Security Onion Documentation

Security Onion is a free and open source Linux distribution for threat hunting, enterprise security monitoring, and log management. It includes Elasticsearch, Logstash, Kibana, Suricata, Zeek, Wazuh, CyberChef, and many other security tools. This documentation will give you an overview of installation, configuration, and usage of Security Onion and its components. Don't miss the inspiring foreword by Richard Bejtlich! Proceeds go to the Rural Technology Fund! This book covers the following Security Onion topics: Getting Started Security Onion Console (SOC) Analyst VM Network Visibility Host Visibility Logs Updating Accounts Services Customizing for Your Environment Tuning Tricks and Tips Utilities Many folks have asked for a printed version of our official online documentation and we're excited to provide that! Whether you work on airgapped networks or simply want a portable desk reference, this is what you've been asking for! Q&A What is Security Onion? Security Onion is a free and open source Linux distribution for threat hunting, enterprise security monitoring, and log management. It includes Elasticsearch, Logstash, Kibana, Snort, Suricata, Zeek, Wazuh, CyberChef, and many other security tools. Security Onion was started by Doug Burks in 2008. Who is Doug Burks? Doug Burks started Security Onion as a free and open source project in 2008 and then founded Security Onion Solutions, LLC in 2014. What is Security Onion Solutions? Doug Burks started Security Onion Solutions, LLC in 2014. Security Onion Solutions is the only official provider of training, professional services, and hardware appliances for Security Onion. Who wrote this book? Security Onion Solutions is the primary author and maintainer of this documentation. Some content has been contributed by members of our community. Thanks to all the folks who have contributed to this documentation over the years! The inspiring foreword was written by Richard Bejtlich! What is the difference between this book and the online documentation? This book is the online documentation formatted specifically for print. It also includes an inspiring foreword by Richard Bejtlich that is not available anywhere else! Finally, proceeds go to the Rural Technology Fund! Who should get this book? Security Onion users who work on airgapped networks or simply want a portable reference that requires no Internet connection and no batteries! Also anyone who wants to donate to a worthy cause like Rural Technology Fund!