Looking Back Over 1 Million Security Onion ISO Downloads

Our Security Onion ISO image has been downloaded over 1 million times!  Thanks to our entire community for your support!  If you haven't already downloaded your copy, head on over to https://securityonion.net/download!

When I started Security Onion way back in 2008, I never would have imagined that we would hit 1 million downloads.  Let's take a walk down memory lane and see how we got here.

9/3/2008 First Security Onion blog post
https://blog.securityonion.net/2008/09/security-onion.html

10/22/2008 Started working on the first Security Onion ISO based on Ubuntu 8.04
https://blog.securityonion.net/2008/10/security-onion-livecd.html

6/4/2009 first Security Onion release based on Xubuntu 9.04
https://blog.securityonion.net/2009/06/security-onion-livecd-is-now-available.html

6/16/2009 added Bro
https://blog.securityonion.net/2009/06/security-onion-livecd-20090613.html

8/16/2009 started building Security Onion community - mailing list, issue tracker, wiki
https://blog.securityonion.net/2009/08/security-onion-on-google-code.html

10/12/2010 new version of Security Onion based on Xubuntu 10.04 and including Suricata
https://blog.securityonion.net/2010/10/security-onion-live-20101010-edition.html

1/5/2011 new release includes Squert web interface, new Setup script, and OSSEC HIDS
https://blog.securityonion.net/2011/01/security-onion-20110101.html
https://blog.securityonion.net/2011/01/security-onion-20110101-setup-script.html
https://blog.securityonion.net/2011/01/security-onion-20110101-ossec-and-sguil.html

1/6/2011 Richard Bejtlich suggests in-place upgrade:
https://blog.securityonion.net/2011/01/security-onion-20110101.html?showComment=1294317204238#c2797095959331531686
https://blog.securityonion.net/2011/01/security-onion-upgrade-script.html

4/7/2011 distributed deployments
https://blog.securityonion.net/2011/04/security-onion-20110321-distributed.html

10/19/2011 disabling NIC offloading
https://blog.securityonion.net/2011/10/when-is-full-packet-capture-not-full.html

12/31/2012 Security Onion 12.04 included all components built as Ubuntu packages
https://blog.securityonion.net/2012/12/security-onion-1204-is-now-available.html

6/10/2013 Security Onion 12.04.1
https://blog.securityonion.net/2013/06/security-onion-12041-iso-image-now.html

7/25/2013 Security Onion 12.04.2
https://blog.securityonion.net/2013/07/security-onion-12042-iso-image-now.html

9/12/2013 Mike Reeves developed OnionSalt for managing distributed deployments
https://blog.securityonion.net/2013/09/new-package-onionsalt-now-available-for.html

9/14/2013 Security Onion 12.04.3
https://blog.securityonion.net/2013/09/security-onion-12043-iso-image-now.html

2/28/2014 Security Onion 12.04.4
https://blog.securityonion.net/2014/02/security-onion-12044-iso-image-now.html

7/7/2014 Security Onion Solutions LLC
https://blog.securityonion.net/2014/07/introducing-security-onion-solutions-llc.html

9/12/2014 First ever Security Onion Conference and Security Onion 12.04.5
https://securityonion.readthedocs.io/en/latest/conference.html
https://www.eventbrite.com/e/security-onion-conference-soc-2014-tickets-12205183031#
https://blog.securityonion.net/2014/09/security-onion-12045-iso-image-now.html

2/16/2015 Security Onion 12.04.5.1
https://blog.securityonion.net/2015/02/security-onion-120451-iso-image-now.html

7/6/2015 Security Onion 12.04.5.2
https://blog.securityonion.net/2015/07/security-onion-120452-iso-image-now.html

9/12/2015 Security Onion 12.04.5.3
https://blog.securityonion.net/2015/09/security-onion-120453-iso-image-now.html

1/20/2016 Security Onion 14.04.3.1
https://blog.securityonion.net/2015/09/security-onion-120453-iso-image-now.html
https://blog.securityonion.net/2016/01/security-onion-140431-screenshot-tour.html

3/28/2016 Security Onion 14.04.4.1
https://blog.securityonion.net/2016/03/security-onion-140441-iso-image-now.html

6/13/2016 Security Onion 14.04.4.2
https://blog.securityonion.net/2016/06/security-onion-140442-iso-image-now.html

9/9/2016 Security Onion 14.04.5.1
https://blog.securityonion.net/2016/09/security-onion-140451-iso-image-now.html

2/20/2017 Security Onion 14.04.5.2
https://blog.securityonion.net/2017/02/security-onion-140452-iso-image-now.html

3/16/2017 started integrating the Elastic stack
https://blog.securityonion.net/2017/03/towards-elk-on-security-onion.html

4/9/2018 Security Onion 14.04.5.11 and Elastic GA
https://blog.securityonion.net/2018/04/security-onion-elastic-stack-general.html

