defensivedepth d352bc0384 ES|QL and Sigma correlation support

2026-10-07 11:26:32 -04:00

..

files

Detect hand-placed local/salt files in Auto State Apply

2026-08-26 15:15:29 -04:00

tools

ES|QL and Sigma correlation support

2026-10-07 11:26:32 -04:00

beacons.sls

Move global.push config to salt.auto_apply

2026-06-24 15:17:48 -04:00

defaults.yaml

add configurable realert threshold per agent

2025-09-10 10:56:09 -05:00

elasticsearch.sls

…

glue.py

Move In Day

2022-09-07 09:06:25 -04:00

hypervisor.sls

more ed25519 to ecdsa

2025-08-07 15:02:45 -04:00

init.sls

FIX: remove the docker socket from so-telegraf

2026-09-24 14:30:25 -04:00

kibana.sls

…

managed_soc_annotations.sls

Iniitial DLM support

2026-06-09 23:19:26 -05:00

map.jinja

only enable repo sync cron if OEL

2024-11-08 16:13:44 -05:00

soc_manager.yaml

…

sync_es_users.sls

Move setup-complete marker from /opt/so/conf to /opt/so/state

2026-06-04 15:07:27 -04:00