securityonion/salt/soc/files/soc/presets.tlp.json

{
  "labels": [
    "clear",
    "green",
    "amber",
    "amber+strict",
    "red"
  ],
  "customEnabled": false
}