From dc79dca7feb054fbd47362ccd996d5a737ba9329 Mon Sep 17 00:00:00 2001 From: Mike Reeves Date: Thu, 1 Oct 2020 17:25:51 -0400 Subject: [PATCH] More json for soc --- salt/soc/files/soc/hunt.actions.default.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 salt/soc/files/soc/hunt.actions.default.yaml diff --git a/salt/soc/files/soc/hunt.actions.default.yaml b/salt/soc/files/soc/hunt.actions.default.yaml new file mode 100644 index 000000000..7d650e025 --- /dev/null +++ b/salt/soc/files/soc/hunt.actions.default.yaml @@ -0,0 +1,8 @@ +soc: + hunt: + actions: [ + { "name": "", "description": "actionHuntHelp", "icon": "fa-search", "link": "/#/hunt?q=\"{value}\" | groupby event.module event.dataset", "target": "" }, + { "name": "", "description": "actionPcapHelp", "icon": "fa-stream", "link": "/joblookup?esid={eventId}", "target": "" }, + { "name": "", "description": "actionGoogleHelp", "icon": "fab fa-google", "link": "https://www.google.com/search?q={value}", "target": "_blank" }, + { "name": "actionVirusTotal", "description": "actionVirusTotalHelp", "icon": "", "link": "https://www.virustotal.com/gui/search/{value}", "target": "_blank" } + ] \ No newline at end of file