From 0bd12ca20be713e78e2fb9e9382406af9dc6dd99 Mon Sep 17 00:00:00 2001 From: fcaffieri Date: Mon, 9 Jun 2025 11:00:51 -0300 Subject: [PATCH 1/2] Add missing malicious-ioc ruleset lists --- roles/wazuh/ansible-wazuh-manager/defaults/main.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml index 408468f9..8438c7ce 100644 --- a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml +++ b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml @@ -296,6 +296,9 @@ wazuh_manager_ruleset: - 'audit-keys' - 'security-eventchannel' - 'amazon/aws-eventnames' + - 'malicious-ioc/malicious-ip' + - 'malicious-ioc/malicious-domains' + - 'malicious-ioc/malware-hashes' wazuh_manager_rule_exclude: - '0215-policy_rules.xml' From 74d210ffb95ae7e77f18113bb743ac03b67283f6 Mon Sep 17 00:00:00 2001 From: fcaffieri Date: Mon, 9 Jun 2025 18:22:13 -0300 Subject: [PATCH 2/2] Update CHANGELOG --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 17848515..0ba3c2bf 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,7 @@ All notable changes to this project will be documented in this file. ### Added +- Add missing malicious-ioc ruleset lists ([#1685](https://github.com/wazuh/wazuh-ansible/pull/1685)) - Integrate bumper script via GitHub action. ([#1676](https://github.com/wazuh/wazuh-ansible/pull/1676)) - Added repository_bumper.sh script. ([#1621](https://github.com/wazuh/wazuh-ansible/pull/1621))