Security Onion

Peel Back the Layers of Your Enterprise

Wednesday, February 23, 2011

Security Onion 20110222 Resolves 2 Issues

›
I've uploaded a new security-onion-upgrade.sh script which resolves a couple of issues: http://code.google.com/p/security-onion/issues...
Saturday, January 22, 2011

Security Onion 20110122 fixes DNS error in Sguil

›
I received Issue 77 in the Security Onion Issue Tracker.  The Issue describes an error when enabling Reverse DNS queries in Sguil.  I was a...
Thursday, January 20, 2011

Introduction to Sguil and Squert: Part 4

›
This post is the fourth in a multi-part series designed to introduce   Sguil  and  Squert   to beginners. I'm assuming you've alre...
3 comments:

Security Onion nsm_all_del script

›
This blog post will demonstrate the nsm_all_del script.  If you ran through Setup and configured your sensors but decide that you need to re...
3 comments:

Security Onion Upgrade Script

›
This is a quick blog post to demonstrate the Security Onion Upgrade Script.  If you're running Security Onion 20110101 or newer, you can...
Wednesday, January 19, 2011

Introduction to Sguil and Squert: Part 3

›
This post is the third in a multi-part series designed to introduce   Sguil  and  Squert  to beginners. I'm assuming you've alrea...
Tuesday, January 18, 2011

Introduction to Sguil and Squert: Part 2

›
This post is the second in a multi-part series designed to introduce   Sguil and Squert  to beginners. I'm assuming you've alrea...
Monday, January 17, 2011

Introduction to Sguil and Squert: Part 1

›
This post is the first in a multi-part series designed to introduce Sguil and Squert  to beginners. 1. Download Security Onion 20110116 . ...
15 comments:
Sunday, January 16, 2011

Security Onion 20110116

›
Security Onion 20110116 is now available!  This release is primarily a bug fix and resolves the following issues: Issue 64: Fix Visualizat...
Friday, January 7, 2011

Security Onion 20110101: OSSEC and Sguil

›
Security Onion 20110101 includes OSSEC 2.5.1 .  OSSEC is a Host Intrusion Detection System (HIDS) and it monitors system logs for signs of i...
4 comments:
Thursday, January 6, 2011

Security Onion 20110101: Setup script

›
Security Onion 20110101 includes a new and improved Setup script.  Here are some screenshots of the Quick Setup process. Once t...
Wednesday, January 5, 2011

Security Onion 20110101

›
Security Onion Live 20110101 is now available! Thanks to Matt Jonkman and Emerging Threats for hosting! You can download the ISO here: http:...
9 comments:
Monday, November 22, 2010

Security Onion: SSH Keys

›
Security Onion is remastered using Remastersys.  As part of the remastering process, Remastersys removes the SSH Host keys.  The end result ...
2 comments:
Sunday, November 21, 2010

Security Onion: Update Manager Breaks Sguil

›
Sguil relies on older version of the tcl/tk packages, so upgrading to newer versions will break Sguil.  I was aware of this potential issue ...
3 comments:
Monday, November 15, 2010

SANS 401 Security Essentials mentored by Doug Burks in Augusta GA

›
I'll be mentoring SANS 401 Security Essentials in Augusta, GA on Thursday nights starting March 3, 2011. ISSA members are eligible for a...
Wednesday, November 3, 2010

Security Onion: Intrusion Detection for your Network in Minutes

›
Thanks to all those who came out to the Security Onion presentation! For those who were unable to attend, I've made the slides availabl...
Friday, October 29, 2010

Security Onion: Setup Script

›
Just a quick note that there is a bug in the setup script in the current version of Security Onion. If you double-click the Setup desktop s...
Tuesday, October 19, 2010

Decoding Javascript Hex Encoding

›
Suppose that a web page has some Javascript that contains some hex encoding like this: \x74\x65\x73\x74\x69\x6e\x67\x20\x31\x20\x32\x20\x33\...
1 comment:
Sunday, October 17, 2010

CISSP Resources: Cryptography

›
My SANS MGT414 CISSP class is about to study the Cryptography domain. An excellent resource that I recommend to anybody learning about Cryp...
Saturday, October 16, 2010

SSL Decryption using Tshark

›
Mark Baggett and I learned a few things this week about using tshark to decrypt SSL. Mark posted our lessons learned here: Tshark/Wireshark...
Wednesday, October 13, 2010

CISSP Resources

›
I'm mentoring SANS MGT414 Training Program for CISSP right now. Here are some additional resources for students studying for the CISSP...

Congratulations to the latest SANS GSEs!

›
Congratulations to the latest SANS GSEs! Doug Burks Mike Cardosa Jim Clausing Vishal Hariprasad Seth Misenar Chris Mohan If you are consider...
Tuesday, October 12, 2010

Security Onion Live: 20101010 Edition!

›
Security Onion Live 20101010 is now available! Thanks to Matt Jonkman and Emerging Threats for hosting! You can download the ISO here: htt...
‹
›
Home
View web version
Powered by Blogger.