# Vectra AI Docs

## Documentation

- [Welcome](https://docs.vectra.ai/readme.md): This is the home page for docs.vectra.ai.
- [Getting started](https://docs.vectra.ai/deployment/getting-started.md): Quick links to core deployment guides, requirements, and architecture references.
- [Analyst UX options (RUX vs QUX)](https://docs.vectra.ai/deployment/getting-started/analyst-ux-options-rux-vs-qux.md): How to tell Respond UX from Quadrant UX and what differs across features and docs.
- [NDR / Network identity architecture](https://docs.vectra.ai/deployment/getting-started/ndr-network-identity-architecture.md): High-level architecture overview for Vectra NDR and network identity.
- [Respond UX deployment guide](https://docs.vectra.ai/deployment/getting-started/respond-ux-deployment-guide.md): End-to-end guide for deploying Vectra Respond UX, including requirements, firewall rules, deployment steps, data source setup, initial configuration, and post-deploy next steps.
- [Introduction and overview](https://docs.vectra.ai/deployment/getting-started/respond-ux-deployment-guide/introduction-and-overview.md): Overview of RUX deployments, appliance modes, and requirements for adding network Sensors to the Vectra AI Platform.
- [Firewall requirements](https://docs.vectra.ai/deployment/getting-started/respond-ux-deployment-guide/firewall-requirements.md): Firewall requirements for your Respond UX (RUX) deployment.
- [Deployment](https://docs.vectra.ai/deployment/getting-started/respond-ux-deployment-guide/deployment.md): Overview of the RUX deployment process, how to do your initial login, deployment steps along with requirements and documentation links.
- [Initial configuration](https://docs.vectra.ai/deployment/getting-started/respond-ux-deployment-guide/initial-configuration.md): Guidance for configuring settings in the "Configuration" menu in the Vectra UI after the initial deployment is complete for Respond UX and your data sources are connected.
- [Configuring data sources](https://docs.vectra.ai/deployment/getting-started/respond-ux-deployment-guide/configuring-data-sources.md): Links to deployment guides for network Sensors, traffic validation, and other cloud data sources deployment guidance.
- [Recommended next steps](https://docs.vectra.ai/deployment/getting-started/respond-ux-deployment-guide/recommended-next-steps.md): Recommended actions after an initial RUX deployment, including backups, integrations, and deployment best practices.
- [Respond UX specific](https://docs.vectra.ai/deployment/getting-started/respond-ux-deployment.md): Respond UX-only deployment and configuration guidance.
- [Initial login - protecting your MFA secret key (RUX)](https://docs.vectra.ai/deployment/getting-started/respond-ux-deployment/initial-login-protecting-your-mfa-secret-key-rux.md): Secure your MFA secret during first login and avoid account lockouts.
- [Global View](https://docs.vectra.ai/deployment/getting-started/respond-ux-deployment/global-view.md): Demo video, applicability, capabilities, onboarding/deployment, architecture, and answers to your frequently asked questions (FAQs) about Global View for RUX deployments.
- [SIEM connector (syslog intermediary)](https://docs.vectra.ai/deployment/getting-started/respond-ux-deployment/siem-connector-syslog-intermediary.md): How to configure a syslog intermediary server to poll the RUX API and then send data via syslog to a downstream collector.
- [Why migrate to RUX from QUX Migration to RUX from QUX](https://docs.vectra.ai/deployment/getting-started/respond-ux-deployment/why-migrate-to-rux-from-qux-migration-to-rux-from-qux.md): Reasons to move from QUX to RUX, plus key workflow and feature changes.
- [Quadrant UX deployment guide](https://docs.vectra.ai/deployment/getting-started/quadrant-ux-deployment.md): End-to-end guide for deploying Vectra Quadrant UX, including requirements, firewall rules, deployment steps, data source setup, initial configuration, and post-deploy next steps.
- [Introduction and overview](https://docs.vectra.ai/deployment/getting-started/quadrant-ux-deployment/introduction-and-overview.md): Introduction and overview of the Vectra AI platform for Quadrant UX (QUX) deployments and appliance modes
- [Firewall requirements](https://docs.vectra.ai/deployment/getting-started/quadrant-ux-deployment/firewall-requirements.md): Firewall requirements for your Quadrant UX (QUX) deployment.
- [Brain deployment](https://docs.vectra.ai/deployment/getting-started/quadrant-ux-deployment/brain-deployment.md): Overview of the QUX deployment process, deployment steps along with requirements and documentation links, and how to do your initial login.
- [Initial configuration](https://docs.vectra.ai/deployment/getting-started/quadrant-ux-deployment/initial-configuration.md): Configure QUX settings after initial deployment, with guidance for data sources and deeper configuration tasks.
- [Configuring data sources](https://docs.vectra.ai/deployment/getting-started/quadrant-ux-deployment/configuring-data-sources.md): Links to deployment guides for network Sensors, traffic validation, and guidance for other cloud data sources supported in QUX deployments.
- [Recommended next steps](https://docs.vectra.ai/deployment/getting-started/quadrant-ux-deployment/recommended-next-steps.md): Recommended actions after an initial QUX deployment, including backups, integrations, and deployment best practices.
- [Firewall requirements](https://docs.vectra.ai/deployment/getting-started/firewall-requirements.md): Firewall connectivity requirements for Vectra RUX and QUX deployments.
- [Appliance specifications](https://docs.vectra.ai/deployment/getting-started/appliance-specifications.md): Overview, performance, and specifications for Vectra AI's physical, virtual, and cloud appliances.
- [Default usernames and passwords](https://docs.vectra.ai/deployment/getting-started/default-usernames-and-passwords.md): Default credentials for CLI, Web UI, and IPMI/iDRAC access.
- [IPv6 management support for Vectra appliances](https://docs.vectra.ai/deployment/getting-started/ipv6-management-support-for-vectra-appliances.md): Review IPv6 management support for Vectra appliances running version 8.5 or later.
- [IDR for Azure AD & CDR for M365](https://docs.vectra.ai/deployment/idr-for-azure-ad-and-cdr-for-m365.md): Deployment quick start guide for both IDR for Azure AD & CDR for M365 covering both RUX and QUX deployments.
- [CDR for AWS](https://docs.vectra.ai/deployment/cdr-for-aws.md): Landing page for CDR for AWS deployment, sizing, and integration guidance.
- [Deployment (CDR for AWS)](https://docs.vectra.ai/deployment/cdr-for-aws/deployment.md): Deploy CDR for AWS with CloudFormation or manual setup, including requirements, permissions, troubleshooting, and cost guidance.
- [Architecture and requirements](https://docs.vectra.ai/deployment/cdr-for-aws/deployment/architecture-and-requirements.md): Intro and overview for CDR for AWS, general requirements, network setup requirements for QUX deployments, and deployment overview.
- [Deploy via CloudFormation](https://docs.vectra.ai/deployment/cdr-for-aws/deployment/deploy-via-cloudformation.md): End-to-end steps using the Vectra-provided CloudFormation template.
- [Appendix 1 - AWS Configuration Notes](https://docs.vectra.ai/deployment/cdr-for-aws/deployment/appendix-1-aws-configuration-notes.md): Required permissions, data events guidance, bucket location, and KMS notes.
- [Appendix 2 - Manual AWS Deployment](https://docs.vectra.ai/deployment/cdr-for-aws/deployment/appendix-2-manual-aws-deployment.md): Create the SNS topic and IAM role yourself, then authorize in Vectra.
- [Appendix 3 – Troubleshooting Issues While Onboarding](https://docs.vectra.ai/deployment/cdr-for-aws/deployment/appendix-3-troubleshooting-issues-while-onboarding.md): Common errors during CloudFormation/manual setup and how to resolve them.
- [Appendix 4 – AWS Log Ingestion Cost Estimates](https://docs.vectra.ai/deployment/cdr-for-aws/deployment/appendix-4-aws-log-ingestion-cost-estimates.md): CloudTrail, S3, SNS, data events, retention, and transfer costs.
- [Estimating Log Volume](https://docs.vectra.ai/deployment/cdr-for-aws/estimating-log-volume.md): Guidance to estimate AWS log volume and expected ingestion impact for CDR for AWS.
- [Amazon Security Lake Integration](https://docs.vectra.ai/deployment/cdr-for-aws/amazon-security-lake-integration.md): Integrate Vectra Detect for AWS with Amazon Security Lake.
- [CDR for Azure](https://docs.vectra.ai/deployment/cdr-for-azure.md): Landing page for CDR for Azure deployment and sizing guidance.
- [Estimating usage](https://docs.vectra.ai/deployment/cdr-for-azure/estimating-usage.md): Gather Azure CDR sizing data to help estimate service costs for Vectra deployments.
- [Deployment](https://docs.vectra.ai/deployment/cdr-for-azure/deployment.md): CDR for Azure Deployment anchor page with demo video and product related announcements.
- [Introduction, architecture, and requirements](https://docs.vectra.ai/deployment/cdr-for-azure/deployment/introduction-architecture-and-requirements.md): What CDR for Azure provides, how it works, and what you need before deploying.
- [Automated deployment](https://docs.vectra.ai/deployment/cdr-for-azure/deployment/automated-deployment.md): Deploy CDR for Azure using the Vectra-provided ARM templates. This is the "Automated" deployment method and is recommended for most Vectra customers.
- [Manual deployment](https://docs.vectra.ai/deployment/cdr-for-azure/deployment/manual-deployment.md): Deploy CDR for Azure manually without the aid of Vectra provided ARM templates.
- [Appendix 1 - Azure configuration notes](https://docs.vectra.ai/deployment/cdr-for-azure/deployment/appendix-1-azure-configuration-notes.md): Azure permissions, objects created by Vectra, and related operational notes to help with permissions issues.
- [Appendix 2 - Adding additional locations or resources](https://docs.vectra.ai/deployment/cdr-for-azure/deployment/appendix-2-adding-additional-locations-or-resources.md): Guidance for re-running deployment when you add regions, locations, or Vectra adds new supported resource types.
- [Appendix 3 - Troubleshooting issues while onboarding](https://docs.vectra.ai/deployment/cdr-for-azure/deployment/appendix-3-troubleshooting-issues-while-onboarding.md): Common onboarding issues, policy conflicts, and ARM template deployment errors.
- [NDR physical appliances](https://docs.vectra.ai/deployment/ndr-physical-appliances.md): Quick start and hardware guidance for physical Brain and Sensor appliances.
- [Supported SFPs and QSFPs](https://docs.vectra.ai/deployment/ndr-physical-appliances/supported-sfps-and-qsfps.md): Supported SFP/QSFP transceivers for Vectra physical appliances.
- [Physical appliance modes and switching between them](https://docs.vectra.ai/deployment/ndr-physical-appliances/physical-appliance-modes-and-switching-between-them.md): The article describes the Brain, Sensor, and Mixed modes and how to switch between them for physical Vectra appliances.
- [X-Series](https://docs.vectra.ai/deployment/ndr-physical-appliances/x-series.md): Quick start guides and lifecycle notes for X-Series appliances.
- [X3](https://docs.vectra.ai/deployment/ndr-physical-appliances/x-series/x3.md): The X3 quick start guide provides guidance for initial deployment, verifying connectivity, and next steps to take after the appliance is connected to your network.
- [X47](https://docs.vectra.ai/deployment/ndr-physical-appliances/x-series/x47.md): The X47 quick start guide provides guidance for initial deployment, verifying connectivity, and next steps to take after the appliance is connected to your network.
- [X29 (EOS)](https://docs.vectra.ai/deployment/ndr-physical-appliances/x-series/x29.md): The X29 quick start guide provides guidance for initial deployment, verifying connectivity, and next steps to take after the appliance is connected to your network.
- [X80 (EOL)](https://docs.vectra.ai/deployment/ndr-physical-appliances/x-series/x80.md): The X80 quick start guide provides guidance for initial connection to your network.
- [B-Series](https://docs.vectra.ai/deployment/ndr-physical-appliances/b-series.md): Quick start guides and lifecycle notes for B-Series appliances.
- [B127](https://docs.vectra.ai/deployment/ndr-physical-appliances/b-series/b127.md): The B127 quick start guide provides guidance for initial deployment, verifying connectivity, and next steps to take after the appliance is connected to your network.
- [B101 (EOS)](https://docs.vectra.ai/deployment/ndr-physical-appliances/b-series/b101.md): The B101 quick start guide provides guidance for initial deployment, verifying connectivity, and next steps to take after the appliance is connected to your network.
- [S-Series](https://docs.vectra.ai/deployment/ndr-physical-appliances/s-series.md): Quick start guides and lifecycle notes for S-Series appliances.
- [S1](https://docs.vectra.ai/deployment/ndr-physical-appliances/s-series/s1.md): The S1 quick start guide provides guidance for initial deployment, verifying connectivity, and next steps to take after the appliance is connected to your network.
- [S1v2](https://docs.vectra.ai/deployment/ndr-physical-appliances/s-series/s1v2.md): The S1v2 quick start guide provides guidance for initial deployment, verifying connectivity, and next steps to take after the appliance is connected to your network.
