CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Ignore these rules by default because they are causing issues with YARA compilation with Strelka

Browse Source
This commit is contained in:
weslambert
2021-09-15 10:29:11 -04:00
committed by GitHub
parent 5c8067728e
commit 4d41d3aee1
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
salt/strelka/defaults.yaml Normal file
View File

@@ -0,0 +1,9 @@
strelka:
ignore:
- generic_anomalies.yar
- general_cloaking.yar
- thor_inverse_matches.yar
- yara_mixed_ext_vars.yar
- gen_susp_js_obfuscatorio.yar
- apt_flame2_orchestrator.yar
- apt_tetris.yar