Locked Security Onion 16.04.6.4

[itsMe]

This is the hidden content, please

• Sign In
• or
• Sign Up

Security Onion 16.04.6.4 - Linux distro for intrusion detection, enterprise security monitoring, and log management

Security Onion is a free and open source Linux distribution for intrusion detection, enterprise security monitoring, and log management. It includes Elasticsearch, Logstash, Kibana, Snort, Suricata, Bro, OSSEC, Sguil, Squert, NetworkMiner, and many other security tools. The easy-to-use Setup wizard allows you to build an army of distributed sensors for your enterprise in minutes!

Below are several diagrams to represent the current architecture and deployment scenarios for Security Onion on the Elastic Stack.

Core Components

Logstash – Parse and format logs.
Elasticsearch – Ingest and index logs.
Kibana – Visualize ingested log data.
Auxiliary Components

Curator – Manage indices through scheduled maintenance.
ElastAlert – Query Elasticsearch and alert on user-defined anomalous behavior or other interesting bits of information.
FreqServer -Detect DGAs and find random file names, script names, process names, service names, workstation names, TLS certificate subjects and issuer subjects, etc.
DomainStats – Get additional info about a domain by providing additional context, such as creation time, age, reputation, etc.

Changelog v16.04.6.4

    Zeek 3.0.1
    Suricata 4.1.6
    Snort 2.9.15.1
    Elastic 6.8.6
    CyberChef 9.12.0

    Package Updates
    This release also includes the following updated packages:
    pinguybuilder – 20180514-1ubuntu1securityonion21
    securityonion-iso – 20151016-1ubuntu1securityonion34

    These packages resolve the following issues:

    pinguybuilder: increment version to 16.04.6.4 #1701
    Build 16.04.6.4 ISO image #1704

    Issues Resolved
    For a list of all issues resolved in this release, please see

This is the hidden content, please

• Sign In
• or
• Sign Up