Security Onion 16.04.5.3 is now available!
Issues Resolved
Issue 1321: 16.04.5.3 ISO image
https://github.com/Security-Onion-Solutions/security-onion/issues/1321
Release Notes
For more information about this release, please see:
https://github.com/Security-Onion-Solutions/security-onion/wiki/16.04.5.3
Security Onion 14.04 EOL Reminder
As a reminder, all new development is now on Security Onion 16.04 and Security Onion 14.04 will reach EOL on November 30, 2018:
https://blog.securityonion.net/2018/06/6-month-eol-notice-for-security-onion.html
After that date, we will not provide any support for Security Onion 14.04. Please plan to upgrade or replace any existing 14.04 systems before that date.
Installation Guide
We've updated the Installation guide to reflect the download locations for the new ISO image:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Installation
Existing Deployments
If you have existing 16.04 installations, there is no need to download the new ISO image. You can simply continue using our standard update process to install updated packages as they are made available:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrade
If you have existing installations of Security Onion 14.04, you can upgrade from 14.04 to 16.04:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Upgrading-from-14.04-to-16.04
Thanks
Thanks to Wes Lambert for testing this new ISO image!
Training
Our next public 4-day Basic Course will be in San Antonio in February 2019! We also offer private classes and online training! For more information, please see:
https://securityonionsolutions.com
Support
Need support? Please see:
https://securityonion.net/wiki/Support
Screenshot Tour
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggaSQ4jE85RneCY8XvPiTAS_6AE9JNSGJImioFLT2euHYuwaIf9hY4VK0D5L_6TngHdHF6GMkFgP3Hwlu5DU-T_bRURD6MQyeZwSd6TOCaYfMP7WqwTGZxNQI1d6V9e-Nl17XlkQM8Qrni/s640/00-boot-menu.PNG) |
ISO Boot Menu |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjM9rXGuLoPELqws5BOwbbM2DtjFW0v504Ylz5dkanVIakG5QnUZMCeDN_oygRqCHg8f1CYqOBfTJhrUOYI2ywvXF4k1NA4BRulm4o44rj0p1B4gdWtnYEP4i14aT57fybvciEP4qx4ZH4x/s640/01-live-desktop.PNG) |
ISO Live Desktop |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimbgNicQ9pUTJvlJKvYHEmNNTgK5dOWJIGiQQqtApw-SFDF2vI_IfyzZjK9iZ642ZDK1Ixrb_R58T_5qLjF5GsuHJk1lvzmh87e5uIdW-GsMNDWmIU4Q4Rw-4RM5QqDJuayi0bKsGWaBtk/s640/02-login.PNG) |
After ISO installer completes, reboot and log in |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNW7bEq3bCxgUaqNO1YHvKt_AF6D_VPZ57dQEhBle7GOKC_qCJmCsIIXW0qo0jErr9NInNjopSxAFxZumi0IKXlTFAlSe4Zjs4dO3EgS0fejhYX2_i0ZMJsCkaPtsXQHFKYbErwtp5VwwA/s640/03-setup.PNG) |
Next, run Setup |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiec8FfchijjZYK7RUGOVwksu80sHmR3DvyFaBsTH8_OnJPnbRUG5aLg5c2dWqlsBl34htNeqKH9B0fskpAMjSkCYzNHP0aC4AY4LgRdnFdhUcNp7LHVdB3CVPTzJUJpkX81TBZNr-gk-hD/s640/04-setup.PNG) |
Welcome to Setup |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFO6DtZmwyvUIzjg8jwEf8SH3_HiKSwQts5Ce1Xba17wcDQNGXLTxwUo34MRE5VEW-qxpnxHk-kTJHGKcXgp1Ei9rDJNmZ7kn3jJTFWBNIEKq1flrsIIe7RV6qxM8I9ZsS9afDphVoYDUe/s640/05-skip-network-configuration.PNG) |
Configure network interfaces, reboot, then run Setup again, and skip network configuration |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5HSw04jtWXliv2_mzYQPq-aWnvxLXX-y7OW8dvlqQ3pYpp6x8y99_KIFdRsYZLceNxXzerdzd4mropqJO5jMZi6MWhVU_S_acmQUoqQxXFMz3I2-69oV9S6jpXXjiWRgOTcUZz-rYfssw/s640/06-evaluation-mode.PNG) |
Evaluation Mode vs Production Mode |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjE3xCeAaqpWS5ZLv-BxjsZDfiK5rjhHjnxS5ANB7TPsMgQOYCo533O3295f33aNmpp3ING4ArLEkIYpo5ZrnkuQrGWlGCqfHqcGETjEvjyEB48Nina-IDNMeYM1OGB7vVcQeiK8ONN-F8L/s640/07-sniffing-interface.PNG) |
Interface Selection |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfjWtv7vEnmek9knxGAgtQv_QxLasLcWLLs5XNE4HGrJOmaM1oQIsp-kBbTWVvE23XBGolio4hk7nZ9ZDDJVktAmG2PdDb02Ufi71GDDCZlyK9eLGAjc-2ZCGSGI_3uClZNFjM53ZxGch9/s640/08-username.PNG) |
Create User Account |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg802YgaivlDuIHKK4MILoOk5MOnvIxSdfDcQqdj9N16ef8og3gcin364NUSfJCfRHdWB-qYDXiyF5UbxJFhio7v-qpl3v2_RDUaxZzhwaj5_4JtSxOlioG0Ts2vQobVd50TC2nob1yy8CI/s640/09-password.PNG) |
Set Password |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxiK6_8mW2ce5khKHM3y3r0XBO7xOkT5vVe-h8TJaDnYMcNxAz3gPB9j7BWARFzLMs_yPM9fObmSXDdIvJWcvflCTuAQM8SQx2TGbO_WtcY3vROSTArwrzS8UgDAVfPDMBUoZyqR-TIFiF/s640/10-confirm-password.PNG) |
Confirm Password |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGO56DkbnmkrwAJ4q2fe6d5a8G03ah3N9IYRG8tuqCeOwdBK42yHf1aRIsAKInB1SBwdTVG0my8Lq2yUHKZrgetEsCXJd8yWHQub0b5A0m4dWM-n5o45b8vxbmcS7M2W86ugGbpWQyz7sv/s640/11-confirm-options.PNG) |
Confirm All Options |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-szuRdMoSAZKWGni4ZvORve8HWcsppvc-vcfvRx47I0g6dIuy6iWB9ipUAjjXPfTMQYqVbg9lv5rVB3iHBmlxi-jM04r5sRmkbmUTN2ghSFYdBu85txE0xTd7m5VxoPJXgbpcXU09ki-b/s640/12-setup-complete.PNG) |
Setup Complete |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjf83_vXLlIWRyEr44MusDx4cqKzEsYu_AXJwhDZLA2i1FARNphjCbQn-nDUeIFztKuI30895gTOEur1_0iMYNrYvgYRN-dVXCB5TVtYr6J93qfVQX2EUhPPXUNNXpllAE7b38ihQp0ADtS/s640/13-so-component-verb.PNG) |
so-COMPONENT-VERB scripts |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrkAuwxV0mTMHOkxMmV6kZ5FKHyRDe8qP7y5YfxHhc-q810pYbC9sCiCXc7WijCrJduTuDkrMb0svpFOlwBTiIneUWXE_rVJZS2Sp7RLCT8qNTQbJq5T7tUntFXls1ORJK9W-jrB7MRoae/s640/14-cyberchef.PNG) |
CyberChef 8.7.0 |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8mO52pf_xbsaMiih3_93S40jYSIJsX51N4Nz-mmIYqboXWaTRilO7THd1XWJ9v8DxQgZ91Acbe5AcVE3gM-KTiMmBAZQcP7y4Cr6AkZHojuwJq9gLqi_jqOJRFNEFaQT3ssgvPrxpNcAs/s640/15-sso.PNG) |
Single Sign On (SSO) for Squert, Kibana, and CapMe |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0KW3NwzgzZegauAN-RBKaebacvFrhmLnB4DIJlONzMGi-k77KfpgXilUq8aUPzqve5clQU5CugAPLjXqcMnh-Mcrp2hnT6sEtjSGon2zg-3sd2ZViPrtrQclziyzAoKg5zZvWMvdej2hJ/s640/16-squert.PNG) |
Squert |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtvIwfV_gBHC2Np-UQKal-f7TbxHkBj8WtIt3zcNxH2TindpTRgdkb2qnCerE6lo5lSepqc6KR-fCIH5bOLbrEeVRZaAQZ0GlvKQk-GjxyJ4Jwm7V_wBhzni7ZdtRDgrMGLew7JYzd9AI7/s640/17-kibana-overview.PNG) |
Kibana with default dark theme |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilbB4Zl-0emteiGS4zWETEh4Br02Sqtu7UbyKMBfWjUfSrl83zK7GOqb54E1-pVLe5cOBlHEbvJ-jrOpttO5RMQLVb81ikbBb_SnZ98oqQBakl2PzJz3eFFRGYyz4BvTMIS8yJ2cyvlz0m/s640/18-light-dashboards.PNG) |
To switch to light theme, run so-elastic-configure-kibana-dashboards-light |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_8ydWs9BrhezfN_A8wwMkIe4zuF18ughqr3-xBAaFlVDSIogc2kWQ2MA1Of8NwdHhqPBh_o5fPfgtewT7WVX1VAaQ4gyGoUH9sybDybgDO2NkNkVpVISaEEUxXgOmX2WPJWOb9MY0o8PV/s640/19-dashboards-light.PNG) |
Kibana with light theme |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDjMk35qpyKZvH8aqT7N_v_L-ID13jacF1MuPOzgi6wXL-WARvNtRFpe5o4WS-Sp3Cydxu-8_TXk3S8wpbjft2QEX18K2Es7Bg7G2iPFqQjkJEu8sx_71JSydUYYKxr8Cdc8y9vYBSpgUn/s640/20-dark-dashboards.PNG) |
To switch back to dark theme, run so-elastic-configure-kibana-dashboards |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJGrzzBwtaRM7SciWiWW3XiGa1NYLhYjZDQAwlYAEsXMlMUqE0FKss0LpPd_lHIlOOAj2nk-IDY6JHiptLaArmRP1qsZ_NEoBYp0XkSArHDi8dHyr2kJGPRFKLdKUv8orZFMPqf6zD7Snc/s640/21-kibana-back-to-dark-theme.PNG) |
Kibana back to dark theme |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeguQFI302hH0mlKlZf19gVZ1ApVMp_J_vn7dDiipRZn4Av4gTKTBSj0GBsUKwNCWlt6-_DVifDbLZWBVVK-64PaqD_2oiJVJVdvvNqsRCotKZXMkOTKLkGqvKNmZ9nFer1wKU_y5-6gf2/s640/22-help.PNG) |
Help |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZp0Y3hILLWj9inDQp4KOzFjem6nJ8Np_vXQuB9x3cAfjTVdenYvUPyyCvINvSHYMPOyWvK8xZg1haT4n0-_T_5X9gTDGA7Yu8FBrXnieRU4kbOdX3AOPDs-e3hqyvDDPnp5YcWP2piA3E/s640/23-notices.PNG) |
Bro Notices |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6OaEpAHwjs6-AAEmygKyR89_dTVbSPCIaX8eH4zzSfPZnfx9hyllxzV6WgiQ-fo-Ud6sVW0HM1bMl_cyDVxT7JhxW0dLPuM1S296vu43-Gaj75bVxIdo-rqKn3rgCqjOKmiJs8euYTFRB/s640/24-elastalert.PNG) |
ElastAlert |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgShMR1t5YksvvmG_jdA-JJgUaemCBiiI9PkUV0NFlZui7so6kLRBuAS6hq-1ZgBzbO_USKsI_CoPsYzbkRjIevLc4Oqi56_g17J5uXHVPum-a_hoz4U-HNbVgkjJusqUONt7JCxxDQYV6m/s640/25-hids.PNG) |
OSSEC HIDS Alerts |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAKdGHGYZUrtTilfkvyhJPHnpZJ79nKq5jxz6V1OLziOMMZm62wVf4zjBVIIDGX9HW_fXRO7sdVx98mZT8FoVnJSyD1o41gx7mY5fzLSJxg60HXVALv6mX_AlW1YjcJYu68pZPJA4KFX1M/s640/26-nids.PNG) |
NIDS alerts from Snort or Suricata |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1vrpBulryUeWdR2UzgO_NegkZHDECuY-nn_df3MC0ezz3aXx9tp3bkTvSIK8RN1U0YrmbZ8Kqws9NGuhVWfpRpRn3Wjw_m1Za2JUvqhiVGlyBOQdBy36Ji_wZA0ahTuoRs4IchO9rZ7C0/s640/27-connections.PNG) |
Bro - Connections |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjITCxftQuWS6-0XGHBdFpzCNXfRDV978QJHAjg4zc0rqYLTycipZcibBKOrDb-IihHULHIVRm2IR6W0NrX4NlYkf-l-bTQ1OVswLwPITk7NS0hGWP96PxtAWLjp3GqjHUgQWudxsM-ILf-/s640/28-dce.PNG) |
Bro - DCE/RPC |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijoqfZ4CA1vjqNtBlImPhmFl-bLJHumLIarwwmCqwdaBP762PwcUrwKs8wnes7fYx3QcE_WyQDEEkT3PNImRgnjG-sH9xRyn20wY7kgjxuEVTw5raJlzFsTjL06m2at41ko5GeKHqt1fk-/s640/29-dhcp.PNG) |
Bro - DHCP |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgIHC-Zb-rZAcdIqqriHhAxXA9cEaodhGqUaqD5eBBa3OlMEYeFbgZ_cBSn6DPRRbHxQFKYbmV1YDoOLlv4_jX1LsP09xP0quHq7Dhpl1CrWeV_EK-J3ZXXIJ1Ktpz9ono27eN9iz1eXkxh/s640/30-dnp3.PNG) |
Bro - DNP3 |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSTjSeONyMb_Pzc3diRBfaNYlhs-PzBUQnKEfsU_TJFZPHOjgpvvCxYcqmb_m5k_TQuifu5vnqURufVx_pXXkPb1aicumjBuNDtg64jbK7IYqHlDUtEOyPWai1WN8wlbdMm-n4AIFhXfbV/s640/31-dns.PNG) |
