Security Onion

I've uploaded a new security-onion-upgrade.sh script which resolves a couple of issues: http://code.google.com/p/security-onion/issues...

I received Issue 77 in the Security Onion Issue Tracker.  The Issue describes an error when enabling Reverse DNS queries in Sguil.  I was a...

This post is the fourth in a multi-part series designed to introduce   Sguil  and  Squert   to beginners. I'm assuming you've alre...

This blog post will demonstrate the nsm_all_del script.  If you ran through Setup and configured your sensors but decide that you need to re...

This is a quick blog post to demonstrate the Security Onion Upgrade Script.  If you're running Security Onion 20110101 or newer, you can...

This post is the third in a multi-part series designed to introduce   Sguil  and  Squert  to beginners. I'm assuming you've alrea...

This post is the second in a multi-part series designed to introduce   Sguil and Squert  to beginners. I'm assuming you've alrea...

This post is the first in a multi-part series designed to introduce Sguil and Squert  to beginners. 1. Download Security Onion 20110116 . ...

Security Onion 20110116 is now available!  This release is primarily a bug fix and resolves the following issues: Issue 64: Fix Visualizat...

Security Onion 20110101 includes OSSEC 2.5.1 .  OSSEC is a Host Intrusion Detection System (HIDS) and it monitors system logs for signs of i...

Security Onion 20110101 includes a new and improved Setup script.  Here are some screenshots of the Quick Setup process. Once t...

Security Onion Live 20110101 is now available! Thanks to Matt Jonkman and Emerging Threats for hosting! You can download the ISO here: http:...

Security Onion is remastered using Remastersys.  As part of the remastering process, Remastersys removes the SSH Host keys.  The end result ...

Sguil relies on older version of the tcl/tk packages, so upgrading to newer versions will break Sguil.  I was aware of this potential issue ...

I'll be mentoring SANS 401 Security Essentials in Augusta, GA on Thursday nights starting March 3, 2011. ISSA members are eligible for a...

Thanks to all those who came out to the Security Onion presentation! For those who were unable to attend, I've made the slides availabl...

Just a quick note that there is a bug in the setup script in the current version of Security Onion. If you double-click the Setup desktop s...

Suppose that a web page has some Javascript that contains some hex encoding like this: \x74\x65\x73\x74\x69\x6e\x67\x20\x31\x20\x32\x20\x33\...

My SANS MGT414 CISSP class is about to study the Cryptography domain. An excellent resource that I recommend to anybody learning about Cryp...

Mark Baggett and I learned a few things this week about using tshark to decrypt SSL. Mark posted our lessons learned here: Tshark/Wireshark...

I'm mentoring SANS MGT414 Training Program for CISSP right now. Here are some additional resources for students studying for the CISSP...

Congratulations to the latest SANS GSEs! Doug Burks Mike Cardosa Jim Clausing Vishal Hariprasad Seth Misenar Chris Mohan If you are consider...

Security Onion Live 20101010 is now available! Thanks to Matt Jonkman and Emerging Threats for hosting! You can download the ISO here: htt...