CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-07-18 14:53:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update baseline agents

Browse Source
This commit is contained in:
Josh Brower
2026-07-17 15:20:20 -04:00
parent 30f3bddb8b
commit 48a7d66964
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
salt/soc/defaults.yaml
+2 -1
View File
@@ -1531,7 +1531,8 @@ soc:
agentic: false
agentMapping:
Orchestrator: sonnet
Hunter: sonnet
Investigator: sonnet
Detection Engineer: sonnet
onionconfig:
saltstackDir: /opt/so/saltstack
bypassEnabled: false
salt/soc/soc_soc.yaml
+5 -2
View File
@@ -783,8 +783,11 @@ soc:
Orchestrator:
description: The initial agent in most agentic conversations. This agent will delegate requests to specialized agents.
global: True
Hunter:
description: This agent is specialized in querying events.
Investigator:
description: This agent investigates alerts, explains events and records, and hunts through event data. It can also acknowledge alerts and escalate to cases.
global: True
Detection Engineer:
description: This agent manages detections and their overrides, including tuning noisy rules and authoring rule content.
global: True
client:
assistant: