Mike Reeves 1bcf80dd10 Group by assessment without a missing bucket ...

The assessment is a number, and SOC's missing bucket only works on keyword
fields, so the * made Elasticsearch fail parsing "__missing__" as a long.
Untriaged alerts now drop out of this view.

2026-10-13 17:11:49 -04:00

..

dyanno/hypervisor

FIX: root-own the Salt default tree so a SOC file-write cannot reach root code

2026-09-16 10:34:21 -04:00

files

Merge remote-tracking branch 'origin/3/dev' into sigma-pipeline-dir

2026-10-05 07:44:53 -04:00

tools/sbin

Add runtime status logs

2024-04-24 16:33:47 -04:00

config.sls

Clarify req

2026-10-05 08:14:13 -04:00

defaults.map.jinja

Isolate the Kratos admin API on a dedicated soauth docker network

2026-09-09 16:09:00 -04:00

defaults.yaml

Group by assessment without a missing bucket

2026-10-13 17:11:49 -04:00

disabled.sls

enabled/disable soc in ui

2023-05-11 15:33:16 -04:00

enabled.sls

Refactor sigma pipelines

2026-10-02 14:23:57 -04:00

init.sls

fix import

2023-05-11 15:36:20 -04:00

merged.map.jinja

postgress updates

2026-07-21 11:58:11 -04:00

soc_soc.yaml

Note that an oai query also needs the agentic assistant

2026-10-07 08:56:44 -04:00

sostatus.sls

enabled/disable soc in ui

2023-05-11 15:33:16 -04:00