Rename Detection Engineer agent key to DetectionEngineer

The agent name is also the agentMapping config key and a SOC setting id
segment, so the space made it awkward to target. Matches the rename in
securityonion-soc.
This commit is contained in:
Mike Reeves
2026-07-22 11:49:32 -04:00
parent 894d323323
commit 87907e73d2
2 changed files with 2 additions and 2 deletions
+1 -1
View File
@@ -1532,7 +1532,7 @@ soc:
agentMapping:
Orchestrator: Claude Sonnet
Investigator: Claude Sonnet
Detection Engineer: Claude Sonnet
DetectionEngineer: Claude Sonnet
onionconfig:
saltstackDir: /opt/so/saltstack
bypassEnabled: false
+1 -1
View File
@@ -786,7 +786,7 @@ soc:
Investigator:
description: This agent investigates alerts, explains events and records, and hunts through event data. It can also acknowledge alerts and escalate to cases.
global: True
Detection Engineer:
DetectionEngineer:
description: This agent manages detections and their overrides, including tuning noisy rules and authoring rule content.
global: True
client: