Security Onion Courses

Security Onion 2.0 - So-Import-Pcap Is Back!

Explore Security Onion 2.0's so-import-pcap feature for importing and analyzing network packet captures, enhancing threat detection and incident response capabilities for blue teamers.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Finding Traffic Anomalies Using SSL Certificates

Explore techniques for detecting traffic anomalies using SSL certificates, including metadata analysis, Python scripting, and visualization tools for enhanced network security monitoring.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Constructing Your Playbook within Security Onion

Learn to build an effective security playbook using Security Onion, covering integration, shared resources, detections, templates, and Elastic Search for enhanced threat response.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Building a Detection Lab with SecurityOnion

Learn to build a comprehensive detection lab using SecurityOnion, covering network topology, firewall configuration, data sources, and practical scenarios for enhancing cybersecurity skills.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Creativity, Intelligence, and Security Analyst Thinking Modes

Explore analyst thinking modes, creativity, and intelligence in cybersecurity. Learn about divergent and convergent thinking, problem-solving techniques, and research methodologies for effective security analysis.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Getting the Most out of Freq and Domain Stats

Explore advanced techniques for leveraging Freq and Domain_Stats tools in cybersecurity analysis, enhancing threat detection and network monitoring capabilities.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

Blue, Red, Purple, White - Which Team Are You On?

Explore cybersecurity team roles, network layouts, and threat detection scenarios using Security Onion. Learn about FOSS tools, packet analysis, and data source integration for effective security operations.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

Introduction to Data Analysis with Security Onion and Other Open Source Tools

Learn data analysis techniques for cybersecurity using open-source tools like Security Onion and Python. Explore PANDAS, ElasticSearch, frequency analysis, and time series analysis for effective threat hunting.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Integrating Osquery into Security Onion

Explore integrating Osquery into Security Onion for enhanced endpoint visibility and threat detection. Learn about Chrome extensions, query types, and firewall control in this informative conference talk.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Security Onion 2017 - Pivoting Effectively to Catch More Bad Guys

Learn effective pivoting techniques to enhance threat detection and investigation skills, improving your ability to identify and catch malicious actors in cybersecurity.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Snort - History and Vision

Explore Snort's evolution and future in network security with Joel Esler. Gain insights into its development, key features, and upcoming innovations for effective threat detection and response.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Practical Cyborgism - Machine Learning for Bro Logs

Explore machine learning techniques for analyzing Bro logs, focusing on supervised and unsupervised methods to enhance cybersecurity threat detection and analysis.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Using ELSA for Fun & Profit

Explore advanced ELSA features for security analysis, including Elasticsearch integration, improved syslog-ng, containerization, and new visualization tools like Ankey and geo mapping.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

The Investigators Labyrinth - A Data-Driven Perspective

Explore data-driven perspectives on digital forensics and incident response, focusing on cognitive challenges, investigation processes, and analytical strategies for security professionals.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

ICS - SCADA Network Security Monitoring in Difficult Scenarios

Explore ICS/SCADA network security monitoring strategies for challenging industrial environments, focusing on real-world applications, threat models, and effective monitoring techniques.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk