8. Use cases of the administrator level

• 8.1. Connecting to the GCenter web interface via a web browser
  • 8.1.1. Introduction
  • 8.1.2. Prerequisites
  • 8.1.3. Preliminary operations
  • 8.1.4. Procedure
• 8.2. Configuring the NDR
  • 8.2.1. Introduction
  • 8.2.2. Prerequisites
  • 8.2.3. Preliminary operations
  • 8.2.4. Procedure to access the `Data Exports` window for an administrator account
  • 8.2.5. Procedure to enable the `Assets and users tracking` and `Relationship tracking` functions
  • 8.2.6. Procedure to disable the `Assets and users tracking` and `Relationship tracking` functions
  • 8.2.7. Procedure to configure the Elasticsearch retention time
• 8.3. Administrating a GCap
  • 8.3.1. Pairing a GCap with the GCenter
  • 8.3.2. Re-pairing a GCap
  • 8.3.3. Change the default profile or customise the existing profile
  • 8.3.4. Delete a GCap connected to the GCenter
• 8.4. Managing the GCenter backup and restoration
  • 8.4.1. Backup configuration
  • 8.4.2. Backup
  • 8.4.3. Restoration
• 8.5. Managing of the GCenter software
  • 8.5.1. Configuring automatic update via GUM
  • 8.5.2. Manual installation of an update of signatures and/or anti-viral engines (update)
  • 8.5.3. Installing a hotfix
  • 8.5.4. Installing of an upgrade
• 8.6. Administrating the GCenter
  • 8.6.1. Export data to a SIEM via the syslog protocol
  • 8.6.2. Export data to a SPLUNK SIEM via the syslog protocol
  • 8.6.3. Export data to a ETL Logstash via the syslog protocol
  • 8.6.4. Quick creation of a POC Logstash
  • 8.6.5. Configuring the connection to the MISP
  • 8.6.6. Configuring the connection to the Intelligence site
  • 8.6.7. Configuring the connection to the GBox
  • 8.6.8. Deleting data (log files)
  • 8.6.9. Generating and loading files for diagnosis
  • 8.6.10. Using an endpoint API
• 8.7. Managing user accounts
  • 8.7.1. Creating local users
  • 8.7.2. Changing some of a local user's information
  • 8.7.3. Resetting a local user's password
  • 8.7.4. Deleting a local user
  • 8.7.5. Displaying of the connection status between the GCenter and the LDAP server
  • 8.7.6. Enable the connection between the GCenter and the LDAP server
  • 8.7.7. Configuring the connection between the GCenter and the LDAP server
  • 8.7.8. Configuring the users and groups defined on LDAP / ActiveDirectory
  • 8.7.9. Viewing the authentication history
  • 8.7.10. Viewing the history of user creations or deletions
  • 8.7.11. Viewing the history function for all changes in user rights
  • 8.7.12. Adding an API access token
  • 8.7.13. Managing the password policy
• 8.8. Configuring the detection engine
  • 8.8.1. Setting up GBox and the Malcore and Retroact engines and activate the GBox
  • 8.8.2. Managing the white and black lists of the Malcore engine
  • 8.8.3. Enabling and configuring the Machine Learning engine
  • 8.8.4. Managing the white and black lists of the Machine Learning engine
• 8.9. GCenter Configuration Management
  • 8.9.1. Configuring the Netdata polling interface
  • 8.9.2. Configuring the Netdata export interface
  • 8.9.3. Setting up a Netdata server
  • 8.9.4. Using a Netdata server
  • 8.9.5. GCenter Global Configuration
  • 8.9.6. Proxy Settings Configuration
  • 8.9.7. SSL Settings Configuration
  • 8.9.8. Configuring Session Age Settings
  • 8.9.9. Licence amendment
• 8.10. Logging out of the GCenter web interface
  • 8.10.1. Introduction
  • 8.10.2. Prerequisites
  • 8.10.3. Preliminary operations
  • 8.10.4. Procedure