RITA documentation is outdated but it still works.

[Mastadamus]

RITA can still be installed with Sec Onion 2.3 but the documentation is a bit outdated. All the commands are generally right but "bro" needs to be replaced with "zeek" for every command. The documentation is here. https://docs.securityonion.net/en/2.3/rita.html

[dougburks]

Updated:
Security-Onion-Solutions/securityonion-docs@4492a59#diff-547a1e4d2b2de6452f26f85e9d363e79bf332dfdb1648baf8e1b28e9e103aa10

[Mastadamus]

Thank you. That was very quick.