State of the Onion - Security Onion 2017
Comprehensive overview of Security Onion's latest developments, features, and future roadmap, presented by Doug Burks at the 2017 conference. Gain insights into this powerful network security monitoring platform.
My Use of Security Onion as a Security Researcher
Explore how a security researcher leverages Security Onion for threat detection, network analysis, and malware traffic investigation in this insightful presentation.
Detecting Suspicious Activity on Linux Endpoints Using Security Onion
Learn to identify and analyze suspicious activities on Linux systems using Security Onion's powerful tools and techniques for enhanced endpoint security.
Watching the Watchers - Layering Detection and Deception to Defend Visibility
Explore advanced techniques for layering detection and deception to enhance network visibility and defend against cyber threats.
Intrusion Detection Honeypots with Security Onion - Layers of Deception
Explore Intrusion Detection Honeypots as a cost-effective security measure. Learn to deploy honey services in your network and integrate alerts into Security Onion's monitoring pipeline.
Malware Traffic and CyberChef Magic - 2021-08-19
Explore malware traffic analysis using CyberChef in Security Onion. Learn to investigate pcap files, analyze TCP streams, and interpret hunt analysis results for effective threat detection.
A Practical Method of Finding Vulnerabilities in IoT Devices
Practical methodology for identifying IoT vulnerabilities and intrusion artifacts, focusing on data collection procedures to improve acquisition methods for general IoT devices.
Building a DDoS Testbed with Docker
Learn to build a DDoS testbed using Docker, exploring attack types, research challenges, and practical implementation strategies for cybersecurity professionals and researchers.
Security Onion Essentials 2.4 - Threat Hunting
Explore threat hunting techniques in Security Onion 2.4, covering workflow essentials and practical strategies for proactive cybersecurity defense and network monitoring.
Installing and Configuring Wazuh for SIEM - Blue Team Operations
Learn to set up Wazuh SIEM for detecting intrusions, attacks, and malicious activity. Covers installation and agent configuration on Windows and Linux for effective security data management.
Multi-Receiver Real-time Physical Intrusion Detection "Burglar Alarm" with GNU Radio and USRP N310
Explore real-time indoor intrusion detection using Wi-Fi signals and GNU Radio. Learn about leveraging internal radio receiver signals for physical channel monitoring and system implementation.
Forensic Analysis of Compromised VPN Appliances by Advanced Actors
Arm yourself with techniques to analyze VPN-related intrusions, understand threat actor tactics, and identify IOCs. Gain actionable insights for improved incident response and VPN defense.
Network Intrusion Detection 101 with OpenWrt and OpenCanary
Learn to deploy a network intrusion detection system using OpenWrt and OpenCanary to protect your home network from potential threats posed by IoT devices and cloud-controlled gadgets.
Security Onion Essentials 2024 - Detection Engineering
Explore detection engineering in Security Onion 2.4.70, covering key techniques and best practices for enhancing network security and threat detection capabilities.
SOC Analyst: Top Interview Questions and Answers for Security Operations Center - 2024
Master SOC analyst interview skills with scenario-based prep on threat detection, incident response, and vulnerability management. Gain practical insights to excel in security operations and stand out to potential employers.
Detecting Credential Abuse - Core Concepts and Challenges
Explore detection strategies for credential abuse, including core concepts, patterns, and challenges. Learn to identify suspicious activity and protect systems from unauthorized access.
War Stories from the SOC - Cybersecurity Incident Response Lessons
Cybersecurity expert shares real-world experiences from Security Operations Center, offering insights into threat detection, incident response, and best practices for defending against cyber attacks.
Attacks to America's Gas Stations - Track 1, Session 7
Explore vulnerabilities in gas station infrastructure and learn effective detection strategies for critical infrastructure networks.
In-Depth Study of Linux Rootkits: Evolution, Detection, and Defense
Dive into Linux rootkit security, exploring their evolution, detection methods, and defensive strategies for protecting systems against sophisticated kernel-level threats.
Unbounded Leakage-Resilience and Intrusion-Detection in a Quantum World
Explore groundbreaking quantum cryptographic schemes that provide security against unlimited side-channel attacks and intrusion, advancing beyond classical bounded leakage limitations for enhanced data protection.
Detection and Response for Linux Without EDR
Discover effective Linux security monitoring techniques and incident response strategies without relying on EDR solutions, focusing on native system capabilities and open-source tools.