# security-onion-scripts
## so-misp
A few scripts to integrate Security Onion with MISP
## so-rmnode
A script to automate removing a sensor node
## so-install-custom-rules
Install rules placed in the scripts directories to Security Onion
## so-rotate-pcap
Salt state and associated script to offload pcap to a mounted NFS share to avoid losing anything 
while ensuring the pcap is still searchable using the built-in steno interface