mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 17:52:46 +01:00
14 lines
519 B
Plaintext
14 lines
519 B
Plaintext
alert:
|
|
- "modules.so.playbook-es.PlaybookESAlerter"
|
|
|
|
elasticsearch_host: "{{ GLOBALS.url_base }}:9200"
|
|
play_title: ""
|
|
event.module: "playbook"
|
|
event.dataset: "alert"
|
|
event.severity:
|
|
rule.category:
|
|
play_url: "https://{{ GLOBALS.url_base }}/playbook/issues/6000"
|
|
kibana_pivot: "https://{{ GLOBALS.url_base }}/kibana/app/kibana#/discover?_g=()&_a=(columns:!(_source),interval:auto,query:(language:lucene,query:'_id:{[_id]}'),sort:!('@timestamp',desc))"
|
|
soc_pivot: "https://{{ GLOBALS.url_base }}/#/hunt"
|
|
sigma_level: ""
|