From 83b7fecbbc9eb07dc49d20e53fe1fe0f062421f0 Mon Sep 17 00:00:00 2001
From: Mike Reeves <reevesmk@gmail.com>
Date: Thu, 19 Mar 2026 11:12:24 -0400
Subject: [PATCH] ja4plus cleanup

---
 salt/zeek/soc_zeek.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/zeek/soc_zeek.yaml b/salt/zeek/soc_zeek.yaml
index f3e5012b2..4c9b70efb 100644
--- a/salt/zeek/soc_zeek.yaml
+++ b/salt/zeek/soc_zeek.yaml
@@ -6,7 +6,7 @@ zeek:
     description: "Enables JA4+ fingerprinting (JA4S, JA4D, JA4H, JA4L, JA4SSH, JA4T, JA4TS, JA4X). By enabling this, you agree to the terms of the JA4+ license  [https://github.com/FoxIO-LLC/ja4/blob/main/LICENSE-JA4](https://github.com/FoxIO-LLC/ja4/blob/main/LICENSE-JA4)."
     forcedType: bool
     helpLink: zeek
-    advanced: True
+    advanced: False
   config:
     local:
       load: