Masaya-A / securityonion

Security Onion 2 - Linux distro for threat hunting, enterprise security monitoring, and log management

Brief Demo of Security Onion 2.3.100 "Standalone" on Oracle Linux 8.5

DO NOT USE THIS REPOSITORY "Masaya-A/securityonion" FOR PRODUCTION ENVIRONMENT!

Results of some commands

[testuser@ol8so ~]$ uname -a ; cat /etc/os-release ; sudo so-status; cat /etc/soversion
Linux ol8so 5.4.17-2136.304.4.2.el8uek.x86_64 #2 SMP Fri Feb 25 17:40:46 PST 2022 x86_64 x86_64 x86_64 GNU/Linux
NAME="Oracle Linux Server"
VERSION="8.5"
ID="ol"
ID_LIKE="fedora"
VARIANT="Server"
VARIANT_ID="server"
VERSION_ID="8.5"
PLATFORM_ID="platform:el8"
PRETTY_NAME="Oracle Linux Server 8.5"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:oracle:linux:8:5:server"
HOME_URL="https://linux.oracle.com/"
BUG_REPORT_URL="https://bugzilla.oracle.com/"

ORACLE_BUGZILLA_PRODUCT="Oracle Linux 8"
ORACLE_BUGZILLA_PRODUCT_VERSION=8.5
ORACLE_SUPPORT_PRODUCT="Oracle Linux"
ORACLE_SUPPORT_PRODUCT_VERSION=8.5

Checking Docker status

    Docker ------------------------------------------------------------------------------------------- [ OK ]

Checking container statuses

    so-aptcacherng ----------------------------------------------------------------------------------- [ OK ]
    so-curator --------------------------------------------------------------------------------------- [ OK ]
    so-dockerregistry -------------------------------------------------------------------------------- [ OK ]
    so-elastalert ------------------------------------------------------------------------------------ [ OK ]
    so-elasticsearch --------------------------------------------------------------------------------- [ OK ]
    so-filebeat -------------------------------------------------------------------------------------- [ OK ]
    so-fleet ----------------------------------------------------------------------------------------- [ OK ]
    so-grafana --------------------------------------------------------------------------------------- [ OK ]
    so-idstools -------------------------------------------------------------------------------------- [ OK ]
    so-influxdb -------------------------------------------------------------------------------------- [ OK ]
    so-kibana ---------------------------------------------------------------------------------------- [ OK ]
    so-kratos ---------------------------------------------------------------------------------------- [ OK ]
    so-logstash -------------------------------------------------------------------------------------- [ OK ]
    so-mysql ----------------------------------------------------------------------------------------- [ OK ]
    so-nginx ----------------------------------------------------------------------------------------- [ OK ]
    so-playbook -------------------------------------------------------------------------------------- [ OK ]
    so-redis ----------------------------------------------------------------------------------------- [ OK ]
    so-sensoroni ------------------------------------------------------------------------------------- [ OK ]
    so-soc ------------------------------------------------------------------------------------------- [ OK ]
    so-soctopus -------------------------------------------------------------------------------------- [ OK ]
    so-steno ----------------------------------------------------------------------------------------- [ OK ]
    so-strelka-backend ------------------------------------------------------------------------------- [ OK ]
    so-strelka-coordinator --------------------------------------------------------------------------- [ OK ]
    so-strelka-filestream ---------------------------------------------------------------------------- [ OK ]
    so-strelka-frontend ------------------------------------------------------------------------------ [ OK ]
    so-strelka-gatekeeper ---------------------------------------------------------------------------- [ OK ]
    so-strelka-manager ------------------------------------------------------------------------------- [ OK ]
    so-suricata -------------------------------------------------------------------------------------- [ OK ]
    so-telegraf -------------------------------------------------------------------------------------- [ OK ]
    so-wazuh ----------------------------------------------------------------------------------------- [ OK ]
    so-zeek ------------------------------------------------------------------------------------------ [ OK ]

2.3.100
[testuser@ol8so ~]$

Security Onion 2.3.100

Security Onion 2.3.100 is here!

Screenshots

Alerts

Hunt

Release Notes

https://docs.securityonion.net/en/2.3/release-notes.html

Requirements

https://docs.securityonion.net/en/2.3/hardware.html

Download

https://docs.securityonion.net/en/2.3/download.html

Installation

https://docs.securityonion.net/en/2.3/installation.html

FAQ

https://docs.securityonion.net/en/2.3/faq.html

Feedback

https://docs.securityonion.net/en/2.3/community-support.html