Security Onion

The following are now available for Security Onion 14.04 and 16.04: Elastic 6.4.1 and associated Docker images The following are now avai...

The following packages are now available: securityonion-sguil-client - 20141004-0ubuntu0securityonion22 securityonion-sguil-sensor - 2014...

The following packages are now available: securityonion-sguil-client_20141004-0ubuntu0securityonion17 securityonion-sguil-sensor_20141004-...

The following packages are now available: securityonion-capme - 20121213-0ubuntu0securityonion65 securityonion-sguil-client - 20141004-0ub...

Brian Kellogg sent in a patch for the securityonion-sguil-agent-ossec package to parse syslog IP addresses.  Thanks, Brian! The new packag...

Brian Kellogg sent some patches for our ossec_agent for Sguil and I've updated the package.  The new package has been tested by David Za...

Brian Kellogg submitted a patch for ossec_agent.tcl that allows you to enable or disable DNS lookups.  Thanks, Brian!  I've packaged thi...

Scott F. found an issue in the Sguil client: https://groups.google.com/d/topic/security-onion/P57oKu02tI4/discussion I've updated the...

Sguil 0.9 and Squert 1.5.0 were recently released: http://sourceforge.net/p/sguil/mailman/message/32230854/ http://www.squertproject.org/s...

We have some new packages available for Bro 2.2 and ELSA 1.5! ELSA 1.5 with support for Bro 2.2 and more log types Release Notes IMPO...

New versions of our securityonion-sguil-client and securityonion-sguil-server packages are now available that add a new "Bro" opti...

I've patched the Sguil client to add "Copy IP Address" to the right-click context menu for IP addresses. So for example, if yo...

After many months of hard work, I'm excited to announce that Security Onion 12.04 Beta is available now!  Thanks to everyone who has hel...

Security Onion 20120125 is now available!  This resolves the following issues: Issue 203: New users should have a more sensible default fo...

Security Onion 20111201 is now available!  This resolves the following issues: Issue 157 : Update pulledpork.conf.master with new lo...