Security Onion

Do you want to... ... learn more about Security Onion? ... get the most out of your Security Onion deployment? ... catch more bad guys...

I'd like to see if there's interest in a Security Onion Conference, so I've put together a short survey to gather your feedback....

Andrew Colfelt fixed a bug in sostat-redacted and I've updated our securityonion-sostat package with his patch.  Thanks Andrew! The up...

I've updated our securityonion-sostat package to resolve six issues. The updated package version is as follows: securityonion-sostat ...

I've updated our securityonion-nsmnow-admin-scripts package to resolve two issues. The updated package version is as follows: securit...

Want to learn more about Security Onion?  Sign up for the new and expanded 2-day class in Houston TX! The registration deadline is April 3...

I've updated our securityonion-setup package to resolve an issue. The updated package version is as follows: securityonion-setup - 20...

I've updated our securityonion-onionsalt package to improve NIDS and HIDS updates.  Please see the updated OnionSalt page on our Wiki: ...

Want to learn more about Security Onion?  Sign up for the new and expanded 2-day class in Houston TX! The registration deadline is April 3...

I've updated our securityonion-nsmnow-admin-scripts package to resolve several issues.  The updated package version is as follows: secu...

Don't miss the new expanded 2-day Security Onion training class in Houston TX!  Last day to sign up is April 30! https://securityonion2...

I've updated our securityonion-web-page package to add a BRO_FTP query and also some BRO_INTEL queries for our recently added BRO_INTEL ...

I've updated our Setup package to resolve a few issues. The updated package version is as follows: securityonion-setup - 20120912-0ub...

Scott Runnels has updated two of our ELSA packages to resolve a couple of issues.  Thanks, Scott! The updated packages are as follows: s...

Jon Schipp submitted some patches for soup (thanks Jon!) and I updated sostat to resolve a few issues.  The new package is securityonion-sos...

I've updated our securityonion-rule-update package to resolve an issue.  The new package is securityonion-rule-update - 20120726-0ubuntu...

I've updated our securityonion-web-page package to resolve a few issues.  The new package is securityonion-web-page -20120722-0ubuntu0se...

Want to learn more about Security Onion?  Sign up for the new and expanded 2-day class in Houston TX!  If you sign up before March 31, you c...

We have a new Security Onion 12.04.4 ISO image now available that contains all the latest Ubuntu and Security Onion updates as of February 2...

Paul Halliday recently released Squert 1.2.0: http://www.squertproject.org/ https://github.com/int13h/squert He also recorded a couple o...

I've updated the securityonion-capme package to check for active pcap_agents.  This will provide a more helpful error message for folks ...

I've updated the securityonion-web-page package to add an ELSA query that will show DNS zone transfers.  The updated package version is ...

Scott Runnels has updated the securityonion-elsa-extras package to properly randomize the ELSA apikey on the master server.  Thanks, Scott!...

I've added a Table of Contents page to our Wiki and made it the Sidebar for all pages in the Wiki. You can see it on the left side of th...

I've updated the securityonion-setup package to resolve several issues.  The updated package version is securityonion-setup - 20120912-0...

I've updated the securityonion-sostat package to redact IPv6/MAC addresses and also increase verbosity for monitoring ELSA.  The updated...

I've updated the securityonion-web-page package to add an ELSA query that will group connections by node.  The updated package version i...

The following software was recently released: Snort 2.9.5.6 http://blog.snort.org/2013/11/snort-2956-is-now-available-on-snortorg.html ...

I've packaged a new version of sostat that resolves the following issue: Issue 461: sostat: improve pf_ring output https://code.googl...