Update ElastAlert Config with Default Repos

2025-12-07 01:32:47 +01:00 · 2024-03-22 10:31:09 -06:00
parent d6ce3851ec
commit 3d04d37030
1 changed files with 3 additions and 0 deletions
--- a/salt/soc/defaults.yaml
+++ b/salt/soc/defaults.yaml
@@ -1186,6 +1186,9 @@ soc:
          denyRegex: ''
          elastAlertRulesFolder: /opt/sensoroni/elastalert
          rulesFingerprintFile: /opt/sensoroni/fingerprints/sigma.fingerprint
+          rulesRepos:
+          - repo: https://github.com/Security-Onion-Solutions/securityonion-resources
+            license: DRL
          sigmaRulePackages:
            - core
            - emerging_threats_addon