- [S11](https://docs.vectra.ai/deployment/ndr-physical-appliances/s-series/s11.md): The S11 quick start guide provides guidance for initial deployment, verifying connectivity, and next steps to take after the appliance is connected to your network.
- [S17](https://docs.vectra.ai/deployment/ndr-physical-appliances/s-series/s17.md): The S17 quick start guide provides guidance for initial deployment, verifying connectivity, and next steps to take after the appliance is connected to your network.
- [S101](https://docs.vectra.ai/deployment/ndr-physical-appliances/s-series/s101.md): Deploy an S101 appliance, verify connectivity, and review next steps for v1 and v2 hardware variants.
- [S127](https://docs.vectra.ai/deployment/ndr-physical-appliances/s-series/s127.md): The S127 quick start guide provides guidance for initial deployment, verifying connectivity, and next steps to take after the appliance is connected to your network.
- [S2 (EOL)](https://docs.vectra.ai/deployment/ndr-physical-appliances/s-series/s2.md): The S2 quick start guide provides guidance for connecting your appliance to your network.
- [M-Series](https://docs.vectra.ai/deployment/ndr-physical-appliances/m-series.md): Quick start guides and lifecycle notes for M-Series appliances.
- [M47](https://docs.vectra.ai/deployment/ndr-physical-appliances/m-series/m47.md): The M47 quick start guide provides guidance for initial deployment, verifying connectivity, and next steps to take after the appliance is connected to your network.
- [M29 (EOS)](https://docs.vectra.ai/deployment/ndr-physical-appliances/m-series/m29.md): The M29 quick start guide provides guidance for initial deployment, verifying connectivity, and next steps to take after the appliance is connected to your network.
- [NDR virtual / cloud appliances](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances.md): Deploy Brains and vSensors in virtualized and public cloud environments.
- [AWS Brain](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-brain.md): Deploy a Vectra Brain in an AWS account for RUX or QUX deployments.
- [Introduction and requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-brain/introduction-and-requirements.md): Prerequisites and deployment workflow for an AWS Brain.
- [Firewall requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-brain/firewall-requirements.md): Connectivity and security group rules for AWS Brain deployments.
- [Deploying the AMI](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-brain/deploying-the-ami.md): Deploy the AWS Brain AMI using CloudFormation or AWS Marketplace.
- [Enabling AWS integrations](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-brain/enabling-aws-integrations.md): Enable AWS HostID and optional Security Hub and CloudWatch integrations.
- [Pairing Sensors or Stream](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-brain/pairing-sensors-or-stream.md): Pair Sensors or Stream to an AWS Brain after provisioning.
- [AWS vSensor](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-vsensor.md): Parent page for AWS vSensor deployment and includes attachments used by the deployment.
- [Introduction and requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-vsensor/introduction-and-requirements.md): Prerequisites and sizing guidance for deploying Vectra AWS vSensors, including sizing, SRT setup, VPC/subnet planning, and security group requirements.
- [Deployment from AWS Marketplace](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-vsensor/deployment-from-aws-marketplace.md): Step-by-step AWS Marketplace and CloudFormation deployment for AWS vSensors, including key template parameters and post-deploy checks.
- [AWS integrations](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-vsensor/aws-integrations.md): Configure AWS integrations for Vectra (HostID, optional Security Hub, optional CloudWatch), including required IAM users/roles/policies.
- [Pairing AWS vSensors](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-vsensor/pairing-aws-vsensors.md): Pair AWS vSensors to a Brain using the Sensor Registration Token workflow (AWS vSensors do not support online pairing).
- [Directing traffic to AWS vSensor](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-vsensor/traffic-direction-to-aws-vsensor.md): Configure AWS VPC Traffic Mirroring to send EC2 traffic to a vSensor (mirror filters, mirror targets, and mirror sessions).
- [AWS vSensor FAQs](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-vsensor/aws-vsensor-faqs.md): Common questions and troubleshooting for AWS vSensor deployments, including regional limits, validation, updates, and service quotas.
- [AWS Security Hub integration (QUX only)](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-security-hub-integration-qux-only.md): Set up AWS Security Hub integration for Vectra QUX deployments.
- [AWS best practices](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/aws-best-practices.md): AWS configuration and operational best practices for Vectra appliances and integrations.
- [Azure Brain](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-brain.md): Deploy a Vectra Brain in an Azure subscription for RUX or QUX deployments.
- [Introduction and requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-brain/introduction-and-requirements.md): Prerequisites and high-level workflow for deploying an Azure Brain, including required permissions and Azure resources.
- [Firewall requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-brain/firewall-requirements.md): Azure-specific connectivity guidance for Azure Brain deployments, including NSG rules, DNS, and NTP notes.
- [Deploying the Brain image](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-brain/deploying-the-brain-image.md): Deploy the Vectra Brain VM in Azure using the Azure CLI, including required inputs, sizing, and post-deploy access steps.
- [Azure Host ID integration](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-brain/azure-hostid-integration.md): Enable the Azure HostID integration to enrich hosts using Azure Resource Manager metadata.
- [Pairing Sensors or Stream](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-brain/pairing-sensors-or-stream.md): Pair Sensors or Stream to an Azure Brain, with notes on Azure vSensor/Stream pairing limitations.
- [Azure vSensor](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-vsensor.md): Deploy and pair Vectra vSensors in Microsoft Azure environments.
- [Introduction and requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-vsensor/introduction-and-requirements.md): Azure vSensor deployment introduction and requirements including Sensor Registration Token, Brain and Sensor communications requirements, and Azure requirements.
- [Deployment from Azure marketplace](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-vsensor/deployment-from-azure-marketplace.md): Deploying the Azure vSensor image from the Azure marketplace.
- [Azure Host ID integration](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-vsensor/azure-host-id-integration.md): Configuring HostID integration between your Vectra Brain and the Azure Resource Manager.
- [Pairing Azure vSensors](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-vsensor/pairing-azure-vsensors.md): Pair Azure vSensors to a Brain using the Sensor Registration Token workflow (Azure vSensors do not support online pairing).
- [Directing traffic to Azure vSensor](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-vsensor/directing-traffic-to-azure-vsensor.md): How to direct traffic to Azure vSensors.
- [Azure cPacket cVu-V](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/azure-vsensor/azure-cpacket-cvu-v.md): Optionally deploy cPacket cVu-V in Azure to feed traffic for a Vectra vSensor for packet capture and NDR visibility.
- [GCP Brain](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-brain.md): Deploy a Vectra NDR virtual Brain in a Google Cloud project.
- [Introduction and requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-brain/introduction-and-requirements.md): Overview of the GCP Brain deployment and prerequisites, including required access, tooling, and Vectra-provided resources.
- [Preparation](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-brain/preparation.md): Pre-deployment checklist for GCP Brain install, including connectivity, SSH keys, sizing, and required service accounts and roles.
- [Firewall requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-brain/firewall-requirements.md): Network connectivity requirements (ports, protocols, and FQDNs) for Vectra appliances and Vectra cloud services.
- [Deployment](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-brain/deployment.md): Deploy the GCP Brain VM using the Vectra template and \`gcloud infra-manager\`, then connect and complete provisioning.
- [Post deployment configuration](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-brain/post-deployment-configuration.md): Post-deploy steps for the GCP Brain, including HostID integration setup and GCP Sensor pairing guidance.
- [GCP vSensor](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-vsensor.md): Deploy a Vectra NDR virtual Sensor in a Google Cloud project.
- [Introduction and requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-vsensor/introduction-and-requirements.md): Overview of the GCP vSensor deployment and requirements, including required access, tooling, and Vectra-provided resources.
- [Preparation](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-vsensor/preparation.md): Pre-deployment checklist for GCP vSensor install, including connectivity, SSH keys, sizing, and required service accounts and roles.
- [Deploying the image](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-vsensor/deploying-the-image.md): Deploy the GCP vSensor VM using the Vectra template and \`gcloud infra-manager\`.
- [Pairing GCP vSensors](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-vsensor/pairing-gcp-vsensors.md): Overview of GCP vSensor pairing, pairing and registration settings, configuring the Brain location and Sensor Registration Token (SRT), and pairing guidance.
- [Directing traffic to GCP vSensors](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-vsensor/directing-traffic-to-gcp-vsensors.md): How to direct traffic to the GCP vSensor capture port using Google Network Security Integration (NSI), VPC Packet Mirroring, or 3rd party VXLAN-based packet brokers.
- [GCP Host ID integration](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/gcp-vsensor/gcp-hostid-integration.md): This article goes over the GCP HostID integration available for Vectra NDR deployments that capture traffic from GCP VPCs.
- [Hyper-V vSensor](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/hyper-v-vsensor.md): Deploy and pair Hyper-V vSensors with a Vectra Brain in RUX or QUX deployments.
- [Introduction and general requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/hyper-v-vsensor/introduction-and-general-requirements.md): Hyper-V vSensor deployment introduction, resource requirements, performance, and connectivity requirements.
- [vSensor deployment in Hyper-V](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/hyper-v-vsensor/vsensor-deployment-in-hyper-v.md): Deploy a Hyper-V vSensor, verify prerequisites, and manage its initial embryo state before pairing and updating.
- [Capture configuration and vSwitch guidance](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/hyper-v-vsensor/capture-configuration-and-vswitch-guidance.md): Configure Hyper-V vSensor traffic capture for physical traffic, guest traffic, VLANs, and virtual switch options.
- [Initial vSensor configuration at CLI](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/hyper-v-vsensor/initial-vsensor-configuration-at-cli.md): Changing from DHCP (default) to static addressing, configuring DNS servers, changing password, and verifying Hyper-V vSensor connectivity.
- [Pairing Hyper-V vSensors](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/hyper-v-vsensor/pairing-hyper-v-vsensors.md): Pairing Hyper-V vSensors with a Vectra Brain appliance.
- [Traffic capture guidance and validation](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/hyper-v-vsensor/traffic-capture-guidance-and-validation.md): Guidance for Hyper-V vSensor traffic capture, PCAP generation, and traffic validation.
- [KVM vSensor](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/kvm-vsensor.md): Deploy and pair KVM vSensors with a Vectra Brain in RUX or QUX deployments.
- [Introduction and general requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/kvm-vsensor/introduction-and-general-requirements.md): KVM vSensor deployment introduction, resource requirements, performance, connectivity requirements, and preparation list.
- [KVM specific details and deployment](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/kvm-vsensor/kvm-specific-details-and-deployment.md): Review KVM requirements, networking guidance, VM operations, and vSensor deployment before pairing and updating.
- [Initial vSensor configuration at CLI](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/kvm-vsensor/initial-vsensor-configuration-at-cli.md): Changing from DHCP (default) to static addressing, configuring DNS servers, changing password, and verifying KVM vSensor connectivity.
- [Pairing KVM vSensors](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/kvm-vsensor/pairing-kvm-vsensors.md): Pairing KVM vSensors with a Vectra Brain appliance.
- [Traffic capture guidance and validation](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/kvm-vsensor/traffic-capture-guidance-and-validation.md): Guidance for KVM vSensor traffic capture, PCAP generation, and traffic validation.
- [Nutanix Brain](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-brain.md): Deploy a Vectra Brain in Nutanix environments.
- [Introduction and requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-brain/introduction-and-requirements.md): Introductions and requirements for deploying a Vectra Brain appliance in Nutanix environments.
- [Firewall requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-brain/firewall-requirements.md): Firewall requirements for a Nutanix Brain for both RUX or QUX deployments.
- [Licensing and Brain deployment overview](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-brain/licensing-and-brain-deployment-overview.md): How licensing works for Nutanix Brains and an overview of the Nutanix Brain deployment process.
- [Brain deployment in Nutanix](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-brain/brain-deployment-in-nutanix.md): How to download the Nutanix Brain image and deploy it within Nutanix.
- [Initial startup and licensing](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-brain/initial-startup-and-licensing.md): Initial startup, provisioning proxy configuration, and licensing for Nutanx Brain. Licensing must be completed prior to the main UI or CLI being available.
- [Post deployment guidance](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-brain/post-deployment-guidance.md): Guidance for static addressing, updates, performance testing, integrity checks, configuration validation, licensing checks, and resizing your Nutanix Brain.
- [Nutanix vSensor](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-vsensor.md): Deploy and pair a Vectra vSensor on Nutanix AHV.
- [Introduction and requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-vsensor/introduction-and-requirements.md): Nutanix vSensor deployment introduction, resource requirements including performance and supported Nutanix versions, and connectivity requirements.
- [Nutanix traffic capture options](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-vsensor/nutanix-traffic-capture-options.md): Nutanix terminology and methods to direct traffic to a vSensor capture port.
- [Preparing for deployment](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-vsensor/preparing-for-deployment.md): Information to gather before deployment, choosing a deployment method, and pre-deployment steps shared by all deployment methods.
- [Service Chaining 1.0 deployment](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-vsensor/service-chaining-1.0-deployment.md): Deploying Nutanix vSensor VM using Service Chaining 1.0 to direct traffic at the vSensor capture port.
- [Traffic Mirroring deployment](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-vsensor/traffic-mirroring-deployment.md): Deploying Nutanix vSensor VM using Traffic Mirroring to direct traffic at the vSensor capture port.
