Files
securityonion/salt/idstools/etc/disable.conf
2020-06-29 16:11:30 -04:00

15 lines
395 B
Plaintext

{% set disabled_sids = salt['pillar.get']('idstools:sids:disabled', {}) -%}
# idstools - disable.conf
# Example of disabling a rule by signature ID (gid is optional).
# 1:2019401
# 2019401
# Example of disabling a rule by regular expression.
# - All regular expression matches are case insensitive.
# re:hearbleed
# re:MS(0[7-9]|10)-\d+
{%- for sid in disabled_sids %}
{{ sid }}
{%- endfor %}