From fb7e065590a9b2bb8f6c04571c3637ac0e61a6fe Mon Sep 17 00:00:00 2001
From: Corey Ogburn <corey.ogburn@securityonionsolutions.com>
Date: Tue, 1 Sep 2026 09:32:26 -0600
Subject: [PATCH] Remove YYYY-MM-DD

No more instances of YYYY-MM-DD
---
 salt/soc/soc_soc.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/soc/soc_soc.yaml b/salt/soc/soc_soc.yaml
index 2710ab179..1471056bd 100644
--- a/salt/soc/soc_soc.yaml
+++ b/salt/soc/soc_soc.yaml
@@ -854,7 +854,7 @@ soc:
             global: True
             forcedType: bool
           dontScanBefore:
-            description: A date specifying how far back to scan for memories. Must be in YYYY-MM-DD format.
+            description: A date specifying how far back to scan for memories. Must be in UTC format (2026-08-31T22:05:48Z).
             regex: "^(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?Z)?$"
             regexFailureMessage: Expecting date in RFC3339 format (2026-08-31T22:05:48Z)
             global: True