CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

For hunt quick actions, pipe value to 'escape' operator to escape backslashes and double quotes

Browse Source
This commit is contained in:
Jason Ertel
2021-03-31 14:57:36 -04:00
parent 2a595f03b7
commit 820b01405f
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/soc/files/soc/alerts.actions.json
View File

@@ -1,7 +1,7 @@
[ [
{ "name": "actionHunt", "description": "actionHuntHelp", "icon": "fa-crosshairs", "target": "", { "name": "actionHunt", "description": "actionHuntHelp", "icon": "fa-crosshairs", "target": "",
"links": [ "links": [
"/#/hunt?q=\"{value}\" | groupby event.module event.dataset" "/#/hunt?q=\"{value|escape}\" | groupby event.module event.dataset"
]}, ]},
{ "name": "actionCorrelate", "description": "actionCorrelateHelp", "icon": "fab fa-searchengin", "target": "", { "name": "actionCorrelate", "description": "actionCorrelateHelp", "icon": "fab fa-searchengin", "target": "",
"links": [ "links": [

2
salt/soc/files/soc/hunt.actions.json
View File

@@ -1,7 +1,7 @@
[ [
{ "name": "actionHunt", "description": "actionHuntHelp", "icon": "fa-crosshairs", "target": "", { "name": "actionHunt", "description": "actionHuntHelp", "icon": "fa-crosshairs", "target": "",
"links": [ "links": [
"/#/hunt?q=\"{value}\" | groupby event.module event.dataset" "/#/hunt?q=\"{value|escape}\" | groupby event.module event.dataset"
]}, ]},
{ "name": "actionCorrelate", "description": "actionCorrelateHelp", "icon": "fab fa-searchengin", "target": "", { "name": "actionCorrelate", "description": "actionCorrelateHelp", "icon": "fab fa-searchengin", "target": "",
"links": [ "links": [