Bro - DNS |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0tNX9UslL-AZgAbrK2gLpm1XJ_jinT0-d90jG8XerIVhZ81E5SOZ1Dnsg_uEiSbVJIUW6UTrr4J_ZWngcX01H7k511yKIkLW-nBWNAAOeE284tHGyz0m6M_jV2QnblHgIHP0NYS5HgpyR/s640/32-files.PNG) |
Bro - Files |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9ek8-ycp4ZgfCbhlSIX8XR8vmUeUXe-QGY1Q4qgiuCOd6TE9v_UBYfXvw7rv_-U6b58GJmmsCtJvdhJfOeZ2U4PztK8GDsNeF5_4CE0fc8B26mDPJZYAb1Tx0VvN-Cr9RKOrR4MzYK_Fh/s640/33-ftp.PNG) |
Bro - FTP |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGZXoiqGcNkHuA3tDEP96ujDGTmhlK3DDg25xNA5dMON1lKdhJCu0pkg9lK8A0X1LJO_TDkkWCBgFuyowFMSyOg_0FrqtMx6LlLwMg8pVrNQNBQGF47VkgblztKR027bIZFnIK8vEpQ7A-/s640/34-http.PNG) |
Bro - HTTP |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgryLaVuEuWjuiHDqEgbTfFQNtcmjj6FPbqApyxT8Bo6py3hxZbchJ452I29U_kYKy7Uq29foSCD0-rYsMMai9ZXdcfomUYKEfHsj8NLBecPOr_hbqsRZbQ2Um1h5iObdurumcILQ-pNNVF/s640/35-intel.PNG) |
Bro - Intel |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoI_r42LFM93AvX6agJU3RU7u2ttCm11WHcu5d-zL-nCym1X-vrxPEXUBm1yRoKMI0Ic8H8Dx3ECI7deAYBLVwWxtx0bx8oSSdzOnv6ZyQMG4YJCPvNULyagMvRY4urWctXX_GJ9EM5y6v/s640/36-irc.PNG) |
Bro - IRC |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhY70_MLBhi4a8rUr_H-UEK9HZZCOvK0BotCe88njq3bQw-wuSB8Ktag0uvsF_x6SXjG41UaSKbKIBsW3xByOh7hsW-EHj23TOSdbLXILJHuLm6CU6SAzoVARAkXHtB93JEKPhf_ZOrQvfq/s640/37-kerberos.PNG) |
Bro - Kerberos |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivaxsHKlesjHslSFE5cIVLEiDGSSXW39xu9l17b5oAZ324ghIL8qV5H2hdmxjwIlsCu_dtVQsGJRkijVPaD2hS7JR5ARfwoT0MxpD24ermWgUpX12JZCYMqjz-UD2EcPWIwwC5w1VPs3Ca/s640/38-modbus.PNG) |
Bro - Modbus |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuns8ykC4p4f0btJuL2FVgeqEaRv6guZKFpnnOU36WgV2dFP3_cLrVBzWDOa7hScHrd3n8VRo4hCjk7kfHBcjTAvw1DJeMIwS6v6IaUbFemNyfUTcrJi_C_X4K0wADoDmgYQ0AerwY_uJu/s640/39-mysql.PNG) |
Bro - MySQL |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7nNbthyphenhyphen4dboO5HH74BIxdbvsIr-S5X9uG9lkBVzl-aDkDPbelnAyNG__cYJ3hCkZBV3uEEzgTb0wabmWhVSLUgjzxKd6pYa99FdXrhdKzrGu_XXmQ5Ia1rsytEVPKNbBx694FRnlCTcSR/s640/40-ntlm.PNG) |
Bro - NTLM |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDuDlvM_cYiFieq1fjvtWK8Ttcg55kDuvtIadMDlM8lgouCbl7maxPtJRNJYxuqfX3Alvb38Y77g8ICxfwmQVjHoWjK2c2qZeDM8hgcNPcTAdhynzkFBWaZbdArQRaJh-xQnpls7NfDtoY/s640/41-pe.PNG) |
Bro - PE |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh42HCgxA45dRJPwRsEWyMxPWlFpxTH1zMpA6nSJbytxe_1ILHTcSYETOWljYWjqOBA15icrzPPPfY7SoRXr0kl1jyw5i-idqgAhTNtcf1umC0P2Q0MB-a4ONq0Lg4LwW5u3RsMyWI5fuO7/s640/42-radius.PNG) |
Bro - Modbus |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLbe63BBJh_DLWmPjenbMAempABdxiiB-HxifRe7qjRGwXKBxkekuMrtxGMqq9FTNbBHnoT0OmFLVhrZAGL1d-A1d9H_qfR7pG36wTYL2vR09nFrwYYb7TIObWR9qf0SBGvUvXHS9kQPN8/s640/43-rdp.PNG) |
Bro - RDP |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1-CeBRjYr9JX3yAECLKw7igQa2cZmk_swYASFoEpTq8M48F9zyLIyXyW5DhxVasJv0SZk0504uSyyMYZThxBUc2ydees1YKbAWwYPHxSdw_CjCqWjS1IWtWj_n6HcJWc4DCEVD2pQRZgx/s640/44-rfb.PNG) |
Bro - RFB |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSHST9bL-QFCS6lOElN9haKvkynwEiuUzyzJUdKPOYZ55WMuPozoqQOyCnL7L27zIvboid9adrBRTtyXExPi35X2fFDf_P2gBGKUtjewyn6gHk8ZUgWsLlkKBOvl1xga_80hBmhkzntYxz/s640/45-sip.PNG) |
Bro - SIP |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6CqGLzRcMm-Oz8_moxblmP4YVtOFQ2CViueF6A9DMqsjCmBlpnZtiQuWpH7GkYmoCwWcKuqM9aMcJVWwAyq-e40OvG2ozlvsYUbCwl7xvNnoR3F53CQ_Pp9BfsWxnEXnT5UTqrK-4b4c5/s640/46-smb.PNG) |
Bro - SMB |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicNwJ_xllV97TSUURDC5gJl7IlS2-elF8O1gwklGOxER1928-oNcocmmbMvpD8VQzjv89nLanenQCKR3Dqm33z_64GbwZK9kLCACGh5FOydfuKsv7XmQPFELNF2hee63pqzlO62WQmvwF5/s640/47-smtp.PNG) |
Bro - SMTP |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXbz3aAOm32sROL_Zxj70AMveLnBwWwhHf3cMPRIpDen-JF1qNnkDvMul4muZdpvu1L2TPHklTiDlqZ24bokVqi6W1nIlv6ayXcTVBsXIm1yTj9tqiuUNSWa_OZotbkIzC61EPp6UlYcvW/s640/48-snmp.PNG) |
Bro - SNMP |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8PnicbLwJ-vKu0U8Vnqc6tsLedljDhockKyc_Y0fPpQ3Ck6AuavfaF7K_YpAVZjE-jsm_Z0cdj15BbvW8Qh-_T-OAFksCn27mos0dh6_LwSx_pK9HtHevw76S3Ok0LGRlrbI0zzvzt0Yp/s640/49-software.PNG) |
Bro - Software |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjExbwlIY-Vnl5FpmxM2M4G-1L1qriNDgSWSLbQlx71H_D4lmaeEsfvXrjkwtX-l9Bw2PA0GBgljMnGFrVabcfLEh2pv5L14CFNB9d-o_oJoBhjVFOl4Q-YxOOPnD7wGo93PyCktkaj_AHl/s640/50-ssh.PNG) |
Bro - SSH |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhi6LX2MgPKlHIAmAJZ0njG6GTdzpYftfgpMPFKkYCbrCp4w4Hh5Z2IhL4h_waJCBa4w3W0KJdkHZ0-jUQigtFkiDIGbNuZ-483TFtBjLqi8TzZlSuahNohsREoYOxbIoBKlGrZIpRWHcxn/s640/51-ssl.PNG) |
Bro - SSL |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNrnhj4WNJy5aWijYLeqVIRBIsOSnWyFFx72rwlO0hs5-nwSgAIp9N3xEIkeZW0xlkWyOqG10_gtKJ2T8LuhZQRQkb51usDBuPTXEStSSy15ChUx23OT9MdoonSwm1INSk66uVbSlG50W3/s640/52-syslog.PNG) |
Bro - Syslog |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjngNrq5acNjnHNstdm0fPOfneyvCO-VgZ3xKVAMxNxiDi7_UkGof2O24KIzoC-7Ji0k_6q1fqclo9AGo5Ph_GjhkS7rJ_pAxlerBYM3kx9OJvXeZL_WJFrfwhx7_aeywbsPyxz_7eX3J2A/s640/53-tunnels.PNG) |
