CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

YARA casing

Browse Source
This commit is contained in:
DefensiveDepth
2024-04-03 16:17:29 -04:00
parent a8f25150f6
commit f66cca96ce
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/soc/defaults.yaml
View File

@@ -2053,7 +2053,7 @@ soc:
query: "so_detection.language:sigma" query: "so_detection.language:sigma"
- name: "Detection Type - Sigma - Windows" - name: "Detection Type - Sigma - Windows"
query: 'so_detection.language:sigma AND so_detection.content: "*product: windows*"' query: 'so_detection.language:sigma AND so_detection.content: "*product: windows*"'
- name: "Detection Type - Yara (Strelka)" - name: "Detection Type - YARA (Strelka)"
query: "so_detection.language:yara" query: "so_detection.language:yara"
- name: "Security Onion - Grid Detections" - name: "Security Onion - Grid Detections"
query: "so_detection.ruleset:securityonion-resources" query: "so_detection.ruleset:securityonion-resources"