Want to show your support for Security Onion?
Several folks have asked about Security Onion t-shirts and they are available in our CafePress store!
Training
We have online training classes starting next Monday:
Commercial Support
Need commercial support? Please see:
Feedback
If you have any questions or problems, please use our security-onion mailing list:
Thanks!
ISO Boot Menu |
Boot splash |
Installer - Welcome |
Installer - Preparing |
Installer - Installation Type (now with LVM) |
Installer - Verify disk changes |
Installer - Time Zone |
Installer - Keyboard Layout |
Installer - hostname, username, and password |
Installer - Copying files |
Installer - Installation Complete |
Installer - ready to reboot |
GRUB Boot Menu |
Login screen |
Desktop |
Installing updates with soup |
Setup - Welcome |
Setup - Network Interfaces |
Setup - Management Interface |
Setup - IP Address for Management Interface |
Setup - Monitor (sniffing) interfaces |
Setup - Monitor (sniffing) interfaces |
Setup - Verify Choices |
Setup - Network Configuration Complete |
Reboot and log back in |
Run Setup Phase 2 |
Setup - Welcome |
Setup - Skip Network Configuration |
Setup - Evaluation Mode or Production Mode |
Setup - Monitor (sniffing) interface |
Setup - Username |
Setup - Password |
Setup - Confirm Password |
Setup - Confirm Options |
Setup - Progress Bar |
Setup - Complete |
Setup - sostat |
Setup - Rules |
Setup - links |
Setup - commercial support |
Verifying services |
Replaying pcaps to create traffic |
Launching Squert web interface |
Logging into Squert |
Squert Main Page |
Squert - drilling into a NIDS alert |
Squert - viewing NIDS alert payload |
Squert - viewing full packet capture |
Squert - Geoip Mapping |
Squert - Top Signatures |
Squert - Top IP Addresses |
Squert - Top Countries |
Squert - Top Ports |
Squert - Sankey Diagram |
Logging into Sguil |
Sguil - selecting networks (sensors) |
Sguil RealTime Events tab |
Sguil - pivoting from a NIDS alert to full packet capture |
Pivoting from a NIDS alert and sending pcap to Wireshark |
Pivoting from a NIDS alert and sending pcap to NetworkMiner |
Pivoting from a NIDS alert and decoding gzip-encoded data using Bro |
Logging into ELSA |
ELSA - Connections - Top SRC IPs |
ELSA - Connections - Top DST IPs |
ELSA - Connections - Top DST Ports |
ELSA - Connections - Top Services |
ELSA - Connections - Groupby Protocol |
ELSA - Connections - Groupby Responder's Country Code |
ELSA - DHCP - Top Assigned IPs |
ELSA - DHCP - DHCP Servers |
ELSA - DNS - Top Query Type |
ELSA - DNS - Top Return Code |
ELSA - Top nxdomain |
ELSA - Files - MIME Types |
ELSA - FTP - Top arg |
ELSA - HTTP - Top DST Ports |
ELSA - HTTP - Top MIME Types |
ELSA - HTTP - Top User Agents |
ELSA - HTTP - Top Sites |
ELSA - HTTP - Sites hosting EXEs |
ELSA - HTTP - Sites hosting CABs |
ELSA - HTTP - Sites Hosting JARs |
ELSA - HTTP - Sites hosting SWFs |
ELSA - HTTP - Sites hosting ZIPs |
ELSA - Kerberos - Top Services |
ELSA - Notices - Top Notice Types |
ELSA - SMTP - Top Subjects |
ELSA - Snort/Suricata - Top NIDS Alerts |
ELSA - Software - Software Detected by Bro |
ELSA - SSL - Top Hostnames |
No comments:
Post a Comment