PG for NetSuite Sidebar Structure

.vscode/settings.json

@@ -1,3 +1,4 @@
 {
-  "git.ignoreLimitWarning": true
+  "git.ignoreLimitWarning": true,
+  ]
 }

docs/1secure/admin/_category_.json

@@ -1,5 +1,5 @@
 {
-  "label": "Introducing Netwrix 1Secure",
+  "label": "Admin",
   "position": 50,
   "collapsed": true,
   "collapsible": true,

docs/1secure/admin/alerts/overview.md

@@ -22,8 +22,11 @@ Alert profiles are displayed in the list with the following information:
 - Used in organizations – The number of organizations the alert profile is applied to
 - Notification delivery – Indicates whether email notifications are configured for the profile
 
-**NOTE:** The alert profile named _Netwrix Profile (Default)_ is available by default and is
+:::note
+The alert profile named _Netwrix Profile (Default)_ is available by default and is
 automatically applied to all managed organizations.
+:::
+
 
 ## Add an Alert Profile
 
@@ -60,9 +63,12 @@ Follow the steps to modify the name of an alert profile.
 
 ## Delete an Alert Profile
 
-**NOTE:** (1) The alert profile named _Netwrix Profile (Default)_ cannot be deleted.  
+:::note
+(1) The alert profile named _Netwrix Profile (Default)_ cannot be deleted.  
 (2) When an alert profile is deleted, the _Netwrix Profile (Default)_ is automatically assigned to
 the organizations that were previously assigned the deleted profile.
+:::
+
 
 Follow the steps to delete an alert profile.
 

docs/1secure/admin/dashboard/alertstimeline.md

@@ -28,7 +28,7 @@ If you are a managed organization user, this page displays insights specific to
 If you are a managing organization (MSP) user, this page provides insights for all your
 organizations.
 
-Top 5 Alerts by Count
+**Top 5 Alerts by Count**
 
 This card displays a pie chart illustrating the five most frequently triggered alert types. Each
 slice represents the share of an alert type relative to the others. Hover over a slice to view the
@@ -40,13 +40,13 @@ Click an alert type on the legend to disable it. Disabled alert types are not di
 chart. Hence, the pie chart displays only the enabled alert types and their percentage shares with
 respect to each other. You can click a disabled alert type on the legend to enable it.
 
-Alerts Timeline
+**Alerts Timeline**
 
 This card displays a bar chart illustrating the number of alerts triggered for the period selected
 in the timeframe drop-down menu. Hover over a bar on the chart to view the exact number of alerts
 triggered on any specific date.
 
-Alerts List
+**Alerts List**
 
 This section lists all the triggered alerts with the following information:
 
@@ -77,7 +77,7 @@ Click a column header to sort data in the alerts list by that column in ascendin
 appears next to the column name to indicate the sort order. Click the column header again to sort
 the data in descending order.
 
-Edit Alerts Settings
+**Edit Alerts Settings**
 
 Click the **Edit Alerts Settings** link to navigate to the Alerts page, where you can create a new
 alert and modify existing ones. See the [Alerts](/docs/1secure/admin/alerts/alerts.md) topic for additional

docs/1secure/admin/dashboard/overview.md

@@ -24,33 +24,33 @@ See the [Organization Statistics](/docs/1secure/admin/dashboard/organizationstat
 If you are a managing organization (MSP) user, this page provides insights for all your
 organizations.
 
-Top 5 Triggered Alerts by Type
+**Top 5 Triggered Alerts by Type**
 
 This card displays a bar chart that highlights the five most frequently triggered alert types. Hover
 over a bar to view the exact number of alerts for that type. Click a bar to navigate to the Alerts
 Timeline page. See the [Alerts Timeline](/docs/1secure/admin/dashboard/alertstimeline.md) topic for additional information.
 
-Top 5 Organizations with Most Alerts
+**Top 5 Organizations with Most Alerts**
 
 This card displays a bar chart that highlights the five organizations with the highest number of
 triggered alerts. Hover over a bar to view the exact number of alerts triggered for that
 organization. Click a bar to navigate to the Alerts Timeline page. See the
 [Alerts Timeline](/docs/1secure/admin/dashboard/alertstimeline.md) topic for additional information.
 
-Top 5 Organizations at Risk
+**Top 5 Organizations at Risk**
 
 This card lists the five organizations with the highest risk levels. Each record includes the
 organization’s name, risk level (high, medium, or low), and the number of risks detected. Click a
 record to navigate to the Risk Assessment dashboard. See the
 [Risk Assessment Dashboard](/docs/1secure/admin/riskprofiles/riskassessmentdashboard.md) topic for additional
 information.
 
-Health Status
+**Health Status**
 
 This bar lists the different health statuses assigned to organizations in the Organizations list,
 along with the number of organizations associated with each status.
 
-Organizations List
+**Organizations List**
 
 This section lists all managed organizations with the following information:
 
@@ -79,7 +79,7 @@ Click a column header to sort the data in the organizations list by that column
 An arrow appears next to the column name to indicate the sort order. Click the column header again
 to sort the data in descending order.
 
-Add Organization
+**Add Organization**
 
 Click the Add Organization button to add a new organization. See the
 [Add Organizations](/docs/1secure/admin/organizations/addorganizations.md) topic for additional information.
@@ -89,8 +89,11 @@ Click the Add Organization button to add a new organization. See the
 Multiple filters are available on this page to enable you to filter data as desired. You can apply
 one or more filters at a time.
 
-**NOTE:** Some filters apply to all data displayed on this page, while others are specific to the
+:::note
+Some filters apply to all data displayed on this page, while others are specific to the
 Organizations list.
+:::
+
 
 - Filter by Keyword – Type a search string (only alpha characters allowed) in the Filter by keyword
   field and press Enter. The Organizations list displays the data that matches the specified

docs/1secure/admin/datacollection/_category_.json

@@ -1,6 +1,10 @@
 {
-  "label": "Datacollection",
+  "label": "Data collection",
   "position": 50,
   "collapsed": true,
-  "collapsible": true
+  "collapsible": true,
+  "link": {
+    "type": "doc",
+    "id": "overview"
+  }
 }

docs/1secure/admin/datacollection/activedirectoryauditing/activedirectoryauditing.md

@@ -19,23 +19,27 @@ permissions for data collection.
 If using a Non-Domain Admin account, set up the account with specific permissions depending on the
 following aspects:
 
-|                                                                                                                            |                                                                                                                                                                                                                                                                                                                                                                                                                                         |
-| -------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| In the target domain                                                                                                       | Account Permission Required                                                                                                                                                                                                                                                                                                                                                                                                             |
-| Do you plan to use [Network Traffic Compression](/docs/1secure/configuration/networktrafficcompression.md) for data processing? | If **YES**, account must belong to Domain Admin group. If **NO**, add an account to 'Manage auditing and security log' policy. See [Configure the Manage Auditing and Security Log Policy](/docs/1secure/admin/datacollection/activedirectoryauditing/manageauditingsecuritylog.md) for more information.                                                                                                                                                                                          |
-| Do you plan to use AD Deleted Objects container for data processing?                                                       | If **YES**, account requires Read permission on the read container. See [Granting Permissions for 'Deleted Objects' Container](/docs/1secure/admin/datacollection/activedirectoryauditing/permissionsadcontainer.md) topic for more information.                                                                                                                                                                                                                                                   |
-| Is auto-backup _enabled_ for the domain controller event logs?                                                             | If **YES**, account needs the following: - Access to specific registry key on the domain controllers. See[Assigning Permission To Read the Registry Key](/docs/1secure/admin/datacollection/activedirectoryauditing/permissionsregistrykeys.md) for additional information. - Membership in either Administrators, Print Operators, or Server Operators group. - Read/Write and Full Control permissions on the logs back up folder.                                                               |
-| Is there an on-premises Exchange server in your Active Directory domain?                                                   | If **YES**, account needs the following: - Membership in the **Organization Management** or **Records Management** group or having Audit Logs management role. See [Assigning Management Roles](/docs/1secure/admin/datacollection/activedirectoryauditing/auditlogsrole.md) topic for additional information. - Adjustment of the Exchange Administrator Audit Logging settings. See [Configure Exchange Administrator Audit Logging Settings](/docs/1secure/admin/datacollection/activedirectoryauditing/auditlogging.md) topic for additional information. |
+|                                                                                                                                 |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
+| ------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| In the target domain                                                                                                            | Account Permission Required                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| Do you plan to use [Network Traffic Compression](/docs/1secure/configuration/networktrafficcompression.md) for data processing? | If **YES**, account must belong to Domain Admin group. If **NO**, add an account to 'Manage auditing and security log' policy. See [Configure the Manage Auditing and Security Log Policy](/docs/1secure/admin/datacollection/activedirectoryauditing/manageauditingsecuritylog.md) for more information.                                                                                                                                                                                                                                                                           |
+| Do you plan to use AD Deleted Objects container for data processing?                                                            | If **YES**, account requires Read permission on the read container. See [Granting Permissions for 'Deleted Objects' Container](/docs/1secure/admin/datacollection/activedirectoryauditing/permissionsadcontainer.md) topic for more information.                                                                                                                                                                                                                                                                                                                                    |
+| Is auto-backup _enabled_ for the domain controller event logs?                                                                  | If **YES**, account needs the following: <ul><li>Access to specific registry key on the domain controllers. See[Assigning Permission To Read the Registry Key](/docs/1secure/admin/datacollection/activedirectoryauditing/permissionsregistrykeys.md) for additional information.</li><li>Membership in either Administrators, Print Operators, or Server Operators group.</li><li>Read/Write and Full Control permissions on the logs back up folder.</li></ul>                                                                                                                    |
+| Is there an on-premises Exchange server in your Active Directory domain?                                                        | If **YES**, account needs the following: <ul><li>Membership in the **Organization Management** or **Records Management** group or having Audit Logs management role. See [Assigning Management Roles](/docs/1secure/admin/datacollection/activedirectoryauditing/auditlogsrole.md) topic for additional information.</li><li>Adjustment of the Exchange Administrator Audit Logging settings. See [Configure Exchange Administrator Audit Logging Settings](/docs/1secure/admin/datacollection/activedirectoryauditing/auditlogging.md) topic for additional information.</li></ul> |
+
 
 ## Use GMSA
 
 You can use group Managed Service Accounts (gMSA) as data collecting accounts. It should also meet
 the same requirements.
 
-**NOTE:** If you are using gMSA for data collection, consider that AAL event data collection from
+:::note
+If you are using gMSA for data collection, consider that AAL event data collection from
 your on-premise Exchange server will not be possible. Thus, changes made to your Active Directory
 domain via that Exchange server will be reported with _domain\\Exchange_server_name$_ instead of the
 initiator (user) name in the "_Who_" field of reports, search results and activity summaries.
+:::
+
 
 For more information on gMSA, refer to [Using Group Managed Service Account (gMSA)](/docs/1secure/admin/datacollection/gmsa.md)
 and to

docs/1secure/admin/datacollection/computer/_category_.json

@@ -1,5 +1,5 @@
 {
-  "label": "Computer Auditing",
+  "label": "Computer",
   "position": 60,
   "collapsed": true,
   "collapsible": true,

docs/1secure/admin/datacollection/computer/backupfilesdirectories.md

@@ -28,8 +28,11 @@ The policy is now configured.
 Follow the steps to configure the Back up Files and Directories' policy using the **Group Policy
 Management Console**.
 
-**NOTE:** Perform this procedure only if the account selected for data collection is not a member of
+:::note
+Perform this procedure only if the account selected for data collection is not a member of
 the Domain Admins group.
+:::
+
 
 **Step 1 –** Open the Group Policy Management console on any domain controller in the target domain:
 navigate to Start > Windows Administrative Tools (Windows Server 2016/2019) or Administrative Tools

docs/1secure/admin/datacollection/computer/overview.md

@@ -19,8 +19,11 @@ Data Collection Accounts should meet the following policies and permissions:
 - The **Read** share permission on the audited shared folders.
 - The **Read** NTFS permission on all objects in the audited folders.
 
-**NOTE:** If you want to use network traffic compression, data collecting account on the target
+:::note
+If you want to use network traffic compression, data collecting account on the target
 server must be a member of the local Administrators group.
+:::
+
 
 You can also use group Managed Service Accounts (gMSA) as a data collecting account. For more
 information on gMSA, see the following:

docs/1secure/admin/datacollection/gmsa.md

@@ -1,5 +1,5 @@
 ---
-title: "Using Group Managed Service Account (gMSA)"
+title: "GMSA"
 description: "Using Group Managed Service Account (gMSA)"
 sidebar_position: 80
 ---

docs/1secure/admin/datacollection/logonactivity/_category_.json

@@ -1,5 +1,5 @@
 {
-  "label": "Logon Activity Auditing",
+  "label": "Logon Activity",
   "position": 70,
   "collapsed": true,
   "collapsible": true,

docs/1secure/admin/datacollection/overview.md

@@ -23,3 +23,12 @@ Currently, the following data sources are supported:
 | Computer          | File Server Activity                              | [Computer Auditing](/docs/1secure/admin/datacollection/computer/overview.md)                                                                                        |
 | SharePoint Online | SharePoint Online Activity                        | [SharePoint Online Auditing](/docs/1secure/admin/datacollection/sharepointonline.md)                                                                                |
 | Exchange Online   | Exchange Online Activity                          | [Exchange Online Auditing](/docs/1secure/admin/datacollection/exchangeonline.md)                                                                                    |
+
+## Data Collection Workflow
+The Netwrix 1Secure data collection workflow is as follows:
+
+**Step 1 –** Add organizations. See the [Add Organizations](docs\1secure\admin\organizations\addorganizations.md) topic for additional information.
+
+**Step 2 –** Install the agent. See the [Install Agent](docs\1secure\install\installagent.md) topic for additional information.
+
+Once you have added the organization and selected the domain for collecting the data, Netwrix 1Secure starts collecting audit data from the managed Active Directory, Azure AD domain, a computer, an Exchange Online, or a SharePoint Online collection.

docs/1secure/admin/login/_category_.json

@@ -1,5 +1,5 @@
 {
-  "label": "First Login to 1Secure",
+  "label": "Login",
   "position": 10,
   "collapsed": true,
   "collapsible": true,