iiinova — where your digital self keeps evolving

Security Onion @securityonion.bsky.social · 22/09/2026

Good morning, Rocket City! If you're at the National Cyber Summit in Huntsville this week, stop by booth 813 to see the Security Onion Solutions team and learn more about the best network monitoring and threat hunting platform out there. See you soon!

011

Security Onion @securityonion.bsky.social · 21/09/2026

Security Onion Solutions is coming to GrrCON! Join us on Thursday and Friday at booth number 91 to learn how to peel back the layers of your network and make the adversaries cry. See you there!

010

Security Onion @securityonion.bsky.social · 08/09/2026

Security Onion 3.3.0 is now available, including improvements to the new Agentic AI functionality, updated components, better Logstash tuning options, and more! Blog post with all of the details is in the comments. It's time to make some soup!

111

Security Onion @securityonion.bsky.social · 19/08/2026

Good morning, Garden City! If you're at #AFCEATechnet Augusta this week, come see us at booth P11 and learn about using Security Onion to peel back the layers of your network and make the bad guys cry.

000

Security Onion @securityonion.bsky.social · 05/08/2026

One of the new features that we released in Security Onion 3.2 last week was Investigative Playbooks for the included Sigma detection rules.

100

Security Onion @securityonion.bsky.social · 07/07/2026

HAPPY BIRTHDAY TO US! Today marks the twelfth birthday of Security Onion Solutions -- a dozen years of providing training, support, and other services on top of the free and open Security Onion platform. Here's to many more!

042

Security Onion @securityonion.bsky.social · 06/07/2026

Curious about the Human-Centered Investigative Playbook (HCIP) standard that underlies our Guided Analysis feature? If you're going to be at @bsidespgh.bsky.social this week, come see our Senior Engineer @infosecgoon.bsky.social, presenting in the afternoon on that very topic. Hope to see you there!

000

Security Onion @securityonion.bsky.social · 04/06/2026

On this day in 2009 the very first release of Security Onion hit the Internet. A lot has changed since then, but it's still the best free and open solution to help you peel back the layers of your network and see what's really happening.

010

Security Onion @securityonion.bsky.social · 02/06/2026

Good morning Charm City! If you're at #AFCEATechnet, come to booth 3242 to see the legendary Michael Stokes and learn about using Security Onion to peel back the layers of your network.

011

Security Onion @securityonion.bsky.social · 01/06/2026

It's time for O's, Bohs, and SO -- Security Onion Solutions is coming to Baltimore! Looking forward to seeing all our friends at #AFCEATechnet in Charm City this week, come see us at booth 3242 to find out how we can help you peel back the layers of your network and make the bad guys cry.

011

Security Onion @securityonion.bsky.social · 27/05/2026

Our printed documentation book has been updated for Security Onion 3.1 and is available from Amazon now!

121

Security Onion @securityonion.bsky.social · 11/05/2026

DID YOU KNOW? Security Onion can be configured to automatically perform reverse DNS lookups to provide hostname information in the SOC interface. Just turn on the "enableReverseLookup" function in Configuration and enjoy!

Screenshot of a Suricata alert for a suspicious DNS query, showing hostnames for both the requesting server and the authoritative DNS.

031

Security Onion @securityonion.bsky.social · 07/05/2026

THROWBACK THURSDAY: Who remembers the name of our original hunting interface from the early days of Security Onion? It was really hard to let it go. #tbt

011

Security Onion @securityonion.bsky.social · 31/03/2026

Security Onion 3.0.0 Now Available with New and Improved Interface and Much More! blog.securityonion.net/2026/03/secu...

032

Security Onion @securityonion.bsky.social · 30/03/2026

Security Onion 3 is coming soon! Are you ready?

000

Security Onion @securityonion.bsky.social · 19/12/2025

Our popular "Security Onion Fundamentals" class will be running Tuesday April 28, 2026 through May 1, 2026 in Alpharetta GA. Use the following code before January 31, 2026 to get 10% off! earlybird For more info and to register: securityonionapr2026.eventbrite.com

011

Security Onion @securityonion.bsky.social · 27/10/2025

Security Onion 2.4.190 now available including Onion AI Assistant! Introducing the all-new Onion AI, an advanced LLM-based security analyst assistant, built directly into the Security Onion console. Designed BY defenders FOR defenders!

022

Security Onion @securityonion.bsky.social · 17/09/2025

Security Onion 2.4.180 now available including new features, updated components, and quality of life improvements! blog.securityonion.net/2025/09/secu...

021

Security Onion @securityonion.bsky.social · 12/08/2025

🚨 Security Onion 2.4.170 now available including JA4, more SOC dashboards, and updated components! 🚨 🔍Let's find more hackers! 🔍 If you like Security Onion, please like and share to help spread the word! blog.securityonion.net/2025/08/secu...

011

Security Onion @securityonion.bsky.social · 25/06/2025

Security Onion 2.4.160 now available including Playbooks, Guided Analysis, MCP Server, and more! Have you ever had an alert and were unsure of what to do next? In this release, when you expand an alert you'll see a new tab called Guided Analysis.

122

Security Onion @securityonion.bsky.social · 12/05/2025

🧅♥️Security Onion 2.4.150: Celebrating Mother's Day with MoM (Manager of Managers) 🧅♥️ Yesterday was Mother's Day and we are very thankful for our mothers!

Tattoo of an onion with an arrow through it and a banner beneath that says MOM

111

Security Onion @securityonion.bsky.social · 25/03/2025

This release also adds a new feature to SOC Config that allows you to move certain configuration entries up or down. This includes things like SOC Dashboard queries, SOC Hunt queries, and SOC Actions:

200

Security Onion @securityonion.bsky.social · 25/03/2025

Zeek 7.0.6 includes some bug fixes: github.com/zeek/zeek/re...

100

Security Onion @securityonion.bsky.social · 25/03/2025

The main focus of this release is upgrading Suricata and Zeek. Suricata 7.0.9 includes some security fixes: suricata.io/2025/03/18/s...

100

Security Onion @securityonion.bsky.social · 25/03/2025

Security Onion 2.4.140 now available including Suricata 7.0.9, Zeek 7.0.6, and much more! For more details, please see the thread 🧵and the link below!

110

Security Onion @securityonion.bsky.social · 11/03/2025

This release includes support for some additional Zeek logs for protocol metadata like NTP and LDAP.

100

Security Onion @securityonion.bsky.social · 11/03/2025

Our SOC Configuration interface is now even easier to use, especially for config items like Actions, Dashboard queries, and Hunt queries.

100

Security Onion @securityonion.bsky.social · 11/03/2025

SOC Alerts has an advanced interface that provides more data similar to SOC Dashboards. You can now permanently enable that advanced interface using the toggle under the Options menu.

100

Security Onion @securityonion.bsky.social · 11/03/2025

Also, we've included ALL Elastic integrations in this release!

100

Security Onion @securityonion.bsky.social · 11/03/2025

The main focus of this release is upgrading to Elastic 8.17.3!

100

Security Onion @securityonion.bsky.social · 11/03/2025

Security Onion 2.4.130 now available including Elastic 8.17.3 and much more! Please see thread 🧵below for more details!

252

Security Onion @securityonion.bsky.social · 12/02/2025

In addition to the new features above, we've updated several components including:

100

Security Onion @securityonion.bsky.social · 12/02/2025

This release includes a new MSI option for deploying the Elastic Agent to your Windows endpoints!

100

Security Onion @securityonion.bsky.social · 12/02/2025

This release includes improvements for our ATT&CK Navigator integration! Navigator will now have 4 tabs across the top: Detections Coverage - All Detections Detections Coverage - Sigma Detections Coverage - Suricata Alerts (Last 3 Days) Each tab will highlight coverage based on the title of the tab

100

Security Onion @securityonion.bsky.social · 12/02/2025

This release includes Zeek 7 and also adds support for analyzing more network protocols like QUIC, HTTP2, OpenVPN, and IPSEC!

