contentctl
contentctl copied to clipboard
Allow individual detections to override actions
This allows a detection to define response actions such as notable, email, etc to override the global defaults.
This also adds a config option to copy the default config in to the detection yaml on generation, to allow easier editing afterwards