Merge pull request #12640 from Security-Onion-Solutions/cogburn/sigma-repo-support

Update ElastAlert Config with Default Repos
2025-12-06 17:22:49 +01:00 · 2024-03-22 14:24:18 -06:00
parent d6ce3851ec 237946e916
commit 8ae30d0a77
1 changed files with 4 additions and 0 deletions
--- a/salt/soc/defaults.yaml
+++ b/salt/soc/defaults.yaml
@@ -1186,6 +1186,10 @@ soc:
          denyRegex: ''
          elastAlertRulesFolder: /opt/sensoroni/elastalert
          rulesFingerprintFile: /opt/sensoroni/fingerprints/sigma.fingerprint
+          rulesRepos:
+          - repo: https://github.com/Security-Onion-Solutions/securityonion-resources
+            license: DRL
+            folder: sigma/stable
          sigmaRulePackages:
            - core
            - emerging_threats_addon