# Tutorials

- [Flashback](https://docs.spyderbat.com/tutorials/flashback.md)
- [How to Use the Investigations Feature in Spyderbat](https://docs.spyderbat.com/tutorials/flashback/how-to-investigate-in-spyderbat.md): How to use the Causal Tree in a Process Investigation — adding and removing nodes, toolbar controls, right-click context menus, data layers, and sharing investigation links.
- [Guardian](https://docs.spyderbat.com/tutorials/guardian.md)
- [How to Lock Down Your Workloads With Guardian Policies Using Spyctl](https://docs.spyderbat.com/tutorials/guardian/how-to-lock-down-your-critical-workloads-with-policies-spyctl.md): This page will teach you about Guardian Workload Policies. It will explain what they are, how to create them, how to apply them, and how to manage them.
- [How to Put Guardrails Around Your K8s Clusters Using Spyctl](https://docs.spyderbat.com/tutorials/guardian/how-to-put-guardrails-around-your-k8s-cluster-spyctl.md): This tutorial will walk you through the creation, tuning, and management of Cluster Ruleset Policies.
- [Integrations](https://docs.spyderbat.com/tutorials/integrations.md): Step-by-step guides for integrating Spyderbat with external tools and SIEMs.
- [SIEM Forwarding Quickstart](https://docs.spyderbat.com/tutorials/integrations/siem-forwarding-quickstart.md): Set up SIEM forwarding end to end — enable a saved search, install the Event Forwarder, and verify events reach your SIEM.
- [Panther Webhook Configuration](https://docs.spyderbat.com/tutorials/integrations/forwarder-panther-config.md): Configure the Spyderbat Event Forwarder to send events to Panther via webhook.
- [How to Set Up Spyderbat to Ingest Falco Alerts](https://docs.spyderbat.com/tutorials/integrations/falco-connector-deployment.md): Let's talk about the most optimal way to integrate Falco security detections with Spyderbat platform to further enhance the cloud-native runtime security monitoring value of Spyderbat.
- [How to Create and Use a Spyderbat API Key](https://docs.spyderbat.com/tutorials/integrations/how-to-set-up-your-spyderbat-api-key-and-use-the-spyderbat-api.md): Spyderbat leverages API very heavily. To configure a variety of inbound and outbound API integrations, you will need to generate your API key. Learn how to create, maintain and manage your API keys.
- [Notifications](https://docs.spyderbat.com/tutorials/notifications.md)
- [How to Set Up Notifications Using Spyctl](https://docs.spyderbat.com/tutorials/notifications/how-to-set-up-spyderbat-notifications-spyctl.md): Configure Notifications using Spyctl to receive alerts for significant Security or Operations events.
- [How to Set up Agent-Health Notifications Using Spyctl](https://docs.spyderbat.com/tutorials/notifications/how-to-set-up-agent-health-notifications-in-spyctl.md)
- [Dashboards](https://docs.spyderbat.com/tutorials/how-to-create-custom-dashboards.md): Learn about how to create custom Spyderbat dashboards and dashboard cards using Athena Search or existing dashboard templates, as well as how to share and manage access to the custom dashboards.
- [Miscellaneous](https://docs.spyderbat.com/tutorials/miscellaneous.md)
- [Scout (Detections)](https://docs.spyderbat.com/tutorials/scout.md)
- [How to Set Up Custom Flags Using Spyctl CLI](https://docs.spyderbat.com/tutorials/scout/setup-custom-flags.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.spyderbat.com/tutorials.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.