Mike Reeves 3304aff62b Note that an oai query also needs the agentic assistant ...

SOC (securityonion-soc#1363) now hides a query licensed for oai unless the
assistant is enabled and agentic, so the query editor's license help says so.

Claude-Session: https://claude.ai/code/session_01SZLcwj68A2wLo3F8TGKsLP

2026-10-07 08:56:44 -04:00

..

dyanno/hypervisor

FIX: root-own the Salt default tree so a SOC file-write cannot reach root code

2026-09-16 10:34:21 -04:00

files

Merge remote-tracking branch 'origin/3/dev' into sigma-pipeline-dir

2026-10-05 07:44:53 -04:00

tools/sbin

Add runtime status logs

2024-04-24 16:33:47 -04:00

config.sls

Clarify req

2026-10-05 08:14:13 -04:00

defaults.map.jinja

Isolate the Kratos admin API on a dedicated soauth docker network

2026-09-09 16:09:00 -04:00

defaults.yaml

Add a licensed Group By Assessment, Name alerts query

2026-10-06 21:14:25 -04:00

disabled.sls

enabled/disable soc in ui

2023-05-11 15:33:16 -04:00

enabled.sls

Refactor sigma pipelines

2026-10-02 14:23:57 -04:00

init.sls

fix import

2023-05-11 15:36:20 -04:00

merged.map.jinja

postgress updates

2026-07-21 11:58:11 -04:00

soc_soc.yaml

Note that an oai query also needs the agentic assistant

2026-10-07 08:56:44 -04:00

sostatus.sls

enabled/disable soc in ui

2023-05-11 15:33:16 -04:00