@cryptotaxi247 / CoPilot
Code Commits Issues Pulls Sessions CI/CD
main
main
md 3.95 KB
View source Raw

SOCFortress CoPilot Documentation

## Operate your open‑source SOC CoPilot is a **single pane of glass** for operating an open‑source SOC/SIEM stack (Wazuh, Graylog, Velociraptor, Grafana, Shuffle, and more).
[Operator quickstart](user/operators-quickstart.md) [Admin/Engineer quickstart](user/admins-quickstart.md) [UI Reference (menu)](user/ui/overview.md) [Developer docs](developer/start-here.md)
**Popular next steps:** [Customer provisioning](user/customer-provisioning.md) · [Videos (summarized)](user/videos.md) · [GitHub releases](https://github.com/socfortress/CoPilot/releases)

Choose your path

### SOC operator / analyst You live in **Incident Management** (alerts → cases → investigations). - [Operator quickstart](user/operators-quickstart.md) - [Incident Management UI guide](user/ui/incident-management.md) - [Videos track (Operator)](user/videos.md#operator-track)
### Admin / engineer You configure **sources, connectors, and integrations** so alerts flow into CoPilot. - [Admin/Engineer quickstart](user/admins-quickstart.md) - [External services + integrations](user/ui/external-services.md) - [Videos track (Admin/Engineer)](user/videos.md#adminengineer-track)
### Developer / AI Agent You’re changing the codebase, adding connectors, or debugging flows. - [Start here](developer/start-here.md) - [Architecture](architecture/ARCHITECTURE.md) - [Data flows](architecture/DATA_FLOWS.md) - [Database schema](architecture/DATABASE_SCHEMA.md)
### Video library (summarized) Treat the YouTube playlist like documentation: links + structured bullets (no transcripts stored). - [Browse videos](user/videos.md) - [Role-based tracks](user/videos.md#jump-to-your-role)

Provision a customer

Create a tenant + set up the minimum required configuration. [Customer provisioning →](user/customer-provisioning.md)

Add integrations & connectors

Connect third‑party sources and external network connectors so data flows into CoPilot. [Integrations overview →](user/ui/external-third-party-integrations.md)

Triage an alert → open a case

Start from an alert, pivot to evidence, and manage work in a case. [Incident alerts →](user/ui/incident-alerts.md)

Manage indices

Find, validate, and troubleshoot index patterns and retention. [Indices management →](user/ui/indices-management.md)

Navigate the UI fast

Map the sidebar/menu to routes and learn deep‑link patterns. [UI navigation guide →](user/navigation.md)

Build / change CoPilot safely

Architecture, schema source‑of‑truth, and change playbooks. [Developer start here →](developer/start-here.md)

How to use this site

  • Use the left sidebar (hamburger menu on mobile) to browse by area.
  • Use Search (top bar) to jump straight to a topic.
  • Everything lives under docs/ and is updated via PRs (GitHub Pages build via Actions).