From 0cc57fc24092145839fbee701867ef3132f6add1 Mon Sep 17 00:00:00 2001 From: Corey Ogburn Date: Fri, 17 May 2024 15:47:23 -0600 Subject: [PATCH] Change Compilation Report Path Move compilation report path to /opt/so/state and mount that foulder in SOC --- salt/soc/enabled.sls | 1 + salt/strelka/compile_yara/compile_yara.py | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/salt/soc/enabled.sls b/salt/soc/enabled.sls index 990bf210c..4d4b5f6fd 100644 --- a/salt/soc/enabled.sls +++ b/salt/soc/enabled.sls @@ -46,6 +46,7 @@ so-soc: - /opt/so/saltstack:/opt/so/saltstack:rw - /opt/so/conf/soc/migrations:/opt/so/conf/soc/migrations:rw - /nsm/backup/detections-migration:/nsm/backup/detections-migration:ro + - /opt/so/state:/opt/so/state:rw - extra_hosts: {% for node in DOCKER_EXTRA_HOSTS %} {% for hostname, ip in node.items() %} diff --git a/salt/strelka/compile_yara/compile_yara.py b/salt/strelka/compile_yara/compile_yara.py index cac60ad60..09e3f4680 100644 --- a/salt/strelka/compile_yara/compile_yara.py +++ b/salt/strelka/compile_yara/compile_yara.py @@ -85,7 +85,7 @@ def compile_yara_rules(rules_dir): } # Write total - with open('/opt/sensoroni/logs/detections_yara_compilation-total.log', 'w+') as report_file: + with open('/opt/so/state/detections_yara_compilation-total.log', 'w+') as report_file: json.dump(compilation_report, report_file) # Print summary of compilation results