CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 01:02:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add case exclusion toggle to Hunt to avoid hunt results getting case data hits unintentionally

Browse Source
This commit is contained in:
Jason Ertel
2022-01-07 12:58:35 -05:00
parent 4f8524e0ac
commit 9ef83da23f
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/soc/files/soc/soc.json
View File

@@ -166,7 +166,9 @@
"escalateRelatedEventsEnabled": {{ 'true' if CASE_MODULE == 'soc' else 'false' }},
"eventFields": {{ hunt_eventfields | json }},
"queryBaseFilter": "",
"queryToggleFilters": [],
"queryToggleFilters": [
{ "name": "caseExcludeToggle", "filter": "NOT _index:so-case*", "enabled": true }
],
"queries": {{ hunt_queries | json }},
"actions": {{ menu_actions | json }}
},