CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

set default mime_db

Browse Source
This commit is contained in:
m0duspwnens
2023-03-14 13:25:51 -04:00
parent 9d4e1cc149
commit b38d5df684
2 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/strelka/defaults.yaml
View File

@@ -13,7 +13,7 @@ strelka:
addr: 'HOST:6380' addr: 'HOST:6380'
db: 0 db: 0
tasting: tasting:
mime_db: null mime_db: '/usr/lib/file/magic.mgc'
yara_rules: '/etc/strelka/taste/' yara_rules: '/etc/strelka/taste/'
scanners: scanners:
'ScanBase64': 'ScanBase64':

8
salt/strelka/init.sls
View File

@@ -58,6 +58,14 @@ backend_passwords:
- defaults: - defaults:
PASSWORDS: {{ STRELKAMERGED.config.backend.passwords }} PASSWORDS: {{ STRELKAMERGED.config.backend.passwords }}
backend_taste:
file.managed:
- name: /opt/so/conf/strelka/backend/taste/taste.yara
- source: salt://strelka/files/backend/taste/taste.yara
- makedirs: True
- user: 939
- group: 939
filestream_config: filestream_config:
file.managed: file.managed:
- name: /opt/so/conf/strelka/filestream/filestream.yaml - name: /opt/so/conf/strelka/filestream/filestream.yaml