From 7f12d4c81589792f138ca8c3d07e60b2b8ed6f54 Mon Sep 17 00:00:00 2001
From: DefensiveDepth <Josh@defensivedepth.com>
Date: Fri, 3 May 2024 15:22:53 -0400
Subject: [PATCH] Exclude new sigma rules

---
 setup/so-verify | 1 +
 1 file changed, 1 insertion(+)

diff --git a/setup/so-verify b/setup/so-verify
index b4c79a88c..d22b80fc2 100755
--- a/setup/so-verify
+++ b/setup/so-verify
@@ -67,6 +67,7 @@ log_has_errors() {
         grep -vE "Reading first line of patchfile" | \
         grep -vE "Command failed with exit code" | \
         grep -vE "Running scope as unit" | \
+        grep -vE "securityonion-resources/sigma/stable" | \
         grep -vE "log-.*-pipeline_failed_attempts" &> "$error_log"
     
     if [[ $? -eq 0 ]]; then