iiinova — where your digital self keeps evolving

Security Onion @securityonion.bsky.social · 22/09/2026

Good morning, Rocket City! If you're at the National Cyber Summit in Huntsville this week, stop by booth 813 to see the Security Onion Solutions team and learn more about the best network monitoring and threat hunting platform out there. See you soon!

011

Security Onion @securityonion.bsky.social · 21/09/2026

Security Onion Solutions is coming to GrrCON! Join us on Thursday and Friday at booth number 91 to learn how to peel back the layers of your network and make the adversaries cry. See you there!

010

Security Onion @securityonion.bsky.social · 11/09/2026

1. An upstream change to an Elastic component requires x86_64-v3 CPU instruction set compatibility; this may cause issues if you have an older CPU or are using a Proxmox VM for your Security Onion node(s). 2. Disabling memory by default for the Onion AI Assistant.

100

Security Onion @securityonion.bsky.social · 08/09/2026

Security Onion 3.3.0 is now available, including improvements to the new Agentic AI functionality, updated components, better Logstash tuning options, and more! Blog post with all of the details is in the comments. It's time to make some soup!

111

Security Onion @securityonion.bsky.social · 19/08/2026

Good morning, Garden City! If you're at #AFCEATechnet Augusta this week, come see us at booth P11 and learn about using Security Onion to peel back the layers of your network and make the bad guys cry.

000

Security Onion @securityonion.bsky.social · 06/08/2026

Registration is NOW OPEN for Augusta Cyber Week 2026, from October 19-24. This includes a four day instructor-led Security Onion training course, the twelfth annual Security Onion Conference, and wrapping up with BSides Augusta! See the link for more details. blog.securityonion.net/2026/08/regi...

blog.securityonion.net

Registration Now Open for Augusta Cyber Week 2026!

Registration is now open for Augusta Cyber Week in beautiful Augusta GA from October 19, 2026 through October 24, 2026! This includes: 4-day...

010

Security Onion @securityonion.bsky.social · 05/08/2026

And as always, you can also write your own Playbooks as part of your detection engineering process, so the investigation and response workflow is tailored to your environment. You can view these playbooks in the Detections module in SOC, or see them all in our public GitHub repo.

001

Security Onion @securityonion.bsky.social · 05/08/2026

This means that alerts generated from log entries -- for example, a suspicious process execution event on an endpoint -- will now have Guided Analysis steps available for the analyst to follow, complete with live data pulled from your Security Onion logs.

101

Security Onion @securityonion.bsky.social · 05/08/2026

One of the new features that we released in Security Onion 3.2 last week was Investigative Playbooks for the included Sigma detection rules.

100

Security Onion @securityonion.bsky.social · 03/08/2026

ICYMI: New Security Onion release last week.

021

Security Onion @securityonion.bsky.social · 30/07/2026

Security Onion 3.2.0 is NOW AVAILABLE, with a whole bunch of new features and quality of life improvements. - Initial implementation of Agentic AI functionality - Gemma now available - Datastream Lifecycle Management - ES|QL support for Sigma rules - Updates to nearly two dozen major components

blog.securityonion.net

021

Security Onion @securityonion.bsky.social · 16/07/2026

Excited to be sponsoring BSides Atlanta this year - looking forward to seeing everyone in October! bsidesatl.info

bsidesatl.info

Home

Saturday, October 3rd, 2026 - Georgia Tech Hotel & Conference Center - 800 Spring St. NW, Atlanta, GA

000

Security Onion @securityonion.bsky.social · 08/07/2026

Our Call For Presenters (CFP) is open through this weekend, and we're looking for speakers with unique use cases, hunting techniques, integrations, or other examples of how to use Security Onion to secure a network. Come share your knowledge with your fellow blue teamers!

000

Security Onion @securityonion.bsky.social · 08/07/2026

We are once again hosting our annual user conference in beautiful Augusta, GA on October 23, and we want to hear from you! securityonionsolutions.com/conference/

securityonionsolutions.com

Security Onion Solutions

Security Onion Solutions, LLC

111

Security Onion @securityonion.bsky.social · 07/07/2026

HAPPY BIRTHDAY TO US! Today marks the twelfth birthday of Security Onion Solutions -- a dozen years of providing training, support, and other services on top of the free and open Security Onion platform. Here's to many more!