100

Security Onion @securityonion.bsky.social · 12/02/2025

This release includes a new feature for Security Onion Pro customers! If you have a valid Pro license, you will be able to connect to the Security Onion API from external API clients. This means that you can create cases, pull PCAPs, or acknowledge alerts using automation!

100

Security Onion @securityonion.bsky.social · 12/02/2025

This release includes a new local IP lookup feature! This allows you to define local descriptions for important IP addresses in your environment. This is useful for IP addresses that don't have a reverse DNS entry or for when you want to override the reverse DNS entry with a custom value.

100

Security Onion @securityonion.bsky.social · 12/02/2025

Over the last few months, we've continued to iterate on our new AI Summary feature to make it available in the Alerts interface without having to pivot to Detections! Directly under the new AI Summary, you can now easily tune your rules right from the Alerts interface!

110

Security Onion @securityonion.bsky.social · 12/02/2025

🚨Security Onion 2.4.120 now available including lots of new features and updates! 🚨 For more details, please see 🧵below. If you like Security Onion🧅, please like and share to help spread the word! Thanks!

161

Security Onion @securityonion.bsky.social · 23/01/2025

Our upcoming Security Onion 2.4.120 release includes a new local IP lookup feature! This allows you to define local descriptions for important IP addresses in your environment. Security Onion 2.4.120 is coming soon!

042

Security Onion @securityonion.bsky.social · 21/01/2025

Our upcoming Security Onion 2.4.120 release includes CyberChef 10.19.4! Security Onion 2.4.120 is coming soon!

021

Security Onion @securityonion.bsky.social · 16/01/2025

Our upcoming Security Onion 2.4.120 release includes a new MSI option for deploying the Elastic Agent to your Windows endpoints! Security Onion 2.4.120 is coming soon!

021

Security Onion @securityonion.bsky.social · 16/01/2025

Our upcoming Security Onion 2.4.120 release includes improvements for our ATT&CK Navigator integration! Navigator will now have 4 tabs across the top: Detections Coverage - All Detections Detections Coverage - Sigma Detections Coverage - Suricata Alerts (Last 3 Days)

100

Security Onion @securityonion.bsky.social · 09/01/2025

Our upcoming Security Onion 2.4.120 release includes a new feature for Security Onion Pro customers! If you have a valid Pro license, you will be able to connect to the Security Onion API from external clients. This means that you can create cases, pull PCAPs, or acknowledge alerts using automation!

020

Security Onion @securityonion.bsky.social · 08/01/2025

Coming soon: Our upcoming Security Onion 2.4.120 release includes Zeek 7! It also adds support for analyzing more network protocols like QUIC, HTTP2, OpenVPN, and IPSEC!

120

Security Onion @securityonion.bsky.social · 07/01/2025

Coming soon: AI Summaries in Alerts! Over the last few months, we've continued to iterate on our new AI Summary feature to make it available in the Alerts interface without having to pivot to Detections! This will be included in Security Onion 2.4.120 which is coming soon!

010

Security Onion @securityonion.bsky.social · 18/12/2024

Security Onion 2.4.111 now available! This release includes Suricata 7.0.8 which resolves several security issues. If you haven't already seen our new AI Summaries feature, now is a great time to check it out! For more information, please see the link below.

151

Security Onion @securityonion.bsky.social · 27/11/2024

We are thankful for our customers and community! As a way of saying thanks, we'd like to offer you a Cyber Monday discount on our merch store and on-demand training library! Details in thread below!

112

Security Onion @securityonion.bsky.social · 20/11/2024

Did You Know Security Onion now has AI Summaries built in? blog.securityonion.net/2024/10/secu...

Screenshot displaying an AI-generated summary of a Suricata rule.

031

Security Onion @securityonion.bsky.social · 19/11/2024

Are you at Alamo ACE this week? Make sure to stop by booth 87 to pick up your #SecurityOnion swag and to learn how to peel back the layers of your network and make your adversaries cry!

010