mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
Set Strelka rules enabled by default for Eval Mode
This commit is contained in:
@@ -148,6 +148,7 @@ if [ "$install_type" = 'EVAL' ]; then
|
||||
is_manager=true
|
||||
is_sensor=true
|
||||
is_eval=true
|
||||
STRELKARULES=1
|
||||
elif [ "$install_type" = 'STANDALONE' ]; then
|
||||
is_manager=true
|
||||
is_distmanager=true
|
||||
@@ -308,6 +309,10 @@ if [[ $is_manager && ! $is_eval ]]; then
|
||||
whiptail_oinkcode
|
||||
fi
|
||||
|
||||
if [[ $STRELKA == 1 ]]; then
|
||||
whiptail_strelka_rules
|
||||
fi
|
||||
|
||||
if [ "$MANAGERADV" = 'ADVANCED' ] && [ "$ZEEKVERSION" != 'SURICATA' ]; then
|
||||
whiptail_manager_adv_service_zeeklogs
|
||||
fi
|
||||
@@ -316,9 +321,6 @@ fi
|
||||
if [[ $is_manager ]]; then
|
||||
whiptail_components_adv_warning
|
||||
whiptail_enable_components
|
||||
if [[ $STRELKA == 1 ]]; then
|
||||
whiptail_strelka_rules
|
||||
fi
|
||||
fi
|
||||
|
||||
if [[ $is_manager || $is_import ]]; then
|
||||
|
||||
Reference in New Issue
Block a user