Files
securityonion/salt/zeek/policy/custom
..

# Place custom policies in /opt/so/saltstack/local/salt/zeek/policy/custom/