Security Onion 2.4 Feature o' the Day - Configure Soctopus and Sigma

Security Onion 2.4 includes lots of new features! SOC's new Configuration interface allows you to configure Soctopus to adjust Sigma rules:

You can read more about this in our documentation:

https://docs.securityonion.net/en/2.4/playbook.html#adding-additional-rulesets

More Security Onion 2.4 Features

To see other Security Onion 2.4 features, please see our other Feature o' the Day blog posts:

https://blog.securityonion.net/search/label/feature%20o%27%20the%20day

You can also check out our Release Notes:

https://docs.securityonion.net/en/2.4/release-notes.html

Migrating from 2.3 to 2.4

If you're still running Security Onion 2.3, please note that it reaches End Of Life on April 6, 2024:

https://blog.securityonion.net/2023/10/6-month-eol-notice-for-security-onion-23.html

If you would like to migrate your data from 2.3 to 2.4, you can find an overview of the process at:

https://docs.securityonion.net/en/2.4/appendix.html