Security Onion

Security Onion 20110922 is now available!   This update resolves Issue 126 .  It also spawns instances of  httpry and  httpry_agent  for ea...

Security Onion 20110920 is now available!   This update enables IP-to-country mapping in the SQueRT web interface  (great for showing off ...

Security Onion 20110919 is now available!   This update does the following : Updates the NSMnow admin scripts to support argus. Start...

Security Onion 20110915 is now available!   This update does the following : fixes a minor bug in sguil-db-purge upgrades Argus to versi...

Security Onion 20110914 is now available!   This will update the Setup script to use the new config file format and install a daily scrip...

Security Onion 20110913 is now available!   This update upgrades the SQueRT web interface to version 0.9.3b.  Thanks go to Paul Halliday at...

Security Onion 20110909 is now available!   This upgrade adds some new menu entries to make IDS tuning a little easier.   The "IDS R...

Scott Hogg wrote a great review of Security Onion here: http://www.networkworld.com/community/node/78633

Yesterday, I tweeted the following: tcpdump -nnvvAi eth1 -s0 | grep "Doug Burks is teaching SANS SEC503 Intrusion Detection In-Depth i...

Doug Burks is teaching SANS SEC503 Intrusion Detection In-Depth in Portland Oregon 8/22 - 8/27.  For more information about the class, pleas...

Security Onion 20110714 is now available!  This release completes the PulledPork reconfiguration to ignore a  new Emerging Threats BLOCK cat...

Security Onion 20110709 is now available!  This release configures PulledPork to ignore a new Emerging Threats BLOCK category released on 7/...

Security Onion 20110628 is now available!  This release fixes two minor issues with the OSSEC Sguil agent. Existing Security Onion users c...

Sguil uses UTC.  It does this for a few reasons: UTC avoids any timewarps when changing from standard time to daylight saving time and vice...

Security Onion 20110614 is now available!  This upgrade fixes a few issues with downloading rules and adds some new menu entries to make rul...

Update:  Looks like the Security Onion 20110607 files haven't fully replicated to all Sourceforge mirrors yet. If you're having trou...

Security Onion was featured in a SANS Student Project.  Russ McRee, Beth Binde, and Terrence O’Connor recently published  Assessing Outbound...

I received a couple of Security Onion Success Stories recently.  I appreciate Brett S. and Gene A. taking the time to say thanks.   It's...

I always look forward to Russ McRee's Toolsmith column in the ISSA Journal.   This month's Toolsmith column features Security Onion!...

Security Onion 20110321 is now available!  This new version includes an updated Setup script that allows you to easily create a Sguil server...