Merge pull request #16323 from Security-Onion-Solutions/mreeves/alert-triage-notify-skill

Remove the Notifier agent mapping
This commit is contained in:
Mike Reeves authored and GitHub committed 2026-10-13 17:45:22 -04:00
commit b158a38099
2 files changed
+1 -5

No files matched your search

-1
View File
@@ -1545,7 +1545,6 @@ soc:
Investigator: haiku@SOAI
DetectionEngineer: haiku@SOAI
AlertTriage: haiku@SOAI
Notifier: haiku@SOAI
useMemory: false
useMemoryScanner: false
dontScanBefore: ""
+1 -4
View File
@@ -954,10 +954,7 @@ soc:
description: This agent manages detections and their overrides, including tuning noisy rules and authoring rule content.
global: True
AlertTriage:
description: This agent triages alerts autonomously for the Alert Triage automation, ending each run with a report and an assessment of the alert. It can notify through the Notifier but cannot acknowledge alerts or escalate to cases.
global: True
Notifier:
description: This agent sends a single notification on behalf of another agent, such as AlertTriage, and takes no other action.
description: This agent triages alerts autonomously for the Alert Triage automation, ending each run with a report and an assessment of the alert. It can send a notification but cannot acknowledge alerts or escalate to cases.
global: True
useMemory:
description: Enables the Memory system for OnionAI