Quickstart
From the first sign-in to the first alert you triage — in Legit AI's cloud or on your own server.
-
Get a platform. Either create an account in Legit AI’s cloud, or have Legit AI install it on your own server — see Choose your path.
-
Sign in. In the cloud, with the account you created. On your own server, open the address and use the administrator sign-in Legit AI handed over, then change the password.
-
Connect your first source. Open Data sources in the sidebar and choose where your events come from — Windows computers, Linux servers, firewalls and switches, a log shipper you already run, or your own application. Each one shows what to set up on its side, already filled in with your platform’s address. See Connect data sources.
-
See an event arrive. On the same page, Send a test event pushes one harmless event through the whole pipeline. Event Explorer shows every event as it comes in.
-
Triage the first alert. The Alert Queue lists what the detection layers raised. Select one and read its evidence and AI Analysis, then press C to confirm it, D to dismiss it with a reason, or E to open an investigation. See The alert queue.
-
Invite the team. Admin → Users → Add User, with the role each person needs: VIEWER, ANALYST or ADMIN.
If you forget your password
Section titled “If you forget your password”Ask your administrator or Legit AI support. You get a one-time link, by e-mail when your account has an address, otherwise from the person who helps you. It opens a page where you choose the new password yourself: nobody at Legit AI sees it. The link works once and for 30 minutes, and every device signed in to your account is signed out when you use it. An authenticator app you set up still applies at sign-in.
Your administrators see every recovery and every support session on your account, with who started it and why, under Plan & usage.
Where to go next
Section titled “Where to go next”- How Legit AI works — the path from event to alert
- Connect data sources — every way in, in detail
- Isolation and process kill — responding on a machine