Correlation rules embedded in the Docker image

[osmontero]

Describe the feature

Air gapped systems cannot download the images from internet, it is more easy for it to embed the rules inside the Docker image, instead of downloading it from internet then upload them manually.

Use Case

Air gapped systems

Proposed Solution

No response

Other Information

No response

Acknowledgements

• [ ] I may be able to implement this feature request
• [ ] This feature might incur a breaking change