Reorganize Threat Prevention KB into categorized folders with sidebar navigation

docs/kb/threatprevention/_category_.json

@@ -1,6 +1,10 @@
 {
- "label": "Troubleshooting Articles",
+ "label": "Knowledge Base",
  "position": 999,
  "collapsed": true,
- "collapsible": true
+ "collapsible": true,
+ "link": {
+ "type": "doc",
+ "id": "index"
+ }
 }

docs/kb/threatprevention/set-up-eset-hips-rules-to-allow-threat-prevention-si-agent-hook.md → docs/kb/threatprevention/agent-installation-and-deployment/set-up-eset-hips-rules-to-allow-threat-prevention-si-agent-hook.md

@@ -30,12 +30,12 @@ How to set up ESET HIPS rules to allow Threat Prevention SI Agent hook?
 1. In the left pane of your **ESET PROTECT Web Console**, select **Policies**. Select the **Detection Engine** tab > **HIPS**.
 2. Under the **Rules** section, click **Edit**.
 
- ![Step 2](./images/ka0Qk000000DZET_0EM4u000008M9O8.png)
+ ![Step 2](../0-images/ka0Qk000000DZET_0EM4u000008M9O8.png)
 
 3. In the **HIPS Rules** window, click **Add**.
 4. Specify the **Rule name**, select **Allow** for the **Action** type, and proceed by clicking **Next**.
 
- ![Steps 3-4](./images/ka0Qk000000DZET_0EM4u000008M9OD.png)
+ ![Steps 3-4](../0-images/ka0Qk000000DZET_0EM4u000008M9OD.png)
 
 5. Select **Specific applications** in the dropdown list, and click **Add** to add the path to `SIWindowsAgent.exe`. Refer to the following code block for a default path:
 
@@ -45,19 +45,19 @@ How to set up ESET HIPS rules to allow Threat Prevention SI Agent hook?
 
  Proceed to the next step by clicking **Next**.
 
- ![Step 5](./images/ka0Qk000000DZET_0EM4u000008M9OI.png)
+ ![Step 5](../0-images/ka0Qk000000DZET_0EM4u000008M9OI.png)
 
 6. Switch the **All file operations** switch to the on position, and proceed by clicking **Next**. Click **OK** to save changes.
 
- ![Step 6](./images/ka0Qk000000DZET_0EM4u000008M9OS.png)
+ ![Step 6](../0-images/ka0Qk000000DZET_0EM4u000008M9OS.png)
 
 7. Once the configuration steps are completed, proceed to the **Assign** tab. Assign the new rule to corresponding systems.
 
- ![Step 7](./images/ka0Qk000000DZET_0EM4u000008M9OX.png)
+ ![Step 7](../0-images/ka0Qk000000DZET_0EM4u000008M9OX.png)
 
 8. The rule should become visible in your ESET host. Refer to the **Advanced Setup** menu > **HIPS** tab > **Basic** section > **Rules** tab.
 
- ![Step 8](./images/ka0Qk000000DZET_0EM4u000008M9Oc.png)
+ ![Step 8](../0-images/ka0Qk000000DZET_0EM4u000008M9Oc.png)
 
 > **NOTE:** Once the rule is applied, SI Agent should be restarted.
 

docs/kb/threatprevention/agent-connection-lost-after-upgrading.md → docs/kb/threatprevention/agent-management-and-connectivity/agent-connection-lost-after-upgrading.md

@@ -41,7 +41,7 @@ In the `NVMonitorConfig` database, the host may appear multiple times within the
 > SELECT * FROM [NVMonitorConfig].[dbo].[Server] WHERE name LIKE '%<Host Name>%'
 > ```
 >
-> ![Query results in SSMS showing duplicate host entries in the Server table](./images/ka0Qk000000FNHF_0EMQk00000E8sBH.png)
+> ![Query results in SSMS showing duplicate host entries in the Server table](../0-images/ka0Qk000000FNHF_0EMQk00000E8sBH.png)
 
 ## Resolution
 

docs/kb/threatprevention/pwnd-passwords-database-downloader-for-netwrix-threat-prevention.md → docs/kb/threatprevention/configuration-and-administration/pwnd-passwords-database-downloader-for-netwrix-threat-prevention.md

@@ -47,7 +47,7 @@ knowledge_article_id: kA04u000000HDkaCAG
 dotnet tool install --global haveibeenpwned-downloader
 ```
 
-![User-added image](./images/ka0Qk000000DZHh_0EM4u0000084oo1.png)
+![User-added image](../0-images/ka0Qk000000DZHh_0EM4u0000084oo1.png)
 
 ### Step 3. Update an already installed Pwnd Passwords Downloader
 
@@ -58,7 +58,7 @@ dotnet tool install --global haveibeenpwned-downloader
 dotnet tool update --global haveibeenpwned-downloader
 ```
 
-![User-added image](./images/ka0Qk000000DZHh_0EM4u0000084oo6.png)
+![User-added image](../0-images/ka0Qk000000DZHh_0EM4u0000084oo6.png)
 
 ### Usage of Pwnd Passwords Downloader
 
@@ -71,7 +71,7 @@ To download NTLM hashes:
 haveibeenpwned-downloader.exe -n pwnedpasswords
 ```
 
-![User-added image](./images/ka0Qk000000DZHh_0EM4u0000084ooB.png)
+![User-added image](../0-images/ka0Qk000000DZHh_0EM4u0000084ooB.png)
 
 ### Step 4. Prepare Pwned DB for SI
 
@@ -81,4 +81,4 @@ haveibeenpwned-downloader.exe -n pwnedpasswords
 4. Click **Select File** and choose downloaded txt file.
 5. Click the **Update** button.
 
-![User-added image](./images/ka0Qk000000DZHh_0EM4u0000084ooG.png)
+![User-added image](../0-images/ka0Qk000000DZHh_0EM4u0000084ooG.png)

docs/kb/threatprevention/updating-the-have-i-been-pwnd-ntml-hash-list.md → docs/kb/threatprevention/configuration-and-administration/updating-the-have-i-been-pwnd-ntml-hash-list.md

@@ -26,7 +26,7 @@ knowledge_article_id: kA04u00000110ffCAA
 # Updating the Have I Been Pwnd NTML Hash List
 
 ## Overview
-The Pwnd Passwords Downloader is a dotnet tool to download all Pwned Passwords hash ranges and save them offline so they can be used without a dependency on the k-anonymity API. For Netwrix Password Policy Enforcer Netwrix Password Policy Enforcer v.10.1 and up, you will need to download NTLM hashes using the Pwnd Passwords Downloader.
+The Pwnd Passwords Downloader is a dotnet tool to download all Pwned Passwords hash ranges and save them offline so they can be used without a dependency on the k-anonymity API. For Netwrix Password Policy Enforcer v.10.1 and up, you will need to download NTLM hashes using the Pwnd Passwords Downloader.
 
 ## Prerequisites
 You will need to install .NET 6 first to be able to install [Pwnd Passwords Downloader](https://github.com/HaveIBeenPwned/PwnedPasswordsDownloader). Only then can you use that tool to get the latest breached hashes from Have I Been Pwned (HIBP). You can download and install .NET 6 from: https://dotnet.microsoft.com/en-us/download/dotnet/6.0
@@ -47,7 +47,7 @@ Follow the steps to install the Pwnd Passwords Downloader.
 dotnet tool install --global haveibeenpwned-downloader
 ```
 
-![A screenshot of a computer Description automatically generated with medium confidence](./images/ka0Qk000000Dk3S_0EM4u000008L8RW.png)
+![A screenshot of a computer Description automatically generated with medium confidence](../0-images/ka0Qk000000Dk3S_0EM4u000008L8RW.png)
 
 3. Close the command prompt.
 
@@ -61,7 +61,7 @@ Follow the steps to update an installed Pwnd Passwords Downloader.
 dotnet tool update --global haveibeenpwned-downloader
 ```
 
-![A picture containing text, screenshot, font Description automatically generated](./images/ka0Qk000000Dk3S_0EM4u000008L8RX.png)
+![A picture containing text, screenshot, font Description automatically generated](../0-images/ka0Qk000000Dk3S_0EM4u000008L8RX.png)
 
 ### Download NTML Hashes with the Pwnd Passwords Downloader
 Follow the steps to download NTLM hashes (for Netwrix Password Policy Enforcer v10.1 and up):
@@ -75,7 +75,7 @@ Run:
 haveibeenpwned-downloader.exe -n pwnedpasswords_ntlm
 ```
 
-![A picture containing text, screenshot, font Description automatically generated](./images/ka0Qk000000Dk3S_0EM4u000008L8RY.png)
+![A picture containing text, screenshot, font Description automatically generated](../0-images/ka0Qk000000Dk3S_0EM4u000008L8RY.png)
 
 This screenshot shows the completed download.
 

docs/kb/threatprevention/error-database-maintenance-failing-with-error-code-0x5-error-15404.md → docs/kb/threatprevention/database-and-maintenance/error-database-maintenance-failing-with-error-code-0x5-error-15404.md

@@ -43,4 +43,4 @@ The account running the SQL Server Service on the SQL server does not have acces
 4. Click **Apply** to save the change and then click **Restart**.
 5. Repeat steps 1–4 for **SQL Server Agent (Instance name)**.
 
-![SQL Server Configuration Manager showing Log On tab settings for Network Service](./images/ka0Qk000000E6NJ_0EMQk000009RgNm.png)
+![SQL Server Configuration Manager showing Log On tab settings for Network Service](../0-images/ka0Qk000000E6NJ_0EMQk000009RgNm.png)

docs/kb/threatprevention/index.md

@@ -8,11 +8,34 @@ slug: threatprevention
 
 Welcome to the Threat Prevention knowledge base. Browse our collection of troubleshooting guides, configuration instructions, and best practices.
 
-Use the search function above to find specific articles or browse through all Threat Prevention KB articles in this section.
+## Browse by Category
+
+### Agent Installation and Deployment
+Articles covering agent installation challenges, upgrade issues, NTLM authentication requirements, and third-party security software compatibility during deployment.
+
+### Agent Management and Connectivity
+Guidance on managing agent status, resolving connection issues, handling duplicate entries, and configuring mixed version mode for managing agents at different versions.
+
+### Configuration and Administration
+Articles on system configuration tasks including credential management, component identification, pwned password database management, and security best practices.
+
+### Database and Maintenance
+Information on SQL database management, maintenance job configuration, database size control, and authentication issues during upgrades.
+
+### Troubleshooting and Diagnostics
+Guidance on enabling debug logging, locating log files, and troubleshooting specific errors that require diagnostic information gathering.
+
+### Licensing
+Articles addressing license-related issues including premature expiration and service account permission problems.
+
+## Quick Links
+
+- [Threat Prevention Documentation](https://docs.netwrix.com/docs/threatprevention/7_5) - Main product documentation
+- [News & Security Advisories](https://community.netwrix.com/lists/itdr) - Latest updates and changes
 
 ## Need Help?
 
 If you can't find what you're looking for:
 1. Use the search function above
-2. Check the main Threat Prevention documentation
+2. Check the main [Threat Prevention documentation](https://docs.netwrix.com/docs/threatprevention/7_5)
 3. Contact [Netwrix support](https://www.netwrix.com/support.html)

docs/kb/threatprevention/enabling-debug-logging-on-the-steathintercept-windows-agent.md → docs/kb/threatprevention/troubleshooting-and-diagnostics/enabling-debug-logging-on-the-steathintercept-windows-agent.md

@@ -37,7 +37,7 @@ There are two options.
 3. Edit the file named `SIWindowsAgent.log.config` in your favorite text editor.
 4. Change `WARN` to `DEBUG` in the appropriate portion of that file:
 
- ![LogConfig.png](./images/ka0Qk000000DmDJ_0EM4u000004d1hf.png)
+ ![LogConfig.png](../0-images/ka0Qk000000DmDJ_0EM4u000004d1hf.png)
 
 5. Save the `.log.config` file and restart the `SIWindowsAgent` service.
 
@@ -50,9 +50,3 @@ There are two options.
 6. Click the **Update Log Levels** button.
 
 After collecting debug logs, set Netwrix Threat Prevention Windows agent logging back to `WARN`.
-
-## Module
-SI - Windows Agent
-
-## Salesforce Article ID
-000001064