CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 02:02:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #10019 from Security-Onion-Solutions/2.4/idhfix

Browse Source 
Add annotations
This commit is contained in:
Josh Brower
2023-03-27 15:19:15 -04:00
committed by GitHub
parent 8b626d2c67 d22a5b2eb3
commit 2dd48c6f0b
2 changed files with 15 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pillar/top.sls
View File

@@ -157,6 +157,8 @@ base:
'*_idh':
- soc_global
- adv_global
- idh.soc_idh
- idh.adv_idh
- minions.{{ grains.id }}
- minions.adv_{{ grains.id }}

26
salt/idh/soc_idh.yaml
View File

@@ -20,52 +20,52 @@ idh:
class: *loggingOptions
filename: *loggingOptions
portscan_x_enabled: &serviceOptions
description: To enable this IDH service set this value to true. To disable set to false.
description: To enable this opencanary module, set this value to true. To disable set to false.
helpLink: idh.html
portscan_x_logfile: *loggingOptions
portscan_x_synrate:
description: Needs update
description: Portscan - syn rate limiting
advanced: True
helpLink: idh.html
portscan_x_nmaposrate:
description: Needs update
description: Portscan - nmap OS rate limiting
advanced: True
helpLink: idh.html
portscan_x_lorate:
description: Needs update
description: Portscan - lo rate limiting
advanced: True
helpLink: idh.html
tcpbanner_x_maxnum:
description: Needs update
description: Portscan - maxnum
advanced: True
helpLink: idh.html
tcpbanner_x_enabled: *serviceOptions
tcpbanner_1_x_enabled: *serviceOptions
tcpbanner_1_x_port: &portOptions
description: Defined port the service should listen on.
description: Port the service should listen on.
advanced: True
helpLink: idh.html
tcpbanner_1_x_datareceivedbanner: &bannerOptions
description: Needs update
description: Data Received Banner
advanced: True
helpLink: idh.html
tcpbanner_1_x_initbanner: *bannerOptions
tcpbanner_1_x_alertstring_x_enabled: *serviceOptions
tcpbanner_1_x_keep_alive_x_enabled: *serviceOptions
tcpbanner_1_x_keep_alive_secret:
description: Needs update
description: Keep Alive Secret
advanced: True
helpLink: idh.html
tcpbanner_1_x_keep_alive_probes:
description: Needs update
description: Keep Alive Probes
advanced: True
helpLink: idh.html
tcpbanner_1_x_keep_alive_interval:
description: Needs update
description: Keep Alive Interval
advanced: True
helpLink: idh.html
tcpbanner_1_x_keep_alive_idle:
description: Needs update
description: Keep Alive Idle
advanced: True
helpLink: idh.html
ftp_x_enabled: *serviceOptions
@@ -123,9 +123,9 @@ idh:
vnc_x_port: *portOptions
openssh:
enable:
description: This is the other SSH for the host machine. Needs better descirption.
description: This is the real SSH service for the host machine.
helpLink: idh.html
config:
port:
description: Port that ssh will listen on and only accessible from the manager.
description: Port that the real SSH service will listen on and will only accessible from the manager.
helpLink: idh.html