Merge pull request #10751 from Security-Onion-Solutions/yararules

Yararules

salt/manager/init.sls

@@ -124,6 +124,12 @@ strelka-yara-update:
     - identifier: strelka-yara-update
     - hour: '7'
     - minute: '1'
+
+update_yara_rules:
+  cmd.run:
+    - name: /usr/sbin/so-yara-update
+    - onchanges:
+      - file: yara_update_scripts
 {%   else %}
 remove_strelka-yara-update:
   cron.absent:
@@ -137,6 +143,12 @@ strelka-yara-download:
     - identifier: strelka-yara-download
     - hour: '7'
     - minute: '1'
+
+download_yara_rules:
+  cmd.run:
+    - name: /usr/sbin/so-yara-download
+    - onchanges:
+      - file: yara_update_scripts
 {%   endif %}
 
 

salt/strelka/backend/enabled.sls

@@ -42,6 +42,8 @@ strelka_backend:
       {% endfor %}
     {% endif %}
     - restart_policy: on-failure
+    - watch:
+      - file: strelkarules
 
 delete_so-strelka-backend_so-status.disabled:
   file.uncomment: