From 34eaac9f4c4da76c12f66f00f12f0995868a4181 Mon Sep 17 00:00:00 2001 From: "[Steve Brant]" <[steve@limacharlie.com]> Date: Fri, 20 Mar 2026 14:07:21 -0600 Subject: [PATCH] Fix 8 broken internal links found by link checker - Fix 5 relative path errors in dr-rule-building-guidebook.md (missing ../ for cross-section links) - Fix use-cases link in what-is-limacharlie.md (no index page) - Fix destinations links in outputs pages (no index page) - Fix secrets manager link in cli.md (wrong path) Co-Authored-By: Claude Opus 4.6 (1M context) --- docs/1-getting-started/what-is-limacharlie.md | 2 +- .../tutorials/dr-rule-building-guidebook.md | 12 ++++++------ docs/5-integrations/outputs/index.md | 2 +- docs/5-integrations/outputs/stream-structures.md | 2 +- docs/6-developer-guide/cli.md | 2 +- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/docs/1-getting-started/what-is-limacharlie.md b/docs/1-getting-started/what-is-limacharlie.md index 49095f888..c1f5dc0f7 100644 --- a/docs/1-getting-started/what-is-limacharlie.md +++ b/docs/1-getting-started/what-is-limacharlie.md @@ -18,4 +18,4 @@ Dig in, and build the security program you need and have always wanted. - [Quickstart Guide](quickstart.md) - [Core Concepts](core-concepts.md) -- [Use Cases](use-cases) +- [Use Cases](use-cases/edr.md) diff --git a/docs/3-detection-response/tutorials/dr-rule-building-guidebook.md b/docs/3-detection-response/tutorials/dr-rule-building-guidebook.md index 0c3cd0c02..8f42c8f1a 100644 --- a/docs/3-detection-response/tutorials/dr-rule-building-guidebook.md +++ b/docs/3-detection-response/tutorials/dr-rule-building-guidebook.md @@ -378,7 +378,7 @@ rules: value: "reg add HKLM" ``` -See the [Detection Logic Operators](../8-reference/detection-logic-operators.md) reference for the full list of supported platform names. +See the [Detection Logic Operators](../../8-reference/detection-logic-operators.md) reference for the full list of supported platform names. ### IP Address Operations @@ -661,7 +661,7 @@ Creates a detection (alert) that is sent to the detection output stream, the Det - `metadata`: Free-form key-value data (appears as `detect_mtd` in the detection) - `detect_data`: Free-form field for extracting specific elements into a known format -The `name`, `metadata`, and `detect_data` parameters support [template strings](../4-data-queries/template-transforms.md). Note that the template context is the detection itself, so use `.detect.event.USER_NAME` not `.event.USER_NAME`. +The `name`, `metadata`, and `detect_data` parameters support [template strings](../../4-data-queries/template-transforms.md). Note that the template context is the detection itself, so use `.detect.event.USER_NAME` not `.event.USER_NAME`. ### `output` - Data Routing @@ -687,7 +687,7 @@ Sends a command to the sensor that generated the event. - `command`: The sensor command to execute (supports template strings, e.g., `artifact_get {{ .event.FILE_PATH }}`) - `investigation`: Optional unique identifier for the task and resulting events -See [Endpoint Commands](../8-reference/endpoint-commands.md) for all available commands. +See [Endpoint Commands](../../8-reference/endpoint-commands.md) for all available commands. ### `add tag` / `remove tag` - Sensor Tagging @@ -723,7 +723,7 @@ Manages sensor-specific variables for cross-rule state tracking. - `value`: Value to store (supports lookback `<>` syntax) - `ttl`: Optional, seconds until the variable expires -Variables set here can be referenced in detection rules using `[[variable_name]]` syntax. See [Sensor Variables](../3-detection-response/sensor-variables.md) for detailed usage. +Variables set here can be referenced in detection rules using `[[variable_name]]` syntax. See [Sensor Variables](../sensor-variables.md) for detailed usage. ### `isolate network` / `rejoin network` - Network Control @@ -821,7 +821,7 @@ Spawns a Claude AI session for automated investigation and response. Supports tw debounce_key: "triage-{{ .routing.sid }}" ``` -See [AI Sessions](../9-ai-sessions/dr-sessions.md) for full configuration options. +See [AI Sessions](../../9-ai-sessions/dr-sessions.md) for full configuration options. ### Suppression @@ -988,7 +988,7 @@ Templates enable dynamic content generation in response actions using Go templat - `{{ base .path }}` — Filename from path - `{{ dir .path }}` — Directory from path -See [Template Strings](../4-data-queries/template-transforms.md) for the full reference. +See [Template Strings](../../4-data-queries/template-transforms.md) for the full reference. ### Resource Integration diff --git a/docs/5-integrations/outputs/index.md b/docs/5-integrations/outputs/index.md index 4faa299e1..9ccb1ec86 100644 --- a/docs/5-integrations/outputs/index.md +++ b/docs/5-integrations/outputs/index.md @@ -192,5 +192,5 @@ Example: create a syslog output for event data. ## See Also - [Stream Structures](stream-structures.md) -- [Output Destinations](destinations) +- [Output Destinations](destinations/amazon-s3.md) - [D&R Response Actions](../../8-reference/response-actions.md) diff --git a/docs/5-integrations/outputs/stream-structures.md b/docs/5-integrations/outputs/stream-structures.md index 00b3c77b5..c7b155380 100644 --- a/docs/5-integrations/outputs/stream-structures.md +++ b/docs/5-integrations/outputs/stream-structures.md @@ -504,5 +504,5 @@ Use deployment events to track sensor health and detect: - [Event Structure Reference](../../8-reference/event-schemas.md#event-structure-reference) - [Detection Structure](../../3-detection-response/tutorials/writing-testing-rules.md#understanding-detection-structure) - [LimaCharlie Data Structures](../../1-getting-started/core-concepts.md#limacharlie-data-structures) -- [Output Destinations](destinations/) - Configuration guides for specific destinations +- [Output Destinations](destinations/amazon-s3.md) - Configuration guides for specific destinations - [Testing Outputs](testing.md) - How to validate output configurations diff --git a/docs/6-developer-guide/cli.md b/docs/6-developer-guide/cli.md index cc28e7ac2..dc7e668d4 100644 --- a/docs/6-developer-guide/cli.md +++ b/docs/6-developer-guide/cli.md @@ -21,4 +21,4 @@ Trigger a CLI command as a D&R rule response action using `extension request`: Field descriptions: * `command_line`: the full CLI command to execute. -* `credentials`: a reference to stored credentials in the [secrets manager](../7-administration/access/secrets.md), used to authenticate the CLI command. +* `credentials`: a reference to stored credentials in the [secrets manager](../7-administration/config-hive/secrets.md), used to authenticate the CLI command.