Want to show your support for Security Onion?
Several folks have asked about Security Onion t-shirts and they are available in our CafePress store!
Training
We have online training classes starting next Monday:
Commercial Support
Need commercial support? Please see:
Feedback
If you have any questions or problems, please use our security-onion mailing list:
Thanks!
![]() |
ISO Boot Menu |
![]() |
Boot splash |
![]() |
Installer - Welcome |
![]() |
Installer - Preparing |
![]() |
Installer - Installation Type (now with LVM) |
![]() |
Installer - Verify disk changes |
![]() |
Installer - Time Zone |
![]() |
Installer - Keyboard Layout |
![]() |
Installer - hostname, username, and password |
![]() |
Installer - Copying files |
![]() |
Installer - Installation Complete |
![]() |
Installer - ready to reboot |
![]() |
GRUB Boot Menu |
![]() |
Login screen |
![]() |
Desktop |
![]() |
Installing updates with soup |
![]() |
Setup - Welcome |
![]() |
Setup - Network Interfaces |
![]() |
Setup - Management Interface |
![]() |
Setup - IP Address for Management Interface |
![]() |
Setup - Monitor (sniffing) interfaces |
![]() |
Setup - Monitor (sniffing) interfaces |
![]() |
Setup - Verify Choices |
![]() |
Setup - Network Configuration Complete |
![]() |
Reboot and log back in |
![]() |
Run Setup Phase 2 |
![]() |
Setup - Welcome |
![]() |
Setup - Skip Network Configuration |
![]() |
Setup - Evaluation Mode or Production Mode |
![]() |
Setup - Monitor (sniffing) interface |
![]() |
Setup - Username |
![]() |
Setup - Password |
![]() |
Setup - Confirm Password |
![]() |
Setup - Confirm Options |
![]() |
Setup - Progress Bar |
![]() |
Setup - Complete |
![]() |
Setup - sostat |
![]() |
Setup - Rules |
![]() |
Setup - links |
![]() |
Setup - commercial support |
![]() |
Verifying services |
![]() |
Replaying pcaps to create traffic |
![]() |
Launching Squert web interface |
![]() |
Logging into Squert |
![]() |
Squert Main Page |
![]() |
Squert - drilling into a NIDS alert |
![]() |
Squert - viewing NIDS alert payload |
![]() |
Squert - viewing full packet capture |
![]() |
Squert - Geoip Mapping |
![]() |
Squert - Top Signatures |
![]() |
Squert - Top IP Addresses |
![]() |
Squert - Top Countries |
![]() |
Squert - Top Ports |
![]() |
Squert - Sankey Diagram |
![]() |
Logging into Sguil |
![]() |
Sguil - selecting networks (sensors) |
![]() |
Sguil RealTime Events tab |
![]() |
Sguil - pivoting from a NIDS alert to full packet capture |
![]() |
Pivoting from a NIDS alert and sending pcap to Wireshark |
![]() |
Pivoting from a NIDS alert and sending pcap to NetworkMiner |
![]() |
Pivoting from a NIDS alert and decoding gzip-encoded data using Bro |
![]() |
Logging into ELSA |
![]() |
ELSA - Connections - Top SRC IPs |
![]() |
ELSA - Connections - Top DST IPs |
![]() |
ELSA - Connections - Top DST Ports |
![]() |
ELSA - Connections - Top Services |
![]() |
ELSA - Connections - Groupby Protocol |
![]() |
ELSA - Connections - Groupby Responder's Country Code |
![]() |
ELSA - DHCP - Top Assigned IPs |
![]() |
ELSA - DHCP - DHCP Servers |
![]() |
ELSA - DNS - Top Query Type |
![]() |
ELSA - DNS - Top Return Code |
![]() |
ELSA - Top nxdomain |
![]() |
ELSA - Files - MIME Types |
![]() |
ELSA - FTP - Top arg |
![]() |
ELSA - HTTP - Top DST Ports |
![]() |
ELSA - HTTP - Top MIME Types |
![]() |
ELSA - HTTP - Top User Agents |
![]() |
ELSA - HTTP - Top Sites |
![]() |
ELSA - HTTP - Sites hosting EXEs |
![]() |
ELSA - HTTP - Sites hosting CABs |
![]() |
ELSA - HTTP - Sites Hosting JARs |
![]() |
ELSA - HTTP - Sites hosting SWFs |
![]() |
ELSA - HTTP - Sites hosting ZIPs |
![]() |
ELSA - Kerberos - Top Services |
![]() |
ELSA - Notices - Top Notice Types |
![]() |
ELSA - SMTP - Top Subjects |
![]() |
ELSA - Snort/Suricata - Top NIDS Alerts |
![]() |
ELSA - Software - Software Detected by Bro |
![]() |
ELSA - SSL - Top Hostnames |
No comments:
Post a Comment