Peel back the layers of your enterprise and make your adversaries cry! FREE and OPEN platform BY defenders FOR defenders!
Joined September 2012
- Tweets8.2K
- Following0
- Followers19.3K
- Likes4.7K
Pinned Tweet
Security Onion 3.4.0 is now available, including Agentic AI Automations!
This release contains many updates, features, and quality of life improvements - more information in the blog post linked below.
Good morning and happy Friday, all! Our videos from the 2026 Security Onion Conference are now available for viewing on YouTube.
Matthew Gracie - Security Onion: What's New?
Scott Lynch - How Can You Hunt If You Don't Know What's On Your Network?
Lennart Koopmann and Matthew Gracie - Integrating Nzyme and Security Onion
Joshua Brower - Sigma Correlations: Everything, Everywhere, All Within Five Minutes
Bryant Treacle - Defending OT/ICS Environments With Security Onion
Doug Burks - The State Of The Onion
If you weren't able to make it to Augusta this year, or even if you just want to revisit one of these excellent talks, now's your chance to hear from some experts on the platform. Link to the playlist is in the comments!
The YouTube playlist with all of the videos:
youtube.com/playlist?list=PL…
Just ONE MORE DAY until our user conference in lovely Augusta, GA! Can't wait to see everyone there!
Good morning Asheville! If you're at the North Carolina Community College System IIPS conference this week, don't miss the presentation by Blue Ridge Community College on how they deployed Security Onion in their network - and don't forget to visit us in the sponsor area! We're here to answer any questions you might have.
Coming to the Rochester Security Summit this week? Don't miss Senior Engineer Matt Gracie speaking on day two about the Human-Centered Investigative Playbook functionality that we added to the platform to guide analysts through their investigations. Hope to see you there!
Good morning, Rocket City! If you're at the National Cyber Summit in Huntsville this week, stop by booth 813 to see the Security Onion Solutions team and learn more about the best network monitoring and threat hunting platform out there. See you soon!
Security Onion Solutions is coming to GrrCON!
Join us on Thursday and Friday at booth number 91 to learn how to peel back the layers of your network and make the adversaries cry. See you there!
HOTFIX released!
We have released a hotfix to this week's 3.3.0 release to fix two issues:
1. An upstream change to an Elastic component requires x86_64-v3 CPU instruction set compatibility; this may cause issues if you have an older CPU or are using a Proxmox VM for your Security Onion node(s).
2. Disabling memory by default for the Onion AI Assistant.
Full details are in the blog post linked in the comments.
Security Onion 3.3.0 is now available, including improvements to the new Agentic AI functionality, updated components, better Logstash tuning options, and more! Blog post with all of the details is in the comments.
It's time to make some soup!
Blog post with the full description of updates, changes, and improvements:
blog.securityonion.net/2026/…
Good morning, Garden City! If you're at #AFCEATechnet Augusta this week, come see us at booth P11 and learn about using Security Onion to peel back the layers of your network and make the bad guys cry.
Registration is NOW OPEN for Augusta Cyber Week 2026, from October 19-24. This includes a four day instructor-led Security Onion training course, the twelfth annual Security Onion Conference, and wrapping up with @BSidesAugusta! See the link for more details.
blog.securityonion.net/2026/…
One of the new features that we released in Security Onion 3.2 last week was Investigative Playbooks for the included Sigma detection rules. This means that alerts generated from log entries -- for example, a suspicious process execution event on an endpoint -- will now have Guided Analysis steps available for the analyst to follow, complete with live data pulled from your Security Onion logs. And as always, you can also write your own Playbooks as part of your detection engineering process, so the investigation and response workflow is tailored to your environment.
You can view these playbooks in the Detections module in SOC, or see them all in our public GitHub repo.
ICYMI: New Security Onion release last week.
Security Onion 3.2.0 is NOW AVAILABLE, with a whole bunch of new features and quality of life improvements.
- Initial implementation of Agentic AI functionality
- Gemma now available as a hosted AI model
- Datastream Lifecycle Management
- ES|QL support for Sigma rules
- Updates to nearly two dozen major components
For a full description of all the new awesomeness, see our blog post:
blog.securityonion.net/2026/…
Security Onion 3.2.0 is NOW AVAILABLE, with a whole bunch of new features and quality of life improvements.
- Initial implementation of Agentic AI functionality
- Gemma now available as a hosted AI model
- Datastream Lifecycle Management
- ES|QL support for Sigma rules
- Updates to nearly two dozen major components
For a full description of all the new awesomeness, see our blog post:
blog.securityonion.net/2026/…
Excited to be sponsoring BSides Atlanta this year - looking forward to seeing everyone in October!
We’re excited to announce that @securityonion is supporting BSides Atlanta 2026 as a Silver sponsor!
Huge thanks to the team at Security Onion Solutions for supporting the Atlanta security community. Check them out here: securityonion.com
We are once again hosting our annual user conference in beautiful Augusta, GA on October 23, and we want to hear from you! Our Call For Presenters (CFP) is open through this weekend, and we're looking for speakers with unique use cases, hunting techniques, integrations, or other examples of how to use Security Onion to secure a network. Come share your knowledge with your fellow blue teamers!
securityonionsolutions.com/c…