4/18/2018 Security Onion 14.04.5.12
https://blog.securityonion.net/2018/04/security-onion-1404512-iso-image-now.html

5/1/2018 Security Onion 14.04.5.13
https://blog.securityonion.net/2018/05/security-onion-1404513-iso-image-now.html

5/31/2018 Security Onion 16.04.4.1
https://blog.securityonion.net/2018/05/security-onion-160441-iso-image-now.html

6/8/2018 over 600,000 Security Onion ISO downloads!
https://blog.securityonion.net/2018/06/security-onion-is-over-600000-downloads.html

6/25/2018 Security Onion 16.04.4.2
https://blog.securityonion.net/2018/06/security-onion-160442-now-available.html

7/24/2018 Security Onion 16.04.4.3
https://blog.securityonion.net/2018/07/security-onion-160443-now-available.html

8/6/2018 Security Onion 16.04.5.1
https://blog.securityonion.net/2018/08/security-onion-160451-now-available.html

9/4/2018 Security Onion 16.04.5.2
https://blog.securityonion.net/2018/09/security-onion-160452-now-available.html

10/19/2018 Security Onion 16.04.5.3
https://blog.securityonion.net/2018/10/security-onion-160453-now-available.html

11/3/2018 Security Onion Hybrid Hunter announced
https://blog.securityonion.net/2018/11/security-onion-hybrid-hunter-101-tech.html

11/26/2018 Security Onion 16.04.5.4
https://blog.securityonion.net/2018/11/security-onion-160454-now-available.html

12/17/2018 Security Onion 16.04.5.5
https://blog.securityonion.net/2018/12/security-onion-160455-now-available.html

1/14/2019 Security Onion 16.04.5.6
https://blog.securityonion.net/2019/01/security-onion-160456-now-available.html

5/20/2019 Security Onion 16.04.6.1
https://blog.securityonion.net/2019/05/security-onion-160461-now-available.html

8/28/2019 Security Onion 16.04.6.2
https://blog.securityonion.net/2019/08/security-onion-160462-now-available.html

12/4/2019 Security Onion 16.04.6.3
https://blog.securityonion.net/2019/12/security-onion-160463-now-available.html

2/18/2020 Security Onion 16.04.6.4
https://blog.securityonion.net/2020/02/security-onion-160464-iso-image-now.html

3/30/2020 Security Onion 16.04.6.5
https://blog.securityonion.net/2020/03/security-onion-160465-iso-image-now.html

As we look to the future, we are busy refining our next generation Hybrid Hunter platform and hope to release a Beta version soon!  Stay tuned!

Thanks to the entire community for your support! We're now over 800,000 downloads of our Security Onion ISO image!

Get your copy today!
https://securityonion.net/download

securityonion-iso - 20151016-1ubuntu1securityonion32 now available for Security Onion!

securityonion-iso - 20151016-1ubuntu1securityonion32 is now available.  This should resolve the following issue:

so-iso-build: purge php7.0-fpm #1463
https://github.com/Security-Onion-Solutions/security-onion/issues/1463

Thanks
Thanks to the following for testing!

• Wes Lambert
• Dustin Lee
• Bryant Treacle

Updating
Please see the following page for full update instructions:
https://securityonion.net/docs/Upgrade

Conference
Please mark your calendar! Security Onion Conference 2019 will be on Friday, October 4, 2019 and registration will open July 18! CFP is open now and we want to hear from you!
https://blog.securityonion.net/2019/04/security-onion-conference-2019-cfp.html

Training
We have 4-day Security Onion Training classes coming up in Costa Mesa CA and Columbia MD!  Use promotional code earlybird for 10% off the Columbia MD classes for a limited time.  If you can't make it to an onsite class, we have a new online training platform.  For more information and other training options, please see:
https://securityonionsolutions.com

Appliances
We now offer hardware appliances!  For more information, please see:
https://blog.securityonion.net/2018/10/introducing-security-onion-solutions.html

Documentation
We've got a brand new documentation site!  Please let us know if anything needs to be updated:
https://securityonion.net/docs

Support
Need support?  Please see:
https://securityonion.net/docs/Support

Thanks!

pinguybuilder - 20180514-1ubuntu1securityonion18 now available for Security Onion!

pinguybuilder - 20180514-1ubuntu1securityonion18 is now available.  This should resolve the following issue:

pinguybuilder: increment version to 16.04.6.1 #1433
https://github.com/Security-Onion-Solutions/security-onion/issues/1433

Thanks
Thanks to the following for testing!

