Core documentation sets
These are the major entry points you’ll touch in a real deployment. Replace the links below with your actual docs URLs, GitHub Wiki, or static docs site.
Single-node deploy, smoke tests, and first evidence capture in under an hour.
View quickstart guide →Recommended layouts for labs, production, MSSPs, and multi-tenant environments.
View reference architecture →How to investigate, replay, export, and hand off evidence to legal or clients.
View operator docs →Hook GhostLogic into SIEM, SOAR, ticketing, or your own IR automation.
View API reference →