042

Security Onion @securityonion.bsky.social · 06/07/2026

USING SOFTWARE RAID? We've identified an issue with an updated release of mdadm that could cause problems for Security Onion deployments using software RAID filesystems. If that applies to you, this blog post has more information: blog.securityonion.net/2026/07/poss...

blog.securityonion.net

Possible Software RAID Issue With Recent mdadm Package

We identified an issue with mdadm version "mdadm - v4.4 - 2024-11-07 - 4" that can cause software RAID issues after a reboot. We have remove...

011

Security Onion @securityonion.bsky.social · 06/07/2026

Curious about the Human-Centered Investigative Playbook (HCIP) standard that underlies our Guided Analysis feature? If you're going to be at @bsidespgh.bsky.social this week, come see our Senior Engineer @infosecgoon.bsky.social, presenting in the afternoon on that very topic. Hope to see you there!

000

Security Onion @securityonion.bsky.social · 02/07/2026

Alert investigation, detection engineering, ad hoc threat hunting -- Security Onion has everything you need to peel back the layers of your network and make the bad guys cry.

000

Security Onion @securityonion.bsky.social · 02/07/2026

Learn all about the platform, how it fits into your security architecture, the ways to pivot between logs from your network and your endpoints, and how it's all wrapped up in a lovely new interface.

100

Security Onion @securityonion.bsky.social · 02/07/2026

JUST POSTED: We've just released an update to our Introduction to Security Onion overview video, recorded with Security Onion 3. youtu.be/xKWn_YlVOGo

youtu.be

Introduction to Security Onion 3

YouTube video by Security Onion

121

Security Onion @securityonion.bsky.social · 24/06/2026

Perfect for MSSPs, for independent subsidiaries, for geographically siloed security teams, for dev environments, and more! Check out this video for more details. youtu.be/7CKPKkyu8pA

youtu.be

Security Onion Pro: Manager of Managers

YouTube video by Security Onion

000

Security Onion @securityonion.bsky.social · 24/06/2026

DID YOU KNOW? Security Onion Pro includes a feature called Manager of Managers, or MoM, which leverages the Security Onion API to allow access to other Security Onion installations in your environment from a central console.

youtu.be

Security Onion Pro: Manager of Managers

YouTube video by Security Onion

111

Security Onion @securityonion.bsky.social · 12/06/2026

DID YOU KNOW? It's possible to enable or disable Suricata NIDS rules in Security Onion using regular expressions -- if you want to turn off all of those ET INFO or TOR alerts, this is an easy way to do it. And the best part is it will apply to new rules that are added to the set in the future.

docs.securityonion.net

NIDS - Security Onion Documentation

111

Reposted by Security Onion

Doug Burks @dougburks.bsky.social · 09/06/2026

🚀Introducing SO-CRATES 1.0 — Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus! SO-CRATES is a single container image for analyzing pcap files, log files, and binary files. It was formerly known as OhMyPCAP.

152

Security Onion @securityonion.bsky.social · 04/06/2026

On this day in 2009 the very first release of Security Onion hit the Internet. A lot has changed since then, but it's still the best free and open solution to help you peel back the layers of your network and see what's really happening.

010

Security Onion @securityonion.bsky.social · 02/06/2026

Good morning Charm City! If you're at #AFCEATechnet, come to booth 3242 to see the legendary Michael Stokes and learn about using Security Onion to peel back the layers of your network.

011

Security Onion @securityonion.bsky.social · 01/06/2026

It's time for O's, Bohs, and SO -- Security Onion Solutions is coming to Baltimore! Looking forward to seeing all our friends at #AFCEATechnet in Charm City this week, come see us at booth 3242 to find out how we can help you peel back the layers of your network and make the bad guys cry.

011

Security Onion @securityonion.bsky.social · 28/05/2026

Security Onion 3.1.0 Hotfix 20260528 Now Available! We've released a hotfix to Security Onion 3.1.0 to address issues for deployments with Heavy Nodes or custom Logstash pipelines - please check out this blog post for more information. blog.securityonion.net/2026/05/secu...

blog.securityonion.net

Security Onion 3.1.0 Hotfix 20260528 Now Available!

Last week, we released Security Onion 3.1.0: https://blog.securityonion.net/2026/05/security-onion-310-now-available-with.html Today we are ...

