Security Onion Solutions, LLC

All

48 repositories

securityonion
Public
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, …
security monitoring threat-hunting
security monitoring threat-hunting case-management information-security cyber-security network-security intrusion-detection-system security-tools endpoint-security
Shell
•
Other
•625•4.5k•73•1•Updated Mar 7, 2026Mar 7, 2026
securityonion-soc
Public
Go
•
Other
•23•61•0•1•Updated Mar 6, 2026Mar 6, 2026
securityonion-image
Public
Dockerfile
•26•54•0•0•Updated Mar 6, 2026Mar 6, 2026
securityonion-resources
Public
Other
•3•7•0•0•Updated Mar 6, 2026Mar 6, 2026
securityonion-repo
Public
Package lists for SO base distribution
1•1•0•1•Updated Mar 5, 2026Mar 5, 2026
docs
Public
Documentation for Security Onion
HTML
•0•0•0•0•Updated Mar 5, 2026Mar 5, 2026
securityonion-docs
Public
Python
•
Other
•97•95•0•0•Updated Mar 2, 2026Mar 2, 2026
securityonion-examples
Public
Python
•2•1•0•2•Updated Feb 21, 2026Feb 21, 2026
securityonion-resources-playbooks
Public
Python
•
Other
•4•14•0•0•Updated Jan 8, 2026Jan 8, 2026
bro-http2
Public
Plugin for Zeek/Bro which provides http2 decoder/analyzer
C++
•
Other
•22•0•0•0•Updated Nov 12, 2025Nov 12, 2025
securityonion-mcp
Public
Python
•
Other
•1•3•0•0•Updated Jul 16, 2025Jul 16, 2025
pySigma-backend-securityonion
Public
Python
•
MIT License
•0•0•0•0•Updated Jun 10, 2025Jun 10, 2025
py-idstools
Public
idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
Python
•
Other
•86•2•0•0•Updated May 12, 2025May 12, 2025
securityonion-yara
Public
YARA signature and IOC database for my scanners and tools
YARA
•
Other
•659•4•0•0•Updated Mar 12, 2025Mar 12, 2025
prism
Public
Lightweight, robust, elegant syntax highlighting.
JavaScript
•
MIT License
•1.4k•0•0•0•Updated Jul 17, 2024Jul 17, 2024
securityonion-docker-rpm
Public
3•3•0•0•Updated Jul 11, 2024Jul 11, 2024
securityonion-cloud
Public
HCL
•
GNU Affero General Public License v3.0
•17•33•1•0•Updated Jun 27, 2022Jun 27, 2022
sigma
Public
Generic Signature Format for SIEM Systems
Python
•2.6k•9•0•0•Updated May 27, 2022May 27, 2022
stenographer
Public
Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discus…
Go
•
Apache License 2.0
•233•2•0•0•Updated Jul 26, 2021Jul 26, 2021
securityonion-faf
Public
Security Onion 2 - File Analysis Framework
GNU General Public License v2.0
•4•5•0•0•Updated Apr 19, 2021Apr 19, 2021
security-onion
Public archive
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
dfir ids intrusion-detection
dfir ids intrusion-detection network-security-monitoring log-management nsm hunting
520•3.1k•0•0•Updated Apr 16, 2021Apr 16, 2021
securityonion-web-page
Public archive
HTML
•10•10•0•0•Updated Feb 3, 2021Feb 3, 2021
securityonion-elastic
Public archive
Security Onion Elastic Stack
Shell
•61•46•0•1•Updated Feb 1, 2021Feb 1, 2021
securityonion-docker
Public archive
Docker files for Security Onion
Dockerfile
•22•42•0•0•Updated Jan 28, 2021Jan 28, 2021
securityonion-sostat
Public archive
Shell
•8•8•0•0•Updated Dec 9, 2020Dec 9, 2020
securityonion-setup
Public archive
Shell
•24•36•0•1•Updated Dec 7, 2020Dec 7, 2020
securityonion-playbook-plugin
Public
Ruby
•1•2•0•0•Updated Nov 17, 2020Nov 17, 2020
securityonion-capme
Public archive
PHP
•9•11•0•0•Updated Oct 21, 2020Oct 21, 2020
elasticsearch-ingest-community-id
Public
Ingests network flows into community ids
Java
•
Apache License 2.0
•0•7•1•0•Updated May 21, 2020May 21, 2020
securityonion-docker-hh
Public archive
TypeScript
•10•21•1•0•Updated Apr 30, 2020Apr 30, 2020