Security Onion Courses

Security Onion Installation - Part 2

A walkthrough of the Security Onion setup phase in the second part of its installation.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

Security Onion Essentials - Detection Engineering

A brief introduction to detection engineering as Security Onion’s third and final common workflow.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Watching the Watchers - Layering Detection and Deception to Defend Visibility

A security talk on layering detection and deception to defend visibility.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

SOAR, SOC, and Scholars - Developing Security Operations at UofSC

A university's approach to building security operations processes, staffing its SOC, and involving students in the work.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Security Onion Dashboards - Analyst-Designed Interface for Speed and Dynamic Capabilities

A brief look at Security Onion Console’s analyst-built Dashboards interface and its focus on speed and dynamic capabilities.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

Tuning NIDS Rules in Security Onion

See how to tune Suricata network intrusion detection rules within Security Onion.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

Blue, Red, Purple, White - Which Team Are You On?

A Security Onion walkthrough follows a Trojan alert from Snort detection through packet analysis and investigation to response.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Security Onion Essentials 2.4 - Detection Engineering

Explore detection engineering in Security Onion, covering workflow essentials and best practices for enhancing network security and threat detection capabilities.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

Security Onion Essentials 2.4 - Threat Hunting

Explore threat hunting techniques in Security Onion 2.4, covering workflow essentials and practical strategies for proactive cybersecurity defense and network monitoring.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

Security Onion Essentials 2.4 - Alert Triage and Case Creation

Learn essential alert triage and case creation workflows in Security Onion, enhancing your ability to respond effectively to security incidents and manage investigations efficiently.

• YouTube
• 16 minutes
• Self-Paced
• Conference Talk

Phish Fights and Not So Long Nights - Integrating Security Onion and Sublime Platform

Explore integration of Security Onion and Sublime Platform for enhanced email security. Learn to triage alerts, investigate suspicious emails, and correlate data for comprehensive defense against email-based attacks.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Defensive Intelligence with Security Onion - Monitoring Environmental Changes

Explore proactive risk reduction through monitoring organizational changes in subdomains, certificates, IP space, and cloud resources using Security Onion's new proof of concept node.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Achieving PEAK Performance: Introducing the PEAK Threat Hunting Framework

Discover PEAK, a new threat hunting framework enabling diverse techniques like exploratory data analysis and machine learning to uncover elusive threats and elevate your security program.

• YouTube
• 1 hour 6 minutes
• Self-Paced
• Free Video

Diagnosing and Dealing with One-Sided Network Traffic

Diagnose and address one-sided traffic issues in network security. Learn to identify incomplete data collection and its impact on threat detection and hunting efforts.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Enrich Your Data and Your Life: Data Enrichment in Security Onion 2.4

Explore data enrichment methods in Security Onion 2.4 to enhance cybersecurity events with threat intelligence and organizational context, improving overall security posture.

• YouTube
• 25 minutes
• Self-Paced
• Free Video