Getting started full revamp by alexane-bougeardbebin-sekoia · Pull Request #3088 · SEKOIA-IO/documentation

alexane-bougeardbebin-sekoia · 2026-06-26T14:40:25Z

No description provided.

Updated the documentation to reflect the new name and features of the Roy AI assistant, including its capabilities and usage instructions.

Corrected the link for event drop notifications in best practices.

Added workspace mode scope details and updated triggers.

Added webhook payload reference and example to documentation.

Added information on finding incoming webhook URLs for Slack, Microsoft Teams, and Mattermost.

Added instructions for generating a HAR file and troubleshooting steps for WebSocket connectivity issues.

Added a note about legacy role names and their descriptions for users maintaining older scripts or using the Sekoia API directly.

Added access information for different user roles regarding subscriptions.

Removed duplicate 'FAQ and troubleshooting' entry.

Updated the notification creation instructions to reflect changes in terminology and structure.

Updated markdown links and improved clarity in instructions for triaging alerts.

Updated links in glossary to include '.md' extension for consistency.

Updated links in the getting started documentation to include the .md extension for consistency.

Updated user invitation steps and related links for clarity.

Updated links in the login guide to include file extensions.

Updated links to use .md extension for consistency.

Updated links in the secure your account documentation to include the .md extension.

Removed markdown link from note about 2FA deployment.

github-actions · 2026-07-03T15:47:37Z

Newest code from alexane-bougeardbebin-sekoia has been published to preview environment

🚀 Latest deployment was built on 2026-07-03 15:47:36 (f442e6e489d058cc179418927f9f0e685cd4c9f2).

TomLecSek

The theme is really black&white 😅 . Intended i suppose but i think changing the color for titles and subtitles will improve the readibility of pages by identifying sections visually.

Review to continued...

TomLecSek · 2026-07-06T09:02:11Z

+
+### Sekoia Defend
+
+Sekoia Defend is the extended detection and response (XDR) product. It collects logs from your entire environment, applies a continuously updated catalog of over 1,000 detection rules mapped to the MITRE ATT&CK framework, and gives you the tools to investigate alerts and automate responses.


XDR should have an entry in Glossary imo.

TomLecSek · 2026-07-06T09:03:42Z

+
+# What is Sekoia
+
+Sekoia is an AI-powered Security Operations Center (SOC) platform that brings together detection, threat intelligence, and automated response in a single, integrated solution. It is designed to help security teams of all sizes detect threats faster, investigate with more context, and respond with less manual effort.


Enhancement suggestion:

I would be nice to have an automated link between words and their anchor in the Glossary.
I'm sure mkdocs does that somehow (with a plugin maybe ?)

https://mkdocstrings.github.io/autorefs/

Corentincoutable · 2026-07-06T14:46:51Z

I would suggest to re-word it as follow :
"In multi-tenant workspaces, a "Communities" button appears in the breadcrumb at the top of the page. Use it to filter the platform based on a specific community or select multiple communities to view aggregated data for all of them."

I would suggest to re-word it as follow :
"If you are not sure whether a setting belongs to the workspace or the community, check the Settings menu. Workspace-level settings appear at the top of the listing (Workspace label), and community-level settings appear just bellow it (Communities you manage label)."

And here is the specified screenshot :

I would suggest to re-word it as follow :
"To filter on a specific community in a multi-tenant workspace, click the Communities button in the breadcrumb at the top of one page and select the community (or communities) you want to access."

ka0ula · 2026-07-08T12:45:44Z

IMHO for the Intelligence part, the stepper doesn't reflect the real use case priority. Right now it opens with "explore the database," then buries feed/dissemination inside a reports step. But dissemination into existing security tooling is one of the strongest reasons an MSSP, CISO, or SOC lead buys Intelligence in the first place. If we lead with database exploration, we're asking a skeptical buyer to tour a UI before we show them the thing that actually convinces them (their tools getting fed with our intel).

