Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature/detections airgap #12456

Merged
merged 2 commits into from
Feb 28, 2024
Merged

Feature/detections airgap #12456

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
59af547
Fix download location
defensivedepth Feb 27, 2024
e2dd0f8
Only update rule files if AG
defensivedepth Feb 28, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions salt/manager/tools/sbin/soup
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -935,8 +935,10 @@ main() {
preupgrade_changes
echo ""

echo "Updating Airgap Rule Files to the Latest."
update_airgap_rules
if [[ $is_airgap -eq 0 ]]; then
echo "Updating Rule Files to the Latest."
update_airgap_rules
fi

# since we don't run the backup.config_backup state on import we wont snapshot previous version states and pillars
if [[ ! "$MINIONID" =~ "_import" ]]; then
Expand Down
4 changes: 2 additions & 2 deletions salt/soc/soc_soc.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -83,7 +83,7 @@ soc:
global: True
advanced: False
autoUpdateEnabled:
description: 'Set to true to enable automatic updates of the Sigma Community Ruleset.'
description: 'Set to true to enable automatic Internet-connected updates of the Sigma Community Ruleset. If this is an Airgap system, this setting will be overridden and set to false.'
global: True
advanced: True
elastic:
Expand Down Expand Up @@ -146,7 +146,7 @@ soc:
advanced: True
strelkaengine:
autoUpdateEnabled:
description: 'Set to true to enable automatic updates of the Yara ruleset.'
description: 'Set to true to enable automatic Internet-connected updates of the Yara rulesets. If this is an Airgap system, this setting will be overridden and set to false.'
global: True
advanced: True
client:
Expand Down
Loading