Security Onion Conference 2021
2021-10-01
Augusta, United States
| title | author | length |
|---|---|---|
| Welcome and Opening Remarks | Doug Burks | 03m |
Opening remarks set the conference tone and contain no technical content, just logistics and anecdotes. A brief floor popping anecdote about a harmless… | ||
| SOARing with Security Onion | Wes Lambert | 30m |
Shows how Security Onion pushes events to automation platforms and actually remediates: Strelka flags an obfuscated poker.bat with Strelka yara match, a… | ||
| Hunting Malware with Suricata Metadata | Josh Stroschein | 58m |
Suricata is used as a metadata engine to speed detection by producing HTTP/DNS/TLS logs, JA3 and community ID, file identifications and file extraction to… | ||
| Layers of Deception: Intrusion Detection Honeypots w/ Security Onion | Chris Sanders, Josh Brower | 44m |
Script clones a GitHub repo and runs idh_setup.sh to convert a Security Onion forward node into an idh node that runs OpenCanary in Docker, disables sensor… | ||
| Developers Panel | Jason Ertel, Josh Patterson, Josh Brower, Wes Lambert, Mike Reeves, Doug Burks | 35m |
Declares a continued commitment to a free open core while building paid features, notes a planned Rocky Linux migration after CentOS shifts, and explains… | ||
| Detection Engineering: Defending Networks with Purpose | Peter Di Giorgio | 29m |
A practical detection‑engineering recipe that templates threats, measures coverage, and engineers alerts: a test lab runs Security Onion 2 with Wazuh, Sysmon… | ||
| State of the Onion | Doug Burks | 41m |
Announces Security Onion 2.3.80 and demos importing a pcap into the stack, surfacing a curl User‑Agent alert from Suricata, pivoting to full PCAP and sending… | ||
| nothing matches | ||