CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 10:12:53 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #12456 from Security-Onion-Solutions/feature/detections-airgap

Browse Source 
Feature/detections airgap
This commit is contained in:
Josh Brower
2024-02-28 09:41:13 -05:00
committed by GitHub
parent d1e55d5ab7 e2dd0f8cf1
commit aa3b917368
2 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/manager/tools/sbin/soup
View File

@@ -950,8 +950,10 @@ main() {
preupgrade_changes preupgrade_changes
echo "" echo ""
echo "Updating Airgap Rule Files to the Latest." if [[ $is_airgap -eq 0 ]]; then
update_airgap_rules echo "Updating Rule Files to the Latest."
update_airgap_rules
fi
# since we don't run the backup.config_backup state on import we wont snapshot previous version states and pillars # since we don't run the backup.config_backup state on import we wont snapshot previous version states and pillars
if [[ ! "$MINIONID" =~ "_import" ]]; then if [[ ! "$MINIONID" =~ "_import" ]]; then

4
salt/soc/soc_soc.yaml
View File

@@ -83,7 +83,7 @@ soc:
global: True global: True
advanced: False advanced: False
autoUpdateEnabled: autoUpdateEnabled:
description: 'Set to true to enable automatic updates of the Sigma Community Ruleset.' description: 'Set to true to enable automatic Internet-connected updates of the Sigma Community Ruleset. If this is an Airgap system, this setting will be overridden and set to false.'
global: True global: True
advanced: True advanced: True
elastic: elastic:
@@ -146,7 +146,7 @@ soc:
advanced: True advanced: True
strelkaengine: strelkaengine:
autoUpdateEnabled: autoUpdateEnabled:
description: 'Set to true to enable automatic updates of the Yara ruleset.' description: 'Set to true to enable automatic Internet-connected updates of the Yara rulesets. If this is an Airgap system, this setting will be overridden and set to false.'
global: True global: True
advanced: True advanced: True
client: client: