diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml index 2b214cf7f..391b36194 100644 --- a/salt/soc/defaults.yaml +++ b/salt/soc/defaults.yaml @@ -1545,7 +1545,6 @@ soc: Investigator: haiku@SOAI DetectionEngineer: haiku@SOAI AlertTriage: haiku@SOAI - Notifier: haiku@SOAI useMemory: false useMemoryScanner: false dontScanBefore: "" diff --git a/salt/soc/soc_soc.yaml b/salt/soc/soc_soc.yaml index 99840fbcf..cd85b9ca6 100644 --- a/salt/soc/soc_soc.yaml +++ b/salt/soc/soc_soc.yaml @@ -954,10 +954,7 @@ soc: description: This agent manages detections and their overrides, including tuning noisy rules and authoring rule content. global: True AlertTriage: - description: This agent triages alerts autonomously for the Alert Triage automation, ending each run with a report and an assessment of the alert. It can notify through the Notifier but cannot acknowledge alerts or escalate to cases. - global: True - Notifier: - description: This agent sends a single notification on behalf of another agent, such as AlertTriage, and takes no other action. + description: This agent triages alerts autonomously for the Alert Triage automation, ending each run with a report and an assessment of the alert. It can send a notification but cannot acknowledge alerts or escalate to cases. global: True useMemory: description: Enables the Memory system for OnionAI