From 4f8524e0ac3c2616e99d9392985bc0d9177682c1 Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Wed, 5 Jan 2022 11:13:12 -0500
Subject: [PATCH] Prevent PCAP action from showing up outside of hunt/alerts

---
 salt/soc/files/soc/menu.actions.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/salt/soc/files/soc/menu.actions.json b/salt/soc/files/soc/menu.actions.json
index 5d3c16156..8af63f2a8 100644
--- a/salt/soc/files/soc/menu.actions.json
+++ b/salt/soc/files/soc/menu.actions.json
@@ -18,7 +18,8 @@
             "links": [
               "/joblookup?esid={:soc_id}&time={:@timestamp}", 
               "/joblookup?ncid={:network.community_id}&time={:@timestamp}"
-            ]},
+            ],
+            "categories": ["hunt", "alerts"]},
   { "name": "actionCyberChef", "description": "actionCyberChefHelp", "icon": "fas fa-bread-slice", "target": "_blank", 
             "links": [
               "/cyberchef/#input={value|base64}"