- [Post deployment configuration (shared for all deployment types)](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-vsensor/post-deployment-configuration-shared-for-all-deployment-types.md): Shared steps for Nutanix vSensors after the initial deployment in Nutanix is completed.
- [Initial vSensor configuration at CLI](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-vsensor/initial-vsensor-configuration-at-cli.md): Changing from DHCP (default) to static addressing, configuring DNS servers, changing password, and verifying Nutanix vSensor connectivity.
- [Pairing Nutanix vSensors](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-vsensor/pairing-nutanix-vsensors.md): Pairing Nutanix vSensors with a Vectra Brain appliance.
- [Traffic capture and validation](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-vsensor/traffic-capture-and-validation.md): Guidance for Nutanix vSensor traffic capture, PCAP generation, and traffic validation.
- [Appendix - Service Chaining 1.0 alternate API instructions](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/nutanix-vsensor/appendix-service-chaining-1.0-alternate-api-instructions.md): Use alternate API-based steps to deploy Nutanix Service Chaining 1.0 when UI-based steps cannot complete every task.
- [VMware Brain](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-brain.md): Deploy a Vectra Brain on VMware vSphere.
- [Introduction and requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-brain/introduction-and-requirements.md): Introductions and requirements for deploying a Vectra Brain appliance in VMware vSphere environments.
- [VMware deployment details and considerations](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-brain/vmware-deployment-details-and-considerations.md): Guidance for VMware vSensors and Brains including CPU/RAM/Storage, capture ports, modifications required after deployment, use of SANs, vMotion, and unsupported hypervisors.
- [Firewall requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-brain/firewall-requirements.md): Firewall requirements for a VMware Brain deployed in a vSphere environment.
- [Licensing and Brain deployment overview](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-brain/licensing-and-brain-deployment-overview.md): How licensing works for VMware Brains and an overview of the VMware Brain deployment process.
- [Brain deployment in VMware](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-brain/brain-deployment-in-vmware.md): How to download the VMware Brain .OVA and deploy it from in VMware.
- [Initial startup and licensing](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-brain/initial-startup-and-licensing.md): Initial startup, provisioning proxy configuration, and licensing for VMware Brain. Licensing must be completed prior to the main UI or CLI being available.
- [vCenter integration](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-brain/vcenter-integration.md): How to configure vCenter integration with your Vectra Brain appliance to help with HostID and enable a virtual infrastructure view.
- [Post deployment guidance](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-brain/post-deployment-guidance.md): Guidance for static addressing, updates, performance testing, integrity checks, configuration validation, licensing checks, and resizing your VMware Brain.
- [VMware vSensor](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-vsensor.md): Deploy and pair VMware vSensors with a Vectra Brain in RUX or QUX deployments.
- [Introduction and general requirements](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-vsensor/introduction-and-general-requirements.md): VMware vSensor deployment introduction, resource requirements, performance, supported VMware versions, and connectivity requirements.
- [VMware deployment details and considerations](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-vsensor/vmware-deployment-details-and-considerations.md): Guidance for VMware vSensors and Brains including CPU/RAM/Storage, capture ports, modifications required after deployment, use of SANs, vMotion, and unsupported hypervisors.
- [vCenter integration](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-vsensor/vcenter-integration.md): How to configure vCenter integration with your Vectra Brain appliance to help with HostID and enable a virtual infrastructure view.
- [vSensor deployment in VMware](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-vsensor/vsensor-deployment-in-vmware.md): Deploy a VMware vSensor, verify prerequisites, configure port groups, and modify 16-core or 32-core vSensors after deployment.
- [Initial vSensor configuration at CLI](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-vsensor/initial-vsensor-configuration-at-cli.md): Changing from DHCP (default) to static addressing, configuring DNS servers, changing password, and verifying VMware vSensor connectivity.
- [Pairing VMware vSensors](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-vsensor/pairing-vmware-vsensors.md): Pairing VMware vSensors with a Vectra Brain appliance.
- [Capturing physical network traffic with VMware vSensor](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-vsensor/capturing-physical-network-traffic-with-vmware-vsensor.md): How to capture physical network traffic using a VMware vSensor.
- [Traffic capture guidance and validation](https://docs.vectra.ai/deployment/ndr-virtual-cloud-appliances/vmware-vsensor/traffic-capture-guidance-and-validation.md): Guidance for VMware vSensor traffic capture, PCAP generation, and traffic validation.
- [NDR Traffic engineering and validation](https://docs.vectra.ai/deployment/traffic-engineering-and-validation.md): Validate Sensor traffic feeds and troubleshoot capture and quality issues.
- [Using Vectra packet capture (PCAP)](https://docs.vectra.ai/deployment/traffic-engineering-and-validation/using-vectra-packet-capture-pcap.md): How to capture PCAPs on Vectra Sensors and download them from your Vectra UI.
- [Traffic validation (ENTV)](https://docs.vectra.ai/deployment/traffic-engineering-and-validation/traffic-validation-entv.md): Use ENTV to validate Sensor traffic quality and troubleshoot capture issues.
- [Traffic validation (ENTV) alerting](https://docs.vectra.ai/deployment/traffic-engineering-and-validation/entv-syscheck-descriptions.md): Descriptions and advice for system health checks related to traffic validation (ENTV) and how to be alerted on them when they are in a critical state.
- [Traffic visibility drop alerting](https://docs.vectra.ai/deployment/traffic-engineering-and-validation/traffic-visibility-drop-alerting.md): Configure health checks and alerts for drops in traffic visibility, including IP counts, bandwidth, and packet counts.
- [Network traffic recommendations](https://docs.vectra.ai/deployment/traffic-engineering-and-validation/network-traffic-recommendations.md): Recommended traffic mix, Sensor placement, and encapsulation guidance for NDR.
- [Link aggregation (LACP)](https://docs.vectra.ai/deployment/traffic-engineering-and-validation/link-aggregation-lacp.md): Configure and troubleshoot link aggregation (LACP) on Vectra appliances.
- [Asymmetry concerns](https://docs.vectra.ai/deployment/traffic-engineering-and-validation/asymmetry-concerns.md): This Knowledge Base article explores the concern of asymmetry in sensor feeds.
- [Encapsulation Endpoints (GRE, ERSPAN, GENEVE, VXLAN)](https://docs.vectra.ai/deployment/traffic-engineering-and-validation/encapsulation-endpoints-gre-erspan-geneve-vxlan.md): Configure Sensor capture interfaces with an IP address to be used as a destination for tunneled encapsulations such as GRE, ERSPAN, GENEVE, and VXLAN traffic.
- [Asset Visibility Forwarding](https://docs.vectra.ai/deployment/traffic-engineering-and-validation/asset-visibility-forwarding.md): Forward DHCP, mDNS, and NetBIOS traffic over ERSPAN or GRE to improve asset identity coverage for Sensors and Asset Inventory.
- [Match](https://docs.vectra.ai/deployment/match.md): Start here for Vectra Match deployment, tuning, and troubleshooting.
- [Deployment](https://docs.vectra.ai/deployment/match/deployment.md): Deploying Vectra Match including requirements, throughput, licensing, ruleset management, UI and API deployment, and outputting Matches to downstream receivers.
- [Introduction and requirements](https://docs.vectra.ai/deployment/match/deployment/introduction-and-requirements.md): Overview of Vectra Match, supported deployments, requirements, permissions, performance notes, and unsupported Suricata features.
- [Licensing](https://docs.vectra.ai/deployment/match/deployment/licensing.md): How Match licensing works, including online renewals and offline activation for QUX.
- [Ruleset Management Guidance](https://docs.vectra.ai/deployment/match/deployment/ruleset-management-guidance.md): Ruleset limits, sourcing, tuning workflow, curated ruleset downloads, lifecycle management, and Suricata variable support.
- [Deployment (UI and general guidance)](https://docs.vectra.ai/deployment/match/deployment/deployment-ui-and-general-guidance.md): End-to-end Match deployment using the UI, including enabling Sensors and assigning rulesets.
- [API Deployment](https://docs.vectra.ai/deployment/match/deployment/api-deployment.md): Match API overview and deployment examples for RUX (OAuth) and QUX (token), including ruleset upload and assignment.
- [Outputting Matches to downstream receivers](https://docs.vectra.ai/deployment/match/deployment/outputting-matches-to-downstream-receivers.md): Configure Match output via Stream, syslog, Kafka, and Recall.
- [FAQ](https://docs.vectra.ai/deployment/match/faq.md): This is a general Frequently Asked Questions (FAQ) article for Vectra Match.
- [Troubleshooting](https://docs.vectra.ai/deployment/match/troubleshooting.md): This guide is designed to provide Vectra Match customers with basic troubleshooting capabilities when operating the Vectra Match platform based upon use cases.
- [Vectra curated ruleset](https://docs.vectra.ai/deployment/match/vectra-curated-ruleset.md): Use Vectra's curated ET Pro ruleset for Match and understand what it contains.
- [Managing rulesets](https://docs.vectra.ai/deployment/match/managing-rulesets.md): Manage Vectra Match rulesets in the UI, including upload, assignment, and rule lifecycle tasks.
- [Performance and rulset optimization](https://docs.vectra.ai/deployment/match/performance-and-rulset-optimization.md): How Suricata/Match performance is measured, what drives throughput, and practical ruleset tuning tips (noise reduction, profiling, bypass rules, and resizing guidance).
- [Suricata configuration](https://docs.vectra.ai/deployment/match/suricata-configuration.md): Review the sample suricata.yaml configuration used by Vectra Sensors that run Match.
- [Stream](https://docs.vectra.ai/deployment/stream.md): Deploy and configure Vectra Stream to forward security-enriched network metadata to your data lake or SIEM.
- [Introduction and requirements](https://docs.vectra.ai/deployment/stream/introduction-and-requirements.md): Introduction to Stream deployment, licensing steps, and connectivity requirements.
- [Stream sizing](https://docs.vectra.ai/deployment/stream/stream-sizing.md): Sizing guidelines for Stream VMs and M-Series appliances.
- [Preparing to deploy Stream](https://docs.vectra.ai/deployment/stream/preparing-to-deploy-stream.md): Download Stream images and collect deployment inputs, including Brain details and Sensor Registration Tokens (SRTs).
- [Deployment](https://docs.vectra.ai/deployment/stream/deployment.md): Platform-specific Stream deployment guides as part of overall Stream deployment and configuration process.
- [VMware Stream deployment](https://docs.vectra.ai/deployment/stream/deployment/vmware-stream-deployment.md): Deploy Stream on VMware using an OVA via vCenter/vSphere or via the Brain CLI provisioning command.
- [Hyper-V Stream deployment](https://docs.vectra.ai/deployment/stream/deployment/hyper-v-stream-deployment.md): Deploy Stream on Hyper-V using the provided VHD and PowerShell deployment script.
- [KVM Stream deployment](https://docs.vectra.ai/deployment/stream/deployment/kvm-stream-deployment.md): Deploy Stream on KVM using the image tarball and \`vectra-stream.sh\`, with basic \`virsh\` troubleshooting tips.
- [AWS Stream deployment](https://docs.vectra.ai/deployment/stream/deployment/aws-stream-deployment.md): Deploying Stream in AWS environments using and image from the AWS Marketplace.
- [Azure Stream deployment](https://docs.vectra.ai/deployment/stream/deployment/azure-stream-deployment.md): Deploying Stream in Azure using a image from the Azure Marketplace.
- [GCP Stream deployment](https://docs.vectra.ai/deployment/stream/deployment/gcp-stream-deployment.md): Deploy Stream in GCP using \`gcloud infra-manager\` with aVectra-provided template and image shared to you from Vectra.
- [M-Series Stream deployment](https://docs.vectra.ai/deployment/stream/deployment/m-series-stream-deployment.md): Quick-start steps to deploy Stream on a physical M-Series appliance, then pair and enable publishing.
- [Initial CLI configuration](https://docs.vectra.ai/deployment/stream/initial-cli-configuration.md): Connect to the Stream CLI and configure static IP, gateway, DNS, and password changes if not using DHCP or changes are needed after initial deployment.
- [Pairing Stream appliances](https://docs.vectra.ai/deployment/stream/pairing-stream-appliances.md): How to pair Stream appliances with your Vectra Brain appliance.
- [Metadata filtering and publishing](https://docs.vectra.ai/deployment/stream/metadata-filtering-and-publishing.md): How to configure options for metadata filtering and the destination publisher of your choice.
- [Publisher specific guidance](https://docs.vectra.ai/deployment/stream/publisher-specific-guidance.md): Instructions for specific publishers that you are using to receive Stream data.
- [Elastic, Syslog, and Kafka](https://docs.vectra.ai/deployment/stream/publisher-specific-guidance/elastic-syslog-and-kafka.md): Details for Elastic, Syslog, and Kafka Stream publishers.
- [ELK integration](https://docs.vectra.ai/deployment/stream/publisher-specific-guidance/elk-integration.md): Integrate Vectra Stream custom content with Elastic, Logstash, and Kibana deployments.
- [Splunk integration](https://docs.vectra.ai/deployment/stream/publisher-specific-guidance/splunk-integration.md): This article is meant to be used by customers who will be integrating Vectra Steam metadata into their Splunk installation.
- [Recall (QUX only)](https://docs.vectra.ai/deployment/recall-qux-only.md): Start here for Recall setup and access in Quadrant UX deployments.
- [Getting started with Recall](https://docs.vectra.ai/deployment/recall-qux-only/getting-started-with-recall.md): Prerequisites and first steps to start using Recall in Quadrant UX.
- [Enabling forwarding to Recall](https://docs.vectra.ai/deployment/recall-qux-only/enabling-forwarding-to-recall.md): Configure Stream to forward supported metadata to Recall.
- [Recall indices & content for Stream in Elk v7](https://docs.vectra.ai/deployment/recall-qux-only/recall-indices-and-content-for-stream-in-elk-v7.md): Index patterns and packaged content for using Recall with ELK v7.
- [SSO access to Recall](https://docs.vectra.ai/deployment/recall-qux-only/sso-access-to-recall.md): Set up SSO for Recall access and troubleshoot common login issues.
- [Appliance operations](https://docs.vectra.ai/deployment/appliance-operations.md): Common operational tasks for Vectra appliances, from access to health checks.
- [Configuring IP settings for appliances](https://docs.vectra.ai/deployment/appliance-operations/configuring-ip-settings-for-appliances.md): Configure IP address settings on Vectra appliances.
- [Pairing appliances](https://docs.vectra.ai/deployment/appliance-operations/pairing-appliances.md): Overview of Sensor/Stream pairing, pairing and registration settings, configuring the Brain location and Sensor Registration Token (SRT), and pairing guidance.
- [Unpairing Sensor from Brain](https://docs.vectra.ai/deployment/appliance-operations/unpairing-sensor-from-brain.md): Safely unpair a Sensor from a Brain and clean up pairing state.
- [SSH login process for CLI](https://docs.vectra.ai/deployment/appliance-operations/ssh-login-process-for-cli.md): This article discusses how users can access the Vectra Support Command Line Interface (vscli) on Vectra appliances.
- [Console access on appliances](https://docs.vectra.ai/deployment/appliance-operations/console-access-on-appliances.md): Access the console on Vectra appliances and log in as the vectra CLI user.
- [Changing Sensor CLI password](https://docs.vectra.ai/deployment/appliance-operations/changing-sensor-cli-password.md): Change the CLI password for a Vectra Sensor.
- [IPMI / iDRAC configuration](https://docs.vectra.ai/deployment/appliance-operations/ipmi-idrac-configuration.md): Configure out-of-band management (IPMI/iDRAC) for Vectra appliances.
- [Monitoring appliance health](https://docs.vectra.ai/deployment/appliance-operations/monitoring-appliance-health.md): Monitor the health of physical and virtual Vectra Brain and Sensor appliances.
- [Monitoring Vectra with Zabbix](https://docs.vectra.ai/deployment/appliance-operations/monitoring-vectra-with-zabbix.md): Monitor Brain and Sensor health with Zabbix checks and dashboards.
- [Resizing virtual appliances](https://docs.vectra.ai/deployment/appliance-operations/resizing-virtual-appliances.md): Change CPU/RAM/disk resources for virtual Brains, Sensors, and Stream appliances.
- [Shutting down appliances gracefully](https://docs.vectra.ai/deployment/appliance-operations/shutting-down-appliances-gracefully.md): Shutdown and reboot procedures that protect data and prevent corruption.
- [Understanding the v2.5 health API](https://docs.vectra.ai/deployment/appliance-operations/understanding-the-v25-health-api.md): Health API endpoints and fields for monitoring Quadrant UX appliances.
- [FIPS mode enabling and disabling](https://docs.vectra.ai/deployment/appliance-operations/fips-mode-enabling-and-disabling.md): What FIPS mode for Vectra appliances does and how to enable and disable it.
- [Deprecated / Retired](https://docs.vectra.ai/deployment/deprecated-retired.md): Retired products and legacy deployment guidance.
- [NDR for Cloud (Gigamon)](https://docs.vectra.ai/deployment/deprecated-retired/ndr-for-cloud-gigamon.md): Legacy NDR for Cloud (Gigamon) deployment docs and reference material.
- [AWS](https://docs.vectra.ai/deployment/deprecated-retired/ndr-for-cloud-gigamon/aws.md): Legacy NDR for Cloud (Gigamon) guidance for AWS.
- [Azure](https://docs.vectra.ai/deployment/deprecated-retired/ndr-for-cloud-gigamon/azure.md): Legacy NDR for Cloud (Gigamon) guidance for Azure.
- [Reference architectures](https://docs.vectra.ai/deployment/deprecated-retired/ndr-for-cloud-gigamon/reference-architectures.md): Legacy reference architectures for NDR for Cloud (Gigamon).
- [NDR for Cloud end of sales and support](https://docs.vectra.ai/deployment/deprecated-retired/ndr-for-cloud-gigamon/ndr-for-cloud-end-of-sales-and-support.md): End-of-sales and end-of-support timeline for NDR for Cloud (Gigamon), including renewal limits and recommended migration options.
- [Navigation updates in the Vectra UI](https://docs.vectra.ai/configuration/navigation-updates-rux.md): Changes to Vectra UI menu navigation, including updated locations for common settings and workflows.
- [ACCESS](https://docs.vectra.ai/configuration/access.md): Access configuration articles for APIs, authentication, SAML SSO, remote support, and other ways to connect to the Vectra platform.
- [API (RUX)](https://docs.vectra.ai/configuration/access/api-rux.md): RUX API guides, Postman quick starts, and versioned references for working with the Vectra platform API.
- [RUX API Postman quick start guide](https://docs.vectra.ai/configuration/access/api-rux/rux-api-postman-quick-start-guide.md): Use the Vectra Platform public Postman collection to get up and running quickly with the new Vectra AI Platform API.
- [v3.4 API guide (RUX)](https://docs.vectra.ai/configuration/access/api-rux/v34-api-guide-rux.md): Vectra Platform API Guide v3.4 (August 2025) for RUX deployments
- [v3.3 API guide (RUX)](https://docs.vectra.ai/configuration/access/api-rux/v33-api-guide-rux.md): Vectra Platform API Guide v3.3 (Sep 2024) for Respond UX deployments
- [v3.2 API guide (RUX)](https://docs.vectra.ai/configuration/access/api-rux/v32-api-guide-rux.md): Vectra SaaS API Guide v3.2 (Jan 2024)
- [v3.1 API guide (RUX)](https://docs.vectra.ai/configuration/access/api-rux/v31-api-guide-rux.md): Vectra SaaS API Guide v3.1 (Jan 2024)
- [v3.0 API guide (RUX)](https://docs.vectra.ai/configuration/access/api-rux/v30-api-guide-rux.md): Vectra SaaS API Guide v3.0 (Jan 2024)
- [API (QUX)](https://docs.vectra.ai/configuration/access/api-qux.md): QUX API guides, Postman quick starts, OAuth2 setup, token authentication, and versioned Vectra API references.
- [v2.5 Postman quick start guide using OAuth2](https://docs.vectra.ai/configuration/access/api-qux/v25-postman-quick-start-guide-using-oauth2.md): This article shows how to quickly get started using the QUX v2.5 API using OAuth2 for authentication and the Postman API testing tool.
- [v2.5 Postman quick start guide using token auth](https://docs.vectra.ai/configuration/access/api-qux/v25-postman-quick-start-guide-using-token-auth.md): This article shows how to quickly get started using the QUX v2.5 API using token authentication and the Postman API testing tool.
- [v2.5 API guide (QUX)](https://docs.vectra.ai/configuration/access/api-qux/v25-api-guide-qux.md): This guide is for v2.5 of the Vectra REST API for QUX deployments.
- [v2.4 API guide (QUX)](https://docs.vectra.ai/configuration/access/api-qux/v24-api-guide-qux.md): This guide is for v2.4 of the Vectra REST API. For Vectra AI Platform (RUX) users, please see the v3.x REST API Guide.
- [v2.2 API guide (QUX)](https://docs.vectra.ai/configuration/access/api-qux/v22-api-guide-qux.md): This guide is for the v2.2 of the Vectra REST API. For Vectra AI Platform (RUX) users, please see the v3.x REST API Guide.
- [CLI (Vectra appliances)](https://docs.vectra.ai/configuration/access/cli-vectra-appliances.md): This article explores the commands available in the Command Line Interface (CLI) of Vectra appliances.
- [External Authentication (QUX)](https://docs.vectra.ai/configuration/access/external-authentication-qux.md): External authentication setup for QUX, including RADIUS, LDAP, and TACACS+ profile configuration.
- [RADIUS (QUX)](https://docs.vectra.ai/configuration/access/external-authentication-qux/radius-qux.md): Configure RADIUS authentication profiles in QUX and assign users to the appropriate external authentication profile.
- [LDAP (QUX)](https://docs.vectra.ai/configuration/access/external-authentication-qux/ldap-qux.md): Set up LDAP or Active Directory authentication for Vectra, including supported modes, setup steps, and user creation.
- [TACACS+ (QUX)](https://docs.vectra.ai/configuration/access/external-authentication-qux/tacacs-qux.md): Configure TACACS+ authentication profiles in QUX and migrate existing users to TACACS+ profiles with the API.
- [SAML SSO (RUX)](https://docs.vectra.ai/configuration/access/saml-sso-rux.md): SAML SSO configuration guides for RUX, including supported identity providers and setup workflows.
- [Any IdP SAML (RUX)](https://docs.vectra.ai/configuration/access/saml-sso-rux/any-idp-saml-rux.md): Enabling RUX (Respond UX) SAML SSO with any SAML 2.0 compliant Identity Provider (IdP).
- [ADFS SAML (RUX)](https://docs.vectra.ai/configuration/access/saml-sso-rux/adfs-saml-rux.md): Enabling RUX (Respond UX) SAML SSO with ADFS as the Identity Provider (IdP).
- [Entra ID (Azure AD) SAML (RUX)](https://docs.vectra.ai/configuration/access/saml-sso-rux/entra-id-azure-ad-saml-rux.md): Enabling RUX (Respond UX) SAML SSO with Entra ID (Azure AD) as the Identity Provider (IdP).
- [Keycloak SAML (RUX)](https://docs.vectra.ai/configuration/access/saml-sso-rux/keycloak-saml-rux.md): Enabling RUX (Respond UX) SAML SSO with Keycloak as the Identity Provider (IdP).
- [Okta SAML (RUX)](https://docs.vectra.ai/configuration/access/saml-sso-rux/okta-saml-rux.md): Enabling RUX (Respond UX) SAML SSO with Okta as the Identity Provider (IdP).
- [SAML SSO (QUX)](https://docs.vectra.ai/configuration/access/saml-sso-qux.md): SAML SSO configuration guides for QUX, including supported identity providers and profile setup workflows.
- [Any IdP SAML (QUX)](https://docs.vectra.ai/configuration/access/saml-sso-qux/any-idp-saml-qux.md): Enabling QUX (Quadrant UX) SAML SSO with any SAML 2.0 compliant Identity Provider (IdP).
- [ADFS SAML (QUX)](https://docs.vectra.ai/configuration/access/saml-sso-qux/adfs-saml-qux.md): Enabling QUX (Quadrant UX) SAML SSO with ADFS as the Identity Provider (IdP).
- [Entra ID (Azure AD) SAML (QUX)](https://docs.vectra.ai/configuration/access/saml-sso-qux/entra-id-azure-ad-saml-qux.md): Enabling QUX (Quadrant UX) SAML SSO with Entra ID (Azure AD) as the Identity Provider (IdP).
- [Okta SAML (QUX)](https://docs.vectra.ai/configuration/access/saml-sso-qux/okta-saml-qux.md): Enabling QUX (Quadrant UX) SAML SSO with Okta as the Identity Provider (IdP).
- [Ping Identity SAML (QUX)](https://docs.vectra.ai/configuration/access/saml-sso-qux/ping-identity-saml-qux.md): Enabling QUX (Quadrant UX) SAML SSO with Ping Identity as the Identity Provider (IdP).
- [Vectra remote support](https://docs.vectra.ai/configuration/access/vectra-remote-support.md): Configure and verify Vectra Remote Support for RUX and QUX, including VPN, UI, CLI, proxy, and connectivity requirements.
- [QUX deployments prior to v9.9](https://docs.vectra.ai/configuration/access/vectra-remote-support/qux-deployments-prior-to-v98.md): Remote support allows authorized Vectra personnel to connect to your Vectra (Brain). This article details how you can enable, disable, and verify the status of remote support.
- [RUX allow-list for UI and API](https://docs.vectra.ai/configuration/access/rux-allow-list-for-ui-and-api.md): Details about new allow list feature for RUX that limits access to customer configured IP ranges for both UI and API access and how to submit a ticket requesting it.
- [COVERAGE](https://docs.vectra.ai/configuration/coverage.md): Coverage configuration articles for brain setup, network identities, remote users, threat feeds, and related data sources.
- [Brain Setup](https://docs.vectra.ai/configuration/coverage/brain-setup.md): Brain setup guidance for configuring network coverage, identity context, and data sources in the Vectra platform.
- [IP address classfication](https://docs.vectra.ai/configuration/coverage/brain-setup/ip-address-classfication.md): Configure IP address classifications in RUX and QUX to improve network context and detection accuracy.
- [Network Identities (WELI)](https://docs.vectra.ai/configuration/coverage/network-identities-weli.md): Windows Event Log Ingestion guidance for adding network identity context through WELI and supported forwarding options.
- [Windows Event Log Ingestion (WELI)](https://docs.vectra.ai/configuration/coverage/network-identities-weli/windows-event-log-ingestion-weli.md): Configure WELI to send Kerberos security events to Vectra for PAA detections, Host ID enrichment, and investigation metadata.
- [WELI via NXLog](https://docs.vectra.ai/configuration/coverage/network-identities-weli/weli-via-nxlog.md): Configure NXLog forwarding for Windows Event Log Ingestion to provide identity context and Host ID data to Vectra.
- [WELI Splunk (Raw TCP / XML) configuration](https://docs.vectra.ai/configuration/coverage/network-identities-weli/weli-splunk-raw-tcp-xml-configuration.md): Windows Event Log Ingestion - Collecting Security Events with Splunk Universal Forwarders and sending data to Vectra in Raw TCP / XML format.
- [WELI Splunk (syslog / legacy) configuration](https://docs.vectra.ai/configuration/coverage/network-identities-weli/weli-splunk-syslog-legacy-configuration.md): Configure legacy Splunk syslog forwarding for WELI when XML-based ingestion is not available.
- [Remote Users](https://docs.vectra.ai/configuration/coverage/remote-users.md): Remote user coverage guides for SASE, SSE, VPN, Zscaler, Netskope, and log ingestion options.
- [Remote users (SASE / SSE)](https://docs.vectra.ai/configuration/coverage/remote-users/remote-users-sase-sse.md): Understand SASE and SSE remote user coverage options, including supported Zscaler and Netskope deployment patterns.
- [Netskope Cloud TAP](https://docs.vectra.ai/configuration/coverage/remote-users/netskope-cloud-tap.md): Configure Netskope Cloud TAP with Vectra NDR, including vSensor setup, SASE IP remapping, and Stitcher deployment guidance for AWS/Azure.
- [Zscaler ZIA](https://docs.vectra.ai/configuration/coverage/remote-users/zscaler-zia.md): This article discusses Vectra\'s support of Zscaler Internet Access (ZIA) and provides details for use with both PCAP ingestion and on-prem capture.
- [Zscaler ZPA](https://docs.vectra.ai/configuration/coverage/remote-users/zscaler-zpa.md): Configure Zscaler ZPA log ingestion so Vectra can attribute private application traffic to remote users.
- [Zscaler ZPA log ingestion via QRadar](https://docs.vectra.ai/configuration/coverage/remote-users/zscaler-zpa-log-ingestion-via-qradar.md): Forward Zscaler ZPA LSS logs from QRadar to Vectra for remote user attribution and traffic visibility.
- [Optimizing Vectra for use with VPN clients](https://docs.vectra.ai/configuration/coverage/remote-users/optimizing-vectra-for-use-with-vpn-clients.md): How to optimize Vectra observability for VPN clients by using Sensor placement, SASE/SSE integration, EDR integration, Windows Event Log Ingestion, and rDNS.
- [Threat Feeds](https://docs.vectra.ai/configuration/coverage/threat-feeds.md): Threat feed configuration articles for external STIX feeds and Vectra-managed threat intelligence.
- [External threat intel integration](https://docs.vectra.ai/configuration/coverage/threat-feeds/external-threat-intel-integration.md): Configure external STIX 1.2 threat feeds so Vectra can detect malicious IPs, domains, URLs, and user agents.
- [Vectra threat intelligence](https://docs.vectra.ai/configuration/coverage/threat-feeds/vectra-threat-intelligence.md): Learn how Vectra Threat Intel works, who can use it, and how to investigate threat intelligence matches.
- [Asset Inventory coverage best practices](https://docs.vectra.ai/configuration/coverage/asset-inventory-coverage-best-practices.md): Techniques and advice to help ensure good coverage for Asset Inventory, HostID, detections, and metadata used in investigations.
- [RESPONSE](https://docs.vectra.ai/configuration/response.md): Response configuration articles for lockdown actions, notifications, SIEM, SOAR, and ticketing integrations.
- [Lockdown](https://docs.vectra.ai/configuration/response/lockdown.md): Lockdown response options for accounts, hosts, and network traffic in supported Vectra deployments.
- [Active Directory Account Lockdown](https://docs.vectra.ai/configuration/response/lockdown/active-directory-account-lockdown.md): Configure and use Active Directory Account Lockdown, including permissions, automatic thresholds, notifications, API usage, and protected account caveats.
- [Active Directory Account Lockdown custom configuration](https://docs.vectra.ai/configuration/response/lockdown/active-directory-account-lockdown-custom-configuration.md): This article details new Account Lockdown custom configuration options that are available in v8.2+ of Vectra software.
- [Entra ID (Azure AD) Account Lockdown (RUX)](https://docs.vectra.ai/configuration/response/lockdown/entra-id-azure-ad-account-lockdown-rux.md): FAQ for Entra ID account lockdown in RUX, including availability, behavior, and response workflows.
- [Host Lockdown (EDR)](https://docs.vectra.ai/configuration/response/lockdown/host-lockdown-edr.md): Frequently asked questions about Host Lockdown which uses an integrated EDR to isolate a host as a response action.
- [Traffic Lockdown](https://docs.vectra.ai/configuration/response/lockdown/traffic-lockdown.md): Enable Traffic Lockdown to publish compromised host IPs to a firewall-consumable blocklist for network containment.
- [Notifications](https://docs.vectra.ai/configuration/response/notifications.md): Notification configuration for syslog, Kafka, external app alerts, and system health alerts.
- [External app alerts (webhook)](https://docs.vectra.ai/configuration/response/notifications/external-app-alerts-webhook.md): Configure webhook-based alert destinations for Vectra prioritization and system alerts in tools like Microsoft Teams.
- [Syslog guide (QUX)](https://docs.vectra.ai/configuration/response/notifications/syslog-guide-qux.md): Configure QUX syslog forwarding for scoring, detections, campaigns, audit logs, and system health alerts.
- [Syslog sending to Kafka](https://docs.vectra.ai/configuration/response/notifications/syslog-sending-to-kafka.md): Configure Kafka as a syslog destination for Vectra notifications, including bootstrap server and topic settings.
- [Syslog and Kafka message size limits (QUX)](https://docs.vectra.ai/configuration/response/notifications/syslog-and-kafka-message-size-limits-qux.md): Understand syslog and Kafka message truncation limits and how 16 KB log size caps can affect forwarded event fields.
- [System alerts](https://docs.vectra.ai/configuration/response/notifications/system-alerts.md): Review Vectra system health alerts for sensor connectivity, capture interfaces, disk health, bandwidth drops, and packet processing.
- [SIEM](https://docs.vectra.ai/configuration/response/siem.md): SIEM integration guides for forwarding Vectra detections, entity data, and telemetry to supported security platforms.
- [Microsoft Sentinel SIEM integration (RUX)](https://docs.vectra.ai/configuration/response/siem/azure-sentinel-siem-integration-rux.md): Deploy the Microsoft Sentinel (formerly Azure Sentinel) integration for Vectra Respond UX (package v3.3.0), including ingestion, workbooks, analytics rules, and playbooks.
- [Microsoft Sentinel SIEM Codeless Connector Framework (RUX)](https://docs.vectra.ai/configuration/response/siem/microsoft-sentinel-siem-codeless-connector-framework-rux.md)
- [Vectra RUX Playbooks for Microsoft Sentinel CCF](https://docs.vectra.ai/configuration/response/siem/vectra-rux-playbooks-for-microsoft-sentinel-ccf.md)
- [Vectra RUX Best Practices for Microsoft Sentinel CCF](https://docs.vectra.ai/configuration/response/siem/vectra-rux-best-practices-for-microsoft-sentinel-ccf.md): Operate the Vectra AI integration with Microsoft Sentinel after deploying the connector, analytics rules, workbook, and playbooks.
- [Microsoft Sentinel NDR (Detect) integration using AMA](https://docs.vectra.ai/configuration/response/siem/microsoft-sentinel-ndr-detect-integration-using-ama.md): Deploy or migrate Vectra Detect syslog CEF ingestion to Microsoft Sentinel using Azure Monitor Agent (AMA), including Logstash transformation and troubleshooting.
- [Azure Sentinel Stream integration using AMA](https://docs.vectra.ai/configuration/response/siem/azure-sentinel-stream-integration-using-ama.md): Deploy and configure the Vectra Stream app for Microsoft Sentinel using Azure Monitor Agent.
- [Azure Sentinel Stream integration using OMS (Deprecated)](https://docs.vectra.ai/configuration/response/siem/azure-sentinel-stream-integration-using-oms.md): Deprecated guide for sending Vectra Stream Raw JSON to Microsoft Sentinel via the OMS (Log Analytics) agent and a Linux collector.
- [Crowdstrike Next-Gen SIEM integration (RUX)](https://docs.vectra.ai/configuration/response/siem/crowdstrike-next-gen-siem-integration-rux.md): Ingest Vectra entity scoring events, detection events, and audit events from Vectra Respond UX.
- [Crowdstrike Next-Gen SIEM integration (QUX)](https://docs.vectra.ai/configuration/response/siem/crowdstrike-nextgen-siem-integration-qux.md): Send Vectra Detect (QUX) logs to CrowdStrike NextGen-SIEM via a log collector and HEC, using the provided parser and setup guide.
- [Google SecOps SIEM integration (QUX)](https://docs.vectra.ai/configuration/response/siem/google-secops-siem-integration-qux.md): Ingest and parse Vectra Detect (QUX) syslog into Google SecOps SIEM for detections, entities, and audit/health/lockdown data.
- [Google SecOps SIEM integration (RUX)](https://docs.vectra.ai/configuration/response/siem/google-secops-siem-integration-rux.md): Integrate Vectra Respond UX (RUX) with Google SecOps SIEM using the Vectra API, with a deployment guide and configuration template.
- [Google SecOps SIEM Stream integration](https://docs.vectra.ai/configuration/response/siem/google-secops-siem-stream-integration.md): Forward Vectra Stream security-enriched metadata to Google SecOps SIEM via syslog, using the provided implementation guide.
- [QRadar SIEM integration (RUX)](https://docs.vectra.ai/configuration/response/siem/qradar-siem-integration-rux.md): Install and configure the QRadar integration for RUX, including API clients, workflows, and log source requirements.
- [QRadar SIEM Integration (QUX)](https://docs.vectra.ai/configuration/response/siem/qradar-siem-integration-qux.md): Install and configure the QRadar integration for QUX, including the Vectra Detect app, syslog log source setup, dashboards, saved searches, and troubleshooting.
- [Splunk On-Prem SIEM / Vectra integration guide (start here for RUX)](https://docs.vectra.ai/configuration/response/siem/splunk-siem-vectra-integration-guide-start-here-for-rux.md): Start here for Splunk integration with Vectra Respond UX, including supported add-ons/apps, install matrix, API client setup, and data inputs.
- [Splunk Cloud SIEM / Vectra integration guide (start here for RUX)](https://docs.vectra.ai/configuration/response/siem/splunk-siem-vectra-integration-guide-start-here-for-rux-1.md): Start here for Splunk Cloud integration with Vectra Respond UX, including supported add-ons/apps, install matrix, API client setup, and data inputs.
- [Splunk SIEM / Vectra integration guide (start here for QUX)](https://docs.vectra.ai/configuration/response/siem/splunk-siem-vectra-integration-guide-start-here-for-qux.md): This article serves as the starting point for Vectra\'s various integrations with Splunk. Read this prior to any other articles regarding Splunk integration.
- [Splunk - Vectra Detect Add-On and Syslog Configuration (QUX)](https://docs.vectra.ai/configuration/response/siem/splunk-vectra-detect-add-on-and-syslog-configuration-qux.md): Install the Technology Add-on for Vectra Detect (JSON) and configure Detect syslog so Splunk parses events into the correct sourcetypes.
- [Splunk - Vectra Detect Integration Steps (QUX)](https://docs.vectra.ai/configuration/response/siem/splunk-vectra-detect-integration-steps-qux.md): End-to-end steps for integrating Vectra Detect (QUX) with Splunk, including which add-ons to install and how to configure the Detect app macro.
- [Splunk TA - Changing from CEF to JSON for Vectra Detect (QUX)](https://docs.vectra.ai/configuration/response/siem/splunk-ta-changing-from-cef-to-json-for-vectra-detect-qux.md): Migrate Splunk ingestion for Vectra Detect from legacy CEF syslog to full JSON using the new TA, with install, configuration, and validation steps.
- [Splunk - Vectra SaaS Add-on Configuration (QUX)](https://docs.vectra.ai/configuration/response/siem/splunk-vectra-saas-add-on-configuration-qux.md): Install and configure the Vectra SaaS add-on for Splunk, including API client details, proxy options, and data inputs for scoring and detections.
- [SOAR](https://docs.vectra.ai/configuration/response/soar.md): SOAR integration guides for connecting Vectra with Google SecOps, XSOAR, Splunk SOAR, and ServiceNow SIR.
- [Google SecOps SOAR integration (RUX)](https://docs.vectra.ai/configuration/response/soar/google-secops-soar-integration-rux.md): Install the Google SecOps SOAR integration for RUX, including actions, connector, job, and supported use cases.
- [Google SecOps SOAR integration (QUX)](https://docs.vectra.ai/configuration/response/soar/google-secops-soar-integration-qux.md): Install the Google SecOps SOAR integration for QUX, including actions, connector, job, and supported use cases.
- [Palo Alto XSOAR integration (QUX)](https://docs.vectra.ai/configuration/response/soar/palo-alto-xsoar-integration-qux.md): Configure Palo Alto XSOAR for QUX deployments, including content pack guidance and supported integration differences.
- [Palo Alto XSOAR integration (RUX)](https://docs.vectra.ai/configuration/response/soar/palo-alto-xsoar-integration-rux.md): Configure Palo Alto XSOAR for RUX deployments, including content pack details and UX-specific implementation notes.
- [Splunk SOAR integration (RUX)](https://docs.vectra.ai/configuration/response/soar/splunk-soar-integration-rux.md): Install and configure the Splunk SOAR app for RUX, including assets, actions, playbooks, and troubleshooting.
- [Splunk SOAR integration (QUX)](https://docs.vectra.ai/configuration/response/soar/splunk-soar-integration-qux.md): Install and configure the Splunk SOAR app for QUX, including assets, actions, playbooks, and troubleshooting.
- [ServiceNow SIR SOAR integration (RUX)](https://docs.vectra.ai/configuration/response/soar/servicenow-sir-soar-integration-rux.md): Configure the ServiceNow SIR SOAR integration for RUX and review supported ServiceNow platform versions.
- [ServiceNow SIR SOAR integration (QUX)](https://docs.vectra.ai/configuration/response/soar/servicenow-sir-soar-integration-qux.md): Configure the ServiceNow SIR SOAR integration for QUX, including compatibility, setup, actions, and limitations.
- [Palo Alto XSOAR-XSIAM Integration (RUX)](https://docs.vectra.ai/configuration/response/soar/palo-alto-xsoar-xsiam-integration-rux.md): Deploy the Palo Alto Cortex XSOAR/XSIAM integration for RUX, including incident mirroring, lifecycle sync, commands, and operational guidance.
- [Ticketing / CMDB](https://docs.vectra.ai/configuration/response/ticketing.md): Ticketing integration guides for ServiceNow ITSM and CMDB workflows with the Vectra platform.
- [ServiceNow ITSM ticketing integration (RUX)](https://docs.vectra.ai/configuration/response/ticketing/servicenow-itsm-ticketing-integration-rux.md): Configure ServiceNow ITSM ticketing for RUX and review supported ServiceNow platform versions.
- [ServiceNow ITSM ticketing integration (QUX)](https://docs.vectra.ai/configuration/response/ticketing/servicenow-itsm-ticketing-integration-qux.md): Configure ServiceNow ITSM ticketing for QUX, including MID Server setup, users, profiles, entities, and actions.
- [ServiceNow CMDB integration (RUX)](https://docs.vectra.ai/configuration/response/ticketing/servicenow-cmdb-integration-rux.md): Integrate Vectra asset discovery with ServiceNow CMDB to enrich asset records and security context.
- [SETUP](https://docs.vectra.ai/configuration/setup.md): Setup articles for account association, backup and restore, EDR integrations, external connectors, and proxies.
- [Account Association](https://docs.vectra.ai/configuration/setup/account-association.md): Link accounts across network, M365, Entra ID, Azure, and AWS activity to track attacks across identities and hosts.
- [EDR Integrations](https://docs.vectra.ai/configuration/setup/edr-integrations.md): EDR integration guides for adding endpoint context from supported providers to Vectra investigations.
- [Microsoft Defender for Endpoint](https://docs.vectra.ai/configuration/setup/edr-integrations/microsoft-defender-for-endpoint.md): Microsoft Defender for Endpoint FAQ, formerly Microsoft Defender ATP
- [Carbon Black Response](https://docs.vectra.ai/configuration/setup/edr-integrations/carbon-black-response.md): How to configure Carbon Black Response (On-Prem) integration
- [Carbon Black Cloud](https://docs.vectra.ai/configuration/setup/edr-integrations/carbon-black-cloud.md): Integrate Carbon Black Cloud EDR with Vectra to enrich hosts with endpoint context for investigations.
- [Trellix (FireEye) Endpoint Security (HX)](https://docs.vectra.ai/configuration/setup/edr-integrations/trellix-fireeye-endpoint-security-hx.md): Integrate Trellix FireEye Endpoint Security HX with Vectra to add host context and support response workflows.
- [SentinelOne](https://docs.vectra.ai/configuration/setup/edr-integrations/sentinelone.md): Integrate SentinelOne EDR with Vectra for Host Lockdown, host details, and Host ID enrichment.
- [Cybereason](https://docs.vectra.ai/configuration/setup/edr-integrations/cybereason.md): Integrate Cybereason EDR with Vectra to add endpoint host context for investigations and response.
- [Crowdstrike](https://docs.vectra.ai/configuration/setup/edr-integrations/crowdstrike.md): Integrate CrowdStrike EDR with Vectra for EDR process stitching, Host Lockdown, host details, and Host ID enrichment.
- [External Connectors](https://docs.vectra.ai/configuration/setup/external-connectors.md): External connector setup for host identity, cloud, Active Directory, vCenter, SIEM log ingestion, and related integrations.
- [Active Directory](https://docs.vectra.ai/configuration/setup/external-connectors/active-directory.md): Integrate Active Directory with Vectra NDR for host identity context in RUX and QUX deployments.
- [AWS Host ID integration](https://docs.vectra.ai/configuration/setup/external-connectors/aws-hostid-integration.md): This article goes over the AWS Host ID integration available for Vectra AI NDR deployments that see traffic from AWS VPCs.
- [Azure Host ID integration](https://docs.vectra.ai/configuration/setup/external-connectors/azure-hostid-integration.md): This article goes over the Azure Host ID integration available for Vectra AI NDR deployments that see traffic from Azure virtual networks.
- [GCP Host ID integration](https://docs.vectra.ai/configuration/setup/external-connectors/gcp-hostid-integration.md): This article goes over the GCP Host ID integration available for Vectra AI NDR deployments that capture traffic from GCP VPCs.
- [SIEM (Vectra Brain ingesting logs)](https://docs.vectra.ai/configuration/setup/external-connectors/siem-vectra-brain-ingesting-logs.md): Configure SIEM event forwarding to Vectra Brain for DHCP and selected Windows event log ingestion use cases.
- [vCenter integration (VMware)](https://docs.vectra.ai/configuration/setup/external-connectors/vcenter-integration-vmware.md): Configure the Vectra Brain to query the VMware vCenter API (read-only) for infrastructure visibility and vSensor planning.
- [Proxies](https://docs.vectra.ai/configuration/setup/proxies.md): This article is designed to assist in understanding how Vectra appliances interact with proxy systems.
- [TUNING](https://docs.vectra.ai/configuration/tuning.md): Tuning guidance for triage filters, AD groups, dynamic groups, and reducing noise from known benign scanning.
- [Triage best practices](https://docs.vectra.ai/configuration/tuning/triage-best-practices.md): Use triage filters to manage known detection behavior, improve scoring precision, and reduce repetitive alert review.
- [Active Directory (AD) groups](https://docs.vectra.ai/configuration/tuning/active-directory-ad-groups.md): Create and manage Active Directory groups in Vectra to simplify triage filters and influence entity urgency scoring.
- [Dynamic groups](https://docs.vectra.ai/configuration/tuning/dynamic-groups.md): How to create and manage dynamic groups that are based on regular expressions (regex) along with FAQs.
- [Creating triage filters via API](https://docs.vectra.ai/configuration/tuning/creating-triage-filters-via-api.md): Create and manage triage filters through the Vectra API, with examples for QUX API v2.5.
- [Noise elimination for Tanium and other mesh scanners](https://docs.vectra.ai/configuration/tuning/noise-elimination-for-tanium-and-other-mesh-scanners.md): Reduce benign detection noise from Tanium and other full-mesh scanners with targeted tuning recommendations.
- [QUX specific](https://docs.vectra.ai/configuration/qux-specific.md): QUX-specific configuration articles for SSL certificates, digest emails, login captions, and SMTP settings.
- [SSL certificate installation](https://docs.vectra.ai/configuration/qux-specific/ssl-certificate-installation.md): This article discusses SSL certificate options for Quadrant UX deployments. For RUX deployments, the cert used to support the GUI is fully managed by Vectra only.
- [Digest emails](https://docs.vectra.ai/configuration/qux-specific/digest-emails.md): Digest Emails provide a feature to send a summary of detections count per category in for last 24 hours
- [Login caption](https://docs.vectra.ai/configuration/qux-specific/login-caption.md): Create and manage a login caption in Vectra Quadrant UX.
- [SMTP configuration (QUX)](https://docs.vectra.ai/configuration/qux-specific/smtp-configuration-qux.md): Configure SMTP on QUX Brain appliances to send email alert notifications.
- [Analyst Guidance](https://docs.vectra.ai/operations/analyst-guidance.md): Analyst workflow guidance and quick links for investigations, testing, and reporting.
- [New close workflow](https://docs.vectra.ai/operations/analyst-guidance/new-close-workflow.md): The New Close Workflow is used to close, resolve, assign, and provide report data for detections and entities.
- [Assignnment workflow FAQ](https://docs.vectra.ai/operations/analyst-guidance/assignnment-workflow-faq-prior-to-new-close-workflow.md): FAQ for legacy and new assignment/close workflows, including creating, changing, deleting, and closing assignments.
- [Understanding Vectra AI detections](https://docs.vectra.ai/operations/analyst-guidance/understanding-vectra-ai-detections.md): Understand Vectra AI detection models and the behaviors they identify.
- [Monitoring honeypot (honeytoken) identities](https://docs.vectra.ai/operations/analyst-guidance/monitoring-honeypot-honeytoken-identities.md): Monitor honeypot identities with Vectra Threat Intel to detect activity over RDP, SMB, RPC, NTLM, and Kerberos.
- [Triggering detections for testing purposes](https://docs.vectra.ai/operations/analyst-guidance/triggering-detections-for-testing-purposes.md): This article shows some ways to trigger a Cyptocurrency Mining (like Bitcoin mining for example) or Brute-Force Detection to quickly see if your system is working properly.
- [TCP reset does not stop modern attacks](https://docs.vectra.ai/operations/analyst-guidance/tcp-reset-does-not-stop-modern-attacks.md): Understand why TCP reset is unreliable for modern attacks and review Vectra response and containment options.
- [CDR (Detect) for AWS detection test guide](https://docs.vectra.ai/operations/analyst-guidance/cdr-detect-for-aws-detection-test-guide.md): Run an AWS detection test lab with CloudGoat and Pacu to validate CDR for AWS detections in Vectra.
- [Recall best practices guide](https://docs.vectra.ai/operations/analyst-guidance/recall-best-practices-guide.md): A guide to understand best practices & recommendations to get the most out of Recall in a fast and efficient way.
- [Investigate Quick Start Guide (prior to SQL search)](https://docs.vectra.ai/operations/analyst-guidance/investigate-quick-start-guide-prior-to-sql-search.md): Use the pre-SQL Investigate quick start to build queries, adjust filters, modify columns, and review cloud activity examples.
- [Advanced search reference guide (QUX)](https://docs.vectra.ai/operations/analyst-guidance/advanced-search-reference-guide-qux.md): Use Advanced Search in QUX to investigate activity and build effective queries.
- [Recall custom models - how to create detections (QUX)](https://docs.vectra.ai/operations/analyst-guidance/recall-custom-models-how-to-create-detections-qux.md): Create Recall custom models in QUX to generate detections from saved searches, signatures, indicators, and policy checks.
- [Crowdstrike EDR process correlation user guide](https://docs.vectra.ai/operations/analyst-guidance/crowdstrike-edr-process-correlation-user-guide.md): Configure CrowdStrike EDR process correlation to add endpoint process context to network detections.
- [Microsoft Defender EDR process correlation user guide](https://docs.vectra.ai/operations/analyst-guidance/microsoft-defender-edr-process-correlation-user-guide.md): Configure Microsoft Defender for Endpoint (MDE) process correlation to add endpoint process context to network detections.
- [Vectra self-detection events](https://docs.vectra.ai/operations/analyst-guidance/vectra-self-detection-events.md): Explains expected Vectra cloud/update/metadata-sharing traffic and why it may trigger Hidden HTTPS Tunnel, Multi-home fronted tunnel, or Smash and Grab detections.
- [Key asset treatment (QUX)](https://docs.vectra.ai/operations/analyst-guidance/key-asset-treatment-qux.md): Mark and monitor key assets in QUX so high-value hosts stand out in filters, detections, dashboards, and notifications.
- [Exposure Findings - best practices guide](https://docs.vectra.ai/operations/analyst-guidance/exposure-findings-best-practices-guide.md): Use Exposure Findings to identify, prioritize, and reduce attack surface risk from exposed assets and risky communications.
- [Asset Inventory getting started (private preview)](https://docs.vectra.ai/operations/analyst-guidance/asset-inventory-getting-started-private-preview.md): Getting Started with Asset Inventory: Understanding What's On Your Network - Private Preview
- [Updates](https://docs.vectra.ai/operations/readme-1.md): Update guidance for Vectra appliances, including offline updates and troubleshooting upgrade status.
- [Offline updates (v8.9+)](https://docs.vectra.ai/operations/readme-1/offline-updates-v89.md): Use offline update packages for air-gapped QUX deployments running version 8.9 or later.
- [Offline updates (prior to v8.9)](https://docs.vectra.ai/operations/readme-1/offline-updates-prior-to-v89.md): Use legacy offline update procedures for QUX deployments running Vectra software earlier than version 8.9.
- [Troubleshooting updates](https://docs.vectra.ai/operations/readme-1/troubleshooting-updates.md): Troubleshoot Vectra appliance upgrades by checking versions, upgrade status, sensor versions, and version pinning.
- [Dashboards and Reports](https://docs.vectra.ai/operations/dashboards-and-reports.md): Dashboard and report guidance for operational, executive, Recall, and custom reporting views.
- [Operational Overview report guidance](https://docs.vectra.ai/operations/dashboards-and-reports/operational-overview-report-guidance.md): Use the Operational Overview report to communicate detection trends, team performance, and operational value.
- [Executive Overview report guidance](https://docs.vectra.ai/operations/dashboards-and-reports/executive-overview-report-guidance.md): Use the Executive Overview report to brief security leaders on alert noise reduction, threat trends, and business-level outcomes.
- [Recall](https://docs.vectra.ai/operations/dashboards-and-reports/recall.md): Recall dashboard guides for certificate expiry, Netlogon exploit visibility, host activity, and related metadata views.
- [Recall certificate expiry dashboard](https://docs.vectra.ai/operations/dashboards-and-reports/recall/recall-certificate-expiry-dashboard.md): Use the Recall certificate expiry dashboard to track certificates expiring in the next 7, 30, and 60 days.
- [Recall Netlogon exploit visibility dashboard](https://docs.vectra.ai/operations/dashboards-and-reports/recall/recall-netlogon-exploit-visibility-dashboard.md): Use the Recall Netlogon exploit visibility dashboard to investigate traffic related to the Netlogon vulnerability.
- [Recall host dashboard](https://docs.vectra.ai/operations/dashboards-and-reports/recall/recall-host-dashboard.md): Use the Recall host dashboard to review historical metadata and activity for a selected host.
- [Detection specific guidance](https://docs.vectra.ai/operations/detection-specific-guidance.md): Detection-specific guidance for interpreting selected Vectra detections, behaviors, and investigation context.
- [Suspicious Remote Desktop](https://docs.vectra.ai/operations/detection-specific-guidance/suspicious-remote-desktop.md): Understand the Suspicious Remote Desktop detection model and the RDP behavior patterns it identifies.
- [Hidden HTTPS Tunnel - detection showing proxy IP as target](https://docs.vectra.ai/operations/detection-specific-guidance/hidden-https-tunnel-detection-showing-proxy-ip-as-target.md): Understand why Hidden HTTPS Tunnel detections may show a proxy IP as the target and where to find the destination domain.
- [Data Gathering - detected between Brain and Sensor](https://docs.vectra.ai/operations/detection-specific-guidance/data-gathering-detected-between-brain-and-sensor.md): Vectra detected data gathering between the brain and the sensor, triggering an alert.
- [Suspect Protocol Activity detection descriptions](https://docs.vectra.ai/operations/detection-specific-guidance/suspect-protocol-activity-detection-descriptions.md): This page will explain the different Suspect Protocol Activity (SPA) detections which can appear in the platform and serves as one pager content for the SPA detections.
- [Turla and Snake malware](https://docs.vectra.ai/operations/detection-specific-guidance/turla-and-snake-malware.md): Vectra Notice: Turla and Snake Malware
- [Suspicious Remote Execution](https://docs.vectra.ai/operations/detection-specific-guidance/suspicious-remote-execution.md): Understand the Suspicious Remote Execution detection model and how it identifies suspicious RPC-based remote execution.
- [Intel AMT (Active Management Technology) detections](https://docs.vectra.ai/operations/detection-specific-guidance/intel-amt-active-management-technology-detections.md): Review Vectra coverage for Intel AMT CVE-2017-5689 activity and related detection behavior.
- [Licensing](https://docs.vectra.ai/operations/licensing.md): Licensing guidance for Vectra products, including metrics and license-related reference information.
- [Vectra licensing metrics (all products)](https://docs.vectra.ai/operations/licensing/vectra-licensing-metrics-all-products.md): Review the licensing metrics used across Vectra products.
- [Backup / Restore / DR](https://docs.vectra.ai/operations/backup-restore-dr.md): Backup, restore, disaster recovery, and migration guidance for Vectra Brain appliances.
- [Backup and restore (v8.5+)](https://docs.vectra.ai/operations/backup-restore-dr/backup-and-restore-v85.md): Backup and restore guidance for Vectra Brain appliances running version 8.5 or later.
- [Introduction and changes](https://docs.vectra.ai/operations/backup-restore-dr/backup-and-restore-v85/introduction-and-changes.md): Backup and Restore introduction and changes from earlier versions.
- [Backup and restore FAQ](https://docs.vectra.ai/operations/backup-restore-dr/backup-and-restore-v85/backup-and-restore-faq.md): Frequently asked questions about backup and restore.
- [Migration from earlier versions](https://docs.vectra.ai/operations/backup-restore-dr/backup-and-restore-v85/migration-from-earlier-versions.md): Guidance for customers migrating from earlier versions of backup and restore.
- [Scheduling backups and running manual backups](https://docs.vectra.ai/operations/backup-restore-dr/backup-and-restore-v85/scheduling-and-manual-backups.md): How to schedule backups and run backups manually.
- [Configuring external targets](https://docs.vectra.ai/operations/backup-restore-dr/backup-and-restore-v85/configuring-external-targets.md): How to configure external targets including SCP, SFTP, and S3. Brain to Brain backups. Rotating old backups. Testing, renaming, and removing external backup targets.
- [Restoring backups](https://docs.vectra.ai/operations/backup-restore-dr/backup-and-restore-v85/restoring-backups.md): Guidance for restoring backups and deleting older backup versions.
- [Troubleshooting and additional commands](https://docs.vectra.ai/operations/backup-restore-dr/backup-and-restore-v85/troubleshooting-and-additional-commands.md): Additional backup and restore related commands and troubleshooting advice.
- [All commands (syntax examples)](https://docs.vectra.ai/operations/backup-restore-dr/backup-and-restore-v85/all-commands-syntax-examples.md): Examples of all backup and restore related commands.
- [Disaster recovery and migration (v8.5+)](https://docs.vectra.ai/operations/backup-restore-dr/disaster-recovery-and-migration-v85.md): Plan disaster recovery and Brain migration for Vectra deployments running version 8.5 or later.
- [DR (Disaster Recover) process](https://docs.vectra.ai/operations/backup-restore-dr/disaster-recovery-and-migration-v85/dr-disaster-recover-process.md): Follow the disaster recovery process for restoring a Brain backup to a target appliance during failover.
- [Migration process](https://docs.vectra.ai/operations/backup-restore-dr/disaster-recovery-and-migration-v85/migration-process.md): Follow the migration process for moving from an existing Brain to a replacement or upgraded Brain appliance.
- [Legacy details prior to v8.5](https://docs.vectra.ai/operations/backup-restore-dr/legacy-details-prior-to-v8.5.md): Legacy backup, restore, disaster recovery, and migration guidance for Vectra versions prior to 8.5.
- [Backup / Restore (prior to v8.5)](https://docs.vectra.ai/operations/backup-restore-dr/legacy-details-prior-to-v8.5/backup-restore-prior-to-v85.md): Restore backups in Vectra versions prior to 8.5.
- [Disaster recovery process (prior to v8.5)](https://docs.vectra.ai/operations/backup-restore-dr/legacy-details-prior-to-v8.5/disaster-recovery-process-prior-to-v85.md): Plan disaster recovery for Cognito deployments running versions prior to 8.5.
- [Migrating to new Brain (prior to v8.5)](https://docs.vectra.ai/operations/backup-restore-dr/legacy-details-prior-to-v8.5/migrating-to-new-brain-prior-to-v85.md): Migrate to a new Brain appliance in Vectra versions prior to 8.5.
- [Investigate](https://docs.vectra.ai/operations/investigate.md): Investigate guides for AI-assisted search, SQL search, API usage, metadata, and investigation workflows.
- [AI-Assisted Search](https://docs.vectra.ai/operations/investigate/ai-assisted-search.md): Use AI Assisted Search to ask investigation questions in plain language and get context-rich answers and next steps.
- [SQL search](https://docs.vectra.ai/operations/investigate/sql-search.md): Accessing SQL Search, examples, syntax, fields, tables, operators, and functions supported.
- [Vectra AI Platform Investigate FAQ](https://docs.vectra.ai/operations/investigate/vectra-ai-platform-investigate-faq.md): FAQ for Vectra Investigate, including licensing, result limits, retention, search windows, and investigation workflows.
- [Investigate API user guide](https://docs.vectra.ai/operations/investigate/investigate-api-user-guide.md): Using the RUX Investigate (Metadata) API Manually (e.g., with Postman)
- [Investigate API metadata schema reference](https://docs.vectra.ai/operations/investigate/investigate-api-metadata-schema-reference.md): Available Tables and Fields for RUX Investigate (Metadata) API Queries
- [General](https://docs.vectra.ai/operations/general.md): General operations guidance for attack graphs, AI Triage, suspect protocol activity, and RUX portal links.
- [Attack Graph FAQ](https://docs.vectra.ai/operations/general/attack-graph-faq.md): This article details the Attack Graph feature for entities in the Vectra UI.
- [AI-Triage in Detail](https://docs.vectra.ai/operations/general/ai-triage-in-detail.md): Learn how AI Triage reviews detections, how it is enabled, and how behavior differs between RUX and QUX.
- [Suspect Protocol Activity detections (feature overview)](https://docs.vectra.ai/operations/general/suspect-protocol-activity-detections-feature-overview.md): Understand Suspect Protocol Activity detections, how they differ from Match, and how to manage SPA settings.
- [Using generic portal links (RUX)](https://docs.vectra.ai/operations/general/using-generic-portal-links-rux.md): Generic Portal Links take you to specific pages in your RUX UI after inputting your RUX URL or tenant ID.  You might find these links in Docs, KBs, blogs, or training materials.
- [Dark mode support for UI](https://docs.vectra.ai/operations/general/dark-mode-support-for-ui.md): How to enable dark mode and switch between light and dark modes.
- [AI and ML terminology](https://docs.vectra.ai/reference/ai-and-ml-terminology.md): Definitions for common AI/ML terms used in Vectra docs.
- [Vectra AI prioritization and scoring factors](https://docs.vectra.ai/reference/ai-driven-priortization-faq.md): FAQ for AI-driven Prioritization (Urgency scoring) in Respond UX.
- [Appliance support and EOS / EOL policy](https://docs.vectra.ai/reference/appliance-eos-eol-policy.md): Appliance support policies, End-of-Sale (EOS) announcements, and End-of-Sale/End-of-Life (EOL) dates for Vectra appliances.
- [Bandwidth used between Sensor and Brain](https://docs.vectra.ai/reference/bandwidth-used-between-sensor-and-brain.md): Expected bandwidth from Sensor to Brain and how to interpret low-bandwidth alerts.
- [How detection PCAPs are generated](https://docs.vectra.ai/reference/how-detection-pcaps-are-generated.md): This article discusses how Detection PCAPs are created as part of Detect for NDR. Selective PCAP is a different feature.
- [In-App support](https://docs.vectra.ai/reference/in-app-support.md): Enable and manage in-app support, including telemetry fields and outbound endpoints.
- [Metadata attributes](https://docs.vectra.ai/reference/metadata-attributes.md): Reference PDFs for Vectra network and cloud metadata fields.
- [Vectra AI Platform network metadata attributes](https://docs.vectra.ai/reference/metadata-attributes/vectra-ai-platform-network-metadata-attributes.md): The attached PDF document describes the Vectra AI Platform Network metadata.
- [Vectra AI Platform Azure metadata attributes](https://docs.vectra.ai/reference/metadata-attributes/vectra-ai-platform-azure-metadata-attributes.md): The attached pdf document describes the Vectra AI Platform Azure metadata; this metadata is available in Vectra\'s Respond UX (RUX) platform and visible in Investigate.
- [Vectra AI Platform AWS CloudTrail metadata attributes](https://docs.vectra.ai/reference/metadata-attributes/vectra-ai-platform-aws-cloudtrail-metadata-attributes.md): Review AWS CloudTrail metadata available in the Vectra AI Platform and visible in Investigate.
- [Vectra AI Platform Azure AD and M365 metadata attributes](https://docs.vectra.ai/reference/metadata-attributes/vectra-ai-platform-azure-ad-and-m365-metadata-attributes.md): Review Azure AD and M365 metadata available in RUX Advanced Investigations.
- [Product Security](https://docs.vectra.ai/reference/product-security.md): Product security statements and hardening guidance.
- [Vectra stance on LPE (Local Privilege Escalation) appliance vulnerabilities](https://docs.vectra.ai/reference/product-security/vectra-stance-on-lpe-local-privilege-escalation-appliance-vulnerabilities.md): Review Vectra's stance on local privilege escalation vulnerabilities affecting appliances.
- [Vectra statement on Ubuntu 20.04 LTS reaching EOL](https://docs.vectra.ai/reference/product-security/vectra-statement-on-ubuntu-2004-lts-reaching-eol.md): Review Vectra guidance for Ubuntu 20.04 LTS end of support on appliance base operating systems.
- [Detect for AWS compliance brief](https://docs.vectra.ai/reference/product-security/detect-for-aws-compliance-brief.md): Review how Vectra secures customer data for Detect for AWS.
- [Recall security and privacy statement](https://docs.vectra.ai/reference/product-security/recall-security-and-privacy-statement.md): Review the Recall security and privacy statement PDF.
- [Vectra hardening (appliances)](https://docs.vectra.ai/reference/product-security/vectra-hardening-appliances.md): How Vectra hardens appliances, including patching, encryption, and vulnerability management.
- [RSPAN and ERSPAN support](https://docs.vectra.ai/reference/rspan-and-erspan-support.md): RSPAN and ERSPAN compatibility for Vectra Sensors, including VLAN tag limits.
- [Host ID best practices and functionality](https://docs.vectra.ai/reference/understanding-vectra-host-naming.md): Understand Vectra Host ID, host naming behavior, and best practices for configuration and traffic engineering.
- [Vectra's coverage of MITRE ATT\&CK and D3FEND](https://docs.vectra.ai/reference/vectra-coverage-of-mitre-attandck-and-d3fend.md): See how Vectra maps detections to MITRE ATT\&CK v18 and supports MITRE D3FEND countermeasures, with navigator layers and export files.
- [Vectra UI supported browsers](https://docs.vectra.ai/reference/vectra-ui-supported-browsers.md): Supported browsers and version support policy for the Vectra UI.
- [Why is metadata sharing important](https://docs.vectra.ai/reference/why-is-metadata-sharing-important.md): How metadata sharing works, what data is shared, and why it matters.

## Release Notes

- [Release Notes](https://docs.vectra.ai/release-notes/readme.md)
- [2026 RUX Release Notes](https://docs.vectra.ai/release-notes/respond-ux-rux/2026-rux-release-notes.md)
- [2025 RUX Release Notes](https://docs.vectra.ai/release-notes/respond-ux-rux/2025-rux-release-notes.md)
- [2024 RUX Release Notes](https://docs.vectra.ai/release-notes/respond-ux-rux/2024-rux-release-notes.md)
- [2026 QUX Release Notes](https://docs.vectra.ai/release-notes/quadrant-ux-qux/2026-qux-release-notes.md)
- [2025 QUX Release Notes](https://docs.vectra.ai/release-notes/quadrant-ux-qux/2025-qux-release-notes.md)
- [Archived QUX Release Notes](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes.md)
- [v9.0 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-ai-platform-90-release-notes.md): Vectra AI Platform - 9.0 Release Notes with new Dynamic Group support of QUX and launch of High Performance GCP Brains
- [v8.10 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-ai-platform-810-release-notes.md)
- [v8.9 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-ai-platform-89-release-notes.md)
- [v8.8 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-ai-platform-88-release-notes.md)
- [v8.7 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-87-release-notes.md)
- [v8.6 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-86-release-notes.md)
- [v8.5 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-85-release-notes.md)
- [v8.4 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-84-release-notes.md)
- [v8.3 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-83-release-notes.md)
- [v8.2 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-82-release-notes.md)
- [v8.1 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-81-release-notes.md)
- [v8.0 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-80-release-notes.md)
- [v7.9 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-79-release-notes.md)
- [v7.8 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-78-release-notes.md)
- [v7.7 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-77-release-notes.md)
- [v7.6 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-76-release-notes.md)
- [v7.5 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-75-release-notes.md)
- [v7.4 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-74-release-notes.md)
- [v7.3 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-73-release-notes.md)
- [v7.2 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-72-release-notes.md)
- [v7.1 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-71-release-notes.md)
- [v7.0 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-70-release-notes.md)
- [v6.20 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-620-release-notes.md)
- [v6.19 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-detect-for-network-619-release-notes.md)
- [v6.18 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-cognito-618-release-notes.md): Cognito Version 6.18 Release Notes
- [v6.17 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-cognito-617-release-notes.md): Cognito Version 6.17 Release Notes
- [v6.16 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/v6.16-release-notes-qux.md)
- [v6.15 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/v6.15-release-notes-qux.md)
- [v6.14 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/v6.14-release-notes-qux.md)
- [v6.13 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/v6.13-release-notes-qux.md)
- [v6.12 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/v6.12-release-notes-qux.md)
- [v6.11 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-cognito-611-release-notes.md)
- [v6.10 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/v6.10-release-notes-qux.md)
- [v6.9 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-cognito-69-release-notes.md)
- [v6.8 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-cognito-68-release-notes.md)
- [v6.7 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-cognito-67-release-notes.md)
- [v6.6 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/v6.6-release-notes-qux.md)
- [v6.5 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-cognito-65-release-notes.md)
- [v6.4 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-cognito-64-release-notes.md)
- [v6.3 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-cognito-63-release-notes.md)
- [v6.2 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-cognito-62-release-notes.md)
- [v6.1 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-cognito-61-release-notes.md)
- [v6.0 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux/archived-qux-release-notes/vectra-cognito-60-release-notes.md)
- [Bug Fixes](https://docs.vectra.ai/release-notes/bug-fixes.md)
- [April 2026 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/april-2026-release-notes-rux.md)
- [Mar 2026 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/mar-2026-release-notes-rux.md)
- [Feb 2026 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/feb-2026-release-notes-rux.md): This release introduces an enhancement to the attack graph, as well as introduces dark mode capability.
- [Jan 2026 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/jan-2026-release-notes-rux.md): This release expands detection coverage, includes CVE fixes and other bug fixes.
- [Dec 2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/readme-1.md): December 2025 updates across Coverage, Clarity, and Control—new/refined detections, CrowdStrike EDR process correlation (private preview), and stronger Azure AD/Entra ID response.
- [Nov 2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/november-2025-release-notes.md): November 2025 release highlights—expanded native Cobalt Strike coverage, refined Kali/RMM detections, Traffic Lockdown (public preview), Operational Overview Report, and key admin updates.
- [Oct 2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/october-2025-release-notes.md): October 2025 highlights: Introducing AI-Assisted Search, AI Scoring Prioritization Agent, Groups Based on Active Directory Membership, New REST API Documentation Is Live API.
- [Sep 2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/september-2025-release-notes.md): September 2025 highlights: Sliver Command and Control Coverage, Azure Suspect VM Logging Change, Reduced Alert Volume with Enhanced AI-Triage, Attack Graph: Focused View.
- [Aug 2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/aug-2025-release-notes-rux.md)
- [Jul 2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/jul-2025-release-notes-rux.md)
- [Jun 2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/jun-2025-release-notes-rux.md)
- [May 2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/may-2025-release-notes.md)
- [Apr 2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/april-2025-release-notes.md)
- [Archived RUX Release Notes](https://docs.vectra.ai/release-notes/respond-ux-rux-1/archived-rux-release-notes.md)
- [2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/archived-rux-release-notes/2025-release-notes-rux.md)
- [Mar 2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/archived-rux-release-notes/2025-release-notes-rux/march-2025-release-notes.md)
- [Feb 2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/archived-rux-release-notes/2025-release-notes-rux/feb-2025-release-notes-rux.md)
- [Jan 2025 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/archived-rux-release-notes/2025-release-notes-rux/january-2025-release-notes.md)
- [2024 Release Notes (RUX)](https://docs.vectra.ai/release-notes/respond-ux-rux-1/archived-rux-release-notes/jan-dec-2024-release-notes-rux.md)
- [v9.11 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/v9.11-release-notes-qux.md)
- [v9.10 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/v9.10-release-notes-qux.md)
- [v9.9 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/v9.9-release-notes-qux.md)
- [v9.8 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/9.8-release-notes.md): 9.8: Rapid Release Improvements; Azure Detections; Traffic Lockdown; Operational Overview Report; Navigational Change; Syslog Cert Validation; SSH Login; GCP deployments via Terraform.
- [v9.7 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/9.7-release-notes.md): 9.7: Rapid Release Improvements, Groups Based on Active Directory Membership on Quadrant UX, AI Scoring Prioritization Agent, HTTPS-Only Access for iDRAC and Embryo Status Page.
- [v9.6 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/9.6-release-notes.md): 9.6 highlights: Netskope SASE Integration in Public Preview; Vectra Virtual Brain for Nutanix; JA4T/JA4TS Fingerprints; Attack Graph: Focused View; HTTPS-Only Access to Vectra UI.
- [v9.5 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/vectra-ai-platform-95-release-notes.md)
- [v9.4 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/vectra-ai-platform-94-release-notes.md)
- [v9.3 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/vectra-ai-platform-93-release-notes.md)
- [v9.2 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/vectra-ai-platform-92-release-notes.md)
- [v9.1 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/vectra-ai-platform-91-release-notes.md)
- [Archived QUX Release Notes](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes.md)
- [v9.0 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-ai-platform-90-release-notes.md): Vectra AI Platform - 9.0 Release Notes with new Dynamic Group support of QUX and launch of High Performance GCP Brains
- [v8.10 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-ai-platform-810-release-notes.md)
- [v8.9 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-ai-platform-89-release-notes.md)
- [v8.8 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-ai-platform-88-release-notes.md)
- [v8.7 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-87-release-notes.md)
- [v8.6 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-86-release-notes.md)
- [v8.5 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-85-release-notes.md)
- [v8.4 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-84-release-notes.md)
- [v8.3 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-83-release-notes.md)
- [v8.2 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-82-release-notes.md)
- [v8.1 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-81-release-notes.md)
- [v8.0 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-80-release-notes.md)
- [v7.9 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-79-release-notes.md)
- [v7.8 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-78-release-notes.md)
- [v7.7 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-77-release-notes.md)
- [v7.6 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-76-release-notes.md)
- [v7.5 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-75-release-notes.md)
- [v7.4 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-74-release-notes.md)
- [v7.3 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-73-release-notes.md)
- [v7.2 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-72-release-notes.md)
- [v7.1 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-71-release-notes.md)
- [v7.0 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-70-release-notes.md)
- [v6.20 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-620-release-notes.md)
- [v6.19 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-detect-for-network-619-release-notes.md)
- [v6.18 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-cognito-618-release-notes.md): Cognito Version 6.18 Release Notes
- [v6.17 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-cognito-617-release-notes.md): Cognito Version 6.17 Release Notes
- [v6.16 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/v6.16-release-notes-qux.md)
- [v6.15 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/v6.15-release-notes-qux.md)
- [v6.14 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/v6.14-release-notes-qux.md)
- [v6.13 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/v6.13-release-notes-qux.md)
- [v6.12 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/v6.12-release-notes-qux.md)
- [v6.11 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-cognito-611-release-notes.md)
- [v6.10 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/v6.10-release-notes-qux.md)
- [v6.9 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-cognito-69-release-notes.md)
- [v6.8 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-cognito-68-release-notes.md)
- [v6.7 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-cognito-67-release-notes.md)
- [v6.6 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/v6.6-release-notes-qux.md)
- [v6.5 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-cognito-65-release-notes.md)
- [v6.4 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-cognito-64-release-notes.md)
- [v6.3 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-cognito-63-release-notes.md)
- [v6.2 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-cognito-62-release-notes.md)
- [v6.1 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-cognito-61-release-notes.md)
- [v6.0 Release Notes (QUX)](https://docs.vectra.ai/release-notes/quadrant-ux-qux-1/archived-qux-release-notes/vectra-cognito-60-release-notes.md)
- [Coming soon](https://docs.vectra.ai/release-notes/doc-site-updates/coming-soon.md): As major changes happen to the documentation site, look for relevant updates here.

## API Reference

- [Welcome](https://docs.vectra.ai/api-reference/welcome.md): Landing page for Vectra API documentation.
- [Live documentation](https://docs.vectra.ai/api-reference/respond-ux-rux/live-documentation.md): Temporary page linking to the live v3.x API documentation site until it is migrated into the main Vectra documentation site in a future update.

## Help Center

- [Help Center](https://docs.vectra.ai/help-center/readme.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on a page URL with the `ask` query parameter:
```
GET https://docs.vectra.ai/readme.md?ask=<question>
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.