@DiligentSentinal Personally, I have been using Wazuh for years and I am very happy with the product and the evolutions! I also used Suricata but it is much more complicated to use
@DiligentSentinal I played around with #securityonion in the past. When I ran it inside my ISP router it never found anything interesting. When I ran it outside the ISP router it was a firehose of probes and other nonsense but still nothing overly interesting.