46 matches found
rita
RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...
securityonion
Security Onion Security Onion 是一个免费且开源的 Linux 发行版，用于威胁狩猎、企业安全监控和日志管理。它包含一套全面的工具，旨在协同工作，为您提供网络和主机活动的可见性。 ✨ 功能特性 Security Onion Console SOC ：用于分析安全事件和管理集群的统一 Web 界面。 Elastic Stack ：由 Elasticsearch 驱动的强大搜索。 入侵检测 ：基于网络的 IDS（使用 Suricata）和基于主机的监控（使用 Elastic Fleet）。 网络元数据 ：由 Zeek 或 Suricata 生成的详细网络元数据。...
sigint-hombre
sigint-hombre 作者： John Page — malvuln 又名 hyp3rlinx 版权所有 c 2026 目的： 在运行时从活跃的 URLhaus 威胁指标 生成派生的 Suricata 检测规则 ，并将其部署到 Security Onion 平台 ，以实现高覆盖率的实时网络监控。 当前版本 v2.0 • 重大重构 • 提升稳定性 • 积极维护 验证（v2 – 脚本完整性） MD5： f92c8100417fc5a992480486203d21f5 SHA256：...
elastic-peak-dashboards
PEAK 基线威胁狩猎仪表盘 Kibana / Security Onion 3.0 — 一级与 ICS 协议分析 可导入的 Kibana 已保存对象仪表盘，实现了 Splunk PEAK 基线威胁狩猎方法论 ，用于网络威胁狩猎（CTH）和事件响应（IR）操作。基于 Security Onion 3.0.0 构建并验证，使用 Elasticsearch 中的 Zeek NSM 和 Suricata 数据。 概述 每个仪表盘都遵循一致的两阶段设计： 1. 建立基线 — 时间维度上的数量、基数指标、top-talker 表，以及针对特定协议的分布面板，使操作员能够了解特定网络上给定协议的 正...
security-onion
Security Onion Security Onion 16.04 はサポート終了（End Of Life）に達しました: https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html 新しい Security Onion 2 リポジトリは以下にあります: https://github.com/Security-Onion-Solutions/securityonion/...
securityonion v3.3.0-20260908
Security Onion Security Onion is a free and open Linux distribution for threat hunting, enterprise security monitoring, and log management. It includes a comprehensive suite of tools designed to work together to provide visibility into your network and host activity. ✨ Features Security Onion...
cyber-operation-lab
Full-Spectrum Cyber Operation Lab: Red Team Execution & Blue T...
SigInt-Hombre 1.0
SigInt-Hombre is a python script that generates derived Suricata detection rules from live URLhaus threat indicators at runtime and deploys them to the Security Onion platform for high-coverage real-time network monitoring...
EUVD-2018-1803
Malware in sbrugna...
EUVD-2020-20477
Malware in sbrugna...
EUVD-2018-1805
Malware in sbrugna...
CVE-2020-27985
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home//SecurityOnion/setup/so-setup...
CVE-2020-27985
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home//SecurityOnion/setup/so-setup...
CVE-2020-27985
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home//SecurityOnion/setup/so-setup...
Design/Logic Flaw
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home//SecurityOnion/setup/so-setup...
CVE-2020-27985
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home//SecurityOnion/setup/so-setup...
CVE-2020-27985
Security Onion v2 prior to 2.3.10 contains a misconfigured sudo setup that allows the administrative user to obtain root access without a password by editing and executing /home//SecurityOnion/setup/so-setup. The issue is a local privilege escalation affecting deployments based on the affected 2....
CVE-2020-27985: Missing Authentication for Critical Function
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home/ /SecurityOnion/setup/so-setup...
Security Onion Solutions Security Onion Security Breaches
Security Onion Solutions Security Onion is an American Security Onion Solutions software for threat search, enterprise security monitoring and log management. The software supports Elasticsearch, Logstash, Kibana, Snort, Suricata, Bro, Wazuh, Sguil, Squit, NetworkMiner and many other security too...
Ntopng on Security Onion
so16@so16:$ mkdir git so16@so16:$ cd git so16@so16:/git$ ls so16@so16:/git$ wget --no-check-certificate https://github.com/branchnetconsulting/so-ntopng-installer/raw/master/installntopngonso16 --2019-02-11 02:48:02--...