41 matches found
securityonion
Security Onion Security Onion 是一个免费且开源的 Linux 发行版，用于威胁狩猎、企业安全监控和日志管理。它包含一套全面的工具，旨在协同工作，为您提供网络和主机活动的可见性。 ✨ 功能特性 Security Onion Console SOC ：用于分析安全事件和管理集群的统一 Web 界面。 Elastic Stack ：由 Elasticsearch 驱动的强大搜索。 入侵检测 ：基于网络的 IDS（使用 Suricata）和基于主机的监控（使用 Elastic Fleet）。 网络元数据 ：由 Zeek 或 Suricata 生成的详细网络元数据。...
elastic-peak-dashboards
PEAK Baseline Threat Hunt ダッシュボード Kibana / Security Onion 3.0 — Tier 1 & ICS プロトコル分析 Splunk PEAK Baseline Threat Hunt 手法 を実装した、インポート可能な Kibana 保存オブジェクトダッシュボード群です。サイバースレットハンティング CTH およびインシデント対応 IR 業務向けに設計され、Security Onion 3.0.0 上で Zeek NSM と Suricata のデータを Elasticsearch に格納した環境で構築・検証されています。 概要...
sigint-hombre
sigint-hombre 作者： John Page — malvuln 又名 hyp3rlinx 版权所有 c 2026 目的： 在运行时从活跃的 URLhaus 威胁指标 生成派生的 Suricata 检测规则 ，并将其部署到 Security Onion 平台 ，以实现高覆盖率的实时网络监控。 当前版本 v2.0 • 重大重构 • 提升稳定性 • 积极维护 验证（v2 – 脚本完整性） MD5： f92c8100417fc5a992480486203d21f5 SHA256：...
rita
RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...
security-onion
Security Onion Security Onion 16.04 はサポート終了（End Of Life）に達しました: https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html 新しい Security Onion 2 リポジトリは以下にあります: https://github.com/Security-Onion-Solutions/securityonion/...
cyber-operation-lab
Full-Spectrum Cyber Operation Lab: Red Team Execution & Blue T...
SigInt-Hombre 1.0
SigInt-Hombre is a python script that generates derived Suricata detection rules from live URLhaus threat indicators at runtime and deploys them to the Security Onion platform for high-coverage real-time network monitoring...
EUVD-2018-1803
Malware in sbrugna...
EUVD-2020-20477
Malware in sbrugna...
EUVD-2018-1805
Malware in sbrugna...
CVE-2020-27985
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home//SecurityOnion/setup/so-setup...
CVE-2020-27985
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home//SecurityOnion/setup/so-setup...
CVE-2020-27985
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home//SecurityOnion/setup/so-setup...
Design/Logic Flaw
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home//SecurityOnion/setup/so-setup...
CVE-2020-27985
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home//SecurityOnion/setup/so-setup...
CVE-2020-27985
Security Onion v2 prior to 2.3.10 contains a misconfigured sudo setup that allows the administrative user to obtain root access without a password by editing and executing /home//SecurityOnion/setup/so-setup. The issue is a local privilege escalation affecting deployments based on the affected 2....
Security Onion Solutions Security Onion Security Breaches
Security Onion Solutions Security Onion is an American Security Onion Solutions software for threat search, enterprise security monitoring and log management. The software supports Elasticsearch, Logstash, Kibana, Snort, Suricata, Bro, Wazuh, Sguil, Squit, NetworkMiner and many other security too...
Ntopng on Security Onion
so16@so16:$ mkdir git so16@so16:$ cd git so16@so16:/git$ ls so16@so16:/git$ wget --no-check-certificate https://github.com/branchnetconsulting/so-ntopng-installer/raw/master/installntopngonso16 --2019-02-11 02:48:02--...
Network Security Monitoring: Security Onion
Network Security Monitoring NSM is, put simply, monitoring your network for security related events. It might be proactive, when used to identify vulnerabilities or expiring SSL certificates, or it might be reactive, such as in incident response and network forensics. Whether you’re tracking an...
Importing Pcap into Security Onion
Within the last week, Doug Burks of Security Onion SO added a new script that revolutionizes the use case for his amazing open source network security monitoring platform. I have always used SO in a live production mode, meaning I deploy a SO sensor sniffing a live network interface. As the...