• Wes Lambert
• Dustin Lee
• Bryant Treacle

Updating
Please see the following page for full update instructions:
https://securityonion.net/docs/Upgrade

Conference
Please mark your calendar! Security Onion Conference 2019 will be on Friday, October 4, 2019 and registration will open July 18! CFP is open now and we want to hear from you!
https://blog.securityonion.net/2019/04/security-onion-conference-2019-cfp.html

Training
We have 4-day Security Onion Training classes coming up in Costa Mesa CA and Columbia MD!  Use promotional code earlybird for 10% off the Columbia MD classes for a limited time.  If you can't make it to an onsite class, we have a new online training platform.  For more information and other training options, please see:
https://securityonionsolutions.com

Appliances
We now offer hardware appliances!  For more information, please see:
https://blog.securityonion.net/2018/10/introducing-security-onion-solutions.html

Documentation
We've got a brand new documentation site!  Please let us know if anything needs to be updated:
https://securityonion.net/docs

Support
Need support?  Please see:
https://securityonion.net/docs/Support

Thanks!

Security Onion 16.04.6.1 now available featuring Elastic 6.7.2, CyberChef 8.31.3, Suricata 4.1.4, Wazuh 3.8.2, and more!

Security Onion 16.04.6.1 is now available!

Security Onion 16.04.6.1

Major Changes Since Last ISO Image

• Elastic 6.7.2
• CyberChef 8.31.3
• Suricata 4.1.4
• Wazuh 3.8.2
• now includes a static copy of our new Documentation
• now includes our Cheat Sheet PDF
• so-import-pcap handles many more use cases and can now run Setup for you if necessary
• new PCAP samples in /opt/samples/mta/
• Setup now configures Bro and Suricata for AF_PACKET by default
• fixed lots of bugs!

Thanks
Thanks to the following for testing this ISO image!

• Wes Lambert
• Dustin Lee
• Bryant Treacle

Issues Resolved
For a list of all issues resolved in this release, please see:
https://github.com/Security-Onion-Solutions/security-onion/projects/6

Release Notes
For more information about this release, please see:
https://securityonion.net/docs/release-notes.html

Installation Guide
We've updated the Installation guide to reflect the download locations for the new ISO image:
https://securityonion.net/docs/installation.html

Existing Deployments
If you have existing 16.04 installations, there is no need to download the new ISO image.  You can simply continue using our standard update process to install updated packages as they are made available:
https://securityonion.net/docs/Upgrade

If you have existing installations of Security Onion 14.04, you can upgrade from 14.04 to 16.04:
https://securityonion.net/docs/upgrading-from-14.04-to-16.04.html

Conference
Please mark your calendar! Security Onion Conference 2019 will be on Friday, October 4, 2019 and registration will open July 18! CFP is open now and we want to hear from you!
https://blog.securityonion.net/2019/04/security-onion-conference-2019-cfp.html

Training
We have 4-day Security Onion Training classes coming up in Costa Mesa CA and Columbia MD!  Use promotional code earlybird for 10% off the Columbia MD classes for a limited time.  If you can't make it to an onsite class, we have a new online training platform.  For more information and other training options, please see:
https://securityonionsolutions.com

Appliances
We now offer hardware appliances!  For more information, please see:
https://blog.securityonion.net/2018/10/introducing-security-onion-solutions.html

Documentation
We've got a brand new documentation site!  Please let us know if anything needs to be updated:
https://securityonion.net/docs

Support
Need support?  Please see:
https://securityonion.net/docs/Support

Screenshot Tour

ISO Boot Menu 

Once the Live Desktop appears, double-click the Install icon and follow the prompts

Once you've completed the installer and rebooted, login using the username and password you created in the installer

After logging in, you are prompted to run Setup

Setup Wizard

Configure network interfaces, reboot, then log back in

You are then prompted to run Setup again to continue to the second phase of Setup

Skip network configuration to go to service configuration

Evaluation Mode vs Production Mode

Monitoring Interface Selection

Create Username

Create Password

Confirm Password

Confirm all options

Setup Complete

Desktop no longer prompts to run Setup

The README shortcut includes links to the cheat sheet and online and offline documentation

CyberChef 8.31.3

Single Sign On (SSO for Squert, CapMe, and Kibana)

Review IDS alerts using Squert

Retrieve full packet capture with CapMe

Kibana Overview

If you want to change from dark dashboards to light, you can run so-elastic-configure-kibana-dashboards-light

Light dashboards

If you want to switch back to dark dashboards, you can run so-elastic-configure-kibana-dashboards-dark

Back to dark dashboards

Help

Bro Notices

ElastAlert

HIDS Alerts from Wazuh (OSSEC)

NIDS Alerts from Snort or Suricata

Bro Connections

Bro DCE/RPC

Bro DHCP

Bro DNP3

Bro DNS

Bro Files

Bro FTP

Bro HTTP

Bro Intel

Bro IRC

Bro Kerberos

Bro Modbus

Bro MySQL

Bro NTLM

Bro PE

Bro RADIUS

Bro RDP

Bro RFB

Bro SIP

Bro SMB

Bro SMTP

Bro SNMP

Bro Software

Bro SSH

Bro SSL

Bro Syslog

Bro Tunnels

Bro Weird

Bro X.509

Autoruns

Beats

OSSEC (Wazuh) Logs

Sysmon

Domain Stats

Firewall

Frequency Analysis

Syslog