Security Onion

The third run of our newly expanded 4-day Security Onion class will be in Houston TX! If you register before March 6, you can use the foll...

We have a new Security Onion 12.04.5.1 ISO image now available that contains all the latest Ubuntu and Security Onion updates as of February...

We have a new 12.04.5.1 ISO image ready for testing that will be used in the upcoming 4-day classes in Atlanta and Seattle .  If you have s...

Last year's Security Onion Conference was an overwhelming success! This year's Security Onion Conference will be held in Augusta G...

The first two sessions of Security Onion 101 sold out quickly, so we're going to run another session of the same class on Monday, March ...

I've updated our securityonion-et-rules package in preparation for our upcoming 12.04.5.1 ISO image.  This is a static set of free NIDS ...

Bro 2.3.2 was recently released: http://blog.bro.org/2015/01/bro-232-release.html I've packaged Bro 2.3.2 and updated the securityoni...

Brian Kellogg submitted a patch for ossec_agent.tcl that allows you to enable or disable DNS lookups.  Thanks, Brian!  I've packaged thi...

Pietro Delsante contributed some updated parsers for Bro and BIND DNS logs (thanks, Pietro!) and I've updated the securityonion-elsa-ext...

The second run of our newly expanded 4-day Security Onion class will be in Seattle WA! If you register before February 20, you can use the...

Our Security Onion onsite class is expanding to 4 days!  This first 4-day session will be in Atlanta GA. If you register before February 1...

I've updated the NSM, setup, and sostat packages and the new package versions are as follows:  securityonion-nsmnow-admin-scripts - 201...

We have a new version of sguil-db-purge which should help prevent your Sguil uncategorized events from getting out of control.  sguil-db-pur...

The first run of Security Onion 101 sold out quickly, so we're going to run another session of the same class on Thursday, February 5. ...

SaltStack has updated their salt packages and I've updated our securityonion-onionsalt packages. New packages: python-urllib3 - 1.7.1...

Suricata 2.0.6 was recently released: http://suricata-ids.org/2015/01/15/suricata-2-0-6-available/ I've packaged Suricata 2.0.6 and i...

Many folks have asked about online training.  Our first online training session will be a 3-hour introduction to Security Onion and will be ...

I've added some new securityonion-samples packages: securityonion-samples-mta - 20150103-0ubuntu0securityonion1 (from http://malware-...

I've updated the ELSA packages to parse the responder country code out of the Bro conn.log.  The new packages are as follows: security...

I've updated the NSM and Setup packages to resolve several issues.  The new packages are as follows: securityonion-nsmnow-admin-script...

Suricata 2.0.5 was recently released: http://www.openinfosecfoundation.org/index.php/component/content/article/1-latest-news/201-suricata-2...

I've updated the securityonion-rule-update package to resolve two issues: Issue 639: rule-update should disable Suricata rules if runn...

I've added ELSA parsers for Bro RADIUS, SNMP, and X.509 logs.  The new packages are as follows: securityonion-elsa-extras - 20131117...

Scott F. found an issue in the Sguil client: https://groups.google.com/d/topic/security-onion/P57oKu02tI4/discussion I've updated the...

Snort 2.9.7 and Daq 2.0.4 were recently released: http://blog.snort.org/2014/10/snort-297-has-been-released.html I've updated our pac...

Today is Cyber Monday, so here is a discount code good for $400 off the 3-day Security Onion training in Augusta GA! cyber-monday-4443 ...

I've updated our NSM package and the new package version is: securityonion-nsmnow-admin-scripts - 20120724-0ubuntu0securityonion91 I...

Argus 3.0.8 was recently released: http://qosient.com/argus/ I've updated our Argus packages and the new package versions are as foll...

Our 3-day Security Onion training class will be in Augusta GA next month.  If you register by Friday November 21, you can use the following ...

Sguil 0.9 and Squert 1.5.0 were recently released: http://sourceforge.net/p/sguil/mailman/message/32230854/ http://www.squertproject.org/s...