Backlog/v12 integrations guide

[AlexSanchez-bit]

No description provided.

[github-actions]

🛑 AI review — Engineer review required

This PR touches critical paths or introduces changes the model cannot judge with sufficient confidence. @Kbayero @osmontero please review.

✅ architecture (gemini-3-flash-lite) — clean

Summary: Updated UI documentation to include 'sudo' for forwarder commands; no architectural or contract changes.

No findings.

✅ bugs (gemini-3-flash-lite) — clean

Summary: Updated integration setup guides to include 'sudo' in command instructions for proper execution permissions.

No findings.

🛑 security (gemini-3-flash-lite) — blocking — must fix before merge

Summary: Modification of installer/setup commands to require sudo, impacting security-critical installation paths.

• medium frontend/src/features/integrations/components/setup/collector/collectors/aix.tsx:18 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder. Ensure that the documentation and the underlying binary handle privilege escalation securely and that users are aware of the elevated permissions required.
• medium frontend/src/features/integrations/components/setup/collector/collectors/cisco.tsx:18 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/ciscoFirepower.tsx:18 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/ciscoMeraki.tsx:18 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/ciscoSwitch.tsx:18 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/deceptivebytes.tsx:18 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/eset.tsx:28 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/fortigate.tsx:19 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/fortiweb.tsx:19 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/github.tsx:21 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/kaspersky.tsx:27 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/mikrotik.tsx:19 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/netflow.tsx:19 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/oracle.tsx:38 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/paloalto.tsx:19 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/pfsense.tsx:19 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/sentinelOne.tsx:28 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/sonicwall.tsx:19 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/sophosxg.tsx:19 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/suricata.tsx:35 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.
• medium frontend/src/features/integrations/components/setup/collector/collectors/vmware.tsx:27 — The command now requires 'sudo'. This modifies the security-critical installation/configuration path for the forwarder.

[utmstackprapprover]

Changes requested — AI review found blocking issues (high/critical, or engineer review required). See above.

[utmstackprapprover]

Changes requested — AI review found blocking issues (high/critical, or engineer review required). See above.