Security Onion

Yesterday, I tweeted the following: tcpdump -nnvvAi eth1 -s0 | grep "Doug Burks is teaching SANS SEC503 Intrusion Detection In-Depth i...

Doug Burks is teaching SANS SEC503 Intrusion Detection In-Depth in Portland Oregon 8/22 - 8/27.  For more information about the class, pleas...

Security Onion 20110714 is now available!  This release completes the PulledPork reconfiguration to ignore a  new Emerging Threats BLOCK cat...

Security Onion 20110709 is now available!  This release configures PulledPork to ignore a new Emerging Threats BLOCK category released on 7/...

Security Onion 20110628 is now available!  This release fixes two minor issues with the OSSEC Sguil agent. Existing Security Onion users c...

Sguil uses UTC.  It does this for a few reasons: UTC avoids any timewarps when changing from standard time to daylight saving time and vice...

Security Onion 20110614 is now available!  This upgrade fixes a few issues with downloading rules and adds some new menu entries to make rul...

Update:  Looks like the Security Onion 20110607 files haven't fully replicated to all Sourceforge mirrors yet. If you're having trou...

Security Onion was featured in a SANS Student Project.  Russ McRee, Beth Binde, and Terrence O’Connor recently published  Assessing Outbound...

I received a couple of Security Onion Success Stories recently.  I appreciate Brett S. and Gene A. taking the time to say thanks.   It's...

I always look forward to Russ McRee's Toolsmith column in the ISSA Journal.   This month's Toolsmith column features Security Onion!...

Security Onion 20110321 is now available!  This new version includes an updated Setup script that allows you to easily create a Sguil server...

I've uploaded a new security-onion-upgrade.sh script which resolves a couple of issues: http://code.google.com/p/security-onion/issues...

I received Issue 77 in the Security Onion Issue Tracker.  The Issue describes an error when enabling Reverse DNS queries in Sguil.  I was a...

This post is the fourth in a multi-part series designed to introduce   Sguil  and  Squert   to beginners. I'm assuming you've alre...

This blog post will demonstrate the nsm_all_del script.  If you ran through Setup and configured your sensors but decide that you need to re...