Bro - Tunnels |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSGyP-j1ClPqkTcRADRyZXDBU8M1r0iwrwuPYzSy_q4Y0O0ux8L0czkVQMq9UrrSxHVQgKMtm0HNW-3S8_fUf01u9okkOkkVtVV04QspBeXuXhqqwEPl-VVIECg4P1e5TCVFHTpy0Jt0p3/s640/54-weird.PNG) |
Bro - Weird |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFCYLrGJl3Cfup1SIhsGqim-pUyi3QuZ4bWIasbg8z3ishj0SJ1c3qznQNVqWQ3wUW4tTwMgH6WHRa4nlgPIrzzFLq5b1k_8796A3_orVqBeT-B9xl28_uRAL145Sv_SDoPVFgm1huxF1X/s640/55-x509.PNG) |
Bro - X.509 |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgp3-oGFM1CoeTCP2o7dXCgGWO3_VP2MIRTm9mHBNd1qm9EVvQ6V3sQ6fwNmfYUkIAdT8AaYARDvOCdx2DO673XPnvRi8Ql1T7AkG6SKkwqWq3sP3FTTkAyETcHkx7rfvrgDlttKgyq5U73/s640/56-autoruns.PNG) |
Autoruns |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbvIPJyrpjko3UUctDdkqM9e9wYC-4XJ4cNrkYwGvlAd3LPG2jtwDHEjETDzqBiq5AgS0jpH-61kKAm-F8sRsejrJD_7ex_Uwg0LpRbddFjSgETGwZWByrDJoIoNU6orK4OVnKKCYwqza6/s640/57-beats.PNG) |
Beats |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0Ng9kWB0vbWEr3oGvZsd6fw9L3ZhMZ4b3oPCjmApVLmdhERhxSdv_kYWWZtbTihn24szNyJfIsVjKhjGt3iQVL0uzyueXojSDzc8xhua8ZGX8FCyIhNPOnh2jBiKY79izHu80vyNKN4Y0/s640/58-ossec.PNG) |
OSSEC |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj31yaPXoc0Yyy5cPRAYN7qMRDBKTWDaDf5QJgmbRyCrVcg5LTQPw9we221_IsTipI8ESccuXYhatnA-RgLgovelc91GpElYNTjLEZG37cHVPoCI9dU-uBDpAJ0SCEDgkXtDhdpgQJewbpA/s640/59-sysmon.PNG) |
Sysmon |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9RBbH1Kcux09xdgWhZAfLMlFPSP1AC78RWR4ThnO3JSfUg-O8MMhcgCBkmE70uN9GWuvYxTuHbjTd9YtZFNeqmarejAp3VRYk5ZPv82na2Ibfmoy95eZORpeXOMdLwyzy1ebu6MD3S_GZ/s640/60-baby-domains.PNG) |
Baby Domains |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZ1QbrjcVRXo_Y_kb02SlKmJ7nhnN8cEqKHdBWZG2pIXgWEOmBN-XrTin4w1BrqqB30equ6r9OugTrqLjkie1t_SlmyxEngCN_FkJM8BxorFIxb1nEd0GLhKREYaHpmbkq00CgF2Ib5KJq/s640/61-firewall.PNG) |
Firewall |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFvWZOzy9xQY3TPjVr3tFBQzGoqQLqmRA5aKxnZkYOC5uSb1LvUK2hR3u8yZ3px8qgKDYzvDQwLJN2xa8mTwwyq8GqRIlVK0-ikc43HKmS8qDXlZ-XuVeIQzO5mfNI2IVwksY6sH713L1K/s640/62-freq.PNG) |
Frequency Analysis |
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidcudcnrZrl7N3H0Wn1yhZrN9LtzQbdwWqTEXo3otFiUwsPfIhR1AbLOjo4d5MwVHx_QC1lc795S9hTjWqP921V1qpI6qutPaJgS-CzjSA75Aj-4hkYXKlYkHCp6-5-RDT4lFAPZr2Y4-o/s640/63-syslog.PNG) |
Syslog |
No comments:
Post a Comment