[{"data":1,"prerenderedAt":351},["ShallowReactive",2],{"navigation_docs":3,"-api-webhooks":183,"-api-webhooks-surround":346},[4,25,60,81,153,168],{"title":5,"icon":6,"path":7,"stem":8,"children":9,"page":6},"Getting started",false,"\u002Fgetting-started","1.getting-started",[10,15,20],{"title":11,"path":12,"stem":13,"icon":14},"Introduction","\u002Fgetting-started\u002Fintroduction","1.getting-started\u002F1.introduction","i-lucide-house",{"title":16,"path":17,"stem":18,"icon":19},"Quickstart","\u002Fgetting-started\u002Fquickstart","1.getting-started\u002F2.quickstart","i-lucide-zap",{"title":21,"path":22,"stem":23,"icon":24},"Installation","\u002Fgetting-started\u002Finstallation","1.getting-started\u002F3.installation","i-lucide-server",{"title":26,"icon":6,"path":27,"stem":28,"children":29,"page":6},"Concepts","\u002Fconcepts","2.concepts",[30,35,40,45,50,55],{"title":31,"path":32,"stem":33,"icon":34},"How AML works","\u002Fconcepts\u002Fhow-aml-works","2.concepts\u002F1.how-aml-works","i-lucide-book-open",{"title":36,"path":37,"stem":38,"icon":39},"Events and decisions","\u002Fconcepts\u002Fevents-and-decisions","2.concepts\u002F2.events-and-decisions","i-lucide-activity",{"title":41,"path":42,"stem":43,"icon":44},"Rules","\u002Fconcepts\u002Frules","2.concepts\u002F3.rules","i-lucide-scale",{"title":46,"path":47,"stem":48,"icon":49},"Alerts, cases and reporting","\u002Fconcepts\u002Falerts-cases-reporting","2.concepts\u002F4.alerts-cases-reporting","i-lucide-folder-search",{"title":51,"path":52,"stem":53,"icon":54},"Entities and the graph","\u002Fconcepts\u002Fentities-and-graph","2.concepts\u002F5.entities-and-graph","i-lucide-network",{"title":56,"path":57,"stem":58,"icon":59},"Audit log","\u002Fconcepts\u002Faudit-log","2.concepts\u002F6.audit-log","i-lucide-scroll-text",{"title":61,"icon":6,"path":62,"stem":63,"children":64,"page":6},"Guides","\u002Fguides","3.guides",[65,70,75],{"title":66,"path":67,"stem":68,"icon":69},"Guides by role","\u002Fguides\u002Fby-role","3.guides\u002F1.by-role","i-lucide-users",{"title":71,"path":72,"stem":73,"icon":74},"Integration plan","\u002Fguides\u002Fintegration-plan","3.guides\u002F2.integration-plan","i-lucide-list-checks",{"title":76,"path":77,"stem":78,"icon":79,"badge":80},"Connecting a rail","\u002Fguides\u002Fconnecting-a-rail","3.guides\u002F3.connecting-a-rail","i-lucide-plug","Coming soon",{"title":82,"icon":6,"path":83,"stem":84,"children":85,"page":6},"API reference","\u002Fapi","4.api",[86,91,96,101,106,111,116,121,126,129,134,139,144,149],{"title":87,"path":88,"stem":89,"icon":90},"Authentication","\u002Fapi\u002Fauthentication","4.api\u002F01.authentication","i-lucide-key-round",{"title":92,"path":93,"stem":94,"icon":95},"Errors","\u002Fapi\u002Ferrors","4.api\u002F02.errors","i-lucide-circle-alert",{"title":97,"path":98,"stem":99,"icon":100},"Idempotency","\u002Fapi\u002Fidempotency","4.api\u002F03.idempotency","i-lucide-repeat",{"title":102,"path":103,"stem":104,"icon":105},"Health","\u002Fapi\u002Fhealth","4.api\u002F04.health","i-lucide-heart-pulse",{"title":107,"path":108,"stem":109,"icon":110},"Entities","\u002Fapi\u002Fentities","4.api\u002F05.entities","i-lucide-user-round",{"title":112,"path":113,"stem":114,"icon":115},"Events","\u002Fapi\u002Fevents","4.api\u002F06.events","i-lucide-send",{"title":117,"path":118,"stem":119,"icon":120},"Decisions","\u002Fapi\u002Fdecisions","4.api\u002F07.decisions","i-lucide-gavel",{"title":122,"path":123,"stem":124,"icon":125},"Alerts","\u002Fapi\u002Falerts","4.api\u002F08.alerts","i-lucide-bell",{"title":41,"path":127,"stem":128,"icon":44},"\u002Fapi\u002Frules","4.api\u002F09.rules",{"title":130,"path":131,"stem":132,"icon":133},"Screening","\u002Fapi\u002Fscreening","4.api\u002F10.screening","i-lucide-user-search",{"title":135,"path":136,"stem":137,"icon":138},"API keys","\u002Fapi\u002Fapi-keys","4.api\u002F11.api-keys","i-lucide-key",{"title":140,"path":141,"stem":142,"icon":143},"Overview","\u002Fapi\u002Foverview","4.api\u002F12.overview","i-lucide-layout-dashboard",{"title":145,"path":146,"stem":147,"icon":148,"badge":80},"Webhooks","\u002Fapi\u002Fwebhooks","4.api\u002F13.webhooks","i-lucide-webhook",{"title":80,"path":150,"stem":151,"icon":152,"badge":80},"\u002Fapi\u002Fcoming-soon","4.api\u002F14.coming-soon","i-lucide-clock",{"title":154,"icon":6,"path":155,"stem":156,"children":157,"page":6},"Security