securityonion
securityonion copied to clipboard
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, and case mana...
Consider adding the ability to leverage a templated view for analyzer results as opposed to raw JSON for lengthy results. While we do provide a brief summary of the results...
From user-submitted feature requests: **Report Formats:** PDF/HTML/XLS/CSV **Report Categories** | Description -- | -- Alarms | Reports on top alarms, top attackers, top attacked hosts, and top destination ports Assets...
SO version 2.3.110 The proxy certificates are stored in `/etc/pki/ca-trust/source/anchors/` and did `update-ca-trust` but still `so-rule-update` giving below error: This is the only problem with `so-rule-update` as of now and...
Up until now, all Strelka communication has been local to a node. With the option to upload files to the cluster from an external source like an analyst workstation, we...
Create TLS certificate for use with nginx for all nodes running sensor services
Observed on Ubuntu 18 Network Install. Hostname was modified even though preflight check failed. It is expected that no changes should be made to a box if there is any...