Security Onion

Peel Back the Layers of Your Enterprise

Tuesday, July 26, 2011

tcpdump and ngrep

›
Yesterday, I tweeted the following: tcpdump -nnvvAi eth1 -s0 | grep "Doug Burks is teaching SANS SEC503 Intrusion Detection In-Depth i...
12 comments:
Monday, July 25, 2011

Doug Burks is teaching SANS SEC503 Intrusion Detection In-Depth in Portland 8/22 - 8/27

›
Doug Burks is teaching SANS SEC503 Intrusion Detection In-Depth in Portland Oregon 8/22 - 8/27.  For more information about the class, pleas...
1 comment:
Thursday, July 14, 2011

Security Onion 20110714 now available

›
Security Onion 20110714 is now available!  This release completes the PulledPork reconfiguration to ignore a  new Emerging Threats BLOCK cat...
Monday, July 11, 2011

Security Onion 20110709 now available

›
Security Onion 20110709 is now available!  This release configures PulledPork to ignore a new Emerging Threats BLOCK category released on 7/...
Wednesday, June 29, 2011

Security Onion 20110628 now available

›
Security Onion 20110628 is now available!  This release fixes two minor issues with the OSSEC Sguil agent. Existing Security Onion users c...
Wednesday, June 22, 2011

Security Onion and UTC

›
Sguil uses UTC.  It does this for a few reasons: UTC avoids any timewarps when changing from standard time to daylight saving time and vice...
Friday, June 17, 2011

Security Onion 20110614

›
Security Onion 20110614 is now available!  This upgrade fixes a few issues with downloading rules and adds some new menu entries to make rul...
Monday, June 13, 2011

Security Onion 20110607 featuring Sguil 0.8, Squert 0.8.3, and more polish!

›
Update:  Looks like the Security Onion 20110607 files haven't fully replicated to all Sourceforge mirrors yet. If you're having trou...
6 comments:
Saturday, June 4, 2011

Security Onion featured in SANS Student Project

›
Security Onion was featured in a SANS Student Project.  Russ McRee, Beth Binde, and Terrence O’Connor recently published  Assessing Outbound...
Tuesday, May 24, 2011

Security Onion Success Stories

›
I received a couple of Security Onion Success Stories recently.  I appreciate Brett S. and Gene A. taking the time to say thanks.   It's...
Monday, May 2, 2011

Security Onion featured in ISSA Journal

›
I always look forward to Russ McRee's Toolsmith column in the ISSA Journal.   This month's Toolsmith column features Security Onion!...
2 comments:
Thursday, April 7, 2011

Security Onion 20110321: Distributed Sguil Sensors

›
Security Onion 20110321 is now available!  This new version includes an updated Setup script that allows you to easily create a Sguil server...
18 comments:
Wednesday, February 23, 2011

Security Onion 20110222 Resolves 2 Issues

›
I've uploaded a new security-onion-upgrade.sh script which resolves a couple of issues: http://code.google.com/p/security-onion/issues...
Saturday, January 22, 2011

Security Onion 20110122 fixes DNS error in Sguil

›
I received Issue 77 in the Security Onion Issue Tracker.  The Issue describes an error when enabling Reverse DNS queries in Sguil.  I was a...
Thursday, January 20, 2011

Introduction to Sguil and Squert: Part 4

›
This post is the fourth in a multi-part series designed to introduce   Sguil  and  Squert   to beginners. I'm assuming you've alre...
3 comments:

Security Onion nsm_all_del script

›
This blog post will demonstrate the nsm_all_del script.  If you ran through Setup and configured your sensors but decide that you need to re...
3 comments:
‹
›
Home
View web version
Powered by Blogger.