-
Notifications
You must be signed in to change notification settings - Fork 636
FIX: Fix rule validators in SOC #15533
Copy link
Copy link
Closed
Security-Onion-Solutions/securityonion-soc
#1072Description
jertel
opened on Feb 26, 2026
Issue body actions
- YARA rule IDs can start with an underscore yet the regex prevents it.
- There needs to be separate validators for missing IDs instead of misleading user telling them the ID is missing when it's not, it's just invalid.
- Eliminate the duplicated rule validations across the detection panel and detection page. Reuse a single set of validators to avoid future maintenance mistakes.
Reactions are currently unavailable