mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-08 10:12:53 +01:00
29 lines
884 B
Bash
Executable File
29 lines
884 B
Bash
Executable File
#!/bin/bash
|
|
|
|
# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
|
|
# or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at
|
|
# https://securityonion.net/license; you may not use this file except in compliance with the
|
|
# Elastic License 2.0.
|
|
|
|
|
|
|
|
. /usr/sbin/so-common
|
|
|
|
if ! [ -f /opt/so/state/playbook_regen_plays ] || [ "$1" = "--force" ]; then
|
|
|
|
echo "Refreshing Sigma & regenerating plays... "
|
|
|
|
# Regenerate ElastAlert & update Plays
|
|
docker exec so-soctopus python3 playbook_play-update.py
|
|
|
|
# Delete current Elastalert Rules
|
|
rm /opt/so/rules/elastalert/playbook/*.yaml
|
|
|
|
# Regenerate Elastalert Rules
|
|
so-playbook-sync
|
|
|
|
# Create state file
|
|
touch /opt/so/state/playbook_regen_plays
|
|
else
|
|
printf "\nState file found, exiting...\nRerun with --force to override.\n"
|
|
fi |