CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #12611 from Security-Onion-Solutions/2.4/enable-detections

Browse Source 
Change Detections defaults
This commit is contained in:
Josh Brower
2024-03-21 08:04:03 -04:00
committed by GitHub
parent 655d3e349c 4a33234c34
commit 4b03d088c3
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
salt/soc/defaults.yaml
View File

@@ -1079,7 +1079,7 @@ soc:
hostUrl:
elastalertengine:
allowRegex: ''
autoUpdateEnabled: false
autoUpdateEnabled: true
communityRulesImportFrequencySeconds: 86400
denyRegex: ''
elastAlertRulesFolder: /opt/sensoroni/elastalert
@@ -1131,9 +1131,10 @@ soc:
- rbac/users_roles
strelkaengine:
allowRegex: ''
autoUpdateEnabled: false
autoUpdateEnabled: true
communityRulesImportFrequencySeconds: 86400
compileYaraPythonScriptPath: /opt/so/conf/strelka/compile_yara.py
denyRegex: '.*'
denyRegex: ''
reposFolder: /opt/sensoroni/yara/repos
rulesRepos:
- repo: https://github.com/Security-Onion-Solutions/securityonion-yara
@@ -1141,8 +1142,10 @@ soc:
yaraRulesFolder: /opt/sensoroni/yara/rules
suricataengine:
allowRegex: ''
autoUpdateEnabled: true
communityRulesImportFrequencySeconds: 86400
communityRulesFile: /nsm/rules/suricata/emerging-all.rules
denyRegex: '.*'
denyRegex: ''
rulesFingerprintFile: /opt/sensoroni/fingerprints/emerging-all.fingerprint
client:
enableReverseLookup: false