Security Onion Files

IDS/NSM, Snort, Suricata, Bro, Sguil, Squert, ELSA, Xplico

Brought to you by: dougburks

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	Size	InfoDownloads / Week
Parent folder
security-onion-upgrade.sh	2012-02-21	70.8 kB	0
snorby_start	2012-02-21	943 Bytes	0
snorby_config.yml	2012-02-21	1.1 kB	0
Totals: 3 Items		72.8 kB	0

This Sourceforge repo stores old legacy versions of Security Onion.

Please do NOT use the versions of Security Onion stored here.

Instead, please download the latest version of Security Onion from Github:

https://github.com/Security-Onion-Solutions/security-onion/wiki/Installation

Source: README.md, updated 2016-06-07

Other Useful Business Software

MongoDB Atlas runs apps anywhere

Deploy in 115+ regions with the modern database for every enterprise.

MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.

Start Free

Our Free Plans just got better! | Auth0

With up to 25k MAUs and unlimited Okta connections, our Free Plan lets you focus on what you do best—building great apps.

You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.

Try free now

Recommended Projects

Security Onion
Linux distro for threat hunting, enterprise security monitoring
SELKS
A Suricata based IDS/IPS/NSM distro
Snorby Security Distribution
This project is no longer updated, see http://www.smoothsec.org/ Snorby SSD is is an open source IDS (Intrusion Detection System) Linux distribution based on Snort and Snorby. Built on Ubuntu 8.04 LTS . With SSD it is possible to get a complete Intrusion Detection System running within a few minutes.
Sguil
Sguil's (pronounced sgweel) main component is an intuitive GUI that receives realtime events from snort/barnyard. It includes other components which facilitate the practice of Network Security Monitoring (NSM) and event driven analysis of IDS alerts.
pytbull
============ ***IMPORTANT*** PLEASE NOTE THAT PYTBULL IS NO LONGER MAINTAINED AND HAS BEEN PORTED BY netrunn3r HERE: https://github.com/netrunn3r/pytbull-ng. YOU SHOULD USE pytbull-ng INSTEAD. THANK YOU. ============ pytbull is an Intrusion Detection/Prevention System (IDS/IPS) Testing Framework for Snort, Suricata and any IDS/IPS that generates an alert file. It can be used to test the detection and blocking capabilities of an IDS/IPS and to validate config.