Our Security Onion 16.04.6.4 ISO image is now available!
 |
| Security Onion 16.04.6.4 boot menu |
Major Changes Since Last ISO Image
Zeek 3.0.1
Suricata 4.1.6
Snort 2.9.15.1
Elastic 6.8.6
CyberChef 9.12.0
Thanks
Thanks to the following for testing this ISO image!
Bryant Treacle
Josh Brower
Wilk4013
Package Updates
This release also includes the following updated packages:
pinguybuilder - 20180514-1ubuntu1securityonion21
securityonion-iso - 20151016-1ubuntu1securityonion34
These packages resolve the following issues:
pinguybuilder: increment version to 16.04.6.4 #1701
https://github.com/Security-Onion-Solutions/security-onion/issues/1701
Build 16.04.6.4 ISO image #1704
https://github.com/Security-Onion-Solutions/security-onion/issues/1704
Issues Resolved
For a list of all issues resolved in this release, please see:
https://github.com/Security-Onion-Solutions/security-onion/projects/10
Release Notes
For more information about this release, please see:
https://securityonion.net/docs/release-notes.html
Installation Guide
We've updated the Installation guide to reflect the download locations for the new ISO image:
https://securityonion.net/docs/installation.html
Existing Deployments
If you have existing 16.04 installations, there is no need to download the new ISO image. You can simply continue using our standard update process to install updated packages as they are made available:
https://securityonion.net/docs/Upgrade
If you have existing installations of Security Onion 14.04, you can upgrade from 14.04 to 16.04:
https://securityonion.net/docs/upgrading-from-14.04-to-16.04.html
Documentation
You can find our documentation here:
https://securityonion.net/docs
Also, we're now offering a printed copy of our official documentation with foreword by Richard Bejtlich and proceeds going to Rural Technology Fund:
https://securityonion.net/book
Support
Need support? Please see:
https://securityonion.net/docs/Support
Training
Security Onion Solutions is the only official authorized training provider for Security Onion and we have 4-day Basic and 4-day Advanced onsite training classes. We also offer online classes as well. For more information, please see:
https://securityonionsolutions.com
Appliances
We now offer hardware appliances! For more information, please see:
https://securityonionsolutions.com
Screenshot Tour
 |
| ISO boot menu |
 |
| Once the Live Desktop appears, double-click the Install icon and follow the prompts |
|
 |
| Once you've completed the installer and rebooted, login using the username and password you created in the installer |
|
 |
| After logging in, you are prompted to run Setup |
|
 |
| Setup can now run interactively via CLI and sosetup-minimal can be used to minimize RAM and CPU usage |
|
 |
| Configure network interfaces |
|
 |
| If your hostname is securityonion, Setup gives you the opportunity to rename it |
|
 |
| Configure your network interfaces, reboot, then log back in |
|
 |
| Launch Setup again and skip network configuration to go to service configuration |
|
 |
| sosetup-minimal can run Evaluation Mode in 4GB RAM |
|
 |
| Confirm sniffing interface |
|
 |
| Please wait while Setup configures your system |
|
 |
| Desktop no longer prompts to run Setup and includes icons for analyst applications |
|
 |
| The README shortcut includes links to the cheat sheet and online and offline documentation |
|
 |
| Single Sign On (SSO) for Squert, CapMe, and Kibana |
|
 |
| sosetup-minimal can run Evaluation Mode in only 4GB RAM |
|
 |
| Analyze IDS alerts using Squert |
|
 |
| Retrieve full packet capture with CapMe |
|
 |
| Kibana Overview Dashboard |
|
 |
| Help |
 |
| Zeek Notices |
 |
| HIDS Alerts from OSSEC/Wazuh |
|
 |
| NIDS Alerts from Snort or Suricata |
|
 |
| Zeek Connections |
 |
| Zeek Total Bytes |
 |
| Zeek DCERPC |
 |
| Zeek DHCP |
 |
| Zeek DNP3 |
 |
| Zeek DNS |
 |
| Zeek Files |
 |
| Zeek FTP |
 |
| Zeek HTTP |
 |
| Zeek Intel |
 |
| Zeek IRC |
 |
| Zeek Kerberos |
 |
| Zeek Modbus |
 |
| Zeek MySQL |
 |
| Zeek NTLM |
 |
| Zeek PE |
 |
| Zeek RADIUS |
 |
| Zeek RDP |
 |
| Zeek RFB |
 |
| Zeek SIP |
 |
| Zeek SMB |
 |
| Zeek SMTP |
 |
| Zeek SNMP |
 |
| Zeek Software |
 |
| Zeek SSH |
 |
| Zeek SSL |
 |
| Zeek Syslog |
 |
| Zeek Tunnels |
 |
| Zeek Weird |
 |
| Zeek X.509 |
 |
| OSSEC/Wazuh Logs |
 |
| Syslog |
