Security Onion

I found and fixed a couple of bugs in the recent sostat package.  The updated package version is: securityonion-sostat - 20120722-0ubuntu...

The following software was recently released: Snort 2.9.5.5 http://blog.snort.org/2013/09/snort-2955-is-now-available-on-snortorg.html ...

Only one week left until the 8-hour Security Onion class in Augusta GA!  We still have some seats available, so here's a discount code g...

Paul Halliday recently released Squert 1.1.5: http://www.squertproject.org/ https://github.com/int13h/squert He also recorded a walkthr...

The securityonion-sostat package now includes a new script called sostat-redacted which runs sostat and pipes the output to sed, redacting a...

Suricata 1.4.6 was recently released: http://www.openinfosecfoundation.org/index.php/component/content/article/1-latest-news/183--suricata-...

New versions of the following packages are now available! securityonion-nsmnow-admin-scripts securityonion-setup Issues Resolved Issue...

Jaime Blasco recently wrote a great blog post on using DNS records to identify suspicious domains: http://www.alienvault.com/open-threat-ex...

I just published a quick video on OSSEC and ELSA. In this video, you'll see how quickly you can configure OSSEC and ELSA using Security ...

Want to learn more about Security Onion?  Sign up for the upcoming 8-hour class in Augusta GA!  Be one of the first 10 students to sign up a...

The video from my recent BSidesAugusta presentation is now available: http://www.youtube.com/watch?v=l7TSGHvsPJA I also just published a ...

We have a new Security Onion 12.04.3 ISO image now available that contains all the latest Ubuntu and Security Onion updates as of September ...

Mike Reeves created OnionSalt , a set of Salt  configuration management scripts to manage lots of sensors from your master server.  I'v...

The following software was recently released: PF_RING 5.6.1 http://sourceforge.net/projects/ntop/files/PF_RING/ Snort 2.9.5.3 http://b...

Paul Halliday recently released Squert 1.1: http://www.squertproject.org/ I've packaged Squert 1.1 and updated a few other packages a...

A new version of our securityonion-bro-scripts package is now available that fixes a possible race condition. This update resolves the fol...

New versions of our securityonion-sguil-server and securityonion-capme packages are now available! After installing these packages and resta...

New versions of the following packages are now available! securityonion-nsmnow-admin-scripts securityonion-sguild-add-user securityonion-s...

A new version of our securityonion-capme package is now available! This new package resolves the following issues: Issue 365 : CapMe red/...

NetworkMiner was recently updated to 1.5: http://www.netresec.com/?page=Blog&month=2013-08&post=Security-Advisory%3a-Two-Vulnerabil...

A new version of our securityonion-rule-update package is now available that resolves the following issue: Issue 368 : /usr/bin/rule-update...

We have a new Security Onion 12.04.2 ISO image now available that contains all the latest Ubuntu and Security Onion updates as of July 17, 2...

A new version of our securityonion-sguil-server package is now available that changes the CapMe web interface to render transcripts using th...

New versions of our securityonion-sguil-client and securityonion-sguil-server packages are now available that add a new "Bro" opti...

New versions of our securityonion-nsmnow-admin-scripts and securityonion-setup packages are now available that allow you to enable/disable s...