021

Security Onion @securityonion.bsky.social · 27/05/2026

For those who don't know, we offer a printed copy of our documentation via Amazon. All proceeds go to the Rural Technology Fund, and the book comes with a 20% off discount code for our on-demand training and the Security Onion Certified Professsional (SOCP) certification exam.

100

Security Onion @securityonion.bsky.social · 27/05/2026

Our printed documentation book has been updated for Security Onion 3.1 and is available from Amazon now!

121

Security Onion @securityonion.bsky.social · 21/05/2026

IT'S TIME FOR SOUP! Security Onion 3.1.0 is now available and includes new features, updated components, and many quality-of-life improvements! Get all the details on our blog: blog.securityonion.net/2026/05/secu...

blog.securityonion.net

Security Onion 3.1.0 Now Available with Elastic 9.3.3, Suricata 8.0.5, Zeek 8.0.8, and much more!

Security Onion 3.1.0 is now available and includes new features, updated components, and many quality of life improvements! For a full scree...

011

Security Onion @securityonion.bsky.social · 21/05/2026

f you have a powerful server that's being underutilized, this allows you to spin up additional nodes on it from inside the Security Onion Console, with no reliance on other virtualization platforms. More information here: docs.securityonion.net/en/2.4/hyper...

docs.securityonion.net

Hypervisor — Security Onion Documentation 2.4 documentation

000

Security Onion @securityonion.bsky.social · 21/05/2026

The Hypervisor node uses Linux-native virtualization libraries to run multiple independent SO nodes on a single piece of hardware. I

docs.securityonion.net

Hypervisor — Security Onion Documentation 2.4 documentation

100

Security Onion @securityonion.bsky.social · 21/05/2026

DID YOU KNOW? Starting in version 2.4.170, Security Onion Pro users have access to a new type of Security Onion node, the Hypervisor Node.

docs.securityonion.net

Hypervisor — Security Onion Documentation 2.4 documentation

111

Security Onion @securityonion.bsky.social · 18/05/2026

Today, we are opening our Call For Presenters (CFP) for the conference. Have you developed a unique use case for Security Onion? Integrated it with other tools? Deployed it in an exciting new environment? We want to hear all about it!

000

Security Onion @securityonion.bsky.social · 18/05/2026

SAVE THE DATE! We will once again be hosting the Security Onion Conference in beautiful Augusta, GA on October 23rd. Registration will open on August 7.

blog.securityonion.net

Security Onion Conference 2026 Save the Date and CFP

This year

111

Security Onion @securityonion.bsky.social · 18/05/2026

ICYMI: Last week we had a webinar with our friends from Garland Technology on using their TAPs and packet brokers along with Security Onion for a holistic view of what's happening on your network. Check it out! www.youtube.com/watch?v=VvBl...

youtube.com

See Everything, Miss Nothing Enhancing Threat Detection with Complete Packet Visibility

YouTube video by Garland Technology

011

Security Onion @securityonion.bsky.social · 12/05/2026

Come learn how Garland TAPs and packet brokers can feed Security Onion to give you full visibility into your network traffic. Register below!

events.gcc.teams.microsoft.com

Microsoft Virtual Events Powered by Teams

000

Security Onion @securityonion.bsky.social · 12/05/2026

THURSDAY: Join our Senior Engineer Matthew Gracie, along with Chris Bihary and our friends from Garland Technology, for the webinar "See Everything, Miss Nothing: Enhancing Threat Detection with Complete Packet Visibility and Full Packet Capture".

events.gcc.teams.microsoft.com

Microsoft Virtual Events Powered by Teams

122

Security Onion @securityonion.bsky.social · 11/05/2026

DID YOU KNOW? Security Onion can be configured to automatically perform reverse DNS lookups to provide hostname information in the SOC interface. Just turn on the "enableReverseLookup" function in Configuration and enjoy!

Screenshot of a Suricata alert for a suspicious DNS query, showing hostnames for both the requesting server and the authoritative DNS.

031

Security Onion @securityonion.bsky.social · 07/05/2026

THROWBACK THURSDAY: Who remembers the name of our original hunting interface from the early days of Security Onion? It was really hard to let it go. #tbt

011

Security Onion @securityonion.bsky.social · 31/03/2026

Security Onion 3.0.0 Now Available with New and Improved Interface and Much More! blog.securityonion.net/2026/03/secu...

032

Security Onion @securityonion.bsky.social · 30/03/2026

Security Onion 3 is coming soon! Are you ready?

000