diff --git a/salt/salt/master.sls b/salt/salt/master.sls
index 23af779dd..b33d3631d 100644
--- a/salt/salt/master.sls
+++ b/salt/salt/master.sls
@@ -15,6 +15,7 @@
 
 include:
   - salt.minion
+  - salt.master.pyinotify
 {%   if 'vrt' in salt['pillar.get']('features', []) %}
   - salt.cloud
   - salt.cloud.reactor_config_hypervisor
diff --git a/salt/salt/master/pyinotify.sls b/salt/salt/master/pyinotify.sls
new file mode 100644
index 000000000..8aa2f1d53
--- /dev/null
+++ b/salt/salt/master/pyinotify.sls
@@ -0,0 +1,20 @@
+# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
+# or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at
+# https://securityonion.net/license; you may not use this file except in compliance with the
+# Elastic License 2.0.
+
+pyinotify_module_package:
+  file.recurse:
+    - name: /opt/so/conf/salt/module_packages/pyinotify
+    - source: salt://salt/module_packages/pyinotify
+    - clean: True
+    - makedirs: True
+
+pyinotify_python_module_install:
+  cmd.run:
+    - name: /opt/saltstack/salt/bin/python3.10 -m pip install pyinotify --no-index --find-links=/opt/so/conf/salt/module_packages/pyinotify/ --upgrade
+    - onchanges:
+      - file: pyinotify_module_package
+    - failhard: True
+    - watch_in:
+      - service: salt_minion_service
diff --git a/salt/salt/module_packages/pyinotify/pyinotify-0.9.6.tar.gz b/salt/salt/module_packages/pyinotify/pyinotify-0.9.6.tar.gz
new file mode 100644
index 000000000..3150ad360
Binary files /dev/null and b/salt/salt/module_packages/pyinotify/pyinotify-0.9.6.tar.gz differ