From 15049f44b993239f29fb8fa0f79b5d2c935c475d Mon Sep 17 00:00:00 2001
From: Wes Lambert <wlambertts@gmail.com>
Date: Thu, 14 Oct 2021 15:15:23 +0000
Subject: [PATCH] Add EG pivot

---
 salt/soc/files/soc/menu.actions.json | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/salt/soc/files/soc/menu.actions.json b/salt/soc/files/soc/menu.actions.json
index 665ca4c39..0c144c3cb 100644
--- a/salt/soc/files/soc/menu.actions.json
+++ b/salt/soc/files/soc/menu.actions.json
@@ -1,3 +1,4 @@
+{% set HIGHLANDER = salt['pillar.get']('global:highlander', False) %}
 [
   { "name": "actionHunt", "description": "actionHuntHelp", "icon": "fa-crosshairs", "target": "", 
             "links": [
@@ -29,5 +30,12 @@
   { "name": "actionVirusTotal", "description": "actionVirusTotalHelp", "icon": "fa-external-link-alt", "target": "_blank", 
             "links": [
               "https://www.virustotal.com/gui/search/{value}"
-					  ]}
+	    ]}
+ {%- if HIGHLANDER %}
+   {%- set EGHOST = salt['pillar.get']('soc:endgamehost', 'EGHOSTNOTPOPULATED') %}
+   ,{ "name": "Endgame", "description": "Endgame Endpoint Investigation and Response", "icon": "fa-external-link-alt", "target": "_blank",
+            "links": [
+              "https://{{ EGHOST }}/endpoints/{:agent.id}"
+            ]}
+ {% endif %}
 ]