Security Onion

I've updated the securityonion-web-page package to resolve two issues.  The new package version is as follows: securityonion-web-page -...

I've updated the Setup package to resolve several issues, including allowing you to disable Snorby.  It should work as follows: choos...

Registration for the 2015 Security Onion Conference in Augusta GA is now open! http://security-onion-conference-2015.eventbrite.com/

Brian Kellogg sent in a patch for the securityonion-sguil-agent-ossec package to parse syslog IP addresses.  Thanks, Brian! The new packag...

I've updated the securityonion-tcpudpflow package to improve the formatting of the Bro transcript option when processing UDP (primarily ...

I've updated the sostat package to resolve an issue.  The new package version is as follows: securityonion-sostat - 20120722-0ubuntu0se...

We have a new Security Onion 12.04.5.2 ISO image now available that contains all the latest Ubuntu and Security Onion updates as of June 17,...

OSSEC 2.8.2 was recently released: http://www.ossec.net/?p=1198 I've packaged OSSEC 2.8.2 and the new package version is as follows: ...

I've updated our Setup package and the new package is as follows: securityonion-setup - 20120912-0ubuntu0securityonion142 This new pa...

Pete sent a patch for the nsm-watchdog cron job that should help avoid a race condition.  I've applied the patch and the new package is ...

The next run of our expanded 4-day Security Onion class will be in the Washington DC area in August! For more details and to register, ple...

ELSA 1205 packages were recently released: http://blog.securityonion.net/2015/06/elsa-1205-now-available.html A few issues were found so ...

Recent OpenSSL changes prevented the default Debian/Ubuntu tcltls package from working properly, so I've built a new one: tcltls - 1.5....

Please do not update until further notice! Ubuntu SSL packages seem to cause issues. UPDATE 2015/06/17 08:52 All clear! You may safely re...

If you're running salt, you may have noticed that if you run a command like this: sudo salt '*' cmd.run 'service nsm statu...

I've updated our packages to reflect the latest version of ELSA: securityonion-capme - 20121213-0ubuntu0securityonion21 securityonion...

The next round of online training sessions will be held Monday 6/29 through Thursday 7/2! For more information and to register, please see...

Snort 2.9.7.3 was recently released: http://blog.snort.org/2015/05/snort-2973-is-now-available.html I've updated our Snort packages: ...

We recently released a securityonion-suricata package for Suricata 2.0.8: http://blog.securityonion.net/2015/05/suricata-208.html An issu...

Brian Kellogg sent some patches for our ossec_agent for Sguil and I've updated the package.  The new package has been tested by David Za...

I've updated our NSM package and it has been tested by David Zawdie (thanks!). The new package version is: securityonion-nsmnow-admin...

I've updated our Sphinxsearch package to 2.1.9 and it has been tested by David Zawdie (thanks!). The new package version is: sphinxse...

Suricata 2.0.8 was recently released: http://suricata-ids.org/2015/05/06/suricata-2-0-8-available/ I've packaged Suricata 2.0.8 and i...

We have lots of new packages queued up for release, but we need your help testing them! If you're not already a member of our security...

Security Onion Conference 2015 will be held in Augusta GA on Friday September 11 (please mark your calendar!).  This is the day before BSide...

securityonion-rule-update - 20120726-0ubuntu0securityonion28 is now available and should resolve the following issue: Issue 715: securityo...

Only 2 weeks left to register for the upcoming 4-day Security Onion class in Houston TX which will be held May 12-15.  Here's a discount...

securityonion-rule-update - 20120726-0ubuntu0securityonion27 is now available and should resolve the following issues: Issue 681: rule-upd...

securityonion-sostat - 20120722-0ubuntu0securityonion34 is now available and should resolve the following issues: Issue 692: sostat: list ...

securityonion-sguil-db-purge - 20120722-0ubuntu0securityonion12 is now available and should resolve the following issue: Issue 711: Add ...

Our next online class has been scheduled!  "Security Onion 301: Best Practices for Distributed Deployments" will be Tuesday, April...

I've updated four packages to resolve a few issues and these new packages have been tested by Josh Brower (thanks!). The new package v...

Snort 2.9.7.2 was recently released: http://blog.snort.org/2015/03/snort-2972-has-been-released.html I've updated our Snort package: ...

I've updated our NSM and Setup packages to resolve a few issues and these new packages have been tested by Pete Nelson (thanks!). The ...

The next round of online training sessions will be held next week!  In addition to Security Onion 101, we're also offering two new onlin...

BBCan177 submitted a patch (thanks!) that allows you to add your own custom ELSA queries to our ELSA query menu: I've added the pa...

Suricata 2.0.7 was recently released: http://www.openinfosecfoundation.org/index.php/component/content/article/1-latest-news/204-suricata-2...

The third run of our newly expanded 4-day Security Onion class will be in Houston TX! If you register before March 6, you can use the foll...

We have a new Security Onion 12.04.5.1 ISO image now available that contains all the latest Ubuntu and Security Onion updates as of February...

We have a new 12.04.5.1 ISO image ready for testing that will be used in the upcoming 4-day classes in Atlanta and Seattle .  If you have s...

Last year's Security Onion Conference was an overwhelming success! This year's Security Onion Conference will be held in Augusta G...

The first two sessions of Security Onion 101 sold out quickly, so we're going to run another session of the same class on Monday, March ...

I've updated our securityonion-et-rules package in preparation for our upcoming 12.04.5.1 ISO image.  This is a static set of free NIDS ...