mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-30 21:03:10 +01:00
49 lines
1.5 KiB
YAML
49 lines
1.5 KiB
YAML
idstools:
|
|
config:
|
|
oinkcode:
|
|
description: Enter your registration code for paid rulesets.
|
|
global: True
|
|
helpLink: managing-alerts.html
|
|
ruleset:
|
|
description: Define the ruleset you want to run. Options are ETOPEN or ETPRO.
|
|
global: True
|
|
helpLink: managing-alerts.html
|
|
urls:
|
|
description: This is a list of additional rule download locations.
|
|
global: True
|
|
helpLink: managing-alerts.html
|
|
sids:
|
|
disabled:
|
|
description: List of disables SIDS.
|
|
global: True
|
|
helpLink: managing-alerts.html
|
|
enabled:
|
|
description: List of SIDS that are disabled by the rule source that you want to enable.
|
|
global: True
|
|
helpLink: managing-alerts.html
|
|
modify:
|
|
description: List of SIDS that are modified.
|
|
global: True
|
|
helpLink: managing-alerts.html
|
|
rules:
|
|
local__rules:
|
|
description: This is where custom Suricata rules are entered.
|
|
file: True
|
|
global: True
|
|
advanced: True
|
|
title: Local Rules
|
|
helpLink: managing-alerts.html
|
|
filters__rules:
|
|
description: You can set custom filters for Suricata when using it for meta data creation.
|
|
file: True
|
|
global: True
|
|
advanced: True
|
|
title: Filter Rules
|
|
helpLink: managing-alerts.html
|
|
extraction__rules:
|
|
description: This is a list of mime types for file extraction when Suricata is used for meta data creation.
|
|
file: True
|
|
global: True
|
|
advanced: True
|
|
title: Extraction Rules
|
|
helpLink: managing-alerts.html |