Security Onion

We recently released new barnyard2 and rule-update packages: http://blog.securityonion.net/2014/06/new-barnyard2-nsm-rule-update-and.html  ...

I've updated our securityonion-web-page package to add a new ELSA query under the HTTP category labeled "Sites Hosting CABs". ...

The recently released NSM scripts had a typo: http://blog.securityonion.net/2014/06/new-barnyard2-nsm-rule-update-and.html  Thanks t...

You may have noticed previously that when barnyard2 started up, it would consume a large amount of CPU (on both the sensor and the server) f...

I've updated our securityonion-sguil-db-purge package to resolve two issues. The updated package version is as follows: securityonion...

I recently asked the community if there was interest in a Security Onion Conference: http://blog.securityonion.net/2014/05/security-onion-c...

sostat-quick now checks for privileges. The updated package version is as follows: securityonion-sostat - 20120722-0ubuntu0securityonion2...

Do you want to... ... learn more about Security Onion? ... get the most out of your Security Onion deployment? ... catch more bad guys...

Mike Reeves has updated his OnionSalt scripts to be compatible with the latest Salt packages.  I've packaged these scripts and copied ...

We have a new Setup package that changes the way in which we disable services like network-manager, salt-master, and salt-minion.  Previousl...

Do you want to... ... learn more about Security Onion? ... get the most out of your Security Onion deployment? ... catch more bad guys...

I'd like to see if there's interest in a Security Onion Conference, so I've put together a short survey to gather your feedback....

Andrew Colfelt fixed a bug in sostat-redacted and I've updated our securityonion-sostat package with his patch.  Thanks Andrew! The up...

I've updated our securityonion-sostat package to resolve six issues. The updated package version is as follows: securityonion-sostat ...

I've updated our securityonion-nsmnow-admin-scripts package to resolve two issues. The updated package version is as follows: securit...

Want to learn more about Security Onion?  Sign up for the new and expanded 2-day class in Houston TX! The registration deadline is April 3...

I've updated our securityonion-setup package to resolve an issue. The updated package version is as follows: securityonion-setup - 20...

I've updated our securityonion-onionsalt package to improve NIDS and HIDS updates.  Please see the updated OnionSalt page on our Wiki: ...

Want to learn more about Security Onion?  Sign up for the new and expanded 2-day class in Houston TX! The registration deadline is April 3...

I've updated our securityonion-nsmnow-admin-scripts package to resolve several issues.  The updated package version is as follows: secu...

Don't miss the new expanded 2-day Security Onion training class in Houston TX!  Last day to sign up is April 30! https://securityonion2...

I've updated our securityonion-web-page package to add a BRO_FTP query and also some BRO_INTEL queries for our recently added BRO_INTEL ...

I've updated our Setup package to resolve a few issues. The updated package version is as follows: securityonion-setup - 20120912-0ub...

Scott Runnels has updated two of our ELSA packages to resolve a couple of issues.  Thanks, Scott! The updated packages are as follows: s...

Jon Schipp submitted some patches for soup (thanks Jon!) and I updated sostat to resolve a few issues.  The new package is securityonion-sos...

I've updated our securityonion-rule-update package to resolve an issue.  The new package is securityonion-rule-update - 20120726-0ubuntu...

I've updated our securityonion-web-page package to resolve a few issues.  The new package is securityonion-web-page -20120722-0ubuntu0se...

Want to learn more about Security Onion?  Sign up for the new and expanded 2-day class in Houston TX!  If you sign up before March 31, you c...

We have a new Security Onion 12.04.4 ISO image now available that contains all the latest Ubuntu and Security Onion updates as of February 2...

Paul Halliday recently released Squert 1.2.0: http://www.squertproject.org/ https://github.com/int13h/squert He also recorded a couple o...

I've updated the securityonion-capme package to check for active pcap_agents.  This will provide a more helpful error message for folks ...

I've updated the securityonion-web-page package to add an ELSA query that will show DNS zone transfers.  The updated package version is ...

Scott Runnels has updated the securityonion-elsa-extras package to properly randomize the ELSA apikey on the master server.  Thanks, Scott!...