Getting Started with the Console

The Console is Capsule8’s web interface for incident management, configuration of the Sensor, and system analytics.

Installation

• System Requirements
• Creating an RDS instance for the Console
• Creating a Postgres database
• Installing the Console
  • via Docker image
  • via Debian/Ubuntu package
  • via Fedora/CentOS/RHEL/Amazon Linux 2 package
• Basic Console Configuration
• Installing Sensors

Configuration & Customization

• Serving the Console over HTTPS
• Configuring single sign-on
• Enabling Console Control of the Sensor
• Configuring Resource Discovery
• Setting the default password

Receiving Alerts

• via Capsule8 Sensor
• via S3/SQS

Getting Investigations Data

• via S3/Athena
• via HDFS/Presto

Using the Console

• Viewing alerts
• Investigating an alert
• Manage and delete archived events
• Managing users and roles
• Deploying Detections