CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #10319 from Security-Onion-Solutions/dougburks-patch-1

Browse Source 
Update soc_idstools.yaml
This commit is contained in:
Doug Burks
2023-05-09 12:18:36 -04:00
committed by GitHub
parent ebc20a86eb cf5feafb1e
commit 24140c4cda
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
salt/idstools/soc_idstools.yaml
View File

@@ -1,8 +1,8 @@
idstools: idstools:
config: config:
oinkcode: oinkcode:
description: Enter your registration/oink code for paid NIDS rulesets. description: Enter your registration code or oinkcode for paid NIDS rulesets.
title: registraion code title: Registration Code
global: True global: True
helpLink: rules.html helpLink: rules.html
ruleset: ruleset:
@@ -16,14 +16,14 @@ idstools:
helpLink: rules.html helpLink: rules.html
sids: sids:
disabled: disabled:
description: Contains the list of NIDS rules manually disabled across the grid. To disable a rule, add its signature ID (SID) to the Current Grid Value box, one entry per line. To disable multiple rules, you can use regular expressions. description: Contains the list of NIDS rules manually disabled across the grid. To disable a rule, add its Signature ID (SID) to the Current Grid Value box, one entry per line. To disable multiple rules, you can use regular expressions.
global: True global: True
multiline: True multiline: True
forcedType: "[]string" forcedType: "[]string"
regex: \d*|re:.* regex: \d*|re:.*
helpLink: managing-alerts.html helpLink: managing-alerts.html
enabled: enabled:
description: Contains the list of NIDS rules manually enabled across the grid. To enable a rule, add its signature ID (SID) to the Current Grid Value box, one entry per line. To enable multiple rules, you can use regular expressions. description: Contains the list of NIDS rules manually enabled across the grid. To enable a rule, add its Signature ID (SID) to the Current Grid Value box, one entry per line. To enable multiple rules, you can use regular expressions.
global: True global: True
multiline: True multiline: True
forcedType: "[]string" forcedType: "[]string"