Security Onion
Peel Back the Layers of Your Enterprise
Showing posts with label
dns
.
Show all posts
Showing posts with label
dns
.
Show all posts
Wednesday, January 22, 2025
Coming soon to Security Onion: Local IP Lookups!
›
Our upcoming Security Onion 2.4.120 release includes a new local IP lookup feature! This allows you to define local descriptions for importa...
Tuesday, February 3, 2015
New ELSA packages parse additional fields out of Bro dns.log
›
Pietro Delsante contributed some updated parsers for Bro and BIND DNS logs (thanks, Pietro!) and I've updated the securityonion-elsa-ext...
Saturday, October 5, 2013
Got DNS visibility?
›
Jaime Blasco recently wrote a great blog post on using DNS records to identify suspicious domains: http://www.alienvault.com/open-threat-ex...
Thursday, January 3, 2013
DNS Visibility with Security Onion 12.04
›
UPDATE 2013-10-05: See the updated version of this blog post here: http://securityonion.blogspot.com/2013/10/got-dns-visibility.html The...
2 comments:
Friday, August 17, 2012
Dr. J's Poor Man DNS Anomaly Detection using Bro
›
Dr. Johannes Ullrich of the SANS Internet Storm Center posted a great DNS Anomaly Detection script based on the query logs coming from his...
›
Home
View web version
