We usually have our State of the Onion at the annual Security Onion Conference, but we had to cancel the conference due to Hurricane Helene. As we wrap up 2024, it's a good time to review what we've accomplished in 2024!
Security Onion Pro
We celebrated 10 years as a company by announcing a new set of enterprise features called Security Onion Pro!
https://blog.securityonion.net/2024/07/celebrating-10-years-of-security-onion.html
2.3
Security Onion 2.3 reached End Of Life (EOL) and is no longer supported. If you are still running 2.3, please migrate to Security Onion 2.4 as soon as possible:
https://blog.securityonion.net/2024/04/security-onion-23-has-reached-end-of.html
Videos
Collecting Endpoint Logs with Elastic Agent
Ingesting PFSense Firewall Logs in Security Onion 2.4
https://youtu.be/aoH8qZwAxekSecurity Onion Essentials 2024
https://blog.securityonion.net/2024/08/security-onion-essentials-2024.html
Tuning Rules with Security Onion Detections
Releases
We managed to crank out 8 releases of Security Onion 2.4! These releases added things like our new Detections interface, AI summaries, and lots of dashboard updates!
2.4.40
SOC Grid improvements, Dashboards/Hunt improved Events table columns, new analyzers for Cases
https://blog.securityonion.net/2024/01/security-onion-2440-now-available.html
2.4.50
New Community ID and Firewall Auth dashboards, improved Correlate action, new Process ancestors action
https://blog.securityonion.net/2024/02/security-onion-2450-now-available.html
2.4.60
New Process Info action, more endpoint support, new dashboards, BETA Suricata PCAP
https://blog.securityonion.net/2024/03/security-onion-2460-now-available.html
2.4.70
Detections, Telemetry, ElastAlert notifications, more dashboards, Suricata 7.0.5, CyberChef 10.17.0, Zeek 6.0.4
https://blog.securityonion.net/2024/05/security-onion-2470-now-available.html
2.4.80
Kafka, Docker upgrade, Detections improvements
https://blog.securityonion.net/2024/06/security-onion-2480-now-available.html
2.4.90
Detections improvements, updates for Suricata, CyberChef, so-idh, so-nginx
https://blog.securityonion.net/2024/07/security-onion-2490-now-available.html
2.4.100
Elastic 8.14.3, resolve security issues in Docker images
https://blog.securityonion.net/2024/08/security-onion-24100-now-available.html
2.4.110
AI Summaries, Docker 27.2.0, Zeek 6.0.8, CyberChef 10.19.2, Standalone Suricata PCAP
https://blog.securityonion.net/2024/10/security-onion-24110-hurricane-helene.html
Coming Soon
We are working on version 2.4.120 and it is currently scheduled to release in early 2025. It will include lots of new features that will help you peel back the layers of your enterprise and make your adversaries cry!
