diff --git a/salt/soc/files/soc/presets.artifacttype.json b/salt/soc/files/soc/presets.artifacttype.json new file mode 100644 index 000000000..40e970882 --- /dev/null +++ b/salt/soc/files/soc/presets.artifacttype.json @@ -0,0 +1,20 @@ +"activityType": { + "labels": [ + "autonomous-system", + "domain", + "file", + "filename", + "fqdn", + "hash", + "ip", + "mail", + "mail_subject", + "other", + "regexp", + "registry", + "uri_path", + "url", + "user-agent" + ], + "customEnabled": true +},