CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Correct missing json vars

Browse Source
This commit is contained in:
Jason Ertel
2021-12-27 20:36:28 -05:00
parent 09626deb05
commit 194e4119f0
2 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/soc/files/soc/cases.queries.json
View File

@@ -1,5 +1,5 @@
[
{ "name": "Open Cases", "query": "!case.status:Closed" },
{ "name": "Closed Cases", "query": "case.status:Closed" },
{ "name": "Open Cases", "query": "!case.status:Closed AND !case.category:Template" },
{ "name": "Closed Cases", "query": "case.status:Closed AND !case.category:Template" },
{ "name": "Templates", "query": "case.category:Template" }
]

2
salt/soc/files/soc/soc.json
View File

@@ -16,6 +16,8 @@
{%- import_json "soc/files/soc/alerts.eventfields.json" as alerts_eventfields %}
{%- import_json "soc/files/soc/hunt.queries.json" as hunt_queries %}
{%- import_json "soc/files/soc/hunt.eventfields.json" as hunt_eventfields %}
{%- import_json "soc/files/soc/cases.queries.json" as cases_queries %}
{%- import_json "soc/files/soc/cases.eventfields.json" as cases_eventfields %}
{%- import_json "soc/files/soc/menu.actions.json" as menu_actions %}
{%- import_json "soc/files/soc/tools.json" as tools %}
{%- import_json "soc/files/soc/presets.artifacttype.json" as presets_artifacttype %}