Update default queries

2025-12-09 18:52:52 +01:00 · 2024-04-19 16:33:35 -04:00
parent 6c6647629c
commit a237ef5d96
2 changed files with 3 additions and 5 deletions
--- a/salt/strelka/compile_yara/compile_yara.py
+++ b/salt/strelka/compile_yara/compile_yara.py
@@ -43,6 +43,7 @@ def compile_yara_rules(rules_dir):
                "event.dataset": "soc.detections",
                "log.level": "error",
                "error.message": error_message,
+                "error.analysis": "syntax error",
                "detection_type": "yara",
                "rule.uuid": rule_id,
                "error.type": "runtime_status"