN_0EM4u000008LHag.png)
+![AboutNetwrixAuditor.png]./../0-images/ka0Qk0000002uxN_0EM4u000008LHag.png)
 
 ## Cause
 
@@ -47,10 +47,10 @@ Even if you have valid support and maintenance licenses, you might still have so
 2. In the left pane, select **Licenses**.
 3. Select any expired licenses and click **Remove**.
 
-If you would like to upgrade to the latest product version from a version that is no longer supported, refer to the following incremental upgrade guide: [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/upgrade-increments-for-netwrix-auditor).
+If you would like to upgrade to the latest product version from a version that is no longer supported, refer to the following incremental upgrade guide: [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor).
 
 ## Related articles
 
 - Installation — Upgrade to the Latest Version ⸱ v10.6
-- [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/upgrade-increments-for-netwrix-auditor)
+- [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor)
 
diff --git a/docs/kb/auditor/system-administration/backup-and-recovery/backup-recommendations.md b/docs/kb/auditor/system-administration/backup-and-recovery/backup-recommendations.md
index ee0c22b2f2..1397c530ba 100644
--- a/docs/kb/auditor/system-administration/backup-and-recovery/backup-recommendations.md
+++ b/docs/kb/auditor/system-administration/backup-and-recovery/backup-recommendations.md
@@ -46,9 +46,9 @@ configserverDbProcessor.exe export -target "C:\NA_Backups\naconfig.xml"
 
 4. Once the components are backed up, you can store them in any location to use once needed.
 
-For additional information on import, refer to the following article: [Migrating Auditor to New Server](/docs/kb/auditor/migrating-auditor-to-new-server).
+For additional information on import, refer to the following article: [Migrating Auditor to New Server](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server).
 
 ## Related articles
 
-- [Migrating Auditor to New Server](/docs/kb/auditor/migrating-auditor-to-new-server)
-- [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location)
+- [Migrating Auditor to New Server](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server)
+- [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location)
diff --git a/docs/kb/auditor/system-administration/database-management/could-not-allocate-space-for-object-objectname-in-database-databasename.md b/docs/kb/auditor/system-administration/database-management/could-not-allocate-space-for-object-objectname-in-database-databasename.md
index 27123af3f9..1097ff3890 100644
--- a/docs/kb/auditor/system-administration/database-management/could-not-allocate-space-for-object-objectname-in-database-databasename.md
+++ b/docs/kb/auditor/system-administration/database-management/could-not-allocate-space-for-object-objectname-in-database-databasename.md
@@ -89,4 +89,4 @@ To recreate the database, follow these steps:
 - Considerations for the Autogrow and Autoshrink Settings in SQL Server: https://learn.microsoft.com/en-us/troubleshoot/sql/database-engine/database-file-operations/considerations-autogrow-autoshrink
 - [Hardware Requirements](https://docs.netwrix.com/docs/auditor/10_8/requirements/console)
 - [Netwrix Auditor Settings – Investigations (v10.6) feature](https://docs.netwrix.com/docs/auditor/10_8/admin/settings/investigations)
-- [SQL Server Express Database Size Reached 10GB](/docs/kb/auditor/sql-server-express-database-size-reached-10gb)
+- [SQL Server Express Database Size Reached 10GB](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/sql-server-express-database-size-reached-10gb)
diff --git a/docs/kb/auditor/system-administration/database-management/database-contains-tables-not-compatible-with-the-product.md b/docs/kb/auditor/system-administration/database-management/database-contains-tables-not-compatible-with-the-product.md
index 79ec9e5235..9a06a5b13b 100644
--- a/docs/kb/auditor/system-administration/database-management/database-contains-tables-not-compatible-with-the-product.md
+++ b/docs/kb/auditor/system-administration/database-management/database-contains-tables-not-compatible-with-the-product.md
@@ -42,11 +42,11 @@ Using SQL Management Studio give the Data Processing Account `DB_Owner` rights t
 1) Log into the instance which contains the product database using SQL Management Studio with a **sysadmin account**.
 
 2) Expand **Security** and then **Logins**.  
-   ![User-added image](./images/ka04u000000HcT5_0EM700000008DPW.png)
+   ![User-added image]./../0-images/ka04u000000HcT5_0EM700000008DPW.png)
 
 3) **Right click** the **Data Processing Account** and go to **Properties** (add the account if it doesn't exist).  
-   ![User-added image](./images/ka04u000000HcT5_0EM700000008DPb.png)
+   ![User-added image]./../0-images/ka04u000000HcT5_0EM700000008DPb.png)
 
 4) Under **Server Roles** you can give **sysadmin** to this account OR alternatively you can go to **User Mapping** and select each Netwrix database individually and add **DB_Owner** permissions.  
-   ![User-added image](./images/ka04u000000HcT5_0EM700000008DPg.png)
+   ![User-added image]./../0-images/ka04u000000HcT5_0EM700000008DPg.png)
 
diff --git a/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database.md b/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database.md
index 33ca1ff1e6..24f387a635 100644
--- a/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database.md
+++ b/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database.md
@@ -68,7 +68,7 @@ Once the database has been successfully deployed, provide the Report Server URL
 
 1. In the main Netwrix Auditor screen, click **Settings**. In the left pane, select the **Audit Database** tab and click **Modify** under the **Audit Database** section.
 
-   ![Audit Database Modify](./images/ka04u000000wvtY_0EM4u000008pRVW.png)
+   ![Audit Database Modify]./../0-images/ka04u000000wvtY_0EM4u000008pRVW.png)
 
 2. Input the credentials and click **Next**.
 
diff --git a/docs/kb/auditor/system-administration/database-management/error-can-not-process-sql-commands-for-the-netwrix-auditor-self-audit-database.md b/docs/kb/auditor/system-administration/database-management/error-can-not-process-sql-commands-for-the-netwrix-auditor-self-audit-database.md
index 7aff29f179..97e1d7e5f9 100644
--- a/docs/kb/auditor/system-administration/database-management/error-can-not-process-sql-commands-for-the-netwrix-auditor-self-audit-database.md
+++ b/docs/kb/auditor/system-administration/database-management/error-can-not-process-sql-commands-for-the-netwrix-auditor-self-audit-database.md
@@ -53,4 +53,4 @@ Follow the steps below to turn off the **Recovery** mode for the database:
 
 ### Related Article:
 
-- [Recovery Mode Changes in SQL Databases](/docs/kb/auditor/recovery-mode-changes-in-sql-databases)
+- [Recovery Mode Changes in SQL Databases](/docs/kb/auditor/system-administration/database-management/recovery-mode-changes-in-sql-databases)
diff --git "a/docs/kb/auditor/system-administration/database-management/failed_to_load_registry_hive_\342\210\222_system_cannot_find_file_specified_configuration_registry_database_is_.md" "b/docs/kb/auditor/system-administration/database-management/failed_to_load_registry_hive_\342\210\222_system_cannot_find_file_specified_configuration_registry_database_is_.md"
index 40d5e48d09..bff31ae7c7 100644
--- "a/docs/kb/auditor/system-administration/database-management/failed_to_load_registry_hive_\342\210\222_system_cannot_find_file_specified_configuration_registry_database_is_.md"
+++ "b/docs/kb/auditor/system-administration/database-management/failed_to_load_registry_hive_\342\210\222_system_cannot_find_file_specified_configuration_registry_database_is_.md"
@@ -46,10 +46,10 @@ The error can be resolved by performing one of the following steps:
 2. Add **ProfileImagePath** value (Expandable String Value) with an empty value to the profiles with the value missing.
 3. Check the affected server for unknown user profiles by accessing **Control Panel** > **System** > **Advanced system settings** > **Advanced** tab > **Settings** button under the **User Profiles** section to delete them.
 4. Ask the remaining users to log in to the system — a user affected by a faulty `NTUSER.DAT` won't be able to log in.
-5. In case collection is not affected (e.g., the user does not appear in the registry), you can omit the error. Add the `%*,*,*Remove Software data provider failed to load the user *domain\user*%` line to the Windows Server Auditing **omiterror** list. Refer to the following article for additional information on omit lists: [How to Use Omit Lists](/docs/kb/auditor/how-to-use-omit-lists).
+5. In case collection is not affected (e.g., the user does not appear in the registry), you can omit the error. Add the `%*,*,*Remove Software data provider failed to load the user *domain\user*%` line to the Windows Server Auditing **omiterror** list. Refer to the following article for additional information on omit lists: [How to Use Omit Lists](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists).
 
 Once the changes are introduced, reboot the target server.
 
 ### Related Articles
 
-[How to Use Omit Lists](/docs/kb/auditor/how-to-use-omit-lists)
\ No newline at end of file
+[How to Use Omit Lists](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists)
\ No newline at end of file
diff --git a/docs/kb/auditor/system-administration/database-management/how-to-control-the-size-of-netwrixsqlcraudit-databases-on-sql-instances-and-what-it-is-needed-for.md b/docs/kb/auditor/system-administration/database-management/how-to-control-the-size-of-netwrixsqlcraudit-databases-on-sql-instances-and-what-it-is-needed-for.md
index 72ac19f3c5..bb41315f7c 100644
--- a/docs/kb/auditor/system-administration/database-management/how-to-control-the-size-of-netwrixsqlcraudit-databases-on-sql-instances-and-what-it-is-needed-for.md
+++ b/docs/kb/auditor/system-administration/database-management/how-to-control-the-size-of-netwrixsqlcraudit-databases-on-sql-instances-and-what-it-is-needed-for.md
@@ -31,4 +31,4 @@ If you enable the **Audit data changes** option as part of SQL Server audit, Net
 1. Disable the **Audit data changes** option if you are not interested in content changes, and delete the `NetwrixSQLCRAudit` database(s) from the SQL Server(s).
 2. Shrink the `NetwrixSQLCRAudit` database(s) via MSSQL Management Studio.
 
-For additional information about how Netwrix Auditor for SQL Server works, please refer to the following KB: [How Netwrix Auditor for SQL Server Collects Data](/docs/kb/auditor/how-netwrix-auditor-for-sql-server-collects-data)
+For additional information about how Netwrix Auditor for SQL Server works, please refer to the following KB: [How Netwrix Auditor for SQL Server Collects Data](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-netwrix-auditor-for-sql-server-collects-data)
diff --git a/docs/kb/auditor/system-administration/database-management/how-to-reduce-audit-database-size-for-netwrix-auditor.md b/docs/kb/auditor/system-administration/database-management/how-to-reduce-audit-database-size-for-netwrix-auditor.md
index 5352a9fd67..cf4355bd90 100644
--- a/docs/kb/auditor/system-administration/database-management/how-to-reduce-audit-database-size-for-netwrix-auditor.md
+++ b/docs/kb/auditor/system-administration/database-management/how-to-reduce-audit-database-size-for-netwrix-auditor.md
@@ -38,7 +38,7 @@ You can configure the audit database retention settings by following the next st
 2. In the left pane, select the **Audit Database** tab.
 3. Click **Modify** under the **Database Retention** section and input the retention period in days.
 
-   ![User-added image](./images/ka04u00000117bz_0EM0g000000hGVv.png)
+   ![User-added image]./../0-images/ka04u00000117bz_0EM0g000000hGVv.png)
 
    - **Tip:** Longer retention periods results in larger audit databases.
 
@@ -51,7 +51,7 @@ Data that exceeds the new retention period will be removed during the next colle
 1. In Windows Services Manager on your Netwrix host, stop both **Netwrix Auditor Archive Service** and **Netwrix Auditor Management Service**.
 2. Run your SQL Management Studio instance and navigate to ` %SQL_Server_database_name% > Databases` to select the database you are going to delete.
 
-   ![User-added image](./images/ka04u00000117bz_0EM70000000QIPr.png)
+   ![User-added image]./../0-images/ka04u00000117bz_0EM70000000QIPr.png)
 
 3. In the Delete Object window, check both option checkboxes:
    1. Delete backup and restore history information for databases.
@@ -66,7 +66,7 @@ The audit database has now been successfully deleted. Refer to the **Rebuilding
 2. In the left pane, select the **Audit Database** tab. Review the database name and update it if necessary.  
    Netwrix Auditor allows you to specify settings for each monitoring plan individually, so you'll have to rebuild the database for each monitoring plan separately.
 
-   ![User-added image](./images/ka04u00000117bz_0EM0g000000hGWo.png)
+   ![User-added image]./../0-images/ka04u00000117bz_0EM0g000000hGWo.png)
 
 3. Refresh or reopen the SQL Management Studio to ensure the audit database was rebuilt.
 
@@ -76,7 +76,7 @@ The audit database has now been successfully deleted. Refer to the **Rebuilding
 2. Run your SQL Management Studio instance and navigate to ` %SQL_Server_database_name% > Databases` to select the database you are going to rename.
 3. Right-click the selected database and select **Rename**.
 
-   ![Screenshot_1.png](./images/ka04u00000117bz_0EM4u000004dCnj.png)
+   ![Screenshot_1.png]./../0-images/ka04u00000117bz_0EM4u000004dCnj.png)
 
 4. Add **_old** or another word to the end of the database name to differentiate it from other databases.
 5. Once the database has been renamed, restart **Netwrix Auditor Archive Service** and **Netwrix Auditor Management Service**.
@@ -89,12 +89,12 @@ The audit database has now been successfully renamed. Refer to the **Rebuilding
 
 > **NOTE:** In order to correctly set the retention period, you have to estimate your audit database growth. If you are using Netwrix Auditor 9.6 or newer, this can be done by monitoring **Health Status** > **Database statistics**.
 
-![db_stats.png](./images/ka04u00000117bz_0EM4u000008LKwz.png)
+![db_stats.png]./../0-images/ka04u00000117bz_0EM4u000008LKwz.png)
 
 1. Run your SQL Management Studio instance and navigate to ` %SQL_Server_database_name% > Databases` to locate the required database.
 2. Right-click it and select **Properties**.
 
-   ![User-added image](./images/ka04u00000117bz_0EM70000000QIQN.png)
+   ![User-added image]./../0-images/ka04u00000117bz_0EM70000000QIQN.png)
 
 3. Review **Size** and **Space Available** parameters.
 
diff --git a/docs/kb/auditor/system-administration/database-management/not-all-changes-are-included-in-reports-for-database-content-audit.md b/docs/kb/auditor/system-administration/database-management/not-all-changes-are-included-in-reports-for-database-content-audit.md
index 4abe7ffb3e..7a2396cf8a 100644
--- a/docs/kb/auditor/system-administration/database-management/not-all-changes-are-included-in-reports-for-database-content-audit.md
+++ b/docs/kb/auditor/system-administration/database-management/not-all-changes-are-included-in-reports-for-database-content-audit.md
@@ -29,5 +29,5 @@ When you perform bulk inserts, not all modified rows are reported. How do you ch
 
 In the **SQL Server data source settings** there is a value that defines the number of data changes per SQL transaction to be included in a report. By default it is set to `10`.
 
-![sql_transactions_9](./images/ka04u00000116R6_0EM0g000000hUdK.png)
+![sql_transactions_9]./../0-images/ka04u00000116R6_0EM0g000000hUdK.png)
 
diff --git a/docs/kb/auditor/system-administration/licensing-and-compliance/essential-netwrix-license-usage-data-and-url-resources.md b/docs/kb/auditor/system-administration/licensing-and-compliance/essential-netwrix-license-usage-data-and-url-resources.md
index 41b8f197e2..18bd7339cb 100644
--- a/docs/kb/auditor/system-administration/licensing-and-compliance/essential-netwrix-license-usage-data-and-url-resources.md
+++ b/docs/kb/auditor/system-administration/licensing-and-compliance/essential-netwrix-license-usage-data-and-url-resources.md
@@ -31,7 +31,7 @@ Each data source that Netwrix Auditor audits is associated with a license. For e
 
 > **Note:** License usage data does not include any sensitive information. See the following screenshot for an example of what data Netwrix receives:
 
-![User-added image](./images/ka04u00000116GR_0EM4u000002PWPR.png)
+![User-added image]./../0-images/ka04u00000116GR_0EM4u000002PWPR.png)
 
 If a Netwrix server in your environment has limited Internet access, whitelist the following URLs so Netwrix can collect license usage data:
 
diff --git a/docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-netwrix-auditor-license.md b/docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-netwrix-auditor-license.md
index 6a649bab01..11632b5729 100644
--- a/docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-netwrix-auditor-license.md
+++ b/docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-netwrix-auditor-license.md
@@ -33,7 +33,7 @@ You may have received an email from our licensing team — download the attached
 
 1. In the main Netwrix Auditor screen, go to **Settings** > **Licenses** and click **Update**.
 
-   ![2.png](./images/ka04u00000116MV_0EM4u000007cekk.png)
+   ![2.png]./../0-images/ka04u00000116MV_0EM4u000007cekk.png)
 
 2. Navigate to your `*.lic` file and select the file.
 
diff --git a/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location.md b/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location.md
index d1603ef107..8ca40d149b 100644
--- a/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location.md
+++ b/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location.md
@@ -34,13 +34,13 @@ The size of your Working Folder may grow significantly (up to 1 TB) depending on
 >
 > - Long-Term Archive, a repository of collected audit data stored in proprietary Netwrix format (activity records). Audit data is kept in the Long-Term Archive for 10 years as per default settings. The default Long-Term Archive location is ` %ProgramData%\Netwrix Auditor\Data`. For more information on setting Long-Term Archive up, refer to the following article: [Long-Term Archive](https://docs.netwrix.com/docs/auditor/10_8/admin/settings/longtermarchive)
 >
->   If you would like to move Long-Term Archive to another location, refer to the following article: [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location).
+>   If you would like to move Long-Term Archive to another location, refer to the following article: [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location).
 >
 > - Working Folder, a repository for Netwrix Auditor to store operational information (configuration files for product components, log files, and other data). To ensure the audit trail continuity, Netwrix Auditor also caches some audit data locally in the Working Folder prior to placing it to the Long-Term Archive or any audit database. Audit data is kept in the Working Folder for a shorter period of up to several weeks. The default Working Folder location is ` %ProgramData%\Netwrix Auditor\`.
 
 ### Planning and preparation
 
-1. To track your current Working Folder capacity and estimate the disk space you will need on the new target drive, use the **Working Folder** widget of the Health Status dashboard. Refer to the following articles for additional information: [Netwrix Auditor Operations and Health − Health Status Dashboard](https://docs.netwrix.com/docs/auditor/10_8/admin/healthstatus/dashboard/overview) and [How to Check the Netwrix Auditor Health Status](/docs/kb/auditor/how-to-check-the-netwrix-auditor-health-status).
+1. To track your current Working Folder capacity and estimate the disk space you will need on the new target drive, use the **Working Folder** widget of the Health Status dashboard. Refer to the following articles for additional information: [Netwrix Auditor Operations and Health − Health Status Dashboard](https://docs.netwrix.com/docs/auditor/10_8/admin/healthstatus/dashboard/overview) and [How to Check the Netwrix Auditor Health Status](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-check-the-netwrix-auditor-health-status).
 2. The Working Folder can be stored only locally on the Netwrix server — prepare a local folder for the migration process. Make sure the target folder location differs from the Long-Term Archive location.
 
    > **NOTE:** Network shares are not supported.
@@ -51,19 +51,19 @@ The size of your Working Folder may grow significantly (up to 1 TB) depending on
 1. Navigate to ` %Netwrix Auditor installation folder%\Audit Intelligence` and launch the `WorkingFolderMigration.exe` utility.
 2. Specify the target folder in the **Specify new destination** field.
 
-   ![User-added image](./images/ka0Qk0000002slt_0EM0g000002BkO9.png)
+   ![User-added image]./../0-images/ka0Qk0000002slt_0EM0g000002BkO9.png)
 
    > **IMPORTANT:** Network shares are not supported − make sure the new Working Folder destination is a local folder.
 3. Click **Migrate**. All temporary data from ` %ProgramData%\Netwrix Auditor\` will be copied to the specified target folder.
 4. Wait for the migration process to complete. Your final screen should look like the following screenshot in case the migration process was completed correctly:
 
-   ![wf_migration.png](./images/ka0Qk0000002slt_0EM4u000007chgj.png)
+   ![wf_migration.png]./../0-images/ka0Qk0000002slt_0EM4u000007chgj.png)
 
 If the migration process was completed successfully, proceed to steps described in **Scenario A**.
 
 In case any error occurs during the migration process, the Working Folder contents will remain in the original location. The final screen might look like the following screenshot:
 
-![User-added image](./images/ka0Qk0000002slt_0EM0g000002BkNM.png)
+![User-added image]./../0-images/ka0Qk0000002slt_0EM0g000002BkNM.png)
 
 In case the migration process was not completed successfully, follow the steps described in **Scenario B**.
 
@@ -94,8 +94,8 @@ If migration was completed with any errors, refer to the following steps:
 ## Related articles and links
 
 - [Long-Term Archive](https://docs.netwrix.com/docs/auditor/10_8/admin/settings/longtermarchive)
-- [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location)
+- [How to Move Long-Term Archive to a New Location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location)
 - [Netwrix Auditor Operations and Health − Health Status Dashboard](https://docs.netwrix.com/docs/auditor/10_8/admin/healthstatus/dashboard/overview)
-- [How to Check the Netwrix Auditor Health Status](/docs/kb/auditor/how-to-check-the-netwrix-auditor-health-status)
+- [How to Check the Netwrix Auditor Health Status](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-check-the-netwrix-auditor-health-status)
 - [Open a Ticket · Netwrix 🧭](https://www.netwrix.com/tickets.html#/open-a-ticket)
 
diff --git a/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-prepare-netwrix-server-for-os-upgrade.md b/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-prepare-netwrix-server-for-os-upgrade.md
index 850aee93a0..52ce3ad9ae 100644
--- a/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-prepare-netwrix-server-for-os-upgrade.md
+++ b/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-prepare-netwrix-server-for-os-upgrade.md
@@ -33,7 +33,7 @@ This article provides preparation steps for upgrading an operating system (Windo
 
 Taking a snapshot or creating a backup of the Netwrix Auditor Server is recommended for data protection and recovery. The method to be used depends on the approach used for Auditor installation, whether it's on a virtual or physical machine.
 
-> **TIP:** You can configure Netwrix Auditor in the failover mode. To learn about failover and backup scenarios, read [How to Configure Netwrix Auditor in Failover Mode](/docs/kb/auditor/how-to-configure-netwrix-auditor-in-failover-mode)
+> **TIP:** You can configure Netwrix Auditor in the failover mode. To learn about failover and backup scenarios, read [How to Configure Netwrix Auditor in Failover Mode](/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-netwrix-auditor-in-failover-mode)
 
 Stop all Netwrix services running in your server − run the following line in elevated PowerShell:
 
@@ -55,4 +55,4 @@ After the upgrade, you might notice warnings in the Health log. These warnings o
 
 ## Related articles
 
-- [How to Configure Netwrix Auditor in Failover Mode](/docs/kb/auditor/how-to-configure-netwrix-auditor-in-failover-mode)
+- [How to Configure Netwrix Auditor in Failover Mode](/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-configure-netwrix-auditor-in-failover-mode)
diff --git a/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-upgrade-netwrix-auditor.md b/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-upgrade-netwrix-auditor.md
index b9ec3c0d88..518e95e34d 100644
--- a/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-upgrade-netwrix-auditor.md
+++ b/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-upgrade-netwrix-auditor.md
@@ -40,7 +40,7 @@ How to update Netwrix Auditor?
 ### Netwrix Auditor v.9.95 and earlier
 
 Older versions of Netwrix Auditor must be upgraded incrementally. You must wait 24 hours in between each incremental upgrade.
-> **NOTE:** For additional information on upgrade increments, refer to the following article: [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/upgrade-increments-for-netwrix-auditor)
+> **NOTE:** For additional information on upgrade increments, refer to the following article: [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor)
 
 If you are upgrading from a version earlier than 9.96, view the additional steps under **Post Upgrade** > **Legacy Steps** further in this article.
 
@@ -64,10 +64,10 @@ Upon completion, Netwrix Auditor will launch. To confirm integrity, run the foll
 - **Legacy Steps:** On version 8.5 and lower, you will need to launch the Netwrix Auditor Administrator Console and manually upgrade the Audit Databases in SQL.
   - Click **Audit Database** and then click **Upgrade**.
 
-  ![8.0-Upgrade-6-1.png](./images/ka0Qk000000Csfl_0EM4u0000084TwA.png)
+  ![8.0-Upgrade-6-1.png]./../0-images/ka0Qk000000Csfl_0EM4u0000084TwA.png)
 
 ## Related articles
 
 - [Upgrading to the Latest Version](https://docs.netwrix.com/docs/auditor/10_8/install/upgrade)
-- [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/upgrade-increments-for-netwrix-auditor)
+- [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor)
 
diff --git a/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md b/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md
index 1158fdf167..b43e24b213 100644
--- a/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md
+++ b/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md
@@ -35,5 +35,5 @@ To upgrade to v9.96, contact Technical Support for download links for the latest
 
 ## Related Articles
 
-- [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/upgrade-increments-for-netwrix-auditor)
+- [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor)
 - [How to Upgrade Netwrix Auditor](/docs/kb/auditor/how-to-upgrade-netwrix-auditor)
\ No newline at end of file
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-access-roles-page.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-access-roles-page.md
index bba1ea6b2d..eb70b6a0bd 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-access-roles-page.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-access-roles-page.md
@@ -30,7 +30,7 @@ All pages on Administrative portals work except the Roles.
 An error occurred on the server when processing the URL. Please contact the system administrator.
 If you are the system administrator please click here to find out more about this error.
 
-![User-added](./images/servlet_image_3823966b1661.png)
+![User-added]./../0-images/servlet_image_3823966b1661.png)
 
 ---
 
@@ -46,6 +46,6 @@ Follow these steps to fix the issue:
 2. Locate the web-site that is hosting the `PM` virtual directory.
 3. Navigate to the **admin** virtual directory.
 4. Open **ASP** settings under the **IIS** section.
-   ![User-added](./images/servlet_image_3823966b1661.png)
+   ![User-added]./../0-images/servlet_image_3823966b1661.png)
 5. Make sure that **Enable Buffering** is set to `True`.
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-access-the-help-desk-portal.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-access-the-help-desk-portal.md
index 54e777e6ec..0df3829690 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-access-the-help-desk-portal.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-access-the-help-desk-portal.md
@@ -36,21 +36,21 @@ This error indicates your authentication settings need to be adjusted to comply
    c) In the **Properties** dialog, open the **Directory Security** tab, and select **Edit** for **Authentication and Access Control**.  
    d) In the **Authentication Methods** dialog, select either the **Integrated Windows authentication** box or **Basic authentication** (password is sent in clear text), and clear all other authentication options for Authentication access.
 
-   ![User-added image](./images/ka04u000000HcNm_0EM700000004xES.png)
+   ![User-added image]./../0-images/ka04u000000HcNm_0EM700000004xES.png)
 
    To ensure the required settings are enabled in **IIS7**, do the following:
    a) In the **IIS Manager** left pane, navigate to the **ALE** virtual directory (by default `\<your computer name> -> Sites -> Default Web Site -> ALE`).  
    b) In the Manager central pane, double-click the **Authentication** option.  
    c) In the Authentication list, enable either the **Windows Authentication** option or **Basic Authentication**, and disable all other authentication options.
 
