CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update soc_idstools.yaml

Browse Source
This commit is contained in:
bryant-treacle
2023-04-26 08:49:04 -04:00
committed by GitHub
parent f07f0775ac
commit 49a60bac76
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
salt/idstools/soc_idstools.yaml
View File

@@ -7,6 +7,7 @@ idstools:
ruleset: ruleset:
description: Define the ruleset you want to run. Options are ETOPEN or ETPRO. description: Define the ruleset you want to run. Options are ETOPEN or ETPRO.
global: True global: True
regex: ET[PO][RP][OE]
helpLink: rules.html helpLink: rules.html
urls: urls:
description: This is a list of additional rule download locations. description: This is a list of additional rule download locations.
@@ -16,14 +17,20 @@ idstools:
disabled: disabled:
description: List of SIDS that you want to disable. description: List of SIDS that you want to disable.
global: True global: True
multiline: True
forcedType: "[]string"
helpLink: managing-alerts.html helpLink: managing-alerts.html
enabled: enabled:
description: List of SIDS that are disabled by the rule source that you want to enable. description: List of SIDS that are disabled by the rule source that you want to enable.
global: True global: True
multiline: True
forcedType: "[]string"
helpLink: managing-alerts.html helpLink: managing-alerts.html
modify: modify:
description: List of SIDS that you want to modify. description: List of SIDS that you want to modify.
global: True global: True
multiline: True
forcedType: "[]string"
helpLink: managing-alerts.html helpLink: managing-alerts.html
rules: rules:
local__rules: local__rules: