Files
securityonion/salt/soc/files/soc/cases.queries.json
T

5 lines
250 B
JSON

[
{ "name": "Open Cases", "query": "NOT case.status:closed AND NOT case.category:template" },
{ "name": "Closed Cases", "query": "case.status:closed AND NOT case.category:template" },
{ "name": "Templates", "query": "case.category:template" }
]