![cover image](https://wikiwandv2-19431.kxcdn.com/_next/image?url=https://upload.wikimedia.org/wikipedia/commons/thumb/a/a8/Security_Onion_Desktop.png/640px-Security_Onion_Desktop.png&w=640&q=50)
Security Onion
Linux distribution / From Wikipedia, the free encyclopedia
Security Onion is a free and open Linux distribution for threat hunting, enterprise security monitoring, and log management.[2] Its first release was in 2009.[3]
Quick Facts Developer, OS family ...
![]() | |
![]() A screenshot of the default configuration. | |
Developer | Security Onion Solutions |
---|---|
OS family | Linux (Unix-like) |
Working state | Active |
Source model | Open-source |
Latest release | 2.4.70[1] / May 29, 2024 |
Official website | securityonionsolutions |
Support status | |
Active |
Close
Security Onion combines various tools and technologies to provide a robust IDS solution, including:
- Suricata and Zeek (formerly Bro): These are network-based IDS tools that monitor network traffic for suspicious activities.
- OSSEC: A host-based IDS that monitors system logs and file integrity.
- Elasticsearch, Logstash, and Kibana (ELK stack): These tools are used for log management and analysis, allowing for effective visualization and querying of security events.