-   ![User-added image](./images/ka04u000000HcNm_0EM700000004xEN.png)
+   ![User-added image]./../0-images/ka04u000000HcNm_0EM700000004xEN.png)
 
 3. Your proxy server is disabled or bypassed. To check the proxy settings, do the following:
    a) Go to **Control panel -> Internet options**.  
    b) In the **Internet Properties** dialog, open the **Connections** tab and click the **LAN settings** button.  
    c) Make sure the **Use a proxy server for your LAN** option is not enabled. Otherwise, make sure the **Bypass proxy server for local addresses** option is enabled too; in this case the Help-Desk portal must be a member of the **Local intranet zone**, or specified as exception.
 
-   ![User-added image](./images/ka04u000000HcNm_0EM700000004xEI.png)
+   ![User-added image]./../0-images/ka04u000000HcNm_0EM700000004xEI.png)
 
 4. The account you are using has READ access to the physical directory of the Web-portal (by default `C:Program Files (x86)NetWrixAccount Lockout ExaminerWeb`)
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-complete-login-due-to-an-incorrect-user-name-or-password.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-complete-login-due-to-an-incorrect-user-name-or-password.md
index b1288dde5c..536f420ed4 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-complete-login-due-to-an-incorrect-user-name-or-password.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-complete-login-due-to-an-incorrect-user-name-or-password.md
@@ -29,5 +29,5 @@ knowledge_article_id: kA00g000000H9bPCAS
 
 Select the **Change** button to enter in the credentials for the Virtual Center or ESX(i) Server:
 
-![User-added](./images/servlet_image_3823966b1661.png)
+![User-added]./../0-images/servlet_image_3823966b1661.png)
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-obtain-credential-information-for-mapped-drive.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-obtain-credential-information-for-mapped-drive.md
index 583264770a..2e0b09f1b5 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-obtain-credential-information-for-mapped-drive.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-obtain-credential-information-for-mapped-drive.md
@@ -26,7 +26,7 @@ The following error is returned on account lockout examination:
 
 `Cannot obtain credential information for drive <> mapped by <>`
 
-![User-added image](./images/ka04u000000HcMw_0EM700000004wzm.png)
+![User-added image]./../0-images/ka04u000000HcMw_0EM700000004wzm.png)
 
 ---
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-retrieve-audit-settings-in-audit-configuration-assistant.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-retrieve-audit-settings-in-audit-configuration-assistant.md
index ad479e0812..ed45f05586 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-retrieve-audit-settings-in-audit-configuration-assistant.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot-retrieve-audit-settings-in-audit-configuration-assistant.md
@@ -41,7 +41,7 @@ Cannot retrieve admin audit logging settings. Cannot execute the PowerShell comm
 The user %user% isn't assigned to any management roles.
 ```
 
-![Audit Configuration Assistant error screenshot](./images/ka04u00000117HQ_0EM4u000008M035.png)
+![Audit Configuration Assistant error screenshot]./../0-images/ka04u00000117HQ_0EM4u000008M035.png)
 
 ## Cause
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot_remove_ui_configuration_from_jobs_using_powershell_data_collector_jobs_with_parameters.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot_remove_ui_configuration_from_jobs_using_powershell_data_collector_jobs_with_parameters.md
index 70fc2a70ac..a544afbcb3 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot_remove_ui_configuration_from_jobs_using_powershell_data_collector_jobs_with_parameters.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/cannot_remove_ui_configuration_from_jobs_using_powershell_data_collector_jobs_with_parameters.md
@@ -19,7 +19,7 @@ products:
 
 In the **Netwrix Access Analyzer** (formerly **Enterprise Auditor**) Management Console, you cannot remove an unneeded output path in a job's configuration settings via the UI. When the path is removed, the option to save the setting appears disabled as shown below.
 
-![Output path disabled in UI](./images/servlet_image_b26ce25b201c.png)
+![Output path disabled in UI]./../0-images/servlet_image_b26ce25b201c.png)
 
 ## Cause
 
@@ -35,10 +35,10 @@ To remove the output path variable, use the **PowerShell Data Collector** wizard
 4. Select the **Edit Query** option.
 5. Click the **Parameters** button on the right side of the Edit PowerShell Query Settings.
 6. Select the parameter to be cleared and click **Edit**.  
-   ![Edit parameter](./images/servlet_image_dcd3919a2b21.png)  
+   ![Edit parameter]./../0-images/servlet_image_dcd3919a2b21.png)  
    
 7. Once the value box appears, delete the value and click **OK**.  
-   ![Delete value](./images/servlet_image_df5aa01d204f.png)  
+   ![Delete value]./../0-images/servlet_image_df5aa01d204f.png)  
    
 8. Complete the rest of the **PowerShell Data Collector** wizard by clicking **Next** and **Finish**.
 9. Click **OK** on the query properties box.
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x80040605-connection-failed.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x80040605-connection-failed.md
index f5d6a50735..b5fcc78b9a 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x80040605-connection-failed.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x80040605-connection-failed.md
@@ -50,8 +50,8 @@ One (or more) of the following services has stopped in the Netwrix Auditor serve
 
 Review the services running in the Netwrix Auditor server − make sure the services are running with their startup type set to **Automatic**.
 
-> **IMPORTANT:** If the disk storing Long-Term Archive is running out of space, you'll corresponding events in Health Log. When the free disk space is below 3GB, the Netwrix services responsible for audit data collection will be stopped, preventing the data collection. For additional information on reducing disk space consumption, refer to the following article: [Netwrix Auditor Consumes Disk Space — Recommendations](/docs/kb/auditor/netwrix-auditor-consumes-disk-space-recommendations).
+> **IMPORTANT:** If the disk storing Long-Term Archive is running out of space, you'll corresponding events in Health Log. When the free disk space is below 3GB, the Netwrix services responsible for audit data collection will be stopped, preventing the data collection. For additional information on reducing disk space consumption, refer to the following article: [Netwrix Auditor Consumes Disk Space — Recommendations](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-consumes-disk-space-recommendations).
 
 ## Related articles
 
-- [Netwrix Auditor Consumes Disk Space — Recommendations](/docs/kb/auditor/netwrix-auditor-consumes-disk-space-recommendations)
+- [Netwrix Auditor Consumes Disk Space — Recommendations](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-consumes-disk-space-recommendations)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x800706ba-rpc-server-is-unavailable.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x800706ba-rpc-server-is-unavailable.md
index a05aa1d3af..a5f413ccd3 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x800706ba-rpc-server-is-unavailable.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x800706ba-rpc-server-is-unavailable.md
@@ -73,7 +73,7 @@ Failed to update the agent on the following server: %server%
 
   > **NOTE:** If you see the following error in the Event Viewer while checking **Event Viewer (Local)** connection to another computer, enable inbound rules (COM+ Network Access and all rules in the Remote Event Log Management group) on the target computer. Refer to the following article for additional information: Configuration − Logon Activity Ports: Configure Windows Firewall Inbound Connection Rules ⸱ v10.6.
   >
-  > ![COM+ Network Access screenshot](./images/ka04u000000wvy4_0EM4u000008LkB8.png)
+  > ![COM+ Network Access screenshot]./../0-images/ka04u000000wvy4_0EM4u000008LkB8.png)
   >
   > Learn more in: 0x80004027 error when you try to remotely access COM+ object after you upgrade to Windows Server 2016 or later versions ⸱ Microsoft
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-403.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-403.md
index d9f5ebbaa0..428a7acb62 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-403.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-403.md
@@ -25,7 +25,7 @@ knowledge_article_id: kA00g000000H9TwCAK
 
 When trying to browse to any portal, you get "Error 403 - Access is denied"
 
-![User-added image](./images/ka04u000000HcNi_0EM700000004yKg.png)
+![User-added image]./../0-images/ka04u000000HcNi_0EM700000004yKg.png)
 
 The 403 error can be caused by several reasons. The most common reasons are:
 
@@ -37,9 +37,9 @@ The 403 error can be caused by several reasons. The most common reasons are:
    3. In the central pane double-click **SSL Settings**
    4. Check settings, change if necessary
 
-   ![User-added image](./images/ka04u000000HcNi_0EM700000004yKq.png)
+   ![User-added image]./../0-images/ka04u000000HcNi_0EM700000004yKq.png)
 
-   ![User-added image](./images/ka04u000000HcNi_0EM700000004yKv.png)
+   ![User-added image]./../0-images/ka04u000000HcNi_0EM700000004yKv.png)
 
 2. Default document IIS feature is not enabled.
 
@@ -50,7 +50,7 @@ The 403 error can be caused by several reasons. The most common reasons are:
    3. In the central pane double-click **Default Document**
    4. In the right pane click **Enable** (if there is no Enable option there, but **Disable** is, it means that the feature is enabled)
 
-   ![User-added image](./images/ka04u000000HcNi_0EM700000004yL0.png)
+   ![User-added image]./../0-images/ka04u000000HcNi_0EM700000004yL0.png)
 
-   ![User-added image](./images/ka04u000000HcNi_0EM700000004yL5.png)
+   ![User-added image]./../0-images/ka04u000000HcNi_0EM700000004yL5.png)
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-an-unknown-error-occurred-while-processing-the-request-on-the-server.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-an-unknown-error-occurred-while-processing-the-request-on-the-server.md
index 5370a714f0..649f20439c 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-an-unknown-error-occurred-while-processing-the-request-on-the-server.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-an-unknown-error-occurred-while-processing-the-request-on-the-server.md
@@ -45,5 +45,5 @@ Extend the report timeout on the on the Report Manager URL. For that:
 2. Find the problematic report and open it.
 3. Click the 3 dots in the Reports Manager for the report itself, then click **Manage**.
 4. In the **Advanced** section, modify the report timeout settings.  
-   ![User-added image](./images/ka0Qk0000001ZBp_0EMQk000002dUpt.png)
+   ![User-added image]./../0-images/ka0Qk0000001ZBp_0EMQk000002dUpt.png)
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-no-more-threads.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-no-more-threads.md
index df0cf214cb..214bce15d3 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-no-more-threads.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-no-more-threads.md
@@ -31,5 +31,5 @@ To fix the issue, restart the **WMI service** on the **target domain controller*
 3. Locate the **Windows Management Instrumentation Service** in the list.
 4. Right-click this service and select **Restart** from the popup menu.
 
-![User-added image](./images/ka04u000000HcMv_0EM700000004wr9.png)
+![User-added image]./../0-images/ka04u000000HcMv_0EM700000004wr9.png)
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-request-operation-timeout.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-request-operation-timeout.md
index 2eebeee43f..d1cf15aa63 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-request-operation-timeout.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-request-operation-timeout.md
@@ -26,7 +26,7 @@ knowledge_article_id: kA00g000000H9bxCAC
 
 You receive the "request timeout" error message when you launch the Netwrix Account Lockout Examiner console or some time after.
 
-![User-added image](./images/ka04u000000HcUi_0EM700000004xfn.png)
+![User-added image]./../0-images/ka04u000000HcUi_0EM700000004xfn.png)
 
 ---
 
@@ -45,7 +45,7 @@ In order to resolve the issue perform the following steps on the Account Lockout
    f. Set `invLogonCleaningPeriod` to `10 decimal`  
    g. Restart the NetWrix Account Lockout Examiner service
 
-   ![User-added image](./images/ka04u000000HcUi_0EM700000004xfx.png)
+   ![User-added image]./../0-images/ka04u000000HcUi_0EM700000004xfx.png)
 
 2. If the above does not help, disable searching of invalid logons on workstations. This will reduce the service load.
    a. Run Registry Editor (`Start - Run - regedit`)  
@@ -53,12 +53,12 @@ In order to resolve the issue perform the following steps on the Account Lockout
    c. Create a DWORD called `PF_Enabled` with the value of `0`  
    d. Restart the NetWrix Account Lockout Examiner service
 
-   ![User-added image](./images/ka04u000000HcUi_0EM700000004xg2.png)
+   ![User-added image]./../0-images/ka04u000000HcUi_0EM700000004xg2.png)
 
 3. If all of the registry settings did not address the issue set Account Lockout Examiner to monitor the PDC only:
    a. In Netwrix Account Lockout Examiner navigate to **File > Settings > Managed Objects**.  
    b. Select your domain and click **Edit**.  
    c. Select the **Only PDC emulator** radio button and click **OK** to save the changes.
 
-   ![User-added image](./images/ka04u000000HcUi_0EM700000004xg7.png)
+   ![User-added image]./../0-images/ka04u000000HcUi_0EM700000004xg7.png)
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-maximum-password-age-is-not-set.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-maximum-password-age-is-not-set.md
index 113008dc7e..fe192766a6 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-maximum-password-age-is-not-set.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-maximum-password-age-is-not-set.md
@@ -43,5 +43,5 @@ To set the Maximum Password Age policy for the domain:
 4. In the right pane define the **Maximum password age** value
 5. Update policies, for example run `gpupdate /force`
 
-![User-added image](./images/ka04u000000HcU6_0EM7000000054Ba.png)
+![User-added image]./../0-images/ka04u000000HcU6_0EM7000000054Ba.png)
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-pipe-endpoint-cannot-be-found.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-pipe-endpoint-cannot-be-found.md
index 5ba24b5d5a..a664dcd9a0 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-pipe-endpoint-cannot-be-found.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-pipe-endpoint-cannot-be-found.md
@@ -24,7 +24,7 @@ knowledge_article_id: kA00g000000H9c4CAC
 
 You get the "pipe endpoint cannot be found" error when you launch the console, or after some time after launching it.
 
-![User-added image](./images/ka04u000000HcUp_0EM700000004xfs.png)
+![User-added image]./../0-images/ka04u000000HcUp_0EM700000004xfs.png)
 
 The issue occurs when the Account Lockout Examiner does not start or crashes.
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-remote-procedure-call-failed.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-remote-procedure-call-failed.md
index 2c9af34273..3af819e775 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-remote-procedure-call-failed.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-remote-procedure-call-failed.md
@@ -43,5 +43,5 @@ Depending on the error cause, follow the resolution steps below:
 1. Make sure you have all required ports opened. For additional information on configuring ports for Netwrix Auditor, refer to the following article: [Protocols and Ports Required](https://docs.netwrix.com/docs/auditor/10_8/requirements/ports)
 2. Review your Antivirus exclusions. For additional information on required exclusions for your antivirus, refer to the following article: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
 3. If the issue occurs during Logon Activity data collection, try to follow the steps in these articles:
-   - [System Cannot Find the Path Specified in Logon Activity Monitoring Plan](/docs/kb/auditor/system-cannot-find-the-path-specified-in-logon-activity-monitoring-plan)
-   - [Error: Size of Collected Data Files Exceeded Limit in Logon Activity Monitoring Plan](/docs/kb/auditor/error-size-of-collected-data-files-exceeded-limit-in-logon-activity-monitoring-plan)
+   - [System Cannot Find the Path Specified in Logon Activity Monitoring Plan](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/system-cannot-find-the-path-specified-in-logon-activity-monitoring-plan)
+   - [Error: Size of Collected Data Files Exceeded Limit in Logon Activity Monitoring Plan](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-size-of-collected-data-files-exceeded-limit-in-logon-activity-monitoring-plan)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-logon-attempts-after-recent-service-account-password-change.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-logon-attempts-after-recent-service-account-password-change.md
index b4d845cf59..b1be0ef817 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-logon-attempts-after-recent-service-account-password-change.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-logon-attempts-after-recent-service-account-password-change.md
@@ -44,5 +44,5 @@ For Event Log Manager, Inactive User Tracker and Netwrix Password Reset:
 
 Refer to the following screenshots for reference on service accounts credentials to be changed in case you've reset a password in Netwrix Auditor:
 
-![Service account credentials screenshot](./images/ka04u00000117Vm_0EM4u000008M8Pe.png)
+![Service account credentials screenshot]./../0-images/ka04u00000117Vm_0EM4u000008M8Pe.png)
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-to-open-log.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-to-open-log.md
index f3d89d3678..37a32aabb6 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-to-open-log.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/failed-to-open-log.md
@@ -45,11 +45,11 @@ There are several possible reasons for this error to appear:
 1. Make sure the problematic server is started and is accessible through the network.
 2. Make sure the **Server** service is started and set to **Automatic** on the problematic server.
 
-![Services snap-in: Server service](./images/ka04u000000HcUb_0EM7000000051QD.png)
+![Services snap-in: Server service]./../0-images/ka04u000000HcUb_0EM7000000051QD.png)
 
 3. Make sure the **File and Printer Sharing for Microsoft Networks** component is enabled in the Local Area Connection properties.
 
-![Local Area Connection Properties: File and Printer sharing](./images/ka04u000000HcUb_0EM7000000051QI.png)
+![Local Area Connection Properties: File and Printer sharing]./../0-images/ka04u000000HcUb_0EM7000000051QI.png)
 
 4. Disable the **Windows Firewall** service on the problematic server:
 
@@ -62,5 +62,5 @@ Or configure the Windows Firewall exception:
 - Expand nodes as follow: `Computer Configuration / Administrative Templates / Network / Network Connections / Windows Firewall`, and then open either Domain Profile or Standard Profile, depending on which profile you want to configure.
 - Enable the **Allow inbound file and printer sharing exception** exception.
 
-![Firewall Settings: Allow inbound file and printer sharing exception](./images/ka04u000000HcUb_0EM7000000051QN.png)
+![Firewall Settings: Allow inbound file and printer sharing exception]./../0-images/ka04u000000HcUb_0EM7000000051QN.png)
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/group-policy-error-is-not-in-a-valid-format.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/group-policy-error-is-not-in-a-valid-format.md
index f1c1bf1b3f..340dc1b7fa 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/group-policy-error-is-not-in-a-valid-format.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/group-policy-error-is-not-in-a-valid-format.md
@@ -27,7 +27,7 @@ You may receive a Group Policy daily summary email with the error: "The file `DC
 ---
 
 The group policy is corrupted or it is not in a valid format. If you open the Group Policy Management Console (GPMC) > highlight the group policy in Summary and navigate to > **Settings** tab, most likely it will return you an error message.  
-![Settings](./images/ka04u000000HcUd_0EM7000000051OC.png)
+![Settings]./../0-images/ka04u000000HcUd_0EM7000000051OC.png)
 
 ---
 
@@ -36,7 +36,7 @@ The group policy is corrupted or it is not in a valid format. If you open the Gr
 First of all you need to find out the affected policy.
 
 In the error message `"DC01.corp.<MyDomain>.com\sysvol\corp.<MyDomain>.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol"` — `31B2F340-016D-11D2-945F-00C04FB984F9` is the GUID of the affected group policy. To find out the GUID of a group policy open GPMC > highlight a group policy and open **Details** tab > **Unique ID** is the GUID of a GPO.  
-![GUID GPO](./images/ka04u000000HcUd_0EM7000000051O7.png)
+![GUID GPO]./../0-images/ka04u000000HcUd_0EM7000000051O7.png)
 
 There are 3 possible solutions:
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-figure-out-the-ip-address-used-for-a-failed-logon-attempt.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-figure-out-the-ip-address-used-for-a-failed-logon-attempt.md
index 1f624ab9ea..f3956b3369 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-figure-out-the-ip-address-used-for-a-failed-logon-attempt.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-figure-out-the-ip-address-used-for-a-failed-logon-attempt.md
@@ -33,7 +33,7 @@ However there are 2 ways you can figure out the IP address:
 
 1. Note the **Computer** **name** and the timestamp of the particular failed logon attempt.
 
-   ![Image 1](./images/ka04u000000HcPz_0EM700000004y2I.png)
+   ![Image 1]./../0-images/ka04u000000HcPz_0EM700000004y2I.png)
 
 2. Go to **Start / All Programs / Netwrix Auditor / Event Log Manager / Advanced Tools / Viewer**
 3. In the **Viewer** tool:
@@ -42,42 +42,42 @@ However there are 2 ways you can figure out the IP address:
    - select **Event Log** as **Security**
    - specify dates **From** and **To**, use date from the timestamp that you have noticed on step 1
 
-   ![Image 2](./images/ka04u000000HcPz_0EM700000004y2N.png)
+   ![Image 2]./../0-images/ka04u000000HcPz_0EM700000004y2N.png)
 
 4. Click the **View** button, and specify the location of the evt-file and click **OK**. The newly saved event log will be opened in **Event Viewer** automatically.
 5. To convert the evt-file to evtx format, in the left hand panel, right click the saved log and select **Save All Events As**, specify the location of the evtx-file and click **OK**. Open the saved file via **Event Viewer**.
 
-   ![Image 3](./images/ka04u000000HcPz_0EM700000004y2S.png)
+   ![Image 3]./../0-images/ka04u000000HcPz_0EM700000004y2S.png)
 
 6. When the evtx-file is opened, click **Filter Current Log** in the **Actions** pane.
 7. In the **Filter Current Log** dialog box, specify `Event ID` as `4625,529-537,539` (failed logon attempts IDs), and then click **Logged** drop-down list and select **Custom range**.
 
-   ![Image 4](./images/ka04u000000HcPz_0EM700000004y2X.png)
+   ![Image 4]./../0-images/ka04u000000HcPz_0EM700000004y2X.png)
 
 8. Specify date range around the timestamp that you have noticed on step 1 and click **OK**. Click **OK**
 
-   ![Image 5](./images/ka04u000000HcPz_0EM700000004y2c.png)
+   ![Image 5]./../0-images/ka04u000000HcPz_0EM700000004y2c.png)
 
 9. Find the corresponding event in the filtered log and double-click it.
 10. The **IP Address** is displayed in the **Network Information** section of the event description.
 
-    ![Image 6](./images/ka04u000000HcPz_0EM700000004y2h.png)
+    ![Image 6]./../0-images/ka04u000000HcPz_0EM700000004y2h.png)
 
 ## Procedure 2:
 
 1. Note the **Computer name** and the timestamp of the particular failed logon attempt.
 
-   ![Image 1-1](./images/ka04u000000HcPz_0EM700000004y31.png)
+   ![Image 1-1]./../0-images/ka04u000000HcPz_0EM700000004y31.png)
 
 2. In the **Netwrix Auditor Management Console**, go to **Managed Objects / &lt;Your Mananaged Object&gt; / Event Log Manager** node.
 3. Enable the "**Write event descriptions into the database**" check box (if it is already selected, continue from **step 6**). Close console.
 
-   ![Image 1-2](./images/ka04u000000HcPz_0EM700000004y3B.png)
+   ![Image 1-2]./../0-images/ka04u000000HcPz_0EM700000004y3B.png)
 
 4. Go to **Start / All Programs / Netwrix Auditor / Event Log Manager / Advanced Tools / DB Importer**
 5. Select your managed object from the drop-down list and specify the date range that includes the date of the event. Click **Import**.
 
-   ![Image 1-3](./images/ka04u000000HcPz_0EM700000004y3G.png)
+   ![Image 1-3]./../0-images/ka04u000000HcPz_0EM700000004y3G.png)
 
 6. Start **Netwrix Auditor Management Console**, go to **Managed Objects / &lt;Your Mananaged Object&gt; / Event Log Manager / Reports / General Reports / All Events by Computer** report.
 7. In the filters:
@@ -86,16 +86,16 @@ However there are 2 ways you can figure out the IP address:
    - specify **Event ID** as **%5%**
    - specify **Event Log** as **Security**
 
-   !" ![Image](./images/servlet_image_3823966b1661.png)
+   !" ![Image]./../0-images/servlet_image_3823966b1661.png)
 
 8. Click the **View Report** button.
 9. Find the corresponding event in the filtered log and click the blue link in the **Date** field.
 
-   ![Image 1-5](./images/ka04u000000HcPz_0EM700000004y3V.png)
+   ![Image 1-5]./../0-images/ka04u000000HcPz_0EM700000004y3V.png)
 
 10. The page with **Event Details** will be displayed.
 
-    ![Image 1-6](./images/ka04u000000HcPz_0EM700000004y3k.png)
+    ![Image 1-6]./../0-images/ka04u000000HcPz_0EM700000004y3k.png)
 
 NOTE:
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-find-destination-of-failed-ntlm-logons.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-find-destination-of-failed-ntlm-logons.md
index 3dc9a27bda..81793bf940 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-find-destination-of-failed-ntlm-logons.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-find-destination-of-failed-ntlm-logons.md
@@ -44,4 +44,4 @@ To find the actual source of failed logons, enable NTLM auditing temporarily. Fo
 
 ## Related Articles:
 
-- [Why Do I Have Incomplete Information on Failed Logons?](/docs/kb/auditor/why-do-i-have-incomplete-information-on-failed-logons)
+- [Why Do I Have Incomplete Information on Failed Logons?](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/why-do-i-have-incomplete-information-on-failed-logons)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-investigate-compression-services-errors.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-investigate-compression-services-errors.md
index f573bef5f8..c3e90563c1 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-investigate-compression-services-errors.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-investigate-compression-services-errors.md
@@ -37,7 +37,7 @@ In the Netwrix Auditor health log, some error events mention issues with the com
    **Note:** Pay attention to which collector you're going to adjust permissions.
 3. Test the ports required for the problematic monitoring plan:
    - [Protocols and Ports](https://docs.netwrix.com/docs/auditor/10_8/requirements/ports)
-   - [Check TCP and UDP Ports Required](/docs/kb/auditor/check-tcp-and-udp-ports-required)
+   - [Check TCP and UDP Ports Required](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/check-tcp-and-udp-ports-required)
 4. Check Remote Registry and Windows Management Instrumentation Services:
    - [Enable Remote Registry and Windows Management Instrumentation Services for Windows Server](https://docs.netwrix.com/docs/auditor/10_8/configuration/windowsserver/remoteregistry)
    - [Enable Remote Registry Services for File Server](https://docs.netwrix.com/docs/auditor/10_8/configuration/fileservers/windows/remoteregistryservice)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/invalid-character-value-for-cast-specification-error-occurs-when-trying-to-store-audit-data.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/invalid-character-value-for-cast-specification-error-occurs-when-trying-to-store-audit-data.md
index 446acc91d1..bb01e4d344 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/invalid-character-value-for-cast-specification-error-occurs-when-trying-to-store-audit-data.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/invalid-character-value-for-cast-specification-error-occurs-when-trying-to-store-audit-data.md
@@ -67,4 +67,4 @@ The source of the issue was resolved in newer versions, and since you are on 9.9
 
    After the database retention period passes, you will be able to remove the old database from the SQL Server completely and will not need this empty plan anymore (stale data would be cleared according to database retention settings, and all the current data will be in the new database).
 
-**IMPORTANT:** If, after these workarounds, you will have the *Archive Service is busy processing activity records* error, refer to the following article: [Archive Service is Busy Processing Activity Records](/docs/kb/auditor/archive-service-is-busy-processing-activity-records).
+**IMPORTANT:** If, after these workarounds, you will have the *Archive Service is busy processing activity records* error, refer to the following article: [Archive Service is Busy Processing Activity Records](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/archive-service-is-busy-processing-activity-records).
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/kds-removal-tool-for-adv-2023-003-failed-to-load-configuration-file.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/kds-removal-tool-for-adv-2023-003-failed-to-load-configuration-file.md
index 7986afe08c..670cb21269 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/kds-removal-tool-for-adv-2023-003-failed-to-load-configuration-file.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/kds-removal-tool-for-adv-2023-003-failed-to-load-configuration-file.md
@@ -32,7 +32,7 @@ Failed to load configuration file.
 Could not find a part of the path
 ```
 
-![Error dialog image](./images/ka04u00000117HW_0EM4u000008LwaA.png)
+![Error dialog image]./../0-images/ka04u00000117HW_0EM4u000008LwaA.png)
 
 ## Cause
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/permission-denied-error-code-2146828218.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/permission-denied-error-code-2146828218.md
index ba5cf90bef..04406ff5bd 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/permission-denied-error-code-2146828218.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/permission-denied-error-code-2146828218.md
@@ -25,7 +25,7 @@ knowledge_article_id: kA00g000000H9cCCAS
 
 When trying to access the Help-Desk portal, a non-admin user gets a "You do not have a Helpdesk operator permissions" message or "Permission denied" error (error code -2146828218)
 
-![User-added image](./images/ka04u000000HcUx_0EM700000004wyo.png)
+![User-added image]./../0-images/ka04u000000HcUx_0EM700000004wyo.png)
 
 ---
 
@@ -44,7 +44,7 @@ To grant a user access to the Help-Desk portal, add this user to the Help Desk O
 2. In the **Help-Desk Operators** section, click the **Modify** button.  
 3. In the dialog that opens, click the **Add** button and specify user(s) that you want to add to this role.
 
