Security Onion Courses

Security Onion Essentials 2026 - Alert Triage and Case Creation

Master alert triage and case creation in Security Onion by learning to pivot between datasets for investigations and track findings using the case management tool.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Security Onion Essentials 2026 - Introduction

Discover Security Onion 2.4.190 fundamentals in this introductory session covering essential network security monitoring platform features and capabilities.

• YouTube
• 14 minutes
• Self-Paced
• Conference Talk

Security Onion Pro - Onion AI Assistant

Discover how the Onion AI Assistant in Security Onion Pro 2.4.190 gathers context, analyzes logs, generates timelines, and accelerates security investigations for analysts.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Security Onion 2.0 - So-Import-Pcap Is Back!

Explore Security Onion 2.0's so-import-pcap feature for importing and analyzing network packet captures, enhancing threat detection and incident response capabilities for blue teamers.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Finding Traffic Anomalies Using SSL Certificates

Explore techniques for detecting traffic anomalies using SSL certificates, including metadata analysis, Python scripting, and visualization tools for enhanced network security monitoring.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

Constructing Your Playbook within Security Onion

Learn to build an effective security playbook using Security Onion, covering integration, shared resources, detections, templates, and Elastic Search for enhanced threat response.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Building a Detection Lab with SecurityOnion

Learn to build a comprehensive detection lab using SecurityOnion, covering network topology, firewall configuration, data sources, and practical scenarios for enhancing cybersecurity skills.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

Creativity, Intelligence, and Security Analyst Thinking Modes

Explore analyst thinking modes, creativity, and intelligence in cybersecurity. Learn about divergent and convergent thinking, problem-solving techniques, and research methodologies for effective security analysis.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Getting the Most out of Freq and Domain Stats

Explore advanced techniques for leveraging Freq and Domain_Stats tools in cybersecurity analysis, enhancing threat detection and network monitoring capabilities.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

Blue, Red, Purple, White - Which Team Are You On?

Explore cybersecurity team roles, network layouts, and threat detection scenarios using Security Onion. Learn about FOSS tools, packet analysis, and data source integration for effective security operations.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Introduction to Data Analysis with Security Onion and Other Open Source Tools

Learn data analysis techniques for cybersecurity using open-source tools like Security Onion and Python. Explore PANDAS, ElasticSearch, frequency analysis, and time series analysis for effective threat hunting.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

Integrating Osquery into Security Onion

Explore integrating Osquery into Security Onion for enhanced endpoint visibility and threat detection. Learn about Chrome extensions, query types, and firewall control in this informative conference talk.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Security Onion 2017 - Pivoting Effectively to Catch More Bad Guys

Learn effective pivoting techniques to enhance threat detection and investigation skills, improving your ability to identify and catch malicious actors in cybersecurity.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Snort - History and Vision

Explore Snort's evolution and future in network security with Joel Esler. Gain insights into its development, key features, and upcoming innovations for effective threat detection and response.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Practical Cyborgism - Machine Learning for Bro Logs

Explore machine learning techniques for analyzing Bro logs, focusing on supervised and unsupervised methods to enhance cybersecurity threat detection and analysis.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk