Security Onion 2.4.190 now available including Onion AI Assistant! Introducing the all-new Onion AI, an advanced LLM-based security analyst assistant, built directly into the Security Onion console. Designed BY defenders FOR defenders!

Security Onion 2.4.180 now available including new features, updated components, and quality of life improvements! blog.securityonion.net/2025/09/secu...

🚨 Security Onion 2.4.170 now available including JA4, more SOC dashboards, and updated components! 🚨 🔍Let's find more hackers! 🔍 If you like Security Onion, please like and share to help spread the word! blog.securityonion.net/2025/08/secu...

Security Onion 2.4.160 now available including Playbooks, Guided Analysis, MCP Server, and more! Have you ever had an alert and were unsure of what to do next? In this release, when you expand an alert you'll see a new tab called Guided Analysis.

We've got a new AI-powered Playbooks feature coming in Security Onion 2.4.160 that will turbocharge your analysis and incident response! www.youtube.com/watch?v=SLGR...

Check out our latest video, covering the Notifications feature in Security Onion Pro. Send your alerts directly to another platform, like email, Slack, or Jira! www.youtube.com/watch?v=quy8...

🧅♥️Security Onion 2.4.150: Celebrating Mother's Day with MoM (Manager of Managers) 🧅♥️ Yesterday was Mother's Day and we are very thankful for our mothers!

Thanks to Simply Cyber for having me on the podcast to talk about @securityonion.bsky.social ! Peeling Back the Network Layers with Doug Burks | S3 E2 www.youtube.com/watch?v=FNB6...

Upcoming change to Elasticsearch index management in Security Onion -- read this, especially if you're running a distributed, multinode deployment. blog.securityonion.net/2025/04/upco...

Index Lifecycle Management in Security Onion www.youtube.com/watch?v=Y6HV...

Security Onion 2.4.140 now available including Suricata 7.0.9, Zeek 7.0.6, and much more! For more details, please see the thread 🧵and the link below!

We've just announced a Detection Engineering and Analysis course, coming up this July in Columbia, MD. Register now for an early bird discount! blog.securityonion.net/2025/03/earl...

Quick Malware Analysis: REMCOS RAT pcap from 2025-03-10 blog.securityonion.net/2025/03/quic...

Security Onion 2.4.130 now available including Elastic 8.17.3 and much more! Please see thread 🧵below for more details!

Quick Malware Analysis: SMARTAPESG / NETSUPPORT RAT / STEALC pcap from 2025-02-18 blog.securityonion.net/2025/02/quic...

🚨Security Onion 2.4.120 now available including lots of new features and updates! 🚨 For more details, please see 🧵below. If you like Security Onion🧅, please like and share to help spread the word! Thanks!

We've got a brand new Introduction to Security Onion 2.4 video available on our YouTube channel! Don't forget to like the video, subscribe to the channel, and leave a nice comment with some words of encouragement for the Security Onion team! www.youtube.com/watch?v=NKCj...

CentOS Stream 9 and other Unsupported Network Installations blog.securityonion.net/2025/01/cent...

Security Onion 2.4.120 is coming soon! We just added a sneak peek video to our YouTube channel that covers some of the highlights! Don't forget to like and subscribe to our YouTube channel!

Our upcoming Security Onion 2.4.120 release includes a new local IP lookup feature! This allows you to define local descriptions for important IP addresses in your environment. Security Onion 2.4.120 is coming soon!

Our upcoming Security Onion 2.4.120 release includes CyberChef 10.19.4! Security Onion 2.4.120 is coming soon!

Our upcoming Security Onion 2.4.120 release includes a new MSI option for deploying the Elastic Agent to your Windows endpoints! Security Onion 2.4.120 is coming soon!

Our upcoming Security Onion 2.4.120 release includes improvements for our ATT&CK Navigator integration! Navigator will now have 4 tabs across the top: Detections Coverage - All Detections Detections Coverage - Sigma Detections Coverage - Suricata Alerts (Last 3 Days)

Our upcoming Security Onion 2.4.120 release includes a new feature for Security Onion Pro customers! If you have a valid Pro license, you will be able to connect to the Security Onion API from external clients. This means that you can create cases, pull PCAPs, or acknowledge alerts using automation!

Coming soon: Our upcoming Security Onion 2.4.120 release includes Zeek 7! It also adds support for analyzing more network protocols like QUIC, HTTP2, OpenVPN, and IPSEC!

Coming soon: AI Summaries in Alerts! Over the last few months, we've continued to iterate on our new AI Summary feature to make it available in the Alerts interface without having to pivot to Detections! This will be included in Security Onion 2.4.120 which is coming soon!

Security Onion 2.4.111 now available! This release includes Suricata 7.0.8 which resolves several security issues. If you haven't already seen our new AI Summaries feature, now is a great time to check it out! For more information, please see the link below.

State of the Onion, 2024: blog.securityonion.net/2024/12/stat...

Did you know that you can integrate @opnsense.org with your Security Onion installation, generating Netflow and Suricata data without the need for a separate sensor? Perfect for home networks! docs.securityonion.net/en/2.4/opnse...

We are thankful for our customers and community! As a way of saying thanks, we'd like to offer you a Cyber Monday discount on our merch store and on-demand training library! Details in thread below!

Thinking of trying out Security Onion in your Proxmox homelab? We've got some pointers for you: docs.securityonion.net/en/2.4/proxm...

Earlier this year we released Detections, a new module in the Security Onion platform that gives analysts a centralized location for writing, enabling, and tuning all the detection rules, including Suricata, YARA, and Sigma. This is a huge leap forward in tuning the platform for your environment.

Did You Know Security Onion now has AI Summaries built in? blog.securityonion.net/2024/10/secu...

Are you at Alamo ACE this week? Make sure to stop by booth 87 to pick up your #SecurityOnion swag and to learn how to peel back the layers of your network and make your adversaries cry!