mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
soc.json stuff
This commit is contained in:
@@ -180,7 +180,7 @@
|
||||
{ "name": "acknowledged", "filter": "event.acknowledged:true", "enabled": false, "exclusive": true },
|
||||
{ "name": "escalated", "filter": "event.escalated:true", "enabled": false, "exclusive": true }
|
||||
],
|
||||
"queries": {{ alert_queries.soc.alerts.queries | json }}
|
||||
"queries": {{ alerts_queries.soc.alerts.queries | json }}
|
||||
,
|
||||
"actions": [
|
||||
{ "name": "", "description": "actionHuntHelp", "icon": "fa-crosshairs", "link": "/#/hunt?q=\"{value}\" | groupby event.module event.dataset", "target": "_blank" },
|
||||
|
||||
Reference in New Issue
Block a user