Monday, August 22, 2016

securityonion-elsa-extras - 20151011-1ubuntu1securityonion37 resolves 2 issues

James Taylor and Josh Brower submitted updates for some ELSA patterns.  I've merged their pull requests and built a new package:
securityonion-elsa-extras - 20151011-1ubuntu1securityonion37

This new package has been tested by James Taylor, Josh Brower, and Wes Lambert (thanks!) and should resolve the following issues:

Issue 979: securityonion-elsa-extras: additional patterns for Sysmon 4 and 4.11

Issue 983: securityonion-elsa-extras: add "AR-LOG" header to autoruns pattern

This package is now available in our stable repo.  Please see the following page for full update instructions:

Want to show your support for Security Onion?
Security Onion t-shirts are available in our CafePress store!

Security Onion Conference will be on Friday September 9 and registration closes on Friday September 2!

Need training?  Please see:

Need support?  Please see:


No comments: