Showing posts with label pcap. Show all posts
Showing posts with label pcap. Show all posts
Wednesday, September 25, 2024

Did you know Security Onion includes our own custom web interfaces for Alerts, Dashboards, Hunt, Cases, Detections, PCAP, Grid Health, and Administration?

›
Yesterday, we talked about how Security Onion is built BY defenders FOR defenders: https://blog.securityonion.net/2024/09/did-you-know-secur...
Monday, September 16, 2024

Did you know that you can run Security Onion in as little as 4GB RAM?

›
Do you just want to import PCAP or EVTX files into Security Onion? Or do you have limited hardware and just want the minimal installation to...
Friday, September 13, 2024

Did you know that you can configure Security Onion to only record PCAP for Suricata NIDS alerts?

›
Folks sometimes ask how to only record PCAP for Suricata NIDS alerts so that they can save disk space. Our preference is to NOT limit PCAP t...
Friday, September 6, 2024

Quick Malware Analysis: GULOADER and REMCOS RAT pcap from 2024-08-26

›
Thanks to Brad Duncan for sharing this pcap from 2024-08-26 on his malware traffic analysis site! Due to issues with Google flagging a warni...
Tuesday, August 29, 2023

Quick Malware Analysis: 2023-05-24 OBAMA264 QAKBOT

›
Today, the FBI and DOJ announced an operation to dismantle Qakbot infrastructure: https://www.fbi.gov/news/stories/fbi-partners-dismantle-qa...
Tuesday, January 4, 2022

Quick Malware Analysis: log4j pcap from 2021-12-20

›
Thanks to Brad Duncan for sharing this pcap! https://www.malware-traffic-analysis.net/2021/12/20/index.html We did a quick analysis of this ...
Tuesday, May 7, 2019

securityonion-samples-mta - 20150103-0ubuntu0securityonion4 now available for Security Onion!

›
securityonion-samples-mta - 20150103-0ubuntu0securityonion4 is now available and resolves the following issue: securityonion-samples-mta: ...
Wednesday, April 11, 2018

NetworkMiner 2.3 now available for Security Onion!

›
NetworkMiner 2.3 was released recently: http://www.netresec.com/?page=Blog&month=2018-04&post=NetworkMiner-2-3-Released The follo...
Monday, October 17, 2016

securityonion-capme - 20121213-0ubuntu0securityonion61 resolves an issue

›
The following package is now available: securityonion-capme - 20121213-0ubuntu0securityonion61 This new package should resolve the follow...
Tuesday, September 9, 2014

New pcap samples package securityonion-samples-jackcr

›
Jack Crook provided a fun pcap (thanks Jack!): https://twitter.com/dougburks/status/494829729523171328 I've put the pcap into a new ...
Monday, May 27, 2013

New pcap samples package securityonion-samples-markofu

›
Mark Hillick put together some pcap samples (thanks Mark!) and I've put them into a new package called securityonion-samples-markofu.  ...

New pcap samples package securityonion-samples-pnsm

›
Richard Bejtlich put together some pcap samples (thanks Richard!) and I've put them into a new package called securityonion-samples-pns...