diff --git a/salt/soc/defaults.yaml b/salt/soc/defaults.yaml index 8b78f2e91..7d8d8dd25 100644 --- a/salt/soc/defaults.yaml +++ b/salt/soc/defaults.yaml @@ -1157,7 +1157,7 @@ soc: tipTimeoutMs: 6000 cacheExpirationMs: 300000 casesEnabled: true - detectionsEnabled: false + detectionsEnabled: true inactiveTools: ['toolUnused'] tools: - name: toolKibana @@ -1881,8 +1881,9 @@ soc: default: - so_detection.title - so_detection.isEnabled - - so_detection.language - so_detection.severity + - so_detection.language + - so_detection.ruleset queries: - name: "All Detections" query: "_id:*"