Before we rewrite this, I'd rather make sure we're anchoring the guide on the right use cases instead of guessing. @alexane-bougeardbebin-sekoia can you sync with Julien De Pins on this? He talks to prospects and customers directly and will know which use case actually closes deals or drives adoption (search/investigation vs. dissemination vs. reporting vs. notifications). That should decide the order and weight of these steps, not our assumptions from the inside

AndersOlsson-Sekoia

Great work Alexane, missing a few critical points however. Suggested as per the review comments.

Updated instructions for customizing the interface, including clearer steps for dragging columns and setting preferred authentication methods.

alexane-bougeardbebin-sekoia added 30 commits June 26, 2026 16:40

Add files via upload

9e0865f

delete outdated articles

cabce21

Revise documentation for Roy AI assistant

f9a6840

Updated the documentation to reflect the new name and features of the Roy AI assistant, including its capabilities and usage instructions.

Fix link for event drop notifications in best practices

8dbbc9d

Corrected the link for event drop notifications in best practices.

Revise navigation structure in mkdocs.yml

82e460e

Enhance notification system overview with workspace modes

d4824f0

Added workspace mode scope details and updated triggers.

Enhance notification examples with webhook details

e941c8d

Added webhook payload reference and example to documentation.

Update notification creation documentation

5ec0349

Added information on finding incoming webhook URLs for Slack, Microsoft Teams, and Mattermost.

Add files via upload

f9c82b3

Enhance troubleshooting guide with HAR file instructions

ac722b9

Added instructions for generating a HAR file and troubleshooting steps for WebSocket connectivity issues.

Document legacy role names and their descriptions

6368f6b

Added a note about legacy role names and their descriptions for users maintaining older scripts or using the Sekoia API directly.

Document user role access for subscriptions

4e32d20

Added access information for different user roles regarding subscriptions.

Fix duplicate entry in mkdocs.yml

6e72b1a

Removed duplicate 'FAQ and troubleshooting' entry.

Add files via upload

927de2c

Revise notification creation steps and terminology

0c01876

Updated the notification creation instructions to reflect changes in terminology and structure.

Add files via upload

67bcb74

Update customize_your_interface.md

55b5bed

Update links and headings in getting started guide

35b9e5d

Update links and section titles in documentation

069a173

Update defend_step3_activate_detection_rules.md

746f152

Fix markdown links and enhance alert triage instructions

883ed94

Updated markdown links and improved clarity in instructions for triaging alerts.

Update defend_step5_automate_with_playbooks.md

0b8ca57

Add .md extension to glossary links

5760970

Updated links in glossary to include '.md' extension for consistency.

Update index.md

22f8fcc

Fix links in intelligence_step1_explore_threat_database

42c34e6

Updated links in the getting started documentation to include the .md extension for consistency.

Update links and navigation in threat reports guide

6399f9f

Revise user invitation instructions and links

41316eb

Updated user invitation steps and related links for clarity.

Fix links in log in guide to include .md extensions

31f6f3a

Updated links in the login guide to include file extensions.

Update manage_api_keys.md

08b0775

Fix markdown links in manage_notifications.md

6725135

Updated links to use .md extension for consistency.

alexane-bougeardbebin-sekoia added 13 commits July 3, 2026 17:08

Update quick_start_elevate.md

0578879

Update links in quick start guide for consistency

3e3d656

Update links in quick_start_reveal.md to include .md

13fab50

Update links in roles and permissions documentation

bef3670

Fix markdown links in secure your account guide

68f8b8c

Updated links in the secure your account documentation to include the .md extension.

Fix link to notifications examples in best practices

64aef44

Update quick_start_elevate.md

d166c6d

Update quick_start_reveal.md

6d08556

Update support_and_resources.md

4e17d65

Update note on 2FA configuration for users

ae53819

Removed markdown link from note about 2FA deployment.

Update intakes.md

a89cae5

Delete docs/getting_started/navigation.md

ac78899

Update mkdocs.yml

6b34f0f

TomLecSek reviewed Jul 6, 2026

View reviewed changes