New YouTube Video: Introduction to Security Onion 2.4

We've got a brand new Introduction to Security Onion 2.4 video available on our YouTube channel! 

Don't forget to like the video, subscribe to the channel, and leave a nice comment with some words of encouragement for the Security Onion team!

Security Onion 2.4.120 Sneak Peek Video

Security Onion 2.4.120 is coming soon! We just added a video to our YouTube channel that covers some of the highlights! Don't forget to like and subscribe to our YouTube channel!

State of the Onion 2024

We usually have our State of the Onion at the annual Security Onion Conference, but we had to cancel the conference due to Hurricane Helene. As we wrap up 2024, it's a good time to review what we've accomplished in 2024!

Security Onion Pro

We celebrated 10 years as a company by announcing a new set of enterprise features called Security Onion Pro!

https://blog.securityonion.net/2024/07/celebrating-10-years-of-security-onion.html

2.3

Security Onion 2.3 reached End Of Life (EOL) and is no longer supported. If you are still running 2.3, please migrate to Security Onion 2.4 as soon as possible:

https://blog.securityonion.net/2024/04/security-onion-23-has-reached-end-of.html

Videos

Collecting Endpoint Logs with Elastic Agent

https://youtu.be/cGmQMsFuAvw

Ingesting PFSense Firewall Logs in Security Onion 2.4

https://youtu.be/aoH8qZwAxek

Security Onion Essentials 2024

https://blog.securityonion.net/2024/08/security-onion-essentials-2024.html

Tuning Rules with Security Onion Detections

https://youtu.be/DelAmqtU2hg

Releases

We managed to crank out 8 releases of Security Onion 2.4! These releases added things like our new Detections interface, AI summaries, and lots of dashboard updates!

2.4.40

SOC Grid improvements, Dashboards/Hunt improved Events table columns, new analyzers for Cases

https://blog.securityonion.net/2024/01/security-onion-2440-now-available.html

2.4.50

New Community ID and Firewall Auth dashboards, improved Correlate action, new Process ancestors action

https://blog.securityonion.net/2024/02/security-onion-2450-now-available.html

2.4.60

New Process Info action, more endpoint support, new dashboards, BETA Suricata PCAP

https://blog.securityonion.net/2024/03/security-onion-2460-now-available.html

2.4.70

Detections, Telemetry, ElastAlert notifications, more dashboards, Suricata 7.0.5, CyberChef 10.17.0, Zeek 6.0.4

https://blog.securityonion.net/2024/05/security-onion-2470-now-available.html

2.4.80

Kafka, Docker upgrade, Detections improvements

https://blog.securityonion.net/2024/06/security-onion-2480-now-available.html

2.4.90

Detections improvements, updates for Suricata, CyberChef, so-idh, so-nginx

https://blog.securityonion.net/2024/07/security-onion-2490-now-available.html

2.4.100

Elastic 8.14.3, resolve security issues in Docker images

https://blog.securityonion.net/2024/08/security-onion-24100-now-available.html

2.4.110

AI Summaries, Docker 27.2.0, Zeek 6.0.8, CyberChef 10.19.2, Standalone Suricata PCAP

https://blog.securityonion.net/2024/10/security-onion-24110-hurricane-helene.html

Coming Soon

We are working on version 2.4.120 and it is currently scheduled to release in early 2025. It will include lots of new features that will help you peel back the layers of your enterprise and make your adversaries cry!

Introduction to Security Onion 2.4 Video

Our latest video shows a couple of great examples of how you can peel back the layers of your enterprise using FREE and OPEN software!

Building a Security Onion virtual machine for so-import-pcap

Please let us know if there are other topics you'd like us to cover in future videos!

Quick Intro to Security Onion Elastic Stack Technology Preview 2

Here's a video showing the installation of Security Onion Elastic Stack Technology Preview 2 and a brief introduction to the interface and workflow:
https://www.youtube.com/playlist?list=PLljFlTO9rB15SMpdBpLi084FiTBJsBjXZ

We'd love your feedback!  Please send it to our mailing list:
https://github.com/Security-Onion-Solutions/security-onion/wiki/MailingLists

Thanks!