Security Onion Courses

Intrusion Detection Honeypots with Security Onion - Layers of Deception

1 rating

Explore Intrusion Detection Honeypots as a cost-effective security measure. Learn to deploy honey services in your network and integrate alerts into Security Onion's monitoring pipeline.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

SOARing with Security Onion

1 rating

Explore how Security Onion integrates with automation tools for enhanced incident response, enabling faster threat detection and improved security operations efficiency.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Index Lifecycle Management in Security Onion

Explore Index Lifecycle Management (ILM) in Security Onion 2.4, including its defaults, safety features, and practical implementation through a comprehensive demonstration.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

Security Onion as a Teaching Platform

Discover how Security Onion transforms cybersecurity education by providing hands-on experience in detection engineering, alert investigation, and threat hunting for graduate students.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Investigation Playbooks for Humans - A Human-Centered Framework for Security Analysis

Discover how human-centered investigation playbooks enhance analyst decision-making, reduce fatigue, and improve incident response through cognitive science principles and practical tools.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Security Onion Pro - Onion AI Assistant

Discover how the Onion AI Assistant in Security Onion Pro 2.4.190 gathers context, analyzes logs, generates timelines, and accelerates security investigations for analysts.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Introduction to Security Onion 2.4

Discover Security Onion 2.4's network security monitoring capabilities through architecture overview, traffic ingestion, analysis tools, and hands-on demonstration.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Security Onion Essentials 2026 - Introduction to Analyst Tools

Discover Security Onion 2.4.190's built-in analyst tools including Alerts, Hunt, and Dashboards for effective security analysis and threat detection.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Security Onion Essentials 2026 - Installation Part Two

Master the complete installation and setup process for Security Onion 2.4.190 with expert guidance from Matt Gracie in this essential 11-minute tutorial.

• YouTube
• 11 minutes
• Self-Paced
• Conference Talk

Security Onion Essentials 2026 - Detection Engineering

Master detection engineering in Security Onion by writing, deploying, and testing Sigma rules using the platform's built-in Detections tool for enhanced threat detection capabilities.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Security Onion Essentials 2026 - Threat Hunting

Master ad-hoc threat hunting techniques using Security Onion's Hunt and Dashboards tools in this practical 19-minute demonstration by Matt Gracie.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Security Onion Essentials 2026 - Alert Triage and Case Creation

Master alert triage and case creation in Security Onion by learning to pivot between datasets for investigations and track findings using the case management tool.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

Security Onion Essentials 2026 - Introduction

Discover Security Onion 2.4.190 fundamentals in this introductory session covering essential network security monitoring platform features and capabilities.

• YouTube
• 14 minutes
• Self-Paced
• Conference Talk

Security Onion Pro Notifications

Discover how to configure and use the Notifications feature in Security Onion Pro, including ElastAlert setup, SOC configuration, and practical examples for Suricata alerts.

• YouTube
• 10 minutes
• Self-Paced
• Conference Talk

Security Onion Playbooks - New Feature Preview for Analysis and Incident Response

Discover the new Playbooks feature in Security Onion 2.4.160 that will turbocharge your security analysis and incident response capabilities with enhanced SOC alerts and detections.

• YouTube
• 12 minutes
• Self-Paced
• Conference Talk