Introduction to Security Onion - so