Principal Engineer at Security Onion Solutions
Open source security advocate and platform integration.
| Github | http://github.com/weslambert |
| Ghost | http://glue.ghost.io |
| Medium | http://wlambertts.medium.com |
#SecurityOnion 2.4 Beta 1 release is now available!
Featuring:
✅New Grid Configuration interface
✅Enhanced Grid Status interface
✅New Grid Members interface
✅Improved health metric visualizations
✅New Elastic Agent integration
and much more!
https://blog.securityonion.net/2023/03/security-onion-24-beta-release-now.html
With regard to enterprise security monitoring, many folks agree that it's best to be able to monitor from the top down, passively gathering network telemetry from a SPAN port or network TAP.
While there is ETW, Sysmon DNS and network connection logs, and more, how much of an impact has it been to not have more verbose network telemetry available during your investigations?
I've updated the wlambert/velociraptor
@velocidex
#velociraptor Docker image to the latest release version.
https://github.com/weslambert/velociraptor-docker
This refers to the pre-built image.
If building locally, you'll always use the latest version.
Enjoy, and please let me know of any issues!
We are stoked to announce our return to #BlackHat 2023 with our live-fire training taught by @eric_capuano and Matt Bromiley!
Sign up now: Adversary Detection & Incident Response - Network Defense Range Operations
#BHUSA #BH23 #BlackHat2023
Security Onion 🧅​
Recon InfoSec