Building a Detection Lab with SecurityOnion
Learn to build a comprehensive detection lab using SecurityOnion, covering network topology, firewall configuration, data sources, and practical scenarios for enhancing cybersecurity skills.
Creativity, Intelligence, and Security Analyst Thinking Modes
Explore analyst thinking modes, creativity, and intelligence in cybersecurity. Learn about divergent and convergent thinking, problem-solving techniques, and research methodologies for effective security analysis.
Getting the Most out of Freq and Domain Stats
Explore advanced techniques for leveraging Freq and Domain_Stats tools in cybersecurity analysis, enhancing threat detection and network monitoring capabilities.
Blue, Red, Purple, White - Which Team Are You On?
Explore cybersecurity team roles, network layouts, and threat detection scenarios using Security Onion. Learn about FOSS tools, packet analysis, and data source integration for effective security operations.
Introduction to Data Analysis with Security Onion and Other Open Source Tools
Learn data analysis techniques for cybersecurity using open-source tools like Security Onion and Python. Explore PANDAS, ElasticSearch, frequency analysis, and time series analysis for effective threat hunting.
Integrating Osquery into Security Onion
Explore integrating Osquery into Security Onion for enhanced endpoint visibility and threat detection. Learn about Chrome extensions, query types, and firewall control in this informative conference talk.
Security Onion 2017 - Pivoting Effectively to Catch More Bad Guys
Learn effective pivoting techniques to enhance threat detection and investigation skills, improving your ability to identify and catch malicious actors in cybersecurity.
Snort - History and Vision
Explore Snort's evolution and future in network security with Joel Esler. Gain insights into its development, key features, and upcoming innovations for effective threat detection and response.
Practical Cyborgism - Machine Learning for Bro Logs
Explore machine learning techniques for analyzing Bro logs, focusing on supervised and unsupervised methods to enhance cybersecurity threat detection and analysis.
Using ELSA for Fun & Profit
Explore advanced ELSA features for security analysis, including Elasticsearch integration, improved syslog-ng, containerization, and new visualization tools like Ankey and geo mapping.
The Investigators Labyrinth - A Data-Driven Perspective
Explore data-driven perspectives on digital forensics and incident response, focusing on cognitive challenges, investigation processes, and analytical strategies for security professionals.
ICS - SCADA Network Security Monitoring in Difficult Scenarios
Explore ICS/SCADA network security monitoring strategies for challenging industrial environments, focusing on real-world applications, threat models, and effective monitoring techniques.
C2 Phone Home - Leveraging Security Onion to Identify Command and Control Channels
Leveraging Security Onion to identify command and control channels, focusing on various techniques like Echo Request, SSH Tunnel, ICMP, and DNS-based methods for detecting malicious network activities.
Security Onion Hybrid Hunter Beta 3 - Community ID and Sysmon Integration
Explore Security Onion Hybrid Hunter Beta 3, Community ID, and Sysmon features for enhanced network security and threat detection in enterprise environments.
Using Security Onion to See Adversary Activity through All Phases of the Kill Chain
Explore how Security Onion detects and analyzes adversary activities across all stages of the cyber kill chain, enhancing threat detection and response capabilities.
State of the Onion - Security Onion Conference 2019
Explore the latest developments and future roadmap of Security Onion, a powerful open-source security monitoring platform, presented by its creator at the annual conference.
Augmenting the Onion - Facilitating Enhanced Detection and Response with Open Source Tools
Explore open-source tools for enhancing threat detection and response capabilities in Security Onion, improving network security monitoring and incident handling processes.
State of the Onion - Security Onion Conference 2018
Explore the latest developments in network security monitoring with insights on Security Onion's Hybrid Hunter tech preview, featuring updates and advancements in threat detection capabilities.
Uncovering Persistence with Autoruns and Security Onion
Discover techniques for identifying persistent threats using Autoruns and Security Onion. Learn to uncover hidden malware and enhance your network defense capabilities.
Security Onion Essentials 2024 - Introduction and Overview
Explore Security Onion 2.4.70's features, deployment options, and support in this concise introduction. Learn about training resources and enterprise solutions for enhanced network security monitoring.
Security Onion Essentials 2024 Installation - Part 2
Comprehensive guide to finalizing Security Onion 2.4.70 setup, covering advanced configuration steps and best practices for optimal network security monitoring.