and licensing","\u002Fsecurity","5.security",[158,163],{"title":159,"path":160,"stem":161,"icon":162},"Data flows","\u002Fsecurity\u002Fdata-flows","5.security\u002F1.data-flows","i-lucide-shield-check",{"title":164,"path":165,"stem":166,"icon":167,"badge":80},"Licensing and metering","\u002Fsecurity\u002Flicensing","5.security\u002F2.licensing","i-lucide-file-badge",{"title":169,"icon":6,"path":170,"stem":171,"children":172,"page":6},"Reference","\u002Freference","6.reference",[173,178],{"title":174,"path":175,"stem":176,"icon":177},"Glossary","\u002Freference\u002Fglossary","6.reference\u002F1.glossary","i-lucide-book-a",{"title":179,"path":180,"stem":181,"icon":182},"FAQ","\u002Freference\u002Ffaq","6.reference\u002F2.faq","i-lucide-circle-help",{"id":184,"title":145,"body":185,"description":339,"extension":340,"links":341,"meta":342,"navigation":343,"path":146,"seo":344,"stem":147,"__hash__":345},"docs\u002F4.api\u002F13.webhooks.md",{"type":186,"value":187,"toc":333},"minimark",[188,212,216,221,301,305,311,330],[189,190,191,195,196,200,201,204,205,211],"warning",{},[192,193,194],"strong",{},"Coming soon."," Webhooks and the ",[197,198,199],"code",{},"\u002Fv1\u002Fwebhooks"," subscription endpoint are not in the current API (",[197,202,203],{},"api\u002Fopenapi.yaml","). This page describes the planned design so you can plan for it. Until then, poll ",[206,207,208],"a",{"href":123},[197,209,210],{},"GET \u002Fv1\u002Falerts",".",[213,214,215],"p",{},"Sentinel will post to your endpoints when something happens, so your other systems don't need to poll.",[217,218,220],"h2",{"id":219},"planned-event-types","Planned event types",[222,223,224,237],"table",{},[225,226,227],"thead",{},[228,229,230,234],"tr",{},[231,232,233],"th",{},"Type",[231,235,236],{},"Sent when",[238,239,240,251,261,271,281,291],"tbody",{},[228,241,242,248],{},[243,244,245],"td",{},[197,246,247],{},"decision.made",[243,249,250],{},"A decision is made",[228,252,253,258],{},[243,254,255],{},[197,256,257],{},"alert.created",[243,259,260],{},"An alert is raised",[228,262,263,268],{},[243,264,265],{},[197,266,267],{},"alert.updated",[243,269,270],{},"An alert's status or assignee changes",[228,272,273,278],{},[243,274,275],{},[197,276,277],{},"screening.match",[243,279,280],{},"Screening finds a possible match",[228,282,283,288],{},[243,284,285],{},[197,286,287],{},"case.closed",[243,289,290],{},"A case is closed",[228,292,293,298],{},[243,294,295],{},[197,296,297],{},"report.filed",[243,299,300],{},"A report is filed with your FIU",[217,302,304],{"id":303},"delivery-and-signatures","Delivery and signatures",[213,306,307,308,310],{},"Each delivery will be signed so you can check it came from your install, and failed deliveries will be retried with backoff. The ",[192,309,145],{}," screen in the console will show a delivery log and let you replay deliveries.",[213,312,313,314,317,318,321,322,325,326,329],{},"The planned verification: compute an HMAC-SHA256 of ",[197,315,316],{},"t + \".\" + body"," with your signing secret, compare it to ",[197,319,320],{},"v1"," in the ",[197,323,324],{},"Sentinel-Signature"," header, and reject deliveries whose ",[197,327,328],{},"t"," is more than five minutes old.",[213,331,332],{},"The payload schema isn't final, so don't build against a specific shape yet.",{"title":334,"searchDepth":335,"depth":335,"links":336},"",2,[337,338],{"id":219,"depth":335,"text":220},{"id":303,"depth":335,"text":304},"How Sentinel will notify your systems when something happens.","md",null,{},{"icon":148,"badge":80},{"title":145,"description":339},"FEm1GFili2pFjRnIJ7Muo-jwRJQnMj4XIbTvZbTovqY",[347,349],{"title":140,"path":141,"stem":142,"description":348,"icon":143,"children":-1},"Today's figures for the home screen.",{"title":80,"path":150,"stem":151,"description":350,"icon":152,"badge":80,"children":-1},"What the API has today, and what is planned but not built yet.",1792169661051]