~/panel

Developers Panel

on YouTube 35m
Panelat Security Onion Conference 2021 · on Friday, 2021-10-01· [developer-experience]

speakers

name:Jason Ertel
links:none on file
name:Josh Patterson
links:none on file
name:Josh Brower
links:none on file
name:Wes Lambert
links:none on file
name:Mike Reeves
links:none on file
name:Doug Burks
website:https://securityonionsolutions.com

resources

video:https://youtu.be/pu_SsoB6xco
slides:none on file

summary

Declares a continued commitment to a free open core while building paid features, notes a planned Rocky Linux migration after CentOS shifts, and explains detection choices: network telemetry plus host telemetry (osquery, Velociraptor, Beats) plus Playbook with Sigma rules for lateral movement alerts. Architecture uses modular plugins for backends (Elasticsearch, Crate), adds Azure field parsing and testing automation, and works toward tighter Elastic Agent integration; encrypted traffic is handled by augmenting with endpoint and app logs.

AI-written summary · about

chapters (14)

  1. 0:00Panel introduction
  2. 5:36Licensing and open source commitment
  3. 7:26CentOS and OS security plans
  4. 8:53Security Onion for lateral movement
  5. 15:45Detecting encrypted data
  6. 17:17Network encryption and monitoring
  7. 19:04Cloud infrastructure parsing
  8. 21:01Elastic agent integration
  9. 23:16Codebase language diversity
  10. 26:42Automation and testing
  11. 27:47Velociraptor integration plans
  12. 29:29Modularity and scalability
  13. 32:20Project evolution and teamwork
  14. 35:00Closing remarks

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.