-![User-added image](./images/ka04u000000HcUx_0EM700000004wyy.png)
+![User-added image]./../0-images/ka04u000000HcUx_0EM700000004wyy.png)
 
 If the issue persists, check that Authentication options are configured properly in IIS:
 
@@ -52,5 +52,5 @@ If the issue persists, check that Authentication options are configured properly
 5. Select this folder by left-clicking on it and look for the **Authentication** feature under the IIS block in the central pane. Double-click on it.  
 6. Make sure that `"Anonymous Authentication"` is disabled.
 
-![User-added image](./images/ka04u000000HcUx_0EM700000004wyt.png)
+![User-added image]./../0-images/ka04u000000HcUx_0EM700000004wyt.png)
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/system-cannot-find-the-path-specified-in-logon-activity-monitoring-plan.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/system-cannot-find-the-path-specified-in-logon-activity-monitoring-plan.md
index becc032b30..881746afae 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/system-cannot-find-the-path-specified-in-logon-activity-monitoring-plan.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/system-cannot-find-the-path-specified-in-logon-activity-monitoring-plan.md
@@ -44,10 +44,10 @@ Netwrix Auditor Logon Activity Audit Service is corrupted or cannot be found.
 
 - Upgrade your Netwrix Auditor instance to the latest version to repair the corrupted service. Refer to the following article for additional information: Installation — Upgrade to the Latest Version ⸱ v10.6.
 
-- If the latest Netwrix Auditor version is installed in your environment, you can repair your Netwrix Auditor instance. Refer to the following article for additional information: [How to Repair Netwrix Auditor Installation](/docs/kb/auditor/how-to-repair-netwrix-auditor-installation).
+- If the latest Netwrix Auditor version is installed in your environment, you can repair your Netwrix Auditor instance. Refer to the following article for additional information: [How to Repair Netwrix Auditor Installation](/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-repair-netwrix-auditor-installation).
 
 ### Related articles
 
 - Installation — Upgrade to the Latest Version ⸱ v10.6
 
-- [How to Repair Netwrix Auditor Installation](/docs/kb/auditor/how-to-repair-netwrix-auditor-installation)
+- [How to Repair Netwrix Auditor Installation](/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-repair-netwrix-auditor-installation)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/the-remote-procedure-call-failed-error-when-collecting-logs.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/the-remote-procedure-call-failed-error-when-collecting-logs.md
index c0f49f8a61..038c1024dd 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/the-remote-procedure-call-failed-error-when-collecting-logs.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/the-remote-procedure-call-failed-error-when-collecting-logs.md
@@ -48,4 +48,4 @@ Review the possible resolutions depending on you cause:
 
 - For cause 2. Make sure you assigned all required rights and permissions to the account used for data collection. For additional information on the data collecting account configuration, refer to the following article: [Data Collecting Account](https://docs.netwrix.com/docs/auditor/10_8/admin/monitoringplans/dataaccounts)
 
-- For cause 3. For additional information on the data collecting account configuration, refer to the following article: [Error 0x800706BA − RPC Server Is Unavailable](/docs/kb/auditor/error-0x800706ba-rpc-server-is-unavailable)
+- For cause 3. For additional information on the data collecting account configuration, refer to the following article: [Error 0x800706BA − RPC Server Is Unavailable](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-0x800706ba-rpc-server-is-unavailable)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md
index a001bcf52f..a9a09ecced 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md
@@ -41,4 +41,4 @@ In Netwrix Auditor version 9.96 group managed service accounts can be used inste
 
 ## Solution
 
-For the pre-10.5.11041 Netwrix Auditor version, make sure to update your Netwrix Auditor instance — refer to the following articles for additional information: [How to Upgrade Netwrix Auditor](/docs/kb/auditor/how-to-upgrade-netwrix-auditor) and [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/upgrade-increments-for-netwrix-auditor)
+For the pre-10.5.11041 Netwrix Auditor version, make sure to update your Netwrix Auditor instance — refer to the following articles for additional information: [How to Upgrade Netwrix Auditor](/docs/kb/auditor/how-to-upgrade-netwrix-auditor) and [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/vserver-api-missing-vserver-parameter-error-when-auditing-netapp-cluster.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/vserver-api-missing-vserver-parameter-error-when-auditing-netapp-cluster.md
index e32bb9f66e..0dd1709a4a 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/vserver-api-missing-vserver-parameter-error-when-auditing-netapp-cluster.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/vserver-api-missing-vserver-parameter-error-when-auditing-netapp-cluster.md
@@ -36,7 +36,7 @@ The specified management interface is not the management interface of the CIFS S
 2. Find the interface that has **Management Access** enabled and is assigned to the SVM you are trying to audit.
 3. Remember its IP address and specify it in the properties of the NetApp item in Netwrix Auditor in the **ONTAPI** node.
 
-![Management_Interface_NetApp](./images/ka04u000000HcZ5_0EM0g000002CGLg.png)
+![Management_Interface_NetApp]./../0-images/ka04u000000HcZ5_0EM0g000002CGLg.png)
 
 Also make sure the account used to collect to ONTAPI is assigned a custom role on the SVM that has the following capabilities with access query levels:
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/why-do-i-have-incomplete-information-on-failed-logons.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/why-do-i-have-incomplete-information-on-failed-logons.md
index fa0499ab04..fdabe0a98a 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/why-do-i-have-incomplete-information-on-failed-logons.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/why-do-i-have-incomplete-information-on-failed-logons.md
@@ -40,4 +40,4 @@ If you would like to have information on how to investigate Failed Logons, check
 
 - [Investigating Failed Logons](https://kb.netwrix.com/5198)
 - [How to detect the root cause of multiple failed logons](https://kb.netwrix.com/3553)
-- [How to Find Destination of Failed NTLM Logons?](/docs/kb/auditor/how-to-find-destination-of-failed-ntlm-logons)
+- [How to Find Destination of Failed NTLM Logons?](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-find-destination-of-failed-ntlm-logons)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/wmi-classes-data-provider-failed-to-get-the-information-on-win32-printer-error.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/wmi-classes-data-provider-failed-to-get-the-information-on-win32-printer-error.md
index bd10b91554..6d16fc2154 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/wmi-classes-data-provider-failed-to-get-the-information-on-win32-printer-error.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/wmi-classes-data-provider-failed-to-get-the-information-on-win32-printer-error.md
@@ -42,7 +42,7 @@ The Print Spooler service is stopped or disabled on the monitored server.
 4. In the **General** tab, review the **Startup type** value − switch it to **Automatic** and click **Start**.
 5. Click **Apply**.
 
-![User-added image](./images/ka0Qk0000001f7Z_0EM4u000002CQsV.png)
+![User-added image]./../0-images/ka0Qk0000001f7Z_0EM4u000002CQsV.png)
 
 ---
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/how_to_make_netwrix_auditor_upload_data_to_sql_using_tls_1.2.md b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/how_to_make_netwrix_auditor_upload_data_to_sql_using_tls_1.2.md
index acf49cfba9..2155090dc4 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/how_to_make_netwrix_auditor_upload_data_to_sql_using_tls_1.2.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/how_to_make_netwrix_auditor_upload_data_to_sql_using_tls_1.2.md
@@ -27,13 +27,13 @@ Here is an example of an error you may encounter while using the Search function
 Sql Server error occurred (18, [DBNETLIB][ConnectionOpen (SECDoClientHandshake().]SSL Security error.)
 ```
 
-![Error Message Example](./images/servlet_image_c2e8b90bb7b7.png)
+![Error Message Example]./../0-images/servlet_image_c2e8b90bb7b7.png)
 
 1. Make sure TLS 1.2 is enabled on both servers. Use this Microsoft guide to configure it: [How to enable TLS 1.2](https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/security/enable-tls-1-2).
 2. To find the version of Native Client, start the ODBC Administrator on the Netwrix Auditor host. Right-click the **Start** button and then choose **Run**. In the Run window, type the following, followed by **Enter**: `odbcad32.exe`.
 3. Check the Version column under the Drivers tab.
 
-   ![ODBC Driver Version](./images/servlet_image_e00b5dadcf89.png)
+   ![ODBC Driver Version]./../0-images/servlet_image_e00b5dadcf89.png)
 
 4. If the version is lower than "2011.110.7001.00", download and install the **64-bit version** of [SQL Native Client](https://www.microsoft.com/en-us/download/details.aspx?id=50402) on the Netwrix Auditor host.
 5. Restart the **Netwrix Auditor Audit Archive Service**.
diff --git a/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/retrieving_a_list_of_expiring_ssltls_certificates_and_their_expiration_dates.md b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/retrieving_a_list_of_expiring_ssltls_certificates_and_their_expiration_dates.md
index d3353f5c20..eda79f558c 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/retrieving_a_list_of_expiring_ssltls_certificates_and_their_expiration_dates.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/retrieving_a_list_of_expiring_ssltls_certificates_and_their_expiration_dates.md
@@ -46,4 +46,4 @@ If you need to filter the output, follow these steps:
 
 Your results should resemble the following example output:
 
-![Example output showing a table of certificates with their thumbprints, friendly names, expiration dates, and parent paths](./images/servlet_image_a39f37f6c350.png)
\ No newline at end of file
+![Example output showing a table of certificates with their thumbprints, friendly names, expiration dates, and parent paths]./../0-images/servlet_image_a39f37f6c350.png)
\ No newline at end of file
diff --git a/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel.md b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel.md
index ea0108a555..6210112fa9 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel.md
@@ -31,7 +31,7 @@ Netwrix Auditor uses SQL Server Reporting Services (SSRS) to generate reports. I
 2. In the left pane, select **Web Service URL**.
 3. In the **HTTPS Certificate** dropdown list, select the certificate you installed previously. Both **HTTPS Port** and **Report Server Web Services URL** fields will fill in automatically.
 
-   > **NOTE:** For additional information on installing and using self-signed and authority-issued certificates, refer to the following articles: [Use Certificate Authority-issued Certificates in SSRS](/docs/kb/auditor/use-certificate-authority-issued-certificates-in-ssrs), [Generate Self-signed SSL Certificate for SSRS](/docs/kb/auditor/generate-self-signed-ssl-certificate-for-ssrs).
+   > **NOTE:** For additional information on installing and using self-signed and authority-issued certificates, refer to the following articles: [Use Certificate Authority-issued Certificates in SSRS](/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/use-certificate-authority-issued-certificates-in-ssrs), [Generate Self-signed SSL Certificate for SSRS](/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/generate-self-signed-ssl-certificate-for-ssrs).
 
 4. Click **Apply**.
 5. Select the **Web Portal URL** tab in the left pane—the **Virtual Directory** field should fill in automatically.
@@ -64,5 +64,5 @@ The traffic between Auditor and SSRS is now encrypted. It is recommended to upda
 
 ## Related Articles
 
-- [Use Certificate Authority-issued Certificates in SSRS](/docs/kb/auditor/use-certificate-authority-issued-certificates-in-ssrs)
-- [Generate Self-signed SSL Certificate for SSRS](/docs/kb/auditor/generate-self-signed-ssl-certificate-for-ssrs)
\ No newline at end of file
+- [Use Certificate Authority-issued Certificates in SSRS](/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/use-certificate-authority-issued-certificates-in-ssrs)
+- [Generate Self-signed SSL Certificate for SSRS](/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/generate-self-signed-ssl-certificate-for-ssrs)
\ No newline at end of file

From eff4c7e188389f7c4032362d92cd7a1c67c7de3c Mon Sep 17 00:00:00 2001
From: Zoey Castillo <zoey.castillo@netwrix.com>
Date: Mon, 24 Nov 2025 18:14:50 -0600
Subject: [PATCH 03/10] Fix broken link reference to
 how-to-assign-db-owner-permissions

Update link from flat path to include category path system-administration/database-management/
---
 ...etwrix-auditor-databases-to-another-sql-server-instance.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md
index 6ce36eb752..cda9d53691 100644
--- a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md
+++ b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance.md
@@ -33,7 +33,7 @@ Yes, you are able to migrate audit databases to another Microsoft SQL Server ins
 
 ### Prerequisites
 
-- Required Permissions: The account used by Netwrix Auditor must have **db_owner** rights on the target audit databases. For SQL Server Reporting Services (SSRS), the account must have the **Content Manager** role on the Home folder, and users must have the **Browser** role on the Report Server. For detailed steps on assigning these permissions, see [How to Assign db_owner Permissions](docs/kb/auditor/how-to-assign-db-owner-permissions.md) and [SQL Server Reporting Services](https://docs.netwrix.com/docs/auditor/10_8/requirements/overview)
+- Required Permissions: The account used by Netwrix Auditor must have **db_owner** rights on the target audit databases. For SQL Server Reporting Services (SSRS), the account must have the **Content Manager** role on the Home folder, and users must have the **Browser** role on the Report Server. For detailed steps on assigning these permissions, see [How to Assign db_owner Permissions](/docs/kb/auditor/system-administration/database-management/how-to-assign-db-owner-permissions) and [SQL Server Reporting Services](https://docs.netwrix.com/docs/auditor/10_8/requirements/overview)
 - SQL Server and SSRS must be installed and configured on the new server.
 
 ### Instructions
@@ -66,7 +66,7 @@ Yes, you are able to migrate audit databases to another Microsoft SQL Server ins
 
 ## Related Links
 
-- [How to Assign db_owner Permissions](docs/kb/auditor/how-to-assign-db-owner-permissions.md)
+- [How to Assign db_owner Permissions](/docs/kb/auditor/system-administration/database-management/how-to-assign-db-owner-permissions)
 - [SQL Server Reporting Services](https://docs.netwrix.com/docs/auditor/10_8/requirements/overview)
 - [How to Prepare the Netwrix Server for a SQL Upgrade](/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-prepare-the-netwrix-server-for-a-sql-upgrade)
 - [Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)

From e9ed6b2c2e0b00bc83ab2a5ff8ada0766f822885 Mon Sep 17 00:00:00 2001
From: Zoey Castillo <zoey.castillo@netwrix.com>
Date: Mon, 24 Nov 2025 18:24:50 -0600
Subject: [PATCH 04/10] Fix backslash in link path to
 how-to-assign-db-owner-permissions

Replace docs\kb\auditor\... with proper forward slash path and add category path.
---
 ...able-to-run-reports-system-cannot-find-the-file-specified.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-run-reports-system-cannot-find-the-file-specified.md b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-run-reports-system-cannot-find-the-file-specified.md
index e973808405..45567927f0 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-run-reports-system-cannot-find-the-file-specified.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/report-generation/unable-to-run-reports-system-cannot-find-the-file-specified.md
@@ -50,5 +50,5 @@ Refer to the following steps to resolve the issue:
 
 1. In your Netwrix Auditor server, disable **Netwrix Auditor Archive Service** and **Netwrix Auditor Management Service** via **Services**.
 2. Deploy the report server database — refer to the following article for in-depth instructions: [Deploying the Report Server Database](/docs/kb/auditor/system-administration/database-management/deploying-the-report-server-database)
-3. Once you've configured the report server database, grant the roles to the SSRS service account the roles required. Refer to the following article for additional information: [Configure SSRS account](https://docs.netwrix.com/docs/auditor/10_8/requirements/sqlserverreportingservice) and [How to Assign db_owner Permissions](docs\kb\auditor\how-to-assign-db-owner-permissions.md)
+3. Once you've configured the report server database, grant the roles to the SSRS service account the roles required. Refer to the following article for additional information: [Configure SSRS account](https://docs.netwrix.com/docs/auditor/10_8/requirements/sqlserverreportingservice) and [How to Assign db_owner Permissions](/docs/kb/auditor/system-administration/database-management/how-to-assign-db-owner-permissions)
 4. Restart **Netwrix Auditor Archive Service** and **Netwrix Auditor Management Service** on your Netwrix Auditor server via **Services**.

From 1f01cc68a82b27bd66105825ac2cf6071ae1f0e5 Mon Sep 17 00:00:00 2001
From: Zoey Castillo <zoey.castillo@netwrix.com>
Date: Tue, 25 Nov 2025 09:26:39 -0600
Subject: [PATCH 05/10] Fix all broken KB article links in Auditor version
 documentation

Update all references to KB articles in /docs/auditor/10.6/, 10.7/, and 10.8/
documentation pages to include the new category paths following KB reorganization.
This ensures all links resolve correctly after KB articles were reorganized into
categorized subfolders (e.g., system-administration/database-management/).

Fixed 135 broken links across 129 files in version documentation.

Co-Authored-By: Claude <noreply@anthropic.com>
---
 docs/auditor/10.6/admin/healthstatus/troubleshooting.md       | 2 +-
 .../auditor/10.6/admin/monitoringplans/sharepoint/overview.md | 2 +-
 docs/auditor/10.6/admin/settings/longtermarchive.md           | 2 +-
 docs/auditor/10.6/configuration/activedirectory/overview.md   | 2 +-
 .../auditor/10.6/configuration/activedirectory/securitylog.md | 2 +-
 .../activedirectoryfederatedservices/overview.md              | 2 +-
 docs/auditor/10.6/configuration/exchange/overview.md          | 2 +-
 .../configuration/fileservers/delldatastorage/overview.md     | 2 +-
 .../10.6/configuration/fileservers/dellisilon/overview.md     | 2 +-
 .../10.6/configuration/fileservers/netappcmode/overview.md    | 2 +-
 .../10.6/configuration/fileservers/nutanix/overview.md        | 2 +-
 docs/auditor/10.6/configuration/fileservers/overview.md       | 2 +-
 .../auditor/10.6/configuration/fileservers/qumulo/overview.md | 2 +-
 .../10.6/configuration/fileservers/synology/overview.md       | 2 +-
 .../10.6/configuration/fileservers/windows/overview.md        | 4 ++--
 docs/auditor/10.6/configuration/grouppolicy/overview.md       | 2 +-
 docs/auditor/10.6/configuration/logonactivity/overview.md     | 2 +-
 .../10.6/configuration/logonactivity/securityeventlog.md      | 2 +-
 .../configuration/microsoft365/exchangeonline/overview.md     | 2 +-
 .../configuration/microsoft365/microsoftentraid/overview.md   | 2 +-
 .../configuration/microsoft365/sharepointonline/overview.md   | 2 +-
 .../auditor/10.6/configuration/microsoft365/teams/overview.md | 2 +-
 docs/auditor/10.6/configuration/networkdevices/ciscoasa.md    | 2 +-
 docs/auditor/10.6/configuration/networkdevices/ciscoios.md    | 2 +-
 .../10.6/configuration/networkdevices/fortinetfortigate.md    | 2 +-
 docs/auditor/10.6/configuration/networkdevices/juniper.md     | 2 +-
 docs/auditor/10.6/configuration/networkdevices/overview.md    | 2 +-
 docs/auditor/10.6/configuration/networkdevices/paloalto.md    | 2 +-
 docs/auditor/10.6/configuration/networkdevices/sonicwall.md   | 2 +-
 docs/auditor/10.6/configuration/oracle/overview.md            | 4 ++--
 docs/auditor/10.6/configuration/sharepoint/overview.md        | 2 +-
 .../10.6/configuration/sqlserver/configuringtracelogging.md   | 2 +-
 docs/auditor/10.6/configuration/sqlserver/overview.md         | 2 +-
 docs/auditor/10.6/configuration/useractivity/overview.md      | 2 +-
 docs/auditor/10.6/configuration/vmware/overview.md            | 2 +-
 docs/auditor/10.6/configuration/windowsserver/overview.md     | 2 +-
 docs/auditor/10.6/install/upgrade.md                          | 2 +-
 docs/auditor/10.6/requirements/longtermarchive.md             | 2 +-
 docs/auditor/10.6/requirements/overview.md                    | 2 +-
 docs/auditor/10.6/requirements/software.md                    | 2 +-
 docs/auditor/10.6/requirements/sqlserver.md                   | 2 +-
 docs/auditor/10.6/requirements/workingfolder.md               | 2 +-
 docs/auditor/10.6/tools/eventlogmanager/eventlogmanager.md    | 2 +-
 docs/auditor/10.7/admin/healthstatus/troubleshooting.md       | 2 +-
 .../auditor/10.7/admin/monitoringplans/sharepoint/overview.md | 2 +-
 docs/auditor/10.7/admin/settings/longtermarchive.md           | 2 +-
 docs/auditor/10.7/configuration/activedirectory/overview.md   | 2 +-
 .../auditor/10.7/configuration/activedirectory/securitylog.md | 2 +-
 .../activedirectoryfederatedservices/overview.md              | 2 +-
 docs/auditor/10.7/configuration/exchange/overview.md          | 2 +-
 .../configuration/fileservers/delldatastorage/overview.md     | 2 +-
 .../10.7/configuration/fileservers/dellisilon/overview.md     | 2 +-
 .../10.7/configuration/fileservers/netappcmode/overview.md    | 2 +-
 .../10.7/configuration/fileservers/nutanix/overview.md        | 2 +-
 docs/auditor/10.7/configuration/fileservers/overview.md       | 2 +-
 .../auditor/10.7/configuration/fileservers/qumulo/overview.md | 2 +-
 .../10.7/configuration/fileservers/synology/overview.md       | 2 +-
 .../10.7/configuration/fileservers/windows/overview.md        | 4 ++--
 docs/auditor/10.7/configuration/grouppolicy/overview.md       | 2 +-
 docs/auditor/10.7/configuration/logonactivity/overview.md     | 2 +-
 .../10.7/configuration/logonactivity/securityeventlog.md      | 2 +-
 .../configuration/microsoft365/exchangeonline/overview.md     | 2 +-
 .../configuration/microsoft365/microsoftentraid/overview.md   | 2 +-
 .../configuration/microsoft365/sharepointonline/overview.md   | 2 +-
 .../auditor/10.7/configuration/microsoft365/teams/overview.md | 2 +-
 docs/auditor/10.7/configuration/networkdevices/ciscoasa.md    | 2 +-
 docs/auditor/10.7/configuration/networkdevices/ciscoios.md    | 2 +-
 .../10.7/configuration/networkdevices/fortinetfortigate.md    | 2 +-
 docs/auditor/10.7/configuration/networkdevices/juniper.md     | 2 +-
 docs/auditor/10.7/configuration/networkdevices/overview.md    | 2 +-
 docs/auditor/10.7/configuration/networkdevices/paloalto.md    | 2 +-
 docs/auditor/10.7/configuration/networkdevices/sonicwall.md   | 2 +-
 docs/auditor/10.7/configuration/oracle/overview.md            | 4 ++--
 docs/auditor/10.7/configuration/sharepoint/overview.md        | 2 +-
 .../10.7/configuration/sqlserver/configuringtracelogging.md   | 2 +-
 docs/auditor/10.7/configuration/sqlserver/overview.md         | 2 +-
 docs/auditor/10.7/configuration/useractivity/overview.md      | 2 +-
 docs/auditor/10.7/configuration/vmware/overview.md            | 2 +-
 docs/auditor/10.7/configuration/windowsserver/overview.md     | 2 +-
 docs/auditor/10.7/install/upgrade.md                          | 2 +-
 docs/auditor/10.7/requirements/longtermarchive.md             | 2 +-
 docs/auditor/10.7/requirements/overview.md                    | 2 +-
 docs/auditor/10.7/requirements/software.md                    | 2 +-
 docs/auditor/10.7/requirements/sqlserver.md                   | 2 +-
 docs/auditor/10.7/requirements/workingfolder.md               | 2 +-
 docs/auditor/10.7/tools/eventlogmanager/eventlogmanager.md    | 2 +-
 docs/auditor/10.8/admin/healthstatus/troubleshooting.md       | 2 +-
 .../auditor/10.8/admin/monitoringplans/sharepoint/overview.md | 2 +-
 docs/auditor/10.8/admin/settings/longtermarchive.md           | 2 +-
 docs/auditor/10.8/configuration/activedirectory/overview.md   | 2 +-
 .../auditor/10.8/configuration/activedirectory/securitylog.md | 2 +-
 .../activedirectoryfederatedservices/overview.md              | 2 +-
 docs/auditor/10.8/configuration/exchange/overview.md          | 2 +-
 .../configuration/fileservers/delldatastorage/overview.md     | 2 +-
 .../10.8/configuration/fileservers/dellisilon/overview.md     | 2 +-
 .../10.8/configuration/fileservers/netappcmode/overview.md    | 2 +-
 .../10.8/configuration/fileservers/nutanix/overview.md        | 2 +-
 docs/auditor/10.8/configuration/fileservers/overview.md       | 2 +-
 .../auditor/10.8/configuration/fileservers/qumulo/overview.md | 2 +-
 .../10.8/configuration/fileservers/synology/overview.md       | 2 +-
 .../10.8/configuration/fileservers/windows/overview.md        | 4 ++--
 docs/auditor/10.8/configuration/grouppolicy/overview.md       | 2 +-
 docs/auditor/10.8/configuration/logonactivity/overview.md     | 2 +-
 .../10.8/configuration/logonactivity/securityeventlog.md      | 2 +-
 .../configuration/microsoft365/exchangeonline/overview.md     | 2 +-
 .../configuration/microsoft365/microsoftentraid/overview.md   | 2 +-
 .../configuration/microsoft365/sharepointonline/overview.md   | 2 +-
 .../auditor/10.8/configuration/microsoft365/teams/overview.md | 2 +-
 docs/auditor/10.8/configuration/networkdevices/ciscoasa.md    | 2 +-
 docs/auditor/10.8/configuration/networkdevices/ciscoios.md    | 2 +-
 .../10.8/configuration/networkdevices/fortinetfortigate.md    | 2 +-
 docs/auditor/10.8/configuration/networkdevices/juniper.md     | 2 +-
 docs/auditor/10.8/configuration/networkdevices/overview.md    | 2 +-
 docs/auditor/10.8/configuration/networkdevices/paloalto.md    | 2 +-
 docs/auditor/10.8/configuration/networkdevices/sonicwall.md   | 2 +-
 docs/auditor/10.8/configuration/oracle/overview.md            | 4 ++--
 docs/auditor/10.8/configuration/sharepoint/overview.md        | 2 +-
 .../10.8/configuration/sqlserver/configuringtracelogging.md   | 2 +-
 docs/auditor/10.8/configuration/sqlserver/overview.md         | 2 +-
 docs/auditor/10.8/configuration/useractivity/overview.md      | 2 +-
 docs/auditor/10.8/configuration/vmware/overview.md            | 2 +-
 docs/auditor/10.8/configuration/windowsserver/overview.md     | 2 +-
 docs/auditor/10.8/install/upgrade.md                          | 2 +-
 docs/auditor/10.8/requirements/longtermarchive.md             | 2 +-
 docs/auditor/10.8/requirements/overview.md                    | 2 +-
 docs/auditor/10.8/requirements/software.md                    | 2 +-
 docs/auditor/10.8/requirements/sqlserver.md                   | 2 +-
 docs/auditor/10.8/requirements/workingfolder.md               | 2 +-
 docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md    | 2 +-
 129 files changed, 135 insertions(+), 135 deletions(-)

diff --git a/docs/auditor/10.6/admin/healthstatus/troubleshooting.md b/docs/auditor/10.6/admin/healthstatus/troubleshooting.md
index 6c99169be0..e7fd76c053 100644
--- a/docs/auditor/10.6/admin/healthstatus/troubleshooting.md
+++ b/docs/auditor/10.6/admin/healthstatus/troubleshooting.md
@@ -24,7 +24,7 @@ portal as described in the
 | I see a blank window instead of a report.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | Contact your Auditor Global administrator to make sure that you are granted sufficient permissions on the Report Server. To view reports in a web browser - Open a web browser and type the Report Manager URL (found under Settings>**Audit Database**). In the page that opens, navigate to the report you want to generate and click the report name. You can modify the report filters and click View Report to apply them.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
 | I configured report subscription to be uploaded to a file server, but cannot find it / cannot access it.                                                                                                                                                                                                                                                                                                                                                                                                                       | Subscriptions can be uploaded either to a file share (e.g., _\\filestorage\reports_) or to a folder on the computer where Auditor Server is installed. To access these reports, you must be granted the Read permission.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
 | When trying to collect event data from Active Directory domain, an error message like this appears in Netwrix Health Log: _Monitoring Plan: `<Monitoring_Plan_Name>` The following error has occurred while processing '`<Item_Name>`': Error collecting the security log of the domain `<Domain_Name>`. Failed to process the domain controller `<Domain_Controller_Name>` due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it_. | This may happen due to Secondary Logon Service disabled state. To collect event data from the domain, this service must be up and running. Open its properties and start the service.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
-| The 'Workstation' field in search, reports, and Activity Summary is reported as 'unknown'                                                                                                                                                                                                                                                                                                                                                                                                                                      | For the full list of possible reasons, please refer to the following Netwrix Knowledge Base article: [Why is the "Workstation" field reported as "unknown"?](/docs/kb/auditor/workstation-field-reported-as-unknown)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| The 'Workstation' field in search, reports, and Activity Summary is reported as 'unknown'                                                                                                                                                                                                                                                                                                                                                                                                                                      | For the full list of possible reasons, please refer to the following Netwrix Knowledge Base article: [Why is the "Workstation" field reported as "unknown"?](/docs/kb/auditor/reports-alerts-and-notifications/report-generation/workstation-field-reported-as-unknown)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 
 ## Creating a ticket with Customer portal
 
diff --git a/docs/auditor/10.6/admin/monitoringplans/sharepoint/overview.md b/docs/auditor/10.6/admin/monitoringplans/sharepoint/overview.md
index a8faa3dbb4..c4266953c0 100644
--- a/docs/auditor/10.6/admin/monitoringplans/sharepoint/overview.md
+++ b/docs/auditor/10.6/admin/monitoringplans/sharepoint/overview.md
@@ -37,7 +37,7 @@ topic for additional information.
 
 | Problem                                                            | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        | KB article                                                                                                                                                                                                       |
 | ------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| The "Timeout Expired" error appears during the agent's deployment. | The agent failed to be deployed due to one of the following reasons: - One or several servers are unreachable - The SPAdminV4 service is not started on any of the servers. - The servers within the farm are located in different time zones. - Your SharePoint farm exceeds the recommended capacity limits. Increase DeployTimeout value in _%ProgramData%\Netwrix\NetwrixAuditor for SharePoint\ Configuration\ `<managed_object_name>`\ Commonsettings.config_ and restart the agent service. | Refer to the [Timeout Expired Error on SharePoint Core Service Deployment](/docs/kb/auditor/timeout-expired-error-on-sharepoint-core-service-deployment) Knowledge Base article for the solution. |
+| The "Timeout Expired" error appears during the agent's deployment. | The agent failed to be deployed due to one of the following reasons: - One or several servers are unreachable - The SPAdminV4 service is not started on any of the servers. - The servers within the farm are located in different time zones. - Your SharePoint farm exceeds the recommended capacity limits. Increase DeployTimeout value in _%ProgramData%\Netwrix\NetwrixAuditor for SharePoint\ Configuration\ `<managed_object_name>`\ Commonsettings.config_ and restart the agent service. | Refer to the [Timeout Expired Error on SharePoint Core Service Deployment](/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/timeout-expired-error-on-sharepoint-core-service-deployment) Knowledge Base article for the solution. |
 
 ## SharePoint Farm
 
diff --git a/docs/auditor/10.6/admin/settings/longtermarchive.md b/docs/auditor/10.6/admin/settings/longtermarchive.md
index f5841a8b24..6343cfdb7a 100644
--- a/docs/auditor/10.6/admin/settings/longtermarchive.md
+++ b/docs/auditor/10.6/admin/settings/longtermarchive.md
@@ -17,7 +17,7 @@ Review the following for additional information:
 | Option                                                                   | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | ------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | Long-Term Archive settings                                               |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
-| Write audit data to                                                      | Specify the path to a local or shared folder where your audit data will be stored. By default, it is set to _"C:\ProgramData\Netwrix Auditor\Data"_. By default, the LocalSystem account is used to write data to the local-based Long-Term Archive and computer account is used for the file share-based storage. Subscriptions created in the Auditor client are uploaded to file servers under the Long-Term Archive service account as well. It is not recommended to store your Long-Term Archive on a system disk. If you want to move the Long-Term Archive to another location, refer to the following Netwrix Knowledge base article: [How to move Long-Term Archive to a new location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location).                                                                                                                                                                                                              |
+| Write audit data to                                                      | Specify the path to a local or shared folder where your audit data will be stored. By default, it is set to _"C:\ProgramData\Netwrix Auditor\Data"_. By default, the LocalSystem account is used to write data to the local-based Long-Term Archive and computer account is used for the file share-based storage. Subscriptions created in the Auditor client are uploaded to file servers under the Long-Term Archive service account as well. It is not recommended to store your Long-Term Archive on a system disk. If you want to move the Long-Term Archive to another location, refer to the following Netwrix Knowledge base article: [How to move Long-Term Archive to a new location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location).                                                                                                                                                                                                              |
 | Keep audit data for (in months)                                          | Specify how long data will be stored. By default, it is set to 120 months.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
 | Use custom credentials (for the file share-based Long-Term Archive only) | Select the checkbox and provide user name and password for the Long-Term Archive service account. You can specify a custom account only for the Long-Term Archive stored on a file share. The custom Long-Term Archive service account can be granted the following rights and permissions: - Advanced permissions on the folder where the Long-term Archive is stored: - List folder / read data - Read attributes - Read extended attributes - Create files / write data - Create folders / append data - Write attributes - Write extended attributes - Delete subfolders and files - Read permissions - On the file shares where report subscriptions are saved: - Change share permission - Create files / write data folder permission Subscriptions created in the Auditor client  are uploaded to file servers under the Long-Term Archive service account as well. See the [Subscriptions](/docs/auditor/10.6/admin/subscriptions/overview.md) topic for additional information. |
 
diff --git a/docs/auditor/10.6/configuration/activedirectory/overview.md b/docs/auditor/10.6/configuration/activedirectory/overview.md
index c35f0086d6..664ae44f00 100644
--- a/docs/auditor/10.6/configuration/activedirectory/overview.md
+++ b/docs/auditor/10.6/configuration/activedirectory/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/activedirectory/securitylog.md b/docs/auditor/10.6/configuration/activedirectory/securitylog.md
index 750e18361e..2aa206e91e 100644
--- a/docs/auditor/10.6/configuration/activedirectory/securitylog.md
+++ b/docs/auditor/10.6/configuration/activedirectory/securitylog.md
@@ -43,5 +43,5 @@ If "Overwrite" option is not enough to meet your data retention requirements, yo
 _auto-archiving_ option for Security event log to preserve historical event data in the archive
 files. With that option enabled, you may want to adjust the retention settings for log archives
 (backups). Related procedures are described in the
-[Auto-archiving Windows Security log](/docs/kb/auditor/auto-archiving-windows-security-log)
+[Auto-archiving Windows Security log](/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/auto-archiving-windows-security-log)
 Netwrix Knowledge Base article.
diff --git a/docs/auditor/10.6/configuration/activedirectoryfederatedservices/overview.md b/docs/auditor/10.6/configuration/activedirectoryfederatedservices/overview.md
index 6b0d7b7eb6..9284a8bbe1 100644
--- a/docs/auditor/10.6/configuration/activedirectoryfederatedservices/overview.md
+++ b/docs/auditor/10.6/configuration/activedirectoryfederatedservices/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 Active Directory Federation Services (AD FS) server role can be assigned:
diff --git a/docs/auditor/10.6/configuration/exchange/overview.md b/docs/auditor/10.6/configuration/exchange/overview.md
index 15858834de..a9091bac38 100644
--- a/docs/auditor/10.6/configuration/exchange/overview.md
+++ b/docs/auditor/10.6/configuration/exchange/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/fileservers/delldatastorage/overview.md b/docs/auditor/10.6/configuration/fileservers/delldatastorage/overview.md
index 2a55ca8f16..7237a47b6c 100644
--- a/docs/auditor/10.6/configuration/fileservers/delldatastorage/overview.md
+++ b/docs/auditor/10.6/configuration/fileservers/delldatastorage/overview.md
@@ -17,7 +17,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/fileservers/dellisilon/overview.md b/docs/auditor/10.6/configuration/fileservers/dellisilon/overview.md
index 2331eb6df0..9597b5acfd 100644
--- a/docs/auditor/10.6/configuration/fileservers/dellisilon/overview.md
+++ b/docs/auditor/10.6/configuration/fileservers/dellisilon/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/fileservers/netappcmode/overview.md b/docs/auditor/10.6/configuration/fileservers/netappcmode/overview.md
index 55cf856083..58bd8b9286 100644
--- a/docs/auditor/10.6/configuration/fileservers/netappcmode/overview.md
+++ b/docs/auditor/10.6/configuration/fileservers/netappcmode/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/fileservers/nutanix/overview.md b/docs/auditor/10.6/configuration/fileservers/nutanix/overview.md
index ee123e7bc9..afafd6869a 100644
--- a/docs/auditor/10.6/configuration/fileservers/nutanix/overview.md
+++ b/docs/auditor/10.6/configuration/fileservers/nutanix/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/fileservers/overview.md b/docs/auditor/10.6/configuration/fileservers/overview.md
index 79fddb54af..253e730a8a 100644
--- a/docs/auditor/10.6/configuration/fileservers/overview.md
+++ b/docs/auditor/10.6/configuration/fileservers/overview.md
@@ -12,7 +12,7 @@ information on these activities.
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 ## Supported File Servers and Devices
diff --git a/docs/auditor/10.6/configuration/fileservers/qumulo/overview.md b/docs/auditor/10.6/configuration/fileservers/qumulo/overview.md
index eefbfd89f0..800157c0b1 100644
--- a/docs/auditor/10.6/configuration/fileservers/qumulo/overview.md
+++ b/docs/auditor/10.6/configuration/fileservers/qumulo/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/fileservers/synology/overview.md b/docs/auditor/10.6/configuration/fileservers/synology/overview.md
index 4f899c276c..009e9e42f9 100644
--- a/docs/auditor/10.6/configuration/fileservers/synology/overview.md
+++ b/docs/auditor/10.6/configuration/fileservers/synology/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/fileservers/windows/overview.md b/docs/auditor/10.6/configuration/fileservers/windows/overview.md
index beadd78421..d64d28dbaf 100644
--- a/docs/auditor/10.6/configuration/fileservers/windows/overview.md
+++ b/docs/auditor/10.6/configuration/fileservers/windows/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 ## Configuration Overview
@@ -265,7 +265,7 @@ folder is placed within a share targeted by a DFS folder.
 
 For recommendations on configuring DFS replication, refer to the following Netwrix knowledge base
 article:
-[Why did loss of performance occur when configuring audit settings for Windows File Servers?](/docs/kb/auditor/auditing-distributed-file-systems-with-replication-in-netwrix-auditor).
+[Why did loss of performance occur when configuring audit settings for Windows File Servers?](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/auditing-distributed-file-systems-with-replication-in-netwrix-auditor).
 Remember that replication of namespace roots is not supported.
 
 ## File Servers and Antivirus
diff --git a/docs/auditor/10.6/configuration/grouppolicy/overview.md b/docs/auditor/10.6/configuration/grouppolicy/overview.md
index b1a725ab34..cc687023d8 100644
--- a/docs/auditor/10.6/configuration/grouppolicy/overview.md
+++ b/docs/auditor/10.6/configuration/grouppolicy/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/logonactivity/overview.md b/docs/auditor/10.6/configuration/logonactivity/overview.md
index ec921eb324..3136732dfe 100644
--- a/docs/auditor/10.6/configuration/logonactivity/overview.md
+++ b/docs/auditor/10.6/configuration/logonactivity/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/logonactivity/securityeventlog.md b/docs/auditor/10.6/configuration/logonactivity/securityeventlog.md
index bc663ec0d9..b6dad15b55 100644
--- a/docs/auditor/10.6/configuration/logonactivity/securityeventlog.md
+++ b/docs/auditor/10.6/configuration/logonactivity/securityeventlog.md
@@ -33,4 +33,4 @@ needed**.
 **NOTE:** After configuring security event settings via Group Policy, you may notice that the log
 size on a specific computer is not set correctly. In this case, follow the resolution steps from the
 Netwrix Knowledge base article to fix the issue:
-[Security log settings do not apply via GPO](/docs/kb/auditor/security-log-settings-do-not-apply-via-gpo).
+[Security log settings do not apply via GPO](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/security-log-settings-do-not-apply-via-gpo).
diff --git a/docs/auditor/10.6/configuration/microsoft365/exchangeonline/overview.md b/docs/auditor/10.6/configuration/microsoft365/exchangeonline/overview.md
index c545456323..f3fa09cb61 100644
--- a/docs/auditor/10.6/configuration/microsoft365/exchangeonline/overview.md
+++ b/docs/auditor/10.6/configuration/microsoft365/exchangeonline/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/microsoft365/microsoftentraid/overview.md b/docs/auditor/10.6/configuration/microsoft365/microsoftentraid/overview.md
index 74f6d2664d..082c240f7a 100644
--- a/docs/auditor/10.6/configuration/microsoft365/microsoftentraid/overview.md
+++ b/docs/auditor/10.6/configuration/microsoft365/microsoftentraid/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/microsoft365/sharepointonline/overview.md b/docs/auditor/10.6/configuration/microsoft365/sharepointonline/overview.md
index a605dc0e59..c7e0463503 100644
--- a/docs/auditor/10.6/configuration/microsoft365/sharepointonline/overview.md
+++ b/docs/auditor/10.6/configuration/microsoft365/sharepointonline/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in the following way:
diff --git a/docs/auditor/10.6/configuration/microsoft365/teams/overview.md b/docs/auditor/10.6/configuration/microsoft365/teams/overview.md
index 86b8414741..53a047e6e5 100644
--- a/docs/auditor/10.6/configuration/microsoft365/teams/overview.md
+++ b/docs/auditor/10.6/configuration/microsoft365/teams/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/networkdevices/ciscoasa.md b/docs/auditor/10.6/configuration/networkdevices/ciscoasa.md
index c7995f7b56..541311a546 100644
--- a/docs/auditor/10.6/configuration/networkdevices/ciscoasa.md
+++ b/docs/auditor/10.6/configuration/networkdevices/ciscoasa.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/networkdevices/ciscoios.md b/docs/auditor/10.6/configuration/networkdevices/ciscoios.md
index 1d19a7d8cd..b4f9448cd2 100644
--- a/docs/auditor/10.6/configuration/networkdevices/ciscoios.md
+++ b/docs/auditor/10.6/configuration/networkdevices/ciscoios.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/networkdevices/fortinetfortigate.md b/docs/auditor/10.6/configuration/networkdevices/fortinetfortigate.md
index 5925de0e08..e2ec396d9b 100644
--- a/docs/auditor/10.6/configuration/networkdevices/fortinetfortigate.md
+++ b/docs/auditor/10.6/configuration/networkdevices/fortinetfortigate.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/networkdevices/juniper.md b/docs/auditor/10.6/configuration/networkdevices/juniper.md
index d766352fd1..5a1b90ade9 100644
--- a/docs/auditor/10.6/configuration/networkdevices/juniper.md
+++ b/docs/auditor/10.6/configuration/networkdevices/juniper.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/networkdevices/overview.md b/docs/auditor/10.6/configuration/networkdevices/overview.md
index f0ef409480..b278110a0b 100644
--- a/docs/auditor/10.6/configuration/networkdevices/overview.md
+++ b/docs/auditor/10.6/configuration/networkdevices/overview.md
@@ -22,5 +22,5 @@ device:
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
diff --git a/docs/auditor/10.6/configuration/networkdevices/paloalto.md b/docs/auditor/10.6/configuration/networkdevices/paloalto.md
index 7c8d0052d6..4f14fc45d3 100644
--- a/docs/auditor/10.6/configuration/networkdevices/paloalto.md
+++ b/docs/auditor/10.6/configuration/networkdevices/paloalto.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/networkdevices/sonicwall.md b/docs/auditor/10.6/configuration/networkdevices/sonicwall.md
index 923de0e4bb..49d7dc0148 100644
--- a/docs/auditor/10.6/configuration/networkdevices/sonicwall.md
+++ b/docs/auditor/10.6/configuration/networkdevices/sonicwall.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/oracle/overview.md b/docs/auditor/10.6/configuration/oracle/overview.md
index 4c30703acb..45f87585af 100644
--- a/docs/auditor/10.6/configuration/oracle/overview.md
+++ b/docs/auditor/10.6/configuration/oracle/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
@@ -48,7 +48,7 @@ different auditing types:
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 ## Considerations for Oracle Database 11g
diff --git a/docs/auditor/10.6/configuration/sharepoint/overview.md b/docs/auditor/10.6/configuration/sharepoint/overview.md
index f96777c0b5..894c9d0ac0 100644
--- a/docs/auditor/10.6/configuration/sharepoint/overview.md
+++ b/docs/auditor/10.6/configuration/sharepoint/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/configuration/sqlserver/configuringtracelogging.md b/docs/auditor/10.6/configuration/sqlserver/configuringtracelogging.md
index 3d239d7a0c..4213c2edca 100644
--- a/docs/auditor/10.6/configuration/sqlserver/configuringtracelogging.md
+++ b/docs/auditor/10.6/configuration/sqlserver/configuringtracelogging.md
@@ -14,7 +14,7 @@ and enable it if necessary. To read more, refer to
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 In some cases, however, you may need to disable trace logging on your SQL Server instance. For that,
diff --git a/docs/auditor/10.6/configuration/sqlserver/overview.md b/docs/auditor/10.6/configuration/sqlserver/overview.md
index 15da2f387b..1186f53a5c 100644
--- a/docs/auditor/10.6/configuration/sqlserver/overview.md
+++ b/docs/auditor/10.6/configuration/sqlserver/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 The IT Infrastructure for monitoring is configured automatically. Your current audit settings will
diff --git a/docs/auditor/10.6/configuration/useractivity/overview.md b/docs/auditor/10.6/configuration/useractivity/overview.md
index 331f05fd5a..529af3a13e 100644
--- a/docs/auditor/10.6/configuration/useractivity/overview.md
+++ b/docs/auditor/10.6/configuration/useractivity/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can use group Managed Service Accounts (gMSA) as data collecting accounts.
diff --git a/docs/auditor/10.6/configuration/vmware/overview.md b/docs/auditor/10.6/configuration/vmware/overview.md
index d7e1c60d25..f5c162f9b5 100644
--- a/docs/auditor/10.6/configuration/vmware/overview.md
+++ b/docs/auditor/10.6/configuration/vmware/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring automatically through a monitoring plan. No
diff --git a/docs/auditor/10.6/configuration/windowsserver/overview.md b/docs/auditor/10.6/configuration/windowsserver/overview.md
index b0cde07a81..43742cca80 100644
--- a/docs/auditor/10.6/configuration/windowsserver/overview.md
+++ b/docs/auditor/10.6/configuration/windowsserver/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.6/install/upgrade.md b/docs/auditor/10.6/install/upgrade.md
index 413e3ca178..1fd268e70b 100644
--- a/docs/auditor/10.6/install/upgrade.md
+++ b/docs/auditor/10.6/install/upgrade.md
@@ -13,7 +13,7 @@ Seamless upgrade to Netwrix Auditor 10.6 is supported for versions 10.5 and 10.0
 
 If you use an earlier version of Netwrix Auditor, then you need to upgrade sequentially right to
 version 10.5. Review the following Netwrix knowledge base article for more information:
-[Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/upgrade-increments-for-netwrix-auditor).
+[Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor).
 
 ## Before Starting the Upgrade
 
diff --git a/docs/auditor/10.6/requirements/longtermarchive.md b/docs/auditor/10.6/requirements/longtermarchive.md
index d5d9a8415f..1658834db3 100644
--- a/docs/auditor/10.6/requirements/longtermarchive.md
+++ b/docs/auditor/10.6/requirements/longtermarchive.md
@@ -37,7 +37,7 @@ viewing the Long-Term Archive widget of the Health Status dashboard, click Open
 
 **Step 5 –** To move data from the old repository to the new location, take the steps described in
 the following Netwrix knowledge base article:
-[How to Move Long-Term Archive to a New Location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location).
+[How to Move Long-Term Archive to a New Location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location).
 
 Auditor client will start writing data to the new location right after you complete data moving
 procedure.
diff --git a/docs/auditor/10.6/requirements/overview.md b/docs/auditor/10.6/requirements/overview.md
index 3f304db494..9679a66100 100644
--- a/docs/auditor/10.6/requirements/overview.md
+++ b/docs/auditor/10.6/requirements/overview.md
@@ -45,7 +45,7 @@ product architecture and components interactions are shown in the figure below.
 **NOTE:** When auditing Active Directory domains, Exchange servers, expired passwords, and inactive
 users, the data sent by the product can be encrypted using Signing and Sealing. See the following
 Netwrix knowledge base article for additional information on how to secure Netwrix Auditor:
-[Best Practices for Securing Netwrix Auditor](/docs/kb/auditor/best-practices-for-securing-netwrix-auditor).
+[Best Practices for Securing Netwrix Auditor](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/best-practices-for-securing-netwrix-auditor).
 
 ### Workflow Stages
 
diff --git a/docs/auditor/10.6/requirements/software.md b/docs/auditor/10.6/requirements/software.md
index 5dc517e9ac..438622cb99 100644
--- a/docs/auditor/10.6/requirements/software.md
+++ b/docs/auditor/10.6/requirements/software.md
@@ -60,7 +60,7 @@ Printing
 
 To print SSRS-based reports, SSRS Report Viewer and Auditor Client require ActiveX Control to be
 installed and enabled on the local machine. See the
-[Impossible to Export a Report ](/docs/kb/auditor/impossible-to-export-a-report)
+[Impossible to Export a Report ](/docs/kb/auditor/reports-alerts-and-notifications/report-generation/impossible-to-export-a-report)
 Netwrix knowledge base article for additional information.
 
 You can, for example, open any SSRS-based report using your default web browser and click **Print**.
diff --git a/docs/auditor/10.6/requirements/sqlserver.md b/docs/auditor/10.6/requirements/sqlserver.md
index e7e123a717..deac0c796b 100644
--- a/docs/auditor/10.6/requirements/sqlserver.md
+++ b/docs/auditor/10.6/requirements/sqlserver.md
@@ -301,5 +301,5 @@ to **SQL Server Logins**, expand the **Security** > **Logins** node, right-click
 **Properties** from the pop-up menu, and edit its roles.
 
 If you need to migrate the Audit Database, see the
-[How to Migrate Netwrix Auditor Databases to Another SQL Server Instance](/docs/kb/auditor/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance)
+[How to Migrate Netwrix Auditor Databases to Another SQL Server Instance](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance)
 knowledge base article.
diff --git a/docs/auditor/10.6/requirements/workingfolder.md b/docs/auditor/10.6/requirements/workingfolder.md
index bfeaf4cb7b..25247ced0c 100644
--- a/docs/auditor/10.6/requirements/workingfolder.md
+++ b/docs/auditor/10.6/requirements/workingfolder.md
@@ -19,5 +19,5 @@ capacity, you can use the Working Folder widget of the Health Status dashboard.
 
 If you want to change the working folder default location, run the specially designed utility. See
 the
-[How to Migrate Netwrix Auditor Working Folder to a New Location](/docs/kb/auditor/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location)
+[How to Migrate Netwrix Auditor Working Folder to a New Location](/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location)
 Knowledge Base article for additional information.
diff --git a/docs/auditor/10.6/tools/eventlogmanager/eventlogmanager.md b/docs/auditor/10.6/tools/eventlogmanager/eventlogmanager.md
index d475b6a27a..4439a89491 100644
--- a/docs/auditor/10.6/tools/eventlogmanager/eventlogmanager.md
+++ b/docs/auditor/10.6/tools/eventlogmanager/eventlogmanager.md
@@ -18,7 +18,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/admin/healthstatus/troubleshooting.md b/docs/auditor/10.7/admin/healthstatus/troubleshooting.md
index a908010662..6ed3f860bd 100644
--- a/docs/auditor/10.7/admin/healthstatus/troubleshooting.md
+++ b/docs/auditor/10.7/admin/healthstatus/troubleshooting.md
@@ -23,7 +23,7 @@ portal as described in the Creating a ticket with Customer portal section.
 | I see a blank window instead of a report.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | Contact your Auditor Global administrator to make sure that you are granted sufficient permissions on the Report Server. To view reports in a web browser - Open a web browser and type the Report Manager URL (found under Settings>**Audit Database**). In the page that opens, navigate to the report you want to generate and click the report name. You can modify the report filters and click View Report to apply them.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
 | I configured report subscription to be uploaded to a file server, but cannot find it / cannot access it.                                                                                                                                                                                                                                                                                                                                                                                                                       | Subscriptions can be uploaded either to a file share (e.g., _\\filestorage\reports_) or to a folder on the computer where Auditor Server is installed. To access these reports, you must be granted the Read permission.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
 | When trying to collect event data from Active Directory domain, an error message like this appears in Netwrix Health Log: _Monitoring Plan: `<Monitoring_Plan_Name>` The following error has occurred while processing '`<Item_Name>`': Error collecting the security log of the domain `<Domain_Name>`. Failed to process the domain controller `<Domain_Controller_Name>` due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it_. | This may happen due to Secondary Logon Service disabled state. To collect event data from the domain, this service must be up and running. Open its properties and start the service.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
-| The 'Workstation' field in search, reports, and Activity Summary is reported as 'unknown'                                                                                                                                                                                                                                                                                                                                                                                                                                      | For the full list of possible reasons, please refer to the following Netwrix Knowledge Base article: [Why is the "Workstation" field reported as "unknown"?](/docs/kb/auditor/workstation-field-reported-as-unknown)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| The 'Workstation' field in search, reports, and Activity Summary is reported as 'unknown'                                                                                                                                                                                                                                                                                                                                                                                                                                      | For the full list of possible reasons, please refer to the following Netwrix Knowledge Base article: [Why is the "Workstation" field reported as "unknown"?](/docs/kb/auditor/reports-alerts-and-notifications/report-generation/workstation-field-reported-as-unknown)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 
 ## Creating a ticket with Customer portal
 
diff --git a/docs/auditor/10.7/admin/monitoringplans/sharepoint/overview.md b/docs/auditor/10.7/admin/monitoringplans/sharepoint/overview.md
index 639d740e11..8a1928b9bf 100644
--- a/docs/auditor/10.7/admin/monitoringplans/sharepoint/overview.md
+++ b/docs/auditor/10.7/admin/monitoringplans/sharepoint/overview.md
@@ -37,7 +37,7 @@ information.
 
 | Problem                                                            | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        | KB article                                                                                                                                                                                                       |
 | ------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| The "Timeout Expired" error appears during the agent's deployment. | The agent failed to be deployed due to one of the following reasons: - One or several servers are unreachable - The SPAdminV4 service is not started on any of the servers. - The servers within the farm are located in different time zones. - Your SharePoint farm exceeds the recommended capacity limits. Increase DeployTimeout value in _%ProgramData%\Netwrix\NetwrixAuditor for SharePoint\ Configuration\ `<managed_object_name>`\ Commonsettings.config_ and restart the agent service. | Refer to the [Timeout Expired Error on SharePoint Core Service Deployment](/docs/kb/auditor/timeout-expired-error-on-sharepoint-core-service-deployment) Knowledge Base article for the solution. |
+| The "Timeout Expired" error appears during the agent's deployment. | The agent failed to be deployed due to one of the following reasons: - One or several servers are unreachable - The SPAdminV4 service is not started on any of the servers. - The servers within the farm are located in different time zones. - Your SharePoint farm exceeds the recommended capacity limits. Increase DeployTimeout value in _%ProgramData%\Netwrix\NetwrixAuditor for SharePoint\ Configuration\ `<managed_object_name>`\ Commonsettings.config_ and restart the agent service. | Refer to the [Timeout Expired Error on SharePoint Core Service Deployment](/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/timeout-expired-error-on-sharepoint-core-service-deployment) Knowledge Base article for the solution. |
 
 ## SharePoint Farm
 
diff --git a/docs/auditor/10.7/admin/settings/longtermarchive.md b/docs/auditor/10.7/admin/settings/longtermarchive.md
index 16de2f1bb6..37564076e7 100644
--- a/docs/auditor/10.7/admin/settings/longtermarchive.md
+++ b/docs/auditor/10.7/admin/settings/longtermarchive.md
@@ -17,7 +17,7 @@ Review the following for additional information:
 | Option                                                                   | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 | ------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | Long-Term Archive settings                                               |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
-| Write audit data to                                                      | Specify the path to a local or shared folder where your audit data will be stored. By default, it is set to _"C:\ProgramData\Netwrix Auditor\Data"_. By default, the LocalSystem account is used to write data to the local-based Long-Term Archive and computer account is used for the file share-based storage. Subscriptions created in the Auditor client are uploaded to file servers under the Long-Term Archive service account as well. It is not recommended to store your Long-Term Archive on a system disk. If you want to move the Long-Term Archive to another location, refer to the following Netwrix Knowledge base article: [How to move Long-Term Archive to a new location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location).                                                                                                                                                                      |
+| Write audit data to                                                      | Specify the path to a local or shared folder where your audit data will be stored. By default, it is set to _"C:\ProgramData\Netwrix Auditor\Data"_. By default, the LocalSystem account is used to write data to the local-based Long-Term Archive and computer account is used for the file share-based storage. Subscriptions created in the Auditor client are uploaded to file servers under the Long-Term Archive service account as well. It is not recommended to store your Long-Term Archive on a system disk. If you want to move the Long-Term Archive to another location, refer to the following Netwrix Knowledge base article: [How to move Long-Term Archive to a new location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location).                                                                                                                                                                      |
 | Keep audit data for (in months)                                          | Specify how long data will be stored. By default, it is set to 120 months.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
 | Use custom credentials (for the file share-based Long-Term Archive only) | Select the checkbox and provide user name and password for the Long-Term Archive service account. You can specify a custom account only for the Long-Term Archive stored on a file share. The custom Long-Term Archive service account can be granted the following rights and permissions: - Advanced permissions on the folder where the Long-term Archive is stored: - List folder / read data - Read attributes - Read extended attributes - Create files / write data - Create folders / append data - Write attributes - Write extended attributes - Delete subfolders and files - Read permissions - On the file shares where report subscriptions are saved: - Change share permission - Create files / write data folder permission Subscriptions created in the Auditor client  are uploaded to file servers under the Long-Term Archive service account as well. See the [Subscriptions](/docs/auditor/10.7/admin/subscriptions/overview.md) topic for additional information. |
 
diff --git a/docs/auditor/10.7/configuration/activedirectory/overview.md b/docs/auditor/10.7/configuration/activedirectory/overview.md
index 585600a270..a9be60d02b 100644
--- a/docs/auditor/10.7/configuration/activedirectory/overview.md
+++ b/docs/auditor/10.7/configuration/activedirectory/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/activedirectory/securitylog.md b/docs/auditor/10.7/configuration/activedirectory/securitylog.md
index c7e940490b..3ed4cd67d3 100644
--- a/docs/auditor/10.7/configuration/activedirectory/securitylog.md
+++ b/docs/auditor/10.7/configuration/activedirectory/securitylog.md
@@ -43,5 +43,5 @@ If "Overwrite" option is not enough to meet your data retention requirements, yo
 _auto-archiving_ option for Security event log to preserve historical event data in the archive
 files. With that option enabled, you may want to adjust the retention settings for log archives
 (backups). Related procedures are described in the
-[Auto-archiving Windows Security log](/docs/kb/auditor/auto-archiving-windows-security-log)
+[Auto-archiving Windows Security log](/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/auto-archiving-windows-security-log)
 Netwrix Knowledge Base article.
diff --git a/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md b/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md
index 5a6ecad03c..de14bed55e 100644
--- a/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md
+++ b/docs/auditor/10.7/configuration/activedirectoryfederatedservices/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 Active Directory Federation Services (AD FS) server role can be assigned:
diff --git a/docs/auditor/10.7/configuration/exchange/overview.md b/docs/auditor/10.7/configuration/exchange/overview.md
index 105bcc5834..ace485240e 100644
--- a/docs/auditor/10.7/configuration/exchange/overview.md
+++ b/docs/auditor/10.7/configuration/exchange/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md b/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md
index abe2d7e301..0f93beaf94 100644
--- a/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md
+++ b/docs/auditor/10.7/configuration/fileservers/delldatastorage/overview.md
@@ -17,7 +17,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/fileservers/dellisilon/overview.md b/docs/auditor/10.7/configuration/fileservers/dellisilon/overview.md
index 9079777e34..d06ed2afd7 100644
--- a/docs/auditor/10.7/configuration/fileservers/dellisilon/overview.md
+++ b/docs/auditor/10.7/configuration/fileservers/dellisilon/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/fileservers/netappcmode/overview.md b/docs/auditor/10.7/configuration/fileservers/netappcmode/overview.md
index e1a4b6e9a5..31f5c9c988 100644
--- a/docs/auditor/10.7/configuration/fileservers/netappcmode/overview.md
+++ b/docs/auditor/10.7/configuration/fileservers/netappcmode/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/fileservers/nutanix/overview.md b/docs/auditor/10.7/configuration/fileservers/nutanix/overview.md
index 4312bcc7aa..7f016e0b7c 100644
--- a/docs/auditor/10.7/configuration/fileservers/nutanix/overview.md
+++ b/docs/auditor/10.7/configuration/fileservers/nutanix/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/fileservers/overview.md b/docs/auditor/10.7/configuration/fileservers/overview.md
index 8ac5855190..664e9be227 100644
--- a/docs/auditor/10.7/configuration/fileservers/overview.md
+++ b/docs/auditor/10.7/configuration/fileservers/overview.md
@@ -12,7 +12,7 @@ information on these activities.
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 ## Supported File Servers and Devices
diff --git a/docs/auditor/10.7/configuration/fileservers/qumulo/overview.md b/docs/auditor/10.7/configuration/fileservers/qumulo/overview.md
index 4f5e38621f..999b3ebc13 100644
--- a/docs/auditor/10.7/configuration/fileservers/qumulo/overview.md
+++ b/docs/auditor/10.7/configuration/fileservers/qumulo/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/fileservers/synology/overview.md b/docs/auditor/10.7/configuration/fileservers/synology/overview.md
index a7fbc6c9d8..8ebc3e95df 100644
--- a/docs/auditor/10.7/configuration/fileservers/synology/overview.md
+++ b/docs/auditor/10.7/configuration/fileservers/synology/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/fileservers/windows/overview.md b/docs/auditor/10.7/configuration/fileservers/windows/overview.md
index 55f4b95978..9eb59f18ca 100644
--- a/docs/auditor/10.7/configuration/fileservers/windows/overview.md
+++ b/docs/auditor/10.7/configuration/fileservers/windows/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 ## Configuration Overview
@@ -236,7 +236,7 @@ folder is placed within a share targeted by a DFS folder.
 
 For recommendations on configuring DFS replication, refer to the following Netwrix knowledge base
 article:
-[Why did loss of performance occur when configuring audit settings for Windows File Servers?](/docs/kb/auditor/auditing-distributed-file-systems-with-replication-in-netwrix-auditor).
+[Why did loss of performance occur when configuring audit settings for Windows File Servers?](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/auditing-distributed-file-systems-with-replication-in-netwrix-auditor).
 Remember that replication of namespace roots is not supported.
 
 ## File Servers and Antivirus
diff --git a/docs/auditor/10.7/configuration/grouppolicy/overview.md b/docs/auditor/10.7/configuration/grouppolicy/overview.md
index c131f9bfa8..9c0bfa52f1 100644
--- a/docs/auditor/10.7/configuration/grouppolicy/overview.md
+++ b/docs/auditor/10.7/configuration/grouppolicy/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/logonactivity/overview.md b/docs/auditor/10.7/configuration/logonactivity/overview.md
index fb80c48e19..123d5af0fe 100644
--- a/docs/auditor/10.7/configuration/logonactivity/overview.md
+++ b/docs/auditor/10.7/configuration/logonactivity/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/logonactivity/securityeventlog.md b/docs/auditor/10.7/configuration/logonactivity/securityeventlog.md
index 6b4e6dd3be..9d54cbba74 100644
--- a/docs/auditor/10.7/configuration/logonactivity/securityeventlog.md
+++ b/docs/auditor/10.7/configuration/logonactivity/securityeventlog.md
@@ -33,4 +33,4 @@ needed**.
 **NOTE:** After configuring security event settings via Group Policy, you may notice that the log
 size on a specific computer is not set correctly. In this case, follow the resolution steps from the
 Netwrix Knowledge base article to fix the issue:
-[Security log settings do not apply via GPO](/docs/kb/auditor/security-log-settings-do-not-apply-via-gpo).
+[Security log settings do not apply via GPO](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/security-log-settings-do-not-apply-via-gpo).
diff --git a/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md b/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md
index bcb45093c2..b36cdacc4a 100644
--- a/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md
+++ b/docs/auditor/10.7/configuration/microsoft365/exchangeonline/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md b/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md
index 0561e7125f..7b6688c267 100644
--- a/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md
+++ b/docs/auditor/10.7/configuration/microsoft365/microsoftentraid/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md b/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md
index 2329d29119..9bf23794c9 100644
--- a/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md
+++ b/docs/auditor/10.7/configuration/microsoft365/sharepointonline/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in the following way:
diff --git a/docs/auditor/10.7/configuration/microsoft365/teams/overview.md b/docs/auditor/10.7/configuration/microsoft365/teams/overview.md
index 462fd00931..6edd2f4cd5 100644
--- a/docs/auditor/10.7/configuration/microsoft365/teams/overview.md
+++ b/docs/auditor/10.7/configuration/microsoft365/teams/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/networkdevices/ciscoasa.md b/docs/auditor/10.7/configuration/networkdevices/ciscoasa.md
index c7995f7b56..541311a546 100644
--- a/docs/auditor/10.7/configuration/networkdevices/ciscoasa.md
+++ b/docs/auditor/10.7/configuration/networkdevices/ciscoasa.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/networkdevices/ciscoios.md b/docs/auditor/10.7/configuration/networkdevices/ciscoios.md
index 1d19a7d8cd..b4f9448cd2 100644
--- a/docs/auditor/10.7/configuration/networkdevices/ciscoios.md
+++ b/docs/auditor/10.7/configuration/networkdevices/ciscoios.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/networkdevices/fortinetfortigate.md b/docs/auditor/10.7/configuration/networkdevices/fortinetfortigate.md
index 5925de0e08..e2ec396d9b 100644
--- a/docs/auditor/10.7/configuration/networkdevices/fortinetfortigate.md
+++ b/docs/auditor/10.7/configuration/networkdevices/fortinetfortigate.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/networkdevices/juniper.md b/docs/auditor/10.7/configuration/networkdevices/juniper.md
index d341e8b49f..42e08c3ee4 100644
--- a/docs/auditor/10.7/configuration/networkdevices/juniper.md
+++ b/docs/auditor/10.7/configuration/networkdevices/juniper.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/networkdevices/overview.md b/docs/auditor/10.7/configuration/networkdevices/overview.md
index 2b673837aa..82d27787af 100644
--- a/docs/auditor/10.7/configuration/networkdevices/overview.md
+++ b/docs/auditor/10.7/configuration/networkdevices/overview.md
@@ -22,5 +22,5 @@ device:
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
diff --git a/docs/auditor/10.7/configuration/networkdevices/paloalto.md b/docs/auditor/10.7/configuration/networkdevices/paloalto.md
index 7c8d0052d6..4f14fc45d3 100644
--- a/docs/auditor/10.7/configuration/networkdevices/paloalto.md
+++ b/docs/auditor/10.7/configuration/networkdevices/paloalto.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/networkdevices/sonicwall.md b/docs/auditor/10.7/configuration/networkdevices/sonicwall.md
index 923de0e4bb..49d7dc0148 100644
--- a/docs/auditor/10.7/configuration/networkdevices/sonicwall.md
+++ b/docs/auditor/10.7/configuration/networkdevices/sonicwall.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/oracle/overview.md b/docs/auditor/10.7/configuration/oracle/overview.md
index a4ea1b964c..c6d1c4a88f 100644
--- a/docs/auditor/10.7/configuration/oracle/overview.md
+++ b/docs/auditor/10.7/configuration/oracle/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
@@ -46,7 +46,7 @@ different auditing types:
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 ## Considerations for Oracle Database 11g
diff --git a/docs/auditor/10.7/configuration/sharepoint/overview.md b/docs/auditor/10.7/configuration/sharepoint/overview.md
index 06c527dce1..3d634c7b99 100644
--- a/docs/auditor/10.7/configuration/sharepoint/overview.md
+++ b/docs/auditor/10.7/configuration/sharepoint/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/configuration/sqlserver/configuringtracelogging.md b/docs/auditor/10.7/configuration/sqlserver/configuringtracelogging.md
index 3d239d7a0c..4213c2edca 100644
--- a/docs/auditor/10.7/configuration/sqlserver/configuringtracelogging.md
+++ b/docs/auditor/10.7/configuration/sqlserver/configuringtracelogging.md
@@ -14,7 +14,7 @@ and enable it if necessary. To read more, refer to
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 In some cases, however, you may need to disable trace logging on your SQL Server instance. For that,
diff --git a/docs/auditor/10.7/configuration/sqlserver/overview.md b/docs/auditor/10.7/configuration/sqlserver/overview.md
index bb0ec27ec6..52128bbaf8 100644
--- a/docs/auditor/10.7/configuration/sqlserver/overview.md
+++ b/docs/auditor/10.7/configuration/sqlserver/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 The IT Infrastructure for monitoring is configured automatically. Your current audit settings will
diff --git a/docs/auditor/10.7/configuration/useractivity/overview.md b/docs/auditor/10.7/configuration/useractivity/overview.md
index a2b9ffc08b..3c7c25dbbe 100644
--- a/docs/auditor/10.7/configuration/useractivity/overview.md
+++ b/docs/auditor/10.7/configuration/useractivity/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can use group Managed Service Accounts (gMSA) as data collecting accounts.
diff --git a/docs/auditor/10.7/configuration/vmware/overview.md b/docs/auditor/10.7/configuration/vmware/overview.md
index d7e1c60d25..f5c162f9b5 100644
--- a/docs/auditor/10.7/configuration/vmware/overview.md
+++ b/docs/auditor/10.7/configuration/vmware/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring automatically through a monitoring plan. No
diff --git a/docs/auditor/10.7/configuration/windowsserver/overview.md b/docs/auditor/10.7/configuration/windowsserver/overview.md
index dc829f0bea..e4799261cc 100644
--- a/docs/auditor/10.7/configuration/windowsserver/overview.md
+++ b/docs/auditor/10.7/configuration/windowsserver/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.7/install/upgrade.md b/docs/auditor/10.7/install/upgrade.md
index df91f986f6..6fa1a60e9b 100644
--- a/docs/auditor/10.7/install/upgrade.md
+++ b/docs/auditor/10.7/install/upgrade.md
@@ -13,7 +13,7 @@ Seamless upgrade to Netwrix Auditor 10.7 is supported for versions 10.6 and 10.5
 
 If you use an earlier version of Netwrix Auditor, then you need to upgrade sequentially right to
 version 10.7. See the following Netwrix knowledge base article for more information:
-[Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/upgrade-increments-for-netwrix-auditor).
+[Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor).
 
 ## Before Starting the Upgrade
 
diff --git a/docs/auditor/10.7/requirements/longtermarchive.md b/docs/auditor/10.7/requirements/longtermarchive.md
index ca48c806da..1b15564f0d 100644
--- a/docs/auditor/10.7/requirements/longtermarchive.md
+++ b/docs/auditor/10.7/requirements/longtermarchive.md
@@ -37,7 +37,7 @@ viewing the Long-Term Archive widget of the Health Status dashboard, click Open
 
 **Step 5 –** To move data from the old repository to the new location, take the steps described in
 the following Netwrix knowledge base article:
-[How to Move Long-Term Archive to a New Location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location).
+[How to Move Long-Term Archive to a New Location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location).
 
 Auditor client will start writing data to the new location right after you complete data moving
 procedure.
diff --git a/docs/auditor/10.7/requirements/overview.md b/docs/auditor/10.7/requirements/overview.md
index e75eaa0513..4d14e73211 100644
--- a/docs/auditor/10.7/requirements/overview.md
+++ b/docs/auditor/10.7/requirements/overview.md
@@ -45,7 +45,7 @@ product architecture and components interactions are shown in the figure below.
 **NOTE:** When auditing Active Directory domains, Exchange servers, expired passwords, and inactive
 users, the data sent by the product can be encrypted using Signing and Sealing. See the following
 Netwrix knowledge base article for additional information on how to secure Netwrix Auditor:
-[Best Practices for Securing Netwrix Auditor](/docs/kb/auditor/best-practices-for-securing-netwrix-auditor).
+[Best Practices for Securing Netwrix Auditor](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/best-practices-for-securing-netwrix-auditor).
 
 ### Workflow Stages
 
diff --git a/docs/auditor/10.7/requirements/software.md b/docs/auditor/10.7/requirements/software.md
index 2f75ab6f5f..b06d960537 100644
--- a/docs/auditor/10.7/requirements/software.md
+++ b/docs/auditor/10.7/requirements/software.md
@@ -59,7 +59,7 @@ Printing
 
 To print SSRS-based reports, SSRS Report Viewer and Auditor Client require ActiveX Control to be
 installed and enabled on the local machine. See the
-[Impossible to Export a Report ](/docs/kb/auditor/impossible-to-export-a-report)
+[Impossible to Export a Report ](/docs/kb/auditor/reports-alerts-and-notifications/report-generation/impossible-to-export-a-report)
 Netwrix knowledge base article for additional information.
 
 You can, for example, open any SSRS-based report using your default web browser and click **Print**.
diff --git a/docs/auditor/10.7/requirements/sqlserver.md b/docs/auditor/10.7/requirements/sqlserver.md
index 741c102a3f..41232c2268 100644
--- a/docs/auditor/10.7/requirements/sqlserver.md
+++ b/docs/auditor/10.7/requirements/sqlserver.md
@@ -292,5 +292,5 @@ added to **SQL Server Logins**, expand the **Security** > **Logins** node, right
 select **Properties** from the pop-up menu, and edit its roles.
 
 If you need to migrate the Audit Database, see the
-[How to Migrate Netwrix Auditor Databases to Another SQL Server Instance](/docs/kb/auditor/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance)
+[How to Migrate Netwrix Auditor Databases to Another SQL Server Instance](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance)
 knowledge base article.
diff --git a/docs/auditor/10.7/requirements/workingfolder.md b/docs/auditor/10.7/requirements/workingfolder.md
index bfeaf4cb7b..25247ced0c 100644
--- a/docs/auditor/10.7/requirements/workingfolder.md
+++ b/docs/auditor/10.7/requirements/workingfolder.md
@@ -19,5 +19,5 @@ capacity, you can use the Working Folder widget of the Health Status dashboard.
 
 If you want to change the working folder default location, run the specially designed utility. See
 the
-[How to Migrate Netwrix Auditor Working Folder to a New Location](/docs/kb/auditor/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location)
+[How to Migrate Netwrix Auditor Working Folder to a New Location](/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location)
 Knowledge Base article for additional information.
diff --git a/docs/auditor/10.7/tools/eventlogmanager/eventlogmanager.md b/docs/auditor/10.7/tools/eventlogmanager/eventlogmanager.md
index 3a82e218cd..443a538d9f 100644
--- a/docs/auditor/10.7/tools/eventlogmanager/eventlogmanager.md
+++ b/docs/auditor/10.7/tools/eventlogmanager/eventlogmanager.md
@@ -18,7 +18,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/admin/healthstatus/troubleshooting.md b/docs/auditor/10.8/admin/healthstatus/troubleshooting.md
index a908010662..6ed3f860bd 100644
--- a/docs/auditor/10.8/admin/healthstatus/troubleshooting.md
+++ b/docs/auditor/10.8/admin/healthstatus/troubleshooting.md
@@ -23,7 +23,7 @@ portal as described in the Creating a ticket with Customer portal section.
 | I see a blank window instead of a report.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | Contact your Auditor Global administrator to make sure that you are granted sufficient permissions on the Report Server. To view reports in a web browser - Open a web browser and type the Report Manager URL (found under Settings>**Audit Database**). In the page that opens, navigate to the report you want to generate and click the report name. You can modify the report filters and click View Report to apply them.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
 | I configured report subscription to be uploaded to a file server, but cannot find it / cannot access it.                                                                                                                                                                                                                                                                                                                                                                                                                       | Subscriptions can be uploaded either to a file share (e.g., _\\filestorage\reports_) or to a folder on the computer where Auditor Server is installed. To access these reports, you must be granted the Read permission.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
 | When trying to collect event data from Active Directory domain, an error message like this appears in Netwrix Health Log: _Monitoring Plan: `<Monitoring_Plan_Name>` The following error has occurred while processing '`<Item_Name>`': Error collecting the security log of the domain `<Domain_Name>`. Failed to process the domain controller `<Domain_Controller_Name>` due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it_. | This may happen due to Secondary Logon Service disabled state. To collect event data from the domain, this service must be up and running. Open its properties and start the service.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
-| The 'Workstation' field in search, reports, and Activity Summary is reported as 'unknown'                                                                                                                                                                                                                                                                                                                                                                                                                                      | For the full list of possible reasons, please refer to the following Netwrix Knowledge Base article: [Why is the "Workstation" field reported as "unknown"?](/docs/kb/auditor/workstation-field-reported-as-unknown)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| The 'Workstation' field in search, reports, and Activity Summary is reported as 'unknown'                                                                                                                                                                                                                                                                                                                                                                                                                                      | For the full list of possible reasons, please refer to the following Netwrix Knowledge Base article: [Why is the "Workstation" field reported as "unknown"?](/docs/kb/auditor/reports-alerts-and-notifications/report-generation/workstation-field-reported-as-unknown)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 
 ## Creating a ticket with Customer portal
 
diff --git a/docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md b/docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md
index 0b14d2d270..ce300edf71 100644
--- a/docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md
+++ b/docs/auditor/10.8/admin/monitoringplans/sharepoint/overview.md
@@ -37,7 +37,7 @@ information.
 
 | Problem                                                            | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        | KB article                                                                                                                                                                                                       |
 | ------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| The "Timeout Expired" error appears during the agent's deployment. | The agent failed to be deployed due to one of the following reasons: - One or several servers are unreachable - The SPAdminV4 service is not started on any of the servers. - The servers within the farm are located in different time zones. - Your SharePoint farm exceeds the recommended capacity limits. Increase DeployTimeout value in _%ProgramData%\Netwrix\NetwrixAuditor for SharePoint\ Configuration\ `<managed_object_name>`\ Commonsettings.config_ and restart the agent service. | Refer to the [Timeout Expired Error on SharePoint Core Service Deployment](/docs/kb/auditor/timeout-expired-error-on-sharepoint-core-service-deployment) Knowledge Base article for the solution. |
+| The "Timeout Expired" error appears during the agent's deployment. | The agent failed to be deployed due to one of the following reasons: - One or several servers are unreachable - The SPAdminV4 service is not started on any of the servers. - The servers within the farm are located in different time zones. - Your SharePoint farm exceeds the recommended capacity limits. Increase DeployTimeout value in _%ProgramData%\Netwrix\NetwrixAuditor for SharePoint\ Configuration\ `<managed_object_name>`\ Commonsettings.config_ and restart the agent service. | Refer to the [Timeout Expired Error on SharePoint Core Service Deployment](/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/timeout-expired-error-on-sharepoint-core-service-deployment) Knowledge Base article for the solution. |
 
 ## SharePoint Farm
 
diff --git a/docs/auditor/10.8/admin/settings/longtermarchive.md b/docs/auditor/10.8/admin/settings/longtermarchive.md
index 24e1b57722..5eaa527227 100644
--- a/docs/auditor/10.8/admin/settings/longtermarchive.md
+++ b/docs/auditor/10.8/admin/settings/longtermarchive.md
@@ -17,7 +17,7 @@ Review the following for additional information:
 | Option                                                                   | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 | ------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | Long-Term Archive settings                                               |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
-| Write audit data to                                                      | Specify the path to a local or shared folder where your audit data will be stored. By default, it is set to _"C:\ProgramData\Netwrix Auditor\Data"_. By default, the LocalSystem account is used to write data to the local-based Long-Term Archive and computer account is used for the file share-based storage. Subscriptions created in the Auditor client are uploaded to file servers under the Long-Term Archive service account as well. It is not recommended to store your Long-Term Archive on a system disk. If you want to move the Long-Term Archive to another location, refer to the following Netwrix Knowledge base article: [How to move Long-Term Archive to a new location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location).                                                                                                                                                                      |
+| Write audit data to                                                      | Specify the path to a local or shared folder where your audit data will be stored. By default, it is set to _"C:\ProgramData\Netwrix Auditor\Data"_. By default, the LocalSystem account is used to write data to the local-based Long-Term Archive and computer account is used for the file share-based storage. Subscriptions created in the Auditor client are uploaded to file servers under the Long-Term Archive service account as well. It is not recommended to store your Long-Term Archive on a system disk. If you want to move the Long-Term Archive to another location, refer to the following Netwrix Knowledge base article: [How to move Long-Term Archive to a new location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location).                                                                                                                                                                      |
 | Keep audit data for (in months)                                          | Specify how long data will be stored. By default, it is set to 120 months.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
 | Use custom credentials (for the file share-based Long-Term Archive only) | Select the checkbox and provide user name and password for the Long-Term Archive service account. You can specify a custom account only for the Long-Term Archive stored on a file share. The custom Long-Term Archive service account can be granted the following rights and permissions: - Advanced permissions on the folder where the Long-term Archive is stored: - List folder / read data - Read attributes - Read extended attributes - Create files / write data - Create folders / append data - Write attributes - Write extended attributes - Delete subfolders and files - Read permissions - On the file shares where report subscriptions are saved: - Change share permission - Create files / write data folder permission Subscriptions created in the Auditor client  are uploaded to file servers under the Long-Term Archive service account as well. See the [Subscriptions](/docs/auditor/10.8/admin/subscriptions/overview.md) topic for additional information. |
 
diff --git a/docs/auditor/10.8/configuration/activedirectory/overview.md b/docs/auditor/10.8/configuration/activedirectory/overview.md
index 0e79d301e5..133582bb15 100644
--- a/docs/auditor/10.8/configuration/activedirectory/overview.md
+++ b/docs/auditor/10.8/configuration/activedirectory/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/activedirectory/securitylog.md b/docs/auditor/10.8/configuration/activedirectory/securitylog.md
index c7e940490b..3ed4cd67d3 100644
--- a/docs/auditor/10.8/configuration/activedirectory/securitylog.md
+++ b/docs/auditor/10.8/configuration/activedirectory/securitylog.md
@@ -43,5 +43,5 @@ If "Overwrite" option is not enough to meet your data retention requirements, yo
 _auto-archiving_ option for Security event log to preserve historical event data in the archive
 files. With that option enabled, you may want to adjust the retention settings for log archives
 (backups). Related procedures are described in the
-[Auto-archiving Windows Security log](/docs/kb/auditor/auto-archiving-windows-security-log)
+[Auto-archiving Windows Security log](/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/auto-archiving-windows-security-log)
 Netwrix Knowledge Base article.
diff --git a/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md
index 0fc43c5a74..a26edd8aa5 100644
--- a/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md
+++ b/docs/auditor/10.8/configuration/activedirectoryfederatedservices/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 Active Directory Federation Services (AD FS) server role can be assigned:
diff --git a/docs/auditor/10.8/configuration/exchange/overview.md b/docs/auditor/10.8/configuration/exchange/overview.md
index 91ef1e9451..a57d216d52 100644
--- a/docs/auditor/10.8/configuration/exchange/overview.md
+++ b/docs/auditor/10.8/configuration/exchange/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md b/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md
index 66189d15ad..6d763ac158 100644
--- a/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md
+++ b/docs/auditor/10.8/configuration/fileservers/delldatastorage/overview.md
@@ -17,7 +17,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md b/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md
index 0d2dcc48a5..015522134e 100644
--- a/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md
+++ b/docs/auditor/10.8/configuration/fileservers/dellisilon/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md b/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md
index 144b683c70..3f634008cf 100644
--- a/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md
+++ b/docs/auditor/10.8/configuration/fileservers/netappcmode/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md b/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md
index 737256d662..acbf9dd58d 100644
--- a/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md
+++ b/docs/auditor/10.8/configuration/fileservers/nutanix/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/fileservers/overview.md b/docs/auditor/10.8/configuration/fileservers/overview.md
index f815606ac8..1521e803cf 100644
--- a/docs/auditor/10.8/configuration/fileservers/overview.md
+++ b/docs/auditor/10.8/configuration/fileservers/overview.md
@@ -12,7 +12,7 @@ information on these activities.
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 ## Supported File Servers and Devices
diff --git a/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md b/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md
index 63541d9f0a..f95825f194 100644
--- a/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md
+++ b/docs/auditor/10.8/configuration/fileservers/qumulo/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/fileservers/synology/overview.md b/docs/auditor/10.8/configuration/fileservers/synology/overview.md
index 0e68df186d..53bbd5c6c3 100644
--- a/docs/auditor/10.8/configuration/fileservers/synology/overview.md
+++ b/docs/auditor/10.8/configuration/fileservers/synology/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/fileservers/windows/overview.md b/docs/auditor/10.8/configuration/fileservers/windows/overview.md
index f5311abdd6..bd583035e5 100644
--- a/docs/auditor/10.8/configuration/fileservers/windows/overview.md
+++ b/docs/auditor/10.8/configuration/fileservers/windows/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 ## Configuration Overview
@@ -236,7 +236,7 @@ folder is placed within a share targeted by a DFS folder.
 
 For recommendations on configuring DFS replication, refer to the following Netwrix knowledge base
 article:
-[Why did loss of performance occur when configuring audit settings for Windows File Servers?](/docs/kb/auditor/auditing-distributed-file-systems-with-replication-in-netwrix-auditor).
+[Why did loss of performance occur when configuring audit settings for Windows File Servers?](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/auditing-distributed-file-systems-with-replication-in-netwrix-auditor).
 Remember that replication of namespace roots is not supported.
 
 ## File Servers and Antivirus
diff --git a/docs/auditor/10.8/configuration/grouppolicy/overview.md b/docs/auditor/10.8/configuration/grouppolicy/overview.md
index 99daeeaf29..d85e1483e8 100644
--- a/docs/auditor/10.8/configuration/grouppolicy/overview.md
+++ b/docs/auditor/10.8/configuration/grouppolicy/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/logonactivity/overview.md b/docs/auditor/10.8/configuration/logonactivity/overview.md
index 041f7527dc..c2e41a213e 100644
--- a/docs/auditor/10.8/configuration/logonactivity/overview.md
+++ b/docs/auditor/10.8/configuration/logonactivity/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/logonactivity/securityeventlog.md b/docs/auditor/10.8/configuration/logonactivity/securityeventlog.md
index 6b4e6dd3be..9d54cbba74 100644
--- a/docs/auditor/10.8/configuration/logonactivity/securityeventlog.md
+++ b/docs/auditor/10.8/configuration/logonactivity/securityeventlog.md
@@ -33,4 +33,4 @@ needed**.
 **NOTE:** After configuring security event settings via Group Policy, you may notice that the log
 size on a specific computer is not set correctly. In this case, follow the resolution steps from the
 Netwrix Knowledge base article to fix the issue:
-[Security log settings do not apply via GPO](/docs/kb/auditor/security-log-settings-do-not-apply-via-gpo).
+[Security log settings do not apply via GPO](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/security-log-settings-do-not-apply-via-gpo).
diff --git a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md
index 4135fd8061..d4c581610a 100644
--- a/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md
+++ b/docs/auditor/10.8/configuration/microsoft365/exchangeonline/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md
index afd1bc6fd0..fdd0074ce1 100644
--- a/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md
+++ b/docs/auditor/10.8/configuration/microsoft365/microsoftentraid/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md
index 6c91b0a729..915ac7c119 100644
--- a/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md
+++ b/docs/auditor/10.8/configuration/microsoft365/sharepointonline/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in the following way:
diff --git a/docs/auditor/10.8/configuration/microsoft365/teams/overview.md b/docs/auditor/10.8/configuration/microsoft365/teams/overview.md
index a20a86e180..87695f69b9 100644
--- a/docs/auditor/10.8/configuration/microsoft365/teams/overview.md
+++ b/docs/auditor/10.8/configuration/microsoft365/teams/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/networkdevices/ciscoasa.md b/docs/auditor/10.8/configuration/networkdevices/ciscoasa.md
index c7995f7b56..541311a546 100644
--- a/docs/auditor/10.8/configuration/networkdevices/ciscoasa.md
+++ b/docs/auditor/10.8/configuration/networkdevices/ciscoasa.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/networkdevices/ciscoios.md b/docs/auditor/10.8/configuration/networkdevices/ciscoios.md
index 1d19a7d8cd..b4f9448cd2 100644
--- a/docs/auditor/10.8/configuration/networkdevices/ciscoios.md
+++ b/docs/auditor/10.8/configuration/networkdevices/ciscoios.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/networkdevices/fortinetfortigate.md b/docs/auditor/10.8/configuration/networkdevices/fortinetfortigate.md
index 5925de0e08..e2ec396d9b 100644
--- a/docs/auditor/10.8/configuration/networkdevices/fortinetfortigate.md
+++ b/docs/auditor/10.8/configuration/networkdevices/fortinetfortigate.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/networkdevices/juniper.md b/docs/auditor/10.8/configuration/networkdevices/juniper.md
index 21a80d1c45..3110d05547 100644
--- a/docs/auditor/10.8/configuration/networkdevices/juniper.md
+++ b/docs/auditor/10.8/configuration/networkdevices/juniper.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/networkdevices/overview.md b/docs/auditor/10.8/configuration/networkdevices/overview.md
index 059e3e0a80..ede1f9ed35 100644
--- a/docs/auditor/10.8/configuration/networkdevices/overview.md
+++ b/docs/auditor/10.8/configuration/networkdevices/overview.md
@@ -22,5 +22,5 @@ device:
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
diff --git a/docs/auditor/10.8/configuration/networkdevices/paloalto.md b/docs/auditor/10.8/configuration/networkdevices/paloalto.md
index 7c8d0052d6..4f14fc45d3 100644
--- a/docs/auditor/10.8/configuration/networkdevices/paloalto.md
+++ b/docs/auditor/10.8/configuration/networkdevices/paloalto.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/networkdevices/sonicwall.md b/docs/auditor/10.8/configuration/networkdevices/sonicwall.md
index 923de0e4bb..49d7dc0148 100644
--- a/docs/auditor/10.8/configuration/networkdevices/sonicwall.md
+++ b/docs/auditor/10.8/configuration/networkdevices/sonicwall.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/oracle/overview.md b/docs/auditor/10.8/configuration/oracle/overview.md
index 74726d9cab..8e35e5f666 100644
--- a/docs/auditor/10.8/configuration/oracle/overview.md
+++ b/docs/auditor/10.8/configuration/oracle/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
@@ -46,7 +46,7 @@ different auditing types:
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 ## Considerations for Oracle Database 11g
diff --git a/docs/auditor/10.8/configuration/sharepoint/overview.md b/docs/auditor/10.8/configuration/sharepoint/overview.md
index 8f1c7e81e2..b9e9769956 100644
--- a/docs/auditor/10.8/configuration/sharepoint/overview.md
+++ b/docs/auditor/10.8/configuration/sharepoint/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/configuration/sqlserver/configuringtracelogging.md b/docs/auditor/10.8/configuration/sqlserver/configuringtracelogging.md
index 3d239d7a0c..4213c2edca 100644
--- a/docs/auditor/10.8/configuration/sqlserver/configuringtracelogging.md
+++ b/docs/auditor/10.8/configuration/sqlserver/configuringtracelogging.md
@@ -14,7 +14,7 @@ and enable it if necessary. To read more, refer to
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 In some cases, however, you may need to disable trace logging on your SQL Server instance. For that,
diff --git a/docs/auditor/10.8/configuration/sqlserver/overview.md b/docs/auditor/10.8/configuration/sqlserver/overview.md
index 4aed5cee9d..4e303517e3 100644
--- a/docs/auditor/10.8/configuration/sqlserver/overview.md
+++ b/docs/auditor/10.8/configuration/sqlserver/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 The IT Infrastructure for monitoring is configured automatically. Your current audit settings will
diff --git a/docs/auditor/10.8/configuration/useractivity/overview.md b/docs/auditor/10.8/configuration/useractivity/overview.md
index 4731d89c9f..5ec36af077 100644
--- a/docs/auditor/10.8/configuration/useractivity/overview.md
+++ b/docs/auditor/10.8/configuration/useractivity/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can use group Managed Service Accounts (gMSA) as data collecting accounts.
diff --git a/docs/auditor/10.8/configuration/vmware/overview.md b/docs/auditor/10.8/configuration/vmware/overview.md
index d7e1c60d25..f5c162f9b5 100644
--- a/docs/auditor/10.8/configuration/vmware/overview.md
+++ b/docs/auditor/10.8/configuration/vmware/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring automatically through a monitoring plan. No
diff --git a/docs/auditor/10.8/configuration/windowsserver/overview.md b/docs/auditor/10.8/configuration/windowsserver/overview.md
index f7406dd08d..1e8b04795d 100644
--- a/docs/auditor/10.8/configuration/windowsserver/overview.md
+++ b/docs/auditor/10.8/configuration/windowsserver/overview.md
@@ -14,7 +14,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:
diff --git a/docs/auditor/10.8/install/upgrade.md b/docs/auditor/10.8/install/upgrade.md
index c30ca0a9cc..57cafd5154 100644
--- a/docs/auditor/10.8/install/upgrade.md
+++ b/docs/auditor/10.8/install/upgrade.md
@@ -13,7 +13,7 @@ Seamless upgrade to Netwrix Auditor 10.8 is supported for versions 10.7 and 10.6
 
 If you use an earlier version of Netwrix Auditor, then you need to upgrade sequentially right to
 version 10.8. See the following Netwrix knowledge base article for more information:
-[Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/upgrade-increments-for-netwrix-auditor).
+[Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor).
 
 ## Before Starting the Upgrade
 
diff --git a/docs/auditor/10.8/requirements/longtermarchive.md b/docs/auditor/10.8/requirements/longtermarchive.md
index eae2eeb36c..4b34f62877 100644
--- a/docs/auditor/10.8/requirements/longtermarchive.md
+++ b/docs/auditor/10.8/requirements/longtermarchive.md
@@ -37,7 +37,7 @@ viewing the Long-Term Archive widget of the Health Status dashboard, click Open
 
 **Step 5 –** To move data from the old repository to the new location, take the steps described in
 the following Netwrix knowledge base article:
-[How to Move Long-Term Archive to a New Location](/docs/kb/auditor/how-to-move-long-term-archive-to-a-new-location).
+[How to Move Long-Term Archive to a New Location](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-move-long-term-archive-to-a-new-location).
 
 Auditor client will start writing data to the new location right after you complete data moving
 procedure.
diff --git a/docs/auditor/10.8/requirements/overview.md b/docs/auditor/10.8/requirements/overview.md
index 255fe6c757..d234380bda 100644
--- a/docs/auditor/10.8/requirements/overview.md
+++ b/docs/auditor/10.8/requirements/overview.md
@@ -45,7 +45,7 @@ product architecture and components interactions are shown in the figure below.
 **NOTE:** When auditing Active Directory domains, Exchange servers, expired passwords, and inactive
 users, the data sent by the product can be encrypted using [Signing and Sealing](https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/enable-ldap-signing-in-windows-server). See the following
 Netwrix knowledge base article for additional information on how to secure Netwrix Auditor:
-[Best Practices for Securing Netwrix Auditor](/docs/kb/auditor/best-practices-for-securing-netwrix-auditor).
+[Best Practices for Securing Netwrix Auditor](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/best-practices-for-securing-netwrix-auditor).
 
 ### Workflow Stages
 
diff --git a/docs/auditor/10.8/requirements/software.md b/docs/auditor/10.8/requirements/software.md
index ef8f948f47..c52684b8a9 100644
--- a/docs/auditor/10.8/requirements/software.md
+++ b/docs/auditor/10.8/requirements/software.md
@@ -59,7 +59,7 @@ Printing
 
 To print SSRS-based reports, SSRS Report Viewer and Auditor Client require ActiveX Control to be
 installed and enabled on the local machine. See the
-[Impossible to Export a Report ](/docs/kb/auditor/impossible-to-export-a-report)
+[Impossible to Export a Report ](/docs/kb/auditor/reports-alerts-and-notifications/report-generation/impossible-to-export-a-report)
 Netwrix knowledge base article for additional information.
 
 You can, for example, open any SSRS-based report using your default web browser and click **Print**.
diff --git a/docs/auditor/10.8/requirements/sqlserver.md b/docs/auditor/10.8/requirements/sqlserver.md
index 0d732cacee..62c5b69e6f 100644
--- a/docs/auditor/10.8/requirements/sqlserver.md
+++ b/docs/auditor/10.8/requirements/sqlserver.md
@@ -292,5 +292,5 @@ added to **SQL Server Logins**, expand the **Security** > **Logins** node, right
 select **Properties** from the pop-up menu, and edit its roles.
 
 If you need to migrate the Audit Database, see the
-[How to Migrate Netwrix Auditor Databases to Another SQL Server Instance](/docs/kb/auditor/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance)
+[How to Migrate Netwrix Auditor Databases to Another SQL Server Instance](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/how-to-migrate-netwrix-auditor-databases-to-another-sql-server-instance)
 knowledge base article.
diff --git a/docs/auditor/10.8/requirements/workingfolder.md b/docs/auditor/10.8/requirements/workingfolder.md
index bfeaf4cb7b..25247ced0c 100644
--- a/docs/auditor/10.8/requirements/workingfolder.md
+++ b/docs/auditor/10.8/requirements/workingfolder.md
@@ -19,5 +19,5 @@ capacity, you can use the Working Folder widget of the Health Status dashboard.
 
 If you want to change the working folder default location, run the specially designed utility. See
 the
-[How to Migrate Netwrix Auditor Working Folder to a New Location](/docs/kb/auditor/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location)
+[How to Migrate Netwrix Auditor Working Folder to a New Location](/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-migrate-netwrix-auditor-working-folder-to-a-new-location)
 Knowledge Base article for additional information.
diff --git a/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md b/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md
index e19376c364..91ae6d9104 100644
--- a/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md
+++ b/docs/auditor/10.8/tools/eventlogmanager/eventlogmanager.md
@@ -18,7 +18,7 @@ integrity, otherwise your change reports may contain warnings, errors or incompl
 
 **CAUTION:** Folder associated with Netwrix Auditor must be excluded from antivirus scanning. See
 the
-[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+[Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 knowledge base article for additional information.
 
 You can configure your IT Infrastructure for monitoring in one of the following ways:

From e4d6e8a2b1370e1ce1e9aaa619ad3b8d496172c0 Mon Sep 17 00:00:00 2001
From: Zoey Castillo <zoey.castillo@netwrix.com>
Date: Tue, 25 Nov 2025 09:52:32 -0600
Subject: [PATCH 06/10] Fix broken KB article internal cross-references with
 category paths

Fixed ~100 broken links within KB articles that were using flat article paths instead of hierarchical category paths. This ensures all cross-references between KB articles now include their proper category structure (e.g., /docs/kb/auditor/features-and-operations/glossaries-and-faqs/alert-reported-change-made-by-system).
---
 ...up-policy-changes-reported-as-made-by-system.md | 14 +++++++-------
 ...active-directory-and-entra-id-license-counts.md |  2 +-
 ...est-is-not-supported-windows-server-auditing.md |  2 +-
 ...application-errors-in-netwrix-auditor-server.md |  4 ++--
 ...ng-data-collection-improving-the-performance.md |  4 ++--
 ...-auditor-consumes-disk-space-recommendations.md |  2 +-
 ...ntrol-request-error-in-user-activity-service.md |  4 ++--
 ...-identified-in-user-activity-monitoring-plan.md |  4 ++--
 ...wrix-auditor-upgrade-process-taking-too-long.md |  2 +-
 ...egistry-hive-file-is-used-by-another-process.md |  4 ++--
 .../error-memory-limit-is-reached.md               |  4 ++--
 ...rror-snapshot-saving-process-was-interrupted.md |  4 ++--
 .../error-the-remote-procedure-call-failed.md      |  2 +-
 ...w-to-investigate-compression-services-errors.md |  2 +-
 14 files changed, 27 insertions(+), 27 deletions(-)

diff --git a/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md
index 5ed825ec75..3c954d868a 100644
--- a/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md
+++ b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md
@@ -24,13 +24,13 @@ knowledge_article_id: kA00g000000H9SmCAK
 
 This article contains references to the most popular Active Directory, Exchange, and Group Policy changes which may be reported as made by **System** by Netwrix Auditor:
 
-- [Alert Reported Change Made by System](/docs/kb/auditor/alert-reported-change-made-by-system).
-- [System Changed Object Path after Account Name Change](/docs/kb/auditor/system-changed-object-path-after-account-name-change).
-- [System Changed Client Operating System](/docs/kb/auditor/system-changed-client-operating-system).
-- [System Changed Directory Objects for Foreign Security Principals](/docs/kb/auditor/system-changed-directory-objects-for-foreign-security-principals).
-- [Workstation Field Reported as Unknown](/docs/kb/auditor/workstation-field-reported-as-unknown)
-- [Duplicate Configuration and Schema Changes for All Monitored Domains in Forest Made by System](/docs/kb/auditor/duplicate-configuration-and-schema-changes-for-all-monitored-domains-in-forest-made-by-system).
-- [System Changed Service Principle Name Attribute](/docs/kb/auditor/system-changed-service-principle-name-attribute).
+- [Alert Reported Change Made by System](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/alert-reported-change-made-by-system).
+- [System Changed Object Path after Account Name Change](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-object-path-after-account-name-change).
+- [System Changed Client Operating System](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-client-operating-system).
+- [System Changed Directory Objects for Foreign Security Principals](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-directory-objects-for-foreign-security-principals).
+- [Workstation Field Reported as Unknown](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/workstation-field-reported-as-unknown)
+- [Duplicate Configuration and Schema Changes for All Monitored Domains in Forest Made by System](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/duplicate-configuration-and-schema-changes-for-all-monitored-domains-in-forest-made-by-system).
+- [System Changed Service Principle Name Attribute](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-service-principle-name-attribute).
 
 
 
diff --git a/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md
index 9dd7ad971e..a2b252fbe1 100644
--- a/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md
+++ b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md
@@ -22,7 +22,7 @@ knowledge_article_id: kA04u000000PoL7CAK
 
 # Reducing the Used Active Directory and Entra ID License Counts
 
-> **IMPORTANT:** Netwrix Auditor is licensed per enabled Active Directory (AD) and Entra ID user object. For additional information on determining the number of enabled users, refer to the following articles: [Determining the Number of Enabled Active Directory User Accounts](/docs/kb/auditor/determining-the-number-of-enabled-active-directory-user-accounts) — [Determining the Number of Enabled Microsoft Entra ID Accounts](/docs/kb/auditor/determining-the-number-of-enabled-microsoft-entra-id-accounts). Netwrix Auditor only collects data from objects that are not excluded (omitted), which means that any objects that are omitted will not be monitored.
+> **IMPORTANT:** Netwrix Auditor is licensed per enabled Active Directory (AD) and Entra ID user object. For additional information on determining the number of enabled users, refer to the following articles: [Determining the Number of Enabled Active Directory User Accounts](/docs/kb/auditor/configuration-and-setup/active-directory-auditing/determining-the-number-of-enabled-active-directory-user-accounts) — [Determining the Number of Enabled Microsoft Entra ID Accounts](/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/determining-the-number-of-enabled-microsoft-entra-id-accounts). Netwrix Auditor only collects data from objects that are not excluded (omitted), which means that any objects that are omitted will not be monitored.
 
 ## Question
 
diff --git a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/request-is-not-supported-windows-server-auditing.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/request-is-not-supported-windows-server-auditing.md
index bc1ab5e0ec..a48364756c 100644
--- a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/request-is-not-supported-windows-server-auditing.md
+++ b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/request-is-not-supported-windows-server-auditing.md
@@ -51,7 +51,7 @@ The request is not supported. (Exception from HRESULT: 0x80070032)
   - Refer to the list of protocols and ports required for Netwrix Auditor for Windows Server: Protocols and Ports — Windows Server.
   - Refer to the list of inbound connection rules to be configured: Windows Servers — Windows Firewall Inbound Connection Rules.
 
-- Review the recommended antivirus exclusions — refer to the following article for additional information: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor).
+- Review the recommended antivirus exclusions — refer to the following article for additional information: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor).
 
 - Review the gMSA configuration — refer to the following article for additional information: Data Collection Account — Group Managed Service Account (gMSA).
 
diff --git a/docs/kb/auditor/event-id-reference/health-log-events/event-id-1000-application-errors-in-netwrix-auditor-server.md b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1000-application-errors-in-netwrix-auditor-server.md
index c73e618292..4b10ff97b0 100644
--- a/docs/kb/auditor/event-id-reference/health-log-events/event-id-1000-application-errors-in-netwrix-auditor-server.md
+++ b/docs/kb/auditor/event-id-reference/health-log-events/event-id-1000-application-errors-in-netwrix-auditor-server.md
@@ -54,7 +54,7 @@ The **Faulting module name** dynamic-link library file was corrupted. This could
 
 ## Resolutions
 
-1. Set up antivirus exclusions to prevent both your antivirus solution and Netwrix Auditor from conflicting — refer to the following article for additional information: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+1. Set up antivirus exclusions to prevent both your antivirus solution and Netwrix Auditor from conflicting — refer to the following article for additional information: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 
 2. Establish the scope of affected `.dll` files. In case the **Faulting module path** links the system folder (e.g., `C:\Windows\System32`), follow these steps:
 
@@ -84,5 +84,5 @@ The **Faulting module name** dynamic-link library file was corrupted. This could
 
 ## Related articles
 
-- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 - [How to Repair Netwrix Auditor Installation](/docs/kb/auditor/configuration-and-setup/general-configuration/how-to-repair-netwrix-auditor-installation)
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/long-data-collection-improving-the-performance.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/long-data-collection-improving-the-performance.md
index 255ef614bf..902faeb6fb 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/long-data-collection-improving-the-performance.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/long-data-collection-improving-the-performance.md
@@ -60,7 +60,7 @@ Depending on your environment and needs, the Audit Database retention period can
 
 ### Exclude Netwrix-related folders from antivirus scans
 
-As Netwrix Auditor creates and writes audit data in smaller portions, your antivirus suite will attempt to check every new or edited file to complete the threat check. Full file reads might take extra time to complete, hindering the writing capability of Netwrix Auditor, in some cases leading to timeouts and additional RAM and CPU loads. Refer to the following article for additional information on folders to be excluded from regular antivirus checks: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+As Netwrix Auditor creates and writes audit data in smaller portions, your antivirus suite will attempt to check every new or edited file to complete the threat check. Full file reads might take extra time to complete, hindering the writing capability of Netwrix Auditor, in some cases leading to timeouts and additional RAM and CPU loads. Refer to the following article for additional information on folders to be excluded from regular antivirus checks: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 
 ### Set up data collection for State-in-Time reports
 
@@ -97,7 +97,7 @@ You can limit the monitoring scope in your environment via omit lists — this a
 - [Hardware Requirements](https://docs.netwrix.com/docs/auditor/10_8/requirements/console)
 - [Settings for Data Collection](https://docs.netwrix.com/docs/auditor/10_8/admin/monitoringplans/create#settings-for-data-collection)
 - [Configure Database Retention](https://docs.netwrix.com/docs/auditor/10_8/admin/settings/auditdatabase#configure-database-retention)
-- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 - [Manage Data Sources](https://docs.netwrix.com/docs/auditor/10_8/admin/monitoringplans/datasources)
 - [How to Exclude Users and Objects from Monitoring Scope in Netwrix Auditor UI](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-exclude-users-and-objects-from-monitoring-scope-in-netwrix-auditor-ui)
 - [How to Use Omit Lists](https://docs.netwrix.com/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists)
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-consumes-disk-space-recommendations.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-consumes-disk-space-recommendations.md
index cef7fb3313..560a8b07ab 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-consumes-disk-space-recommendations.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-consumes-disk-space-recommendations.md
@@ -74,6 +74,6 @@ The following recommendations will allow you to reduce disk space consumption:
 ## Related Articles
 
 - [Error: Netwrix Auditor for File Servers Audit Service Terminated Unexpectedly](/docs/kb/auditor/configuration-and-setup/file-server-auditing/error-netwrix-auditor-for-file-servers-audit-service-terminated-unexpectedly)
-- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 - [How to Add Additional Space to Long-Term Archive](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-add-additional-space-to-long-term-archive)
 - [Netwrix Auditor System Health Log Contains EventID 2002](https://docs.netwrix.com/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-health-log-contains-eventid-2002)
diff --git a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/service-did-not-respond-to-the-start-or-control-request-error-in-user-activity-service.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/service-did-not-respond-to-the-start-or-control-request-error-in-user-activity-service.md
index 7069d8f464..079a07752b 100644
--- a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/service-did-not-respond-to-the-start-or-control-request-error-in-user-activity-service.md
+++ b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/service-did-not-respond-to-the-start-or-control-request-error-in-user-activity-service.md
@@ -48,12 +48,12 @@ Refer to the following possible causes for the symptoms:
 
 Depending on the cause, implement the corresponding resolution to address the issue:
 
-1. Exclude Netwrix Auditor-related folders from the monitoring scope of your antivirus solution. Refer to the following article to learn more about recommended antivirus exclusions: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor).
+1. Exclude Netwrix Auditor-related folders from the monitoring scope of your antivirus solution. Refer to the following article to learn more about recommended antivirus exclusions: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor).
 2. Verify the open ports in both the target and Netwrix Auditor servers. Refer to the following article to learn more about the ports required for correct User Activity operation: Data Source Configuration − User Activity Ports · v10.6.
 3. Verify that the .NET Framework v4.8 is installed on both the target and Netwrix Auditor servers. Refer to the following article to learn more about software requirements in Netwrix Auditor v10.6: Requirements − Software Requirements · v10.6.
 
 ## Related Articles
 
-- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 - Data Source Configuration − User Activity Ports · v10.6
 - Requirements − Software Requirements · v10.6
diff --git a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md
index a7a55e010c..286ac5f636 100644
--- a/docs/kb/auditor/monitoring-plans/user-activity-monitoring/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md
+++ b/docs/kb/auditor/monitoring-plans/user-activity-monitoring/target-computer-cannot-be-identified-in-user-activity-monitoring-plan.md
@@ -47,7 +47,7 @@ Make sure that it is online and reachable, Remote Registry service is enabled.
 
 - Enable the Remote Registry service in the affected client — refer to the following article for additional information: Windows File Servers − Enable Remote Registry Service ⸱ v10.6.
 - Review the allowed connections in the affected server in accordance with the following article guidelines: User Activity − User Activity Ports ⸱ v10.6.
-- Exclude the Netwrix-related folders from the monitoring scope of your antivirus suite — refer to the following article for additional information: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor).
+- Exclude the Netwrix-related folders from the monitoring scope of your antivirus suite — refer to the following article for additional information: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor).
 - Enable the SMB v2/v3 protocol in both the client and server — learn more in [Detect, Enable and Disable SMBv1, SMBv2, and SMBv3 ⸱ Windows Learn](https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3?tabs=server#how-to-detect-status-enable-and-disable-smb-protocols).
 - Review the list of apps installed in the affected server. If User Activity Core Service is either missing or is outdated, refer to the following articles for additional information: Installation − Install for User Activity Core Service · v10.6 and [Manually Update User Activity Core Service](/docs/kb/auditor/monitoring-plans/user-activity-monitoring/manually-update-user-activity-core-service).
 
@@ -55,7 +55,7 @@ Make sure that it is online and reachable, Remote Registry service is enabled.
 
 - Windows File Servers − Enable Remote Registry Service ⸱ v10.6
 - User Activity − User Activity Ports ⸱ v10.6
-- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 - [Detect, Enable and Disable SMBv1, SMBv2, and SMBv3 ⸱ Windows Learn](https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3?tabs=server#how-to-detect-status-enable-and-disable-smb-protocols)
 - Installation − Install for User Activity Core Service · v10.6
 - [Manually Update User Activity Core Service](/docs/kb/auditor/monitoring-plans/user-activity-monitoring/manually-update-user-activity-core-service)
diff --git a/docs/kb/auditor/system-administration/migration-and-upgrade/netwrix-auditor-upgrade-process-taking-too-long.md b/docs/kb/auditor/system-administration/migration-and-upgrade/netwrix-auditor-upgrade-process-taking-too-long.md
index a402241821..63a38681cd 100644
--- a/docs/kb/auditor/system-administration/migration-and-upgrade/netwrix-auditor-upgrade-process-taking-too-long.md
+++ b/docs/kb/auditor/system-administration/migration-and-upgrade/netwrix-auditor-upgrade-process-taking-too-long.md
@@ -33,7 +33,7 @@ Depending on the version you're upgrading from and to, there could be major chan
 
 Refer to the following steps in case your upgrade process takes over 20 hours to complete:
 
-- Add corresponding exclusions to the monitoring scope of your antivirus suite — refer to the following article for additional information: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor).
+- Add corresponding exclusions to the monitoring scope of your antivirus suite — refer to the following article for additional information: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor).
 
 - Clear the temporary folder:
 
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-failed-to-load-registry-hive-file-is-used-by-another-process.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-failed-to-load-registry-hive-file-is-used-by-another-process.md
index 6f42919d47..312f3814e3 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-failed-to-load-registry-hive-file-is-used-by-another-process.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-failed-to-load-registry-hive-file-is-used-by-another-process.md
@@ -53,7 +53,7 @@ This issue may be caused by one or more of the following factors:
 
 Apply one or more of the following solutions to resolve this error:
 
-- Configure antivirus exclusions in your Netwrix Auditor environment. For details, see the following article: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+- Configure antivirus exclusions in your Netwrix Auditor environment. For details, see the following article: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 
 - Follow these steps if excluding Auditor-related folders did not resolve the issue:
 
@@ -89,4 +89,4 @@ Apply one or more of the following solutions to resolve this error:
 
 ## Related Article
 
-- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-memory-limit-is-reached.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-memory-limit-is-reached.md
index a9e715a5c0..29a42d158a 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-memory-limit-is-reached.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-memory-limit-is-reached.md
@@ -42,8 +42,8 @@ The default memory limit has been reached for the process.
 
 Increase the resource pool on your Netwrix Auditor server. Refer to the following article for additional information on hardware requirements for different deployment scenarios: [Hardware Requirements](https://docs.netwrix.com/docs/auditor/10_8/requirements/console).
 
-> **IMPORTANT:** Verify that the antivirus exclusions are in place on your Netwrix Auditor server. Review the following article for recommendations on antivirus exclusions in the Auditor environment: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor).
+> **IMPORTANT:** Verify that the antivirus exclusions are in place on your Netwrix Auditor server. Review the following article for recommendations on antivirus exclusions in the Auditor environment: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor).
 ## Related Articles
 
 - [Hardware Requirements](https://docs.netwrix.com/docs/auditor/10_8/requirements/console)
-- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-snapshot-saving-process-was-interrupted.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-snapshot-saving-process-was-interrupted.md
index 4f29d232b0..a495778465 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-snapshot-saving-process-was-interrupted.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-snapshot-saving-process-was-interrupted.md
@@ -41,8 +41,8 @@ An antivirus or EDR/XDR solution in your environment affects the operation of yo
 
 ## Resolution
 
-Add antivirus exclusions to both your Netwrix Auditor monitoring plan and to targets by referring to the following article: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor).
+Add antivirus exclusions to both your Netwrix Auditor monitoring plan and to targets by referring to the following article: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor).
 
 ## Related Articles
 
-- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-remote-procedure-call-failed.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-remote-procedure-call-failed.md
index 3af819e775..c7c0a2fa04 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-remote-procedure-call-failed.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-the-remote-procedure-call-failed.md
@@ -41,7 +41,7 @@ The "Remote procedure call failed" error can have a number of root causes such a
 Depending on the error cause, follow the resolution steps below:
 
 1. Make sure you have all required ports opened. For additional information on configuring ports for Netwrix Auditor, refer to the following article: [Protocols and Ports Required](https://docs.netwrix.com/docs/auditor/10_8/requirements/ports)
-2. Review your Antivirus exclusions. For additional information on required exclusions for your antivirus, refer to the following article: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+2. Review your Antivirus exclusions. For additional information on required exclusions for your antivirus, refer to the following article: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)
 3. If the issue occurs during Logon Activity data collection, try to follow the steps in these articles:
    - [System Cannot Find the Path Specified in Logon Activity Monitoring Plan](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/system-cannot-find-the-path-specified-in-logon-activity-monitoring-plan)
    - [Error: Size of Collected Data Files Exceeded Limit in Logon Activity Monitoring Plan](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-size-of-collected-data-files-exceeded-limit-in-logon-activity-monitoring-plan)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-investigate-compression-services-errors.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-investigate-compression-services-errors.md
index c3e90563c1..2a69d13984 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-investigate-compression-services-errors.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-investigate-compression-services-errors.md
@@ -42,4 +42,4 @@ In the Netwrix Auditor health log, some error events mention issues with the com
    - [Enable Remote Registry and Windows Management Instrumentation Services for Windows Server](https://docs.netwrix.com/docs/auditor/10_8/configuration/windowsserver/remoteregistry)
    - [Enable Remote Registry Services for File Server](https://docs.netwrix.com/docs/auditor/10_8/configuration/fileservers/windows/remoteregistryservice)
 5. Add antivirus exclusions on the Netwrix and target servers for folders:
-   - [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+   - [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)

From 3c64278168d5d40c6bb0bb54d392f71edc00027a Mon Sep 17 00:00:00 2001
From: Zoey Castillo <zoey.castillo@netwrix.com>
Date: Tue, 25 Nov 2025 10:38:41 -0600
Subject: [PATCH 07/10] Fix broken KB article internal cross-references with
 category paths
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Update links in Auditor KB articles to include full category paths in their URLs to ensure proper cross-reference navigation.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 ...-name-already-exists-in-file-server-monitoring-plan.md | 2 +-
 ...-file-servers-audit-service-terminated-unexpectedly.md | 2 +-
 .../how-to-get-full-netwrix-auditor-version.md            | 2 +-
 .../migrating-auditor-to-new-server.md                    | 2 +-
 .../glossaries-and-faqs/netwrix-auditor-licensing-faqs.md | 8 ++++----
 ...ection_service_crashes_after_upgrade_to_v10.7.13707.md | 2 +-
 .../upgrade-increments-for-netwrix-auditor.md             | 4 ++--
 ...ur_netwrix_auditor_version_cannot_be_upgraded_error.md | 2 +-
 ...ocess-item-error-when-using-gmsa-in-netwrix-auditor.md | 2 +-
 9 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/docs/kb/auditor/configuration-and-setup/file-server-auditing/child-item-with-this-name-already-exists-in-file-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/child-item-with-this-name-already-exists-in-file-server-monitoring-plan.md
index 874ecdf5e5..146721a6ac 100644
--- a/docs/kb/auditor/configuration-and-setup/file-server-auditing/child-item-with-this-name-already-exists-in-file-server-monitoring-plan.md
+++ b/docs/kb/auditor/configuration-and-setup/file-server-auditing/child-item-with-this-name-already-exists-in-file-server-monitoring-plan.md
@@ -42,7 +42,7 @@ The licensing data was corrupted.
 ## Resolution
 
 - In case you've encountered the issue after a recent upgrade, wait for 24 hours to see if the issue is resolved on its own.
-- Reapply the license file. Refer to the following article for additional information: [How to Apply Netwrix Auditor License](/docs/kb/auditor/how-to-apply-netwrix-auditor-license).
+- Reapply the license file. Refer to the following article for additional information: [How to Apply Netwrix Auditor License](/docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-netwrix-auditor-license).
 - In case reapplying the license did not help, contact [Netwrix Technical Support](https://www.netwrix.com/open_a_ticket.html).
 
 
diff --git a/docs/kb/auditor/configuration-and-setup/file-server-auditing/error-netwrix-auditor-for-file-servers-audit-service-terminated-unexpectedly.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/error-netwrix-auditor-for-file-servers-audit-service-terminated-unexpectedly.md
index 9eecd41259..b5b7b93a7f 100644
--- a/docs/kb/auditor/configuration-and-setup/file-server-auditing/error-netwrix-auditor-for-file-servers-audit-service-terminated-unexpectedly.md
+++ b/docs/kb/auditor/configuration-and-setup/file-server-auditing/error-netwrix-auditor-for-file-servers-audit-service-terminated-unexpectedly.md
@@ -59,7 +59,7 @@ If you are currently on a 10.5 version and build other than 10950, perform the p
 
 ## Related articles
 
-- [How to Upgrade Netwrix Auditor](/docs/kb/auditor/how-to-upgrade-netwrix-auditor)
+- [How to Upgrade Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-upgrade-netwrix-auditor)
 
 
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-get-full-netwrix-auditor-version.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-get-full-netwrix-auditor-version.md
index bc6eb2c047..ad38439d0b 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-get-full-netwrix-auditor-version.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-get-full-netwrix-auditor-version.md
@@ -34,4 +34,4 @@ A trial version and a full version of Netwrix Auditor are the same version of th
 
    - In case you already have Netwrix Auditor installed, apply you new license to the existing Auditor instance.
 
-Refer to the following article for additional information on applying a license to your Netwrix Auditor instance: [How to Apply Netwrix Auditor License](/docs/kb/auditor/how-to-apply-netwrix-auditor-license).
+Refer to the following article for additional information on applying a license to your Netwrix Auditor instance: [How to Apply Netwrix Auditor License](/docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-netwrix-auditor-license).
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md
index 118cfdf386..c0cb2b313c 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md
@@ -128,7 +128,7 @@ Run the following checks for your migrated Netwrix Auditor instance:
 - Run a search with blank parameters (an open search).
 - Run a report on a data source you are auditing.
 - Confirm your monitoring plans have carried over.
-- Apply the Auditor license. Refer to the following article for additional information:[How to Apply Netwrix Auditor License](/docs/kb/auditor/how-to-apply-netwrix-auditor-license)
+- Apply the Auditor license. Refer to the following article for additional information:[How to Apply Netwrix Auditor License](/docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-netwrix-auditor-license)
 
 > **IMPORTANT:** The SSL certificate previously used for Integration API will be missing from the certificate store in your new Netwrix Auditor server. Generate a new SSL certificate for Netwrix Auditor Integration API − refer to the following article for additional information: [Integration API](https://docs.netwrix.com/docs/auditor/10_8/api/overview)
 
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-licensing-faqs.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-licensing-faqs.md
index 93df3f0b00..d4620beb32 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-licensing-faqs.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/netwrix-auditor-licensing-faqs.md
@@ -59,7 +59,7 @@ Per server |
 | Netwrix Auditor for MS Teams | Per enabled Microsoft Entra ID user |
 
 ## How Can I Count Enabled AD Users?
-To count the number of licenses, you should provide the number of `enabled AD user accounts`, that is, calculate the number of your Active Directory user accounts in the Enabled state. Follow the instructions provided in this Netwrix Auditor Knowledge Base article: [Determining the Number of Enabled Active Directory User Accounts](/docs/kb/auditor/determining-the-number-of-enabled-active-directory-user-accounts). Then round up the calculation result to reserve some space for growth and to prevent scalability issues. For example:
+To count the number of licenses, you should provide the number of `enabled AD user accounts`, that is, calculate the number of your Active Directory user accounts in the Enabled state. Follow the instructions provided in this Netwrix Auditor Knowledge Base article: [Determining the Number of Enabled Active Directory User Accounts](/docs/kb/auditor/configuration-and-setup/active-directory-auditing/determining-the-number-of-enabled-active-directory-user-accounts). Then round up the calculation result to reserve some space for growth and to prevent scalability issues. For example:
 
 - If the calculation script returns 214, round up this value to 220 when applying for the license.
 - If the calculation script returns 1841, round up this value to 2000 when applying for the license.
@@ -79,7 +79,7 @@ Oracle defines the number of processor licenses as follows:
 “The number of required licenses shall be determined by multiplying the total number of cores of the processor by a core processor licensing factor specified on the Oracle Processor Core Factor Table.”
 
 If you are unsure how many Oracle processor licenses you have, check your processor type, find the corresponding factor in the [Oracle Processor Core Factor Table](http://www.oracle.com/us/corporate/contracts/processor-core-factor-table-070634.pdf), and multiply it by the number of CPU cores on your Oracle Database deployment.
-To obtain the `number of CPU cores`, go to the How to Count Number of CPU Cores on Your Oracle Database Deployment article: /docs/kb/auditor/how-to-count-number-of-cpu-cores-on-your-oracle-database-deployment.
+To obtain the `number of CPU cores`, go to the How to Count Number of CPU Cores on Your Oracle Database Deployment article: /docs/kb/auditor/system-administration/database-management/how-to-count-number-of-cpu-cores-on-your-oracle-database-deployment.
 
 ## What Should I Provide for Netwrix Auditor for Windows Server Licensing?
 Netwrix Auditor for Windows Server is licensed either by the number of enabled AD users or the total number of virtual and physical servers.
@@ -87,7 +87,7 @@ Refer to the questions above for more information on how to count the number of
 For per-server licensing, count and provide the total number of the servers (physical or virtual) you are going to monitor with Netwrix Auditor.
 
 ## What Should I Provide for Netwrix Auditor for Microsoft Entra ID Licensing?
-You should provide the number of `enabled Microsoft Entra ID user accounts`. Starting from version 9.96, guest/external users are not included in the license count. Follow the instructions outlined in the How to Determine the Count of Enabled Microsoft Entra ID Accounts article: /docs/kb/auditor/determining-the-number-of-enabled-microsoft-entra-id-accounts.
+You should provide the number of `enabled Microsoft Entra ID user accounts`. Starting from version 9.96, guest/external users are not included in the license count. Follow the instructions outlined in the How to Determine the Count of Enabled Microsoft Entra ID Accounts article: /docs/kb/auditor/configuration-and-setup/microsoft-365-integration/determining-the-number-of-enabled-microsoft-entra-id-accounts.
 
 You can use `omitUPNlist.txt` omit list to reduce user count by omitting certain user UPNs from being audited. You will not gain any information on these users; however, the amount of licenses will be reduced. For additional information on reducing the user count via Netwrix Auditor UI, refer to the following article: [Reducing the Used Active Directory and Entra ID License Counts](/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts). For additional information on omit lists, refer to the following article: [How to Use Omit Lists](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists).
 
@@ -139,7 +139,7 @@ Here:
 You may choose to no longer audit a data source, and thus not renew the license for the corresponding application. Unused licenses do not need to be removed from Netwrix Auditor, with the exception of one special case. This case is upgrading a Netwrix Auditor installation that has some expired licenses. Most recent (9.95 and up) versions of Netwrix Auditor allow you to remove a license directly from the user interface. If you have an older version of Netwrix Auditor and need to remove an expired license as it blocks your upgrade, contact Netwrix Technical Support.
 
 ## Related Articles
-- [Determining the Number of Enabled Active Directory User Accounts](/docs/kb/auditor/determining-the-number-of-enabled-active-directory-user-accounts)
+- [Determining the Number of Enabled Active Directory User Accounts](/docs/kb/auditor/configuration-and-setup/active-directory-auditing/determining-the-number-of-enabled-active-directory-user-accounts)
 - [Reducing the Used Active Directory and Entra ID License Counts](/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts)
 - [How to Use Omit Lists](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-use-omit-lists)
 - [How to count the number of your network devices in your configuration?](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-to-count-the-number-of-your-network-devices-in-your-configuration)
diff --git a/docs/kb/auditor/system-administration/migration-and-upgrade/netwrix_auditor_data_collection_service_crashes_after_upgrade_to_v10.7.13707.md b/docs/kb/auditor/system-administration/migration-and-upgrade/netwrix_auditor_data_collection_service_crashes_after_upgrade_to_v10.7.13707.md
index b6b49a0d57..5160d64e0c 100644
--- a/docs/kb/auditor/system-administration/migration-and-upgrade/netwrix_auditor_data_collection_service_crashes_after_upgrade_to_v10.7.13707.md
+++ b/docs/kb/auditor/system-administration/migration-and-upgrade/netwrix_auditor_data_collection_service_crashes_after_upgrade_to_v10.7.13707.md
@@ -41,4 +41,4 @@ Upgrade your Auditor instance to v10.7.13710 or later. Download the executable i
 ## Related Articles
 
 - [My Products · Netwrix](https://www.netwrix.com/my_products.html)
-- [How to Upgrade Netwrix Auditor](/docs/kb/auditor/how-to-upgrade-netwrix-auditor)
\ No newline at end of file
+- [How to Upgrade Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-upgrade-netwrix-auditor)
\ No newline at end of file
diff --git a/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor.md b/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor.md
index f74f434f00..1ba4a5391c 100644
--- a/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor.md
+++ b/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor.md
@@ -67,7 +67,7 @@ This will stop all Netwrix Services and prevent complications during the upgrade
 | 8.5 / 9.0      | 9.5            | Not recommended! |
 | 9.5            | 9.7            | [Download](https://www.netwrix.com/my_products.html) |
 | 9.7 / 9.8      | 9.9            | [Download](https://www.netwrix.com/my_products.html) |
-| 9.9            | 9.96           | [Download](https://www.netwrix.com/my_products.html)<br />Refer to the following article for additional information:<br /> [Upgrade from 9.9 to 9.96 with Your Netwrix Auditor Version Cannot Be Upgraded Error](/docs/kb/auditor/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error)|
+| 9.9            | 9.96           | [Download](https://www.netwrix.com/my_products.html)<br />Refer to the following article for additional information:<br /> [Upgrade from 9.9 to 9.96 with Your Netwrix Auditor Version Cannot Be Upgraded Error](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error)|
 | 9.96 / 10.0    | 10.5           | [Download](https://www.netwrix.com/my_products.html) |
 | 10 / 10.5      | 10.6           | [Download](https://www.netwrix.com/my_products.html) |
 | 10.5 / 10.6    | 10.7           | [Download](https://www.netwrix.com/my_products.html) |
@@ -75,4 +75,4 @@ This will stop all Netwrix Services and prevent complications during the upgrade
 
 ### Related articles
 
-[How to Upgrade Netwrix Auditor](/docs/kb/auditor/how-to-upgrade-netwrix-auditor)
+[How to Upgrade Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-upgrade-netwrix-auditor)
diff --git a/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md b/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md
index b43e24b213..974a89cc33 100644
--- a/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md
+++ b/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade_from_9.9_to_9.96_with_your_netwrix_auditor_version_cannot_be_upgraded_error.md
@@ -36,4 +36,4 @@ To upgrade to v9.96, contact Technical Support for download links for the latest
 ## Related Articles
 
 - [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor)
-- [How to Upgrade Netwrix Auditor](/docs/kb/auditor/how-to-upgrade-netwrix-auditor)
\ No newline at end of file
+- [How to Upgrade Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-upgrade-netwrix-auditor)
\ No newline at end of file
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md
index a9a09ecced..04372cbc55 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/unable-to-process-item-error-when-using-gmsa-in-netwrix-auditor.md
@@ -41,4 +41,4 @@ In Netwrix Auditor version 9.96 group managed service accounts can be used inste
 
 ## Solution
 
-For the pre-10.5.11041 Netwrix Auditor version, make sure to update your Netwrix Auditor instance — refer to the following articles for additional information: [How to Upgrade Netwrix Auditor](/docs/kb/auditor/how-to-upgrade-netwrix-auditor) and [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor)
+For the pre-10.5.11041 Netwrix Auditor version, make sure to update your Netwrix Auditor instance — refer to the following articles for additional information: [How to Upgrade Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/how-to-upgrade-netwrix-auditor) and [Upgrade Increments for Netwrix Auditor](/docs/kb/auditor/system-administration/migration-and-upgrade/upgrade-increments-for-netwrix-auditor)

From 3fc530db1fc2001dbe0104e967f33be4224dc654 Mon Sep 17 00:00:00 2001
From: Zoey Castillo <zoey.castillo@netwrix.com>
Date: Tue, 25 Nov 2025 10:39:43 -0600
Subject: [PATCH 08/10] Fix broken KB article link in subscriptions error
 article
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Update link to SSL/TLS channel setup article with full category path.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 ...cedure_\342\200\224_subscriptions_error_in_netwrix_aud.md" | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git "a/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/remote_certificate_is_invalid_according_to_validation_procedure_\342\200\224_subscriptions_error_in_netwrix_aud.md" "b/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/remote_certificate_is_invalid_according_to_validation_procedure_\342\200\224_subscriptions_error_in_netwrix_aud.md"
index 2ce524ddaf..f6fa29f35d 100644
--- "a/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/remote_certificate_is_invalid_according_to_validation_procedure_\342\200\224_subscriptions_error_in_netwrix_aud.md"
+++ "b/docs/kb/auditor/reports-alerts-and-notifications/subscriptions-and-distribution/remote_certificate_is_invalid_according_to_validation_procedure_\342\200\224_subscriptions_error_in_netwrix_aud.md"
@@ -36,7 +36,7 @@ Error: The remote certificate is invalid according to the validation procedure.
 If enforced certificate validation is intended, refer to the following steps to troubleshoot the issue:
 
 - Ensure your SSL certificate is still valid. Netwrix Auditor stops generating reports once your certificate expires. In case you’re using a self-signed certificate in your environment, you can reboot your Netwrix Auditor server to reissue the certificate.
-- If you would like to set up a secure connection between your Netwrix Auditor instance and SQL Server Reporting Services, refer to the following article for additional information: [Set Up Secure Connection Between Auditor and SSRS via SSL/TLS Channel](/docs/kb/auditor/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel).
+- If you would like to set up a secure connection between your Netwrix Auditor instance and SQL Server Reporting Services, refer to the following article for additional information: [Set Up Secure Connection Between Auditor and SSRS via SSL/TLS Channel](/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel).
 - Make sure the FQDN of your SMTP server is stated instead of the IP address in **Netwrix Auditor settings** > **Notifications**.
 
 If certificate validation was not intended, refer to the following steps:
@@ -47,4 +47,4 @@ If certificate validation was not intended, refer to the following steps:
 
 ### Related Articles
 
-[Set Up Secure Connection Between Auditor and SSRS via SSL/TLS Channel](/docs/kb/auditor/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel)
\ No newline at end of file
+[Set Up Secure Connection Between Auditor and SSRS via SSL/TLS Channel](/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel)
\ No newline at end of file

From c91c25d7d2a203dc16f5521ed226fd1a1a3b8cba Mon Sep 17 00:00:00 2001
From: Zoey Castillo <zoey.castillo@netwrix.com>
Date: Tue, 25 Nov 2025 10:58:56 -0600
Subject: [PATCH 09/10] Fix all broken KB article internal cross-references
 with correct category paths
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Update all remaining KB article links to include proper category paths for cross-references across Auditor, Data Classification, and General KB sections.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 ...and-group-policy-changes-reported-as-made-by-system.md | 4 ++--
 ...e-used-active-directory-and-entra-id-license-counts.md | 4 ++--
 ...ection-to-a-windows-file-server-compression-service.md | 2 +-
 ...at-is-sessionid-in-netwrix-auditor-for-file-servers.md | 2 +-
 .../troubleshoot_sharepoint_serveron-premise_errors.md    | 2 +-
 ...te-sspi-context-error-in-sql-server-monitoring-plan.md | 4 ++--
 ...your-sql-server-settings-in-audit-database-settings.md | 4 ++--
 ...an-internal-error-in-windows-server-monitoring-plan.md | 4 ++--
 ...ure_channel_error_in_windows_server_monitoring_plan.md | 4 ++--
 .../migrating-auditor-to-new-server.md                    | 4 ++--
 ...led-to-deliver-netwrix-auditor-health-summary-email.md | 2 +-
 .../error-could-not-connect-to-server.md                  | 8 ++++----
 .../\321\201onnection_issue_when_tls_1.2_is_required.md"  | 2 +-
 .../dataclassification/classification-troubleshooting.md  | 2 +-
 ...-6103-suggests-contacting-netwrix-technical-support.md | 4 ++--
 15 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md
index 3c954d868a..6c88b19e51 100644
--- a/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md
+++ b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/active-directory-exchange-and-group-policy-changes-reported-as-made-by-system.md
@@ -24,11 +24,11 @@ knowledge_article_id: kA00g000000H9SmCAK
 
 This article contains references to the most popular Active Directory, Exchange, and Group Policy changes which may be reported as made by **System** by Netwrix Auditor:
 
-- [Alert Reported Change Made by System](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/alert-reported-change-made-by-system).
+- [Alert Reported Change Made by System](/docs/kb/auditor/reports-alerts-and-notifications/report-generation/alert-reported-change-made-by-system).
 - [System Changed Object Path after Account Name Change](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-object-path-after-account-name-change).
 - [System Changed Client Operating System](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-client-operating-system).
 - [System Changed Directory Objects for Foreign Security Principals](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-directory-objects-for-foreign-security-principals).
-- [Workstation Field Reported as Unknown](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/workstation-field-reported-as-unknown)
+- [Workstation Field Reported as Unknown](/docs/kb/auditor/reports-alerts-and-notifications/report-generation/workstation-field-reported-as-unknown)
 - [Duplicate Configuration and Schema Changes for All Monitored Domains in Forest Made by System](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/duplicate-configuration-and-schema-changes-for-all-monitored-domains-in-forest-made-by-system).
 - [System Changed Service Principle Name Attribute](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/system-changed-service-principle-name-attribute).
 
diff --git a/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md
index a2b252fbe1..5754036e7b 100644
--- a/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md
+++ b/docs/kb/auditor/configuration-and-setup/active-directory-auditing/reducing-the-used-active-directory-and-entra-id-license-counts.md
@@ -95,7 +95,7 @@ To exclude specific Entra ID users from the license count, populate the `omitUPN
 
 ## Related Links
 
-- [Determining the Number of Enabled Active Directory User Accounts](/docs/kb/auditor/determining-the-number-of-enabled-active-directory-user-accounts)
-- [Determining the Number of Enabled Microsoft Entra ID Accounts](/docs/kb/auditor/determining-the-number-of-enabled-microsoft-entra-id-accounts)
+- [Determining the Number of Enabled Active Directory User Accounts](/docs/kb/auditor/configuration-and-setup/active-directory-auditing/determining-the-number-of-enabled-active-directory-user-accounts)
+- [Determining the Number of Enabled Microsoft Entra ID Accounts](/docs/kb/auditor/configuration-and-setup/microsoft-365-integration/determining-the-number-of-enabled-microsoft-entra-id-accounts)
 - [Active Directory Monitoring Scope](https://docs.netwrix.com/docs/auditor/10_8)
 - [Microsoft Entra ID Monitoring Scope](https://docs.netwrix.com/docs/auditor/10_8)
diff --git a/docs/kb/auditor/configuration-and-setup/file-server-auditing/cannot-establish-a-connection-to-a-windows-file-server-compression-service.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/cannot-establish-a-connection-to-a-windows-file-server-compression-service.md
index 9f253f910f..fc35308577 100644
--- a/docs/kb/auditor/configuration-and-setup/file-server-auditing/cannot-establish-a-connection-to-a-windows-file-server-compression-service.md
+++ b/docs/kb/auditor/configuration-and-setup/file-server-auditing/cannot-establish-a-connection-to-a-windows-file-server-compression-service.md
@@ -47,7 +47,7 @@ After that, the **Netwrix Auditor Application Deployment Service** appears on th
 
 ### Related Articles
 
-- [How to Investigate Compression Services Errors](/docs/kb/auditor/how-to-investigate-compression-services-errors)
+- [How to Investigate Compression Services Errors](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/how-to-investigate-compression-services-errors)
 - [Windows File Servers — Enable Remote Registry Service — v10.8.](https://docs.netwrix.com/docs/auditor/10_8/configuration/fileservers/windows/remoteregistryservice)
 
 
diff --git a/docs/kb/auditor/configuration-and-setup/file-server-auditing/what-is-sessionid-in-netwrix-auditor-for-file-servers.md b/docs/kb/auditor/configuration-and-setup/file-server-auditing/what-is-sessionid-in-netwrix-auditor-for-file-servers.md
index 8a0c895fe1..e4541cf9ba 100644
--- a/docs/kb/auditor/configuration-and-setup/file-server-auditing/what-is-sessionid-in-netwrix-auditor-for-file-servers.md
+++ b/docs/kb/auditor/configuration-and-setup/file-server-auditing/what-is-sessionid-in-netwrix-auditor-for-file-servers.md
@@ -43,7 +43,7 @@ Since the product associates Session IDs with the current session of the user, t
 
 ### Related Article
 
-- [How Does Merging Logon Activity Events Work?](/docs/kb/auditor/how-does-merging-logon-activity-events-work)
+- [How Does Merging Logon Activity Events Work?](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/how-does-merging-logon-activity-events-work)
 
 
 
diff --git a/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/troubleshoot_sharepoint_serveron-premise_errors.md b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/troubleshoot_sharepoint_serveron-premise_errors.md
index 2361b09397..116534d8b1 100644
--- a/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/troubleshoot_sharepoint_serveron-premise_errors.md
+++ b/docs/kb/auditor/configuration-and-setup/sharepoint-and-teams-auditing/troubleshoot_sharepoint_serveron-premise_errors.md
@@ -33,7 +33,7 @@ This is a reference list of articles on troubleshooting errors in SharePoint Ser
 - [Event ID 1223 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1223-in-health-log)
 - [Event ID 1225 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1225-in-health-log)
 - [Event ID 1236 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1236-in-health-log)
-- [Event ID 1237/1238 in Health Log](/docs/kb/auditor/event_id_12371238_in_health_log)
+- [Event ID 1237/1238 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event_id_12371238_in_health_log)
 - [Event ID 1239 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1239-in-health-log)
 - [Event ID 1240 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1240-in-health-log)
 - [Event ID 1241 in Health Log](/docs/kb/auditor/event-id-reference/health-log-events/event-id-1241-in-health-log)
diff --git a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md
index 05313949ab..8c924fa536 100644
--- a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md
+++ b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/cannot-generate-sspi-context-error-in-sql-server-monitoring-plan.md
@@ -98,7 +98,7 @@ If you are unable to resolve the issue with SPN registration, and if your scenar
 
 ### Cause #3 – Different TLS Protocol Versions
 
-Allow the operating systems to select the protocol for incoming and outgoing communication on both your Netwrix Auditor and SQL servers. For more information, see Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm: [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm)
+Allow the operating systems to select the protocol for incoming and outgoing communication on both your Netwrix Auditor and SQL servers. For more information, see Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm: [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm)
 
 ### Cause #4 – SQL and Netwrix Auditor Servers Time Difference
 
@@ -109,7 +109,7 @@ Synchronize the time on both SQL and Netwrix Auditor servers to eliminate clock
 - [SQL Server Ports](https://docs.netwrix.com/docs/auditor/10_8/configuration/sqlserver/ports)
 - Cannot Generate SSPI Context – Fix the Error with Kerberos Configuration Manager · Microsoft: https://learn.microsoft.com/en-US/troubleshoot/sql/database-engine/connect/cannot-generate-sspi-context-error#fix-the-error-with-kerberos-configuration-manager-recommended
 - Register Service Principal Name for Kerberos Connections – Automatic SPN Registration · Microsoft: https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/register-a-service-principal-name-for-kerberos-connections?view=sql-server-ver16#Auto
-- [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm)
+- [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm)
 - [Clock Skew Is Too Great](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/clock-skew-is-too-great)
 
 
diff --git a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/error-check-your-sql-server-settings-in-audit-database-settings.md b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/error-check-your-sql-server-settings-in-audit-database-settings.md
index d9a8e8d669..ed38c00aa8 100644
--- a/docs/kb/auditor/configuration-and-setup/sql-server-auditing/error-check-your-sql-server-settings-in-audit-database-settings.md
+++ b/docs/kb/auditor/configuration-and-setup/sql-server-auditing/error-check-your-sql-server-settings-in-audit-database-settings.md
@@ -56,7 +56,7 @@ Refer to the list of possible causes for the error:
 2. Configure your SQL Server instance to allow remote connections. Learn more in [Configure remote access (server configuration option) — Use SQL Server Management Studio ⸱ Microsoft 🧩](https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/configure-the-remote-access-server-configuration-option?view=sql-server-ver16#SSMSProcedure).
 3. Enable the TCP/IP protocol in the SQL Server—refer to the following article for additional information: Enable TCP/IP Protocol in SQL Server.
 
-> **NOTE:** Alternatively, review the TCP port used for SQL Server communication—learn more in [Configure SQL Server to listen on a specific TCP port — Assign a TCP/IP port number to the SQL Server Database Engine ⸱ Microsoft 🧩](https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/configure-a-server-to-listen-on-a-specific-tcp-port?view=sql-server-ver15#assign-a-tcpip-port-number-to-the-sql-server-database-engine). For additional information on setting a custom TCP port in Netwrix Auditor, refer to the following article: [Specify Custom SQL Server Port for Netwrix Auditor Audit Database](/docs/kb/auditor/specify-custom-sql-server-port-for-netwrix-auditor-audit-database).
+> **NOTE:** Alternatively, review the TCP port used for SQL Server communication—learn more in [Configure SQL Server to listen on a specific TCP port — Assign a TCP/IP port number to the SQL Server Database Engine ⸱ Microsoft 🧩](https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/configure-a-server-to-listen-on-a-specific-tcp-port?view=sql-server-ver15#assign-a-tcpip-port-number-to-the-sql-server-database-engine). For additional information on setting a custom TCP port in Netwrix Auditor, refer to the following article: [Specify Custom SQL Server Port for Netwrix Auditor Audit Database](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/specify-custom-sql-server-port-for-netwrix-auditor-audit-database).
 
 ## Related Articles
 
@@ -64,7 +64,7 @@ Refer to the list of possible causes for the error:
 - [Configure remote access (server configuration option) — Use SQL Server Management Studio ⸱ Microsoft 🧩](https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/configure-the-remote-access-server-configuration-option?view=sql-server-ver16#SSMSProcedure)
 - Enable TCP/IP Protocol in SQL Server
 - [Configure SQL Server to listen on a specific TCP port — Assign a TCP/IP port number to the SQL Server Database Engine ⸱ Microsoft 🧩](https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/configure-a-server-to-listen-on-a-specific-tcp-port?view=sql-server-ver15#assign-a-tcpip-port-number-to-the-sql-server-database-engine)
-- [Specify Custom SQL Server Port for Netwrix Auditor Audit Database](/docs/kb/auditor/specify-custom-sql-server-port-for-netwrix-auditor-audit-database)
+- [Specify Custom SQL Server Port for Netwrix Auditor Audit Database](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/specify-custom-sql-server-port-for-netwrix-auditor-audit-database)
 
 
 
diff --git a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/compression-service-encountered-an-internal-error-in-windows-server-monitoring-plan.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/compression-service-encountered-an-internal-error-in-windows-server-monitoring-plan.md
index 1ccf2507f4..afcbce447c 100644
--- a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/compression-service-encountered-an-internal-error-in-windows-server-monitoring-plan.md
+++ b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/compression-service-encountered-an-internal-error-in-windows-server-monitoring-plan.md
@@ -107,5 +107,5 @@ The Windows Server Auditing host and compression service cannot operate due to d
 
 ## Related articles
 
-- [Сonnection Issue when TLS 1.2 Is Required](/docs/kb/auditor/сonnection_issue_when_tls_1.2_is_required)
-- [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm)
+- [Сonnection Issue when TLS 1.2 Is Required](/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/сonnection_issue_when_tls_1.2_is_required)
+- [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm)
diff --git a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/could_not_create_ssltls_secure_channel_error_in_windows_server_monitoring_plan.md b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/could_not_create_ssltls_secure_channel_error_in_windows_server_monitoring_plan.md
index c9c0f5fdec..ad02bba0ce 100644
--- a/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/could_not_create_ssltls_secure_channel_error_in_windows_server_monitoring_plan.md
+++ b/docs/kb/auditor/configuration-and-setup/windows-server-monitoring/could_not_create_ssltls_secure_channel_error_in_windows_server_monitoring_plan.md
@@ -36,7 +36,7 @@ products:
 ## Resolutions
 
 - Enable TLS 1.2 in your environment − refer to the following article for additional information: Connection Issue when TLS 1.2 Is Required.
-- In case TLS protocol versions are limited to specific versions in your environment, make sure to allow the operating system to select the protocol for incoming and outgoing communication. Refer to the following article for additional information: [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm).
+- In case TLS protocol versions are limited to specific versions in your environment, make sure to allow the operating system to select the protocol for incoming and outgoing communication. Refer to the following article for additional information: [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm).
 - Review the certificate used for Windows Server auditing:
   1. In the Netwrix Auditor server, either press **Win + R** or launch the **Run** command window.
   2. In the **Run** command window, type `mmc` and press **OK**. Select **Yes** in the following prompt.
@@ -52,4 +52,4 @@ products:
 ## Related Articles
 
 - Connection Issue when TLS 1.2 Is Required
-- [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm)
\ No newline at end of file
+- [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm)
\ No newline at end of file
diff --git a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md
index c0cb2b313c..0f4a01850c 100644
--- a/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md
+++ b/docs/kb/auditor/features-and-operations/glossaries-and-faqs/migrating-auditor-to-new-server.md
@@ -128,7 +128,7 @@ Run the following checks for your migrated Netwrix Auditor instance:
 - Run a search with blank parameters (an open search).
 - Run a report on a data source you are auditing.
 - Confirm your monitoring plans have carried over.
-- Apply the Auditor license. Refer to the following article for additional information:[How to Apply Netwrix Auditor License](/docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-netwrix-auditor-license)
+- Apply the Auditor license. Refer to the following article for additional information: [How to Apply Netwrix Auditor License](/docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-netwrix-auditor-license)
 
 > **IMPORTANT:** The SSL certificate previously used for Integration API will be missing from the certificate store in your new Netwrix Auditor server. Generate a new SSL certificate for Netwrix Auditor Integration API − refer to the following article for additional information: [Integration API](https://docs.netwrix.com/docs/auditor/10_8/api/overview)
 
@@ -144,6 +144,6 @@ Monitor the system over the next few days to confirm the migration has been comp
 - [Requirements for SQL Server to Store Audit Data](https://docs.netwrix.com/docs/auditor/10_8/requirements/sqlserver)
 [Integration API](https://docs.netwrix.com/docs/auditor/10_8/api/overview)
 - [Specified Logon Session Does Not Exist Error in Netwrix Auditor](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/specified-logon-session-does-not-exist-error-in-netwrix-auditor)
-- [How to Apply Netwrix Auditor License](/docs/kb/auditor/how-to-apply-netwrix-auditor-license)
+- [How to Apply Netwrix Auditor License](/docs/kb/auditor/system-administration/licensing-and-compliance/how-to-apply-netwrix-auditor-license)
 - [Migrate PEN to a Different Server](/docs/kb/auditor/monitoring-plans/password-expiration-notifier/migrate-netwrix-password-expiration-notifier-to-a-different-server)
 - [How to Migrate Netwrix Inactive Users Tracker to Other Servers](/docs/kb/auditor/monitoring-plans/user-activity-monitoring/how-to-migrate-netwrix-inactive-users-tracker-to-other-servers)
diff --git a/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/ssl-exception-failed-to-deliver-netwrix-auditor-health-summary-email.md b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/ssl-exception-failed-to-deliver-netwrix-auditor-health-summary-email.md
index 9a5fefb87f..0ddb0f1e06 100644
--- a/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/ssl-exception-failed-to-deliver-netwrix-auditor-health-summary-email.md
+++ b/docs/kb/auditor/reports-alerts-and-notifications/email-notifications/ssl-exception-failed-to-deliver-netwrix-auditor-health-summary-email.md
@@ -36,4 +36,4 @@ Your TLS\SSL certificate has expired — Netwrix Auditor stops generating report
 
 ## Resolution
 
-To establish whether your certificate has expired, check the Microsoft Management Console (MMC) Certificates Snap-in (your certificate store). For additional information on setting up the SSL\TLS channel communication, refer to the following article: [Set Up Secure Connection Between Auditor and SSRS via SSL/TLS Channel](/docs/kb/auditor/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel)
+To establish whether your certificate has expired, check the Microsoft Management Console (MMC) Certificates Snap-in (your certificate store). For additional information on setting up the SSL\TLS channel communication, refer to the following article: [Set Up Secure Connection Between Auditor and SSRS via SSL/TLS Channel](/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/set_up_secure_connection_between_auditor_and_ssrs_via_ssltls_channel)
diff --git a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-could-not-connect-to-server.md b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-could-not-connect-to-server.md
index 4c912a1c7a..7c59cb3345 100644
--- a/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-could-not-connect-to-server.md
+++ b/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/error-could-not-connect-to-server.md
@@ -52,14 +52,14 @@ Refer to the list of possible causes for the error:
 
 1. Verify the SQL Server instance name specified in the Audit Database settings. Refer to the following article for additional information:[Specifying the SQL Server Instance Name](https://docs.netwrix.com/docs/auditor/10_8/admin/settings/auditdatabase)
 2. Configure your SQL Server instance to allow remote connections. Learn more in Microsoft's documentation: [Configure remote access (server configuration option) — Use SQL Server Management Studio ⸱ Microsoft](https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/configure-the-remote-access-server-configuration-option?view=sql-server-ver16#SSMSProcedure)
-3. Enable the TCP/IP protocol in the SQL Server—refer to the following article for additional information: [Enable TCP/IP Protocol in SQL Server](/docs/kb/auditor/enable_tcpip_protocol_in_sql_server)
+3. Enable the TCP/IP protocol in the SQL Server—refer to the following article for additional information: [Enable TCP/IP Protocol in SQL Server](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/enable_tcpip_protocol_in_sql_server)
 
-> **NOTE:** Alternatively, review the TCP port used for SQL Server communication—learn more in Microsoft's documentation: [Configure SQL Server to listen on a specific TCP port — Assign a TCP/IP port number to the SQL Server Database Engine ⸱ Microsoft](https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/configure-a-server-to-listen-on-a-specific-tcp-port?view=sql-server-ver15#assign-a-tcpip-port-number-to-the-sql-server-database-engine). For additional information on setting a custom TCP port in Netwrix Auditor, refer to the following article: [Specify Custom SQL Server Port for Netwrix Auditor Audit Database](/docs/kb/auditor/specify-custom-sql-server-port-for-netwrix-auditor-audit-database).
+> **NOTE:** Alternatively, review the TCP port used for SQL Server communication—learn more in Microsoft's documentation: [Configure SQL Server to listen on a specific TCP port — Assign a TCP/IP port number to the SQL Server Database Engine ⸱ Microsoft](https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/configure-a-server-to-listen-on-a-specific-tcp-port?view=sql-server-ver15#assign-a-tcpip-port-number-to-the-sql-server-database-engine). For additional information on setting a custom TCP port in Netwrix Auditor, refer to the following article: [Specify Custom SQL Server Port for Netwrix Auditor Audit Database](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/specify-custom-sql-server-port-for-netwrix-auditor-audit-database).
 
 ## Related Articles
 
 - [Specifying the SQL Server Instance Name](https://docs.netwrix.com/docs/auditor/10_8/admin/settings/auditdatabase)
 - [Configure remote access (server configuration option) — Use SQL Server Management Studio ⸱ Microsoft](https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/configure-the-remote-access-server-configuration-option?view=sql-server-ver16#SSMSProcedure)
-- [Enable TCP/IP Protocol in SQL Server](/docs/kb/auditor/enable_tcpip_protocol_in_sql_server)
+- [Enable TCP/IP Protocol in SQL Server](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/enable_tcpip_protocol_in_sql_server)
 - [Configure SQL Server to listen on a specific TCP port — Assign a TCP/IP port number to the SQL Server Database Engine ⸱ Microsoft](https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/configure-a-server-to-listen-on-a-specific-tcp-port?view=sql-server-ver15#assign-a-tcpip-port-number-to-the-sql-server-database-engine)
-- [Specify Custom SQL Server Port for Netwrix Auditor Audit Database](/docs/kb/auditor/specify-custom-sql-server-port-for-netwrix-auditor-audit-database)
+- [Specify Custom SQL Server Port for Netwrix Auditor Audit Database](/docs/kb/auditor/configuration-and-setup/sql-server-auditing/specify-custom-sql-server-port-for-netwrix-auditor-audit-database)
diff --git "a/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/\321\201onnection_issue_when_tls_1.2_is_required.md" "b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/\321\201onnection_issue_when_tls_1.2_is_required.md"
index 510ed82fee..750620b57d 100644
--- "a/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/\321\201onnection_issue_when_tls_1.2_is_required.md"
+++ "b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/\321\201onnection_issue_when_tls_1.2_is_required.md"
@@ -23,7 +23,7 @@ How to set up connections between the internal environment and Microsoft (Office
 
 ### Option 1: For Up-to-Date Environments
 
-For up-to-date environments, refer to the following KB article for additional information: [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm). You can also use this registry key to achieve the same results: [TLS Registry Key](https://netwrix.com/download/products/KnowledgeBase/TLSRegkey.reg).
+For up-to-date environments, refer to the following KB article for additional information: [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm). You can also use this registry key to achieve the same results: [TLS Registry Key](https://netwrix.com/download/products/KnowledgeBase/TLSRegkey.reg).
 
 ### Option 2: For Pre-Windows Server 2019 Environments and Earlier
 
diff --git a/docs/kb/dataclassification/classification-troubleshooting.md b/docs/kb/dataclassification/classification-troubleshooting.md
index 2f1fd95db0..5a269233c1 100644
--- a/docs/kb/dataclassification/classification-troubleshooting.md
+++ b/docs/kb/dataclassification/classification-troubleshooting.md
@@ -35,7 +35,7 @@ Identify a document with incorrect classifications:
 Go to the workflow logs (`https://[YourNDCServerName]/NDC/Workflows/Logs`) on your Netwrix Data Classification server and check the status:
 
 - If it's **negative**, then there was an error. Enable collector tracing and reindex the file, then view the event logs for details of the issue. You will usually see either the `PageID`, `PageURL`, or both in the logs to know which errors are related.
-- If it's less than 400, it means that it is not classified and needs to finish processing first. Verify codes in the [NDC Page Status Codes](/docs/kb/auditor/ndc-page-status-codes)  article.
+- If it's less than 400, it means that it is not classified and needs to finish processing first. Verify codes in the [NDC Page Status Codes](/docs/kb/auditor/features-and-operations/glossaries-and-faqs/ndc-page-status-codes)  article.
 - If the status is **Classified (400)** and the **ReindexStatus** is 3, then it means it hasn't been reindexed or reclassified. This means that a change was detected or the user manually requested reprocessing. Give Netwrix Data Classification time to reprocess the document.
 - If the status is 400 and the reindex status is 0, check the **Text** and **Metadata** tabs. This is an easy way to confirm issues where Optical Character Recognition (OCR) has failed to extract the text you're looking for or if there was an issue processing text extraction for the document. If it doesn't match, enable collector tracing and reindex the document for details in the logs.
 
diff --git a/docs/kb/general/netwrix-auditor-health-log-error-event-id-6103-suggests-contacting-netwrix-technical-support.md b/docs/kb/general/netwrix-auditor-health-log-error-event-id-6103-suggests-contacting-netwrix-technical-support.md
index 9f2924adfd..60046a1610 100644
--- a/docs/kb/general/netwrix-auditor-health-log-error-event-id-6103-suggests-contacting-netwrix-technical-support.md
+++ b/docs/kb/general/netwrix-auditor-health-log-error-event-id-6103-suggests-contacting-netwrix-technical-support.md
@@ -46,8 +46,8 @@ An antivirus or EDR/XDR solution in your environment affects the operation of yo
 
 ## Resolution
 
-Add antivirus exclusions to both your Netwrix Auditor monitoring plan and to targets by referring to the following article: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor).
+Add antivirus exclusions to both your Netwrix Auditor monitoring plan and to targets by referring to the following article: [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor).
 
 ## Related Articles
 
-- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/antivirus-exclusions-for-netwrix-auditor)
+- [Antivirus Exclusions for Netwrix Auditor](/docs/kb/auditor/system-administration/security-hardening/antivirus-exclusions-for-netwrix-auditor)

From 3d12cbb46c5146b52489cf3732cf7dd51c342c71 Mon Sep 17 00:00:00 2001
From: Zoey Castillo <zoey.castillo@netwrix.com>
Date: Tue, 25 Nov 2025 11:10:04 -0600
Subject: [PATCH 10/10] Fix remaining broken link in TLS 1.2 connection issue
 article
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Update the second reference to client-and-server-cannot-communicate article with proper category path in related articles section.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 .../\321\201onnection_issue_when_tls_1.2_is_required.md"        | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git "a/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/\321\201onnection_issue_when_tls_1.2_is_required.md" "b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/\321\201onnection_issue_when_tls_1.2_is_required.md"
index 750620b57d..b9886c2287 100644
--- "a/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/\321\201onnection_issue_when_tls_1.2_is_required.md"
+++ "b/docs/kb/auditor/troubleshooting-and-errors/ssl-tls-certificate-issues/\321\201onnection_issue_when_tls_1.2_is_required.md"
@@ -108,7 +108,7 @@ For 32-bit applications that are running on 64-bit OSs, update the following sub
 
 ### Related Articles
 
-- [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm)
+- [Client and Server Cannot Communicate, Because They Do Not Possess a Common Algorithm](/docs/kb/auditor/troubleshooting-and-errors/data-collection-errors/client-and-server-cannot-communicate-because-they-do-not-possess-a-common-algorithm)
 
 - [How to enable TLS 1.2 on clients ⸱ Microsoft 🡥](https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/security/enable-tls-1-2-client)