State of the Onion 2024

We usually have our State of the Onion at the annual Security Onion Conference, but we had to cancel the conference due to Hurricane Helene. As we wrap up 2024, it's a good time to review what we've accomplished in 2024!

Security Onion Pro

We celebrated 10 years as a company by announcing a new set of enterprise features called Security Onion Pro!

https://blog.securityonion.net/2024/07/celebrating-10-years-of-security-onion.html

2.3

Security Onion 2.3 reached End Of Life (EOL) and is no longer supported. If you are still running 2.3, please migrate to Security Onion 2.4 as soon as possible:

https://blog.securityonion.net/2024/04/security-onion-23-has-reached-end-of.html

Videos

Collecting Endpoint Logs with Elastic Agent

https://youtu.be/cGmQMsFuAvw

Ingesting PFSense Firewall Logs in Security Onion 2.4

https://youtu.be/aoH8qZwAxek

Security Onion Essentials 2024

https://blog.securityonion.net/2024/08/security-onion-essentials-2024.html

Tuning Rules with Security Onion Detections

https://youtu.be/DelAmqtU2hg

Releases

We managed to crank out 8 releases of Security Onion 2.4! These releases added things like our new Detections interface, AI summaries, and lots of dashboard updates!

2.4.40

SOC Grid improvements, Dashboards/Hunt improved Events table columns, new analyzers for Cases

https://blog.securityonion.net/2024/01/security-onion-2440-now-available.html

2.4.50

New Community ID and Firewall Auth dashboards, improved Correlate action, new Process ancestors action

https://blog.securityonion.net/2024/02/security-onion-2450-now-available.html

2.4.60

New Process Info action, more endpoint support, new dashboards, BETA Suricata PCAP

https://blog.securityonion.net/2024/03/security-onion-2460-now-available.html

2.4.70

Detections, Telemetry, ElastAlert notifications, more dashboards, Suricata 7.0.5, CyberChef 10.17.0, Zeek 6.0.4

https://blog.securityonion.net/2024/05/security-onion-2470-now-available.html

2.4.80

Kafka, Docker upgrade, Detections improvements

https://blog.securityonion.net/2024/06/security-onion-2480-now-available.html

2.4.90

Detections improvements, updates for Suricata, CyberChef, so-idh, so-nginx

https://blog.securityonion.net/2024/07/security-onion-2490-now-available.html

2.4.100

Elastic 8.14.3, resolve security issues in Docker images

https://blog.securityonion.net/2024/08/security-onion-24100-now-available.html

2.4.110

AI Summaries, Docker 27.2.0, Zeek 6.0.8, CyberChef 10.19.2, Standalone Suricata PCAP

https://blog.securityonion.net/2024/10/security-onion-24110-hurricane-helene.html

Coming Soon

We are working on version 2.4.120 and it is currently scheduled to release in early 2025. It will include lots of new features that will help you peel back the layers of your enterprise and make your adversaries cry!