> ## Documentation Index
> Fetch the complete documentation index at: https://docs.socfortress.co/llms.txt
> Use this file to discover all available pages before exploring further.

# SOCFortress CoPilot

> Operate an open-source SOC/SIEM stack from a single pane of glass.

# SOCFortress CoPilot Documentation

CoPilot is a **single pane of glass** for operating an open‑source SOC/SIEM stack (Wazuh, Graylog, Velociraptor, Grafana, Shuffle, and more).

**Choose your path:**

<Card title="Start here" icon="map" href="/getting-started/start-here" horizontal>
  Guided path: ingest → dashboards → alerts → cases → response.
</Card>

<Card title="SOC Operator / Analyst" icon="siren" href="/user/operators-quickstart" horizontal>
  Alert triage → cases → investigations.
</Card>

<Card title="Admin / Engineer" icon="gear" href="/user/admins-quickstart" horizontal>
  Configure sources, connectors, and integrations.
</Card>

<Card title="Developer / AI Agent" icon="code" href="/developer/start-here" horizontal>
  Architecture, data flows, schema, and safe change playbooks.
</Card>

<Frame>
  <div style={{ width: '100%', maxWidth: 1100, margin: '0 auto' }}>
    <video
      autoPlay
      loop
      muted
      playsInline
      preload="auto"
      controls={false}
      disablePictureInPicture
      onClick={(e) => e.currentTarget.play()}
      style={{
    width: '100%',
    aspectRatio: '16 / 9',
    height: 'auto',
    display: 'block',
    borderRadius: 16,
    background: 'rgba(0,0,0,0.2)',
  }}
    >
      <source src="https://mintcdn.com/socfortressllc/AThv2mEBHxCpLZOQ/assets/hero/copilot-hub.webm?fit=max&auto=format&n=AThv2mEBHxCpLZOQ&q=85&s=fa30d63f5cd6670c0c2e697b2f00617f" type="video/webm" data-path="assets/hero/copilot-hub.webm" />

      <source src="https://mintcdn.com/socfortressllc/AThv2mEBHxCpLZOQ/assets/hero/copilot-hub.mp4?fit=max&auto=format&n=AThv2mEBHxCpLZOQ&q=85&s=d15cbd8cccd53adc1de50d39f8e2f13d" type="video/mp4" data-path="assets/hero/copilot-hub.mp4" />
    </video>
  </div>
</Frame>

<div style={{ fontSize: 13, opacity: 0.8, marginTop: 8 }}>
  If the animation doesn’t autoplay in your browser, click once to start playback.
</div>

## Popular tasks

<Columns cols={3}>
  <Card title="Provision a customer" icon="users" href="/user/customer-provisioning">
    Create a tenant and set up the minimum required configuration.
  </Card>

  <Card title="Add integrations & connectors" icon="plug" href="/user/ui/external-third-party-integrations">
    Connect third‑party sources and external network connectors.
  </Card>

  <Card title="Triage an alert → open a case" icon="triangle-exclamation" href="/user/ui/incident-alerts">
    Start from an alert and manage work in a case.
  </Card>
</Columns>

<Columns cols={3}>
  <Card title="Manage indices" icon="database" href="/user/ui/indices-management">
    Validate index patterns, retention, and troubleshooting.
  </Card>

  <Card title="Browse the UI Guide" icon="map" href="/user/ui/overview">
    Documentation that mirrors the CoPilot menu.
  </Card>

  <Card title="Video library (summarized)" icon="play" href="/user/videos">
    Watch the playlist like docs: links + structured bullets (no transcripts stored).
  </Card>
</Columns>

## Get oriented

<Steps>
  <Step title="Start with a quickstart">
    Operators: start with the [Operator quickstart](/user/operators-quickstart). Admins/engineers: start with the [Admin/Engineer quickstart](/user/admins-quickstart).
  </Step>

  <Step title="Use the UI Guide for day-to-day workflows">
    The [UI Guide](/user/ui/overview) mirrors the menu so people can find what they see in the product.
  </Step>

  <Step title="Use videos as supplemental walkthroughs">
    The [Videos page](/user/videos) summarizes the full playlist into skimmable sections.
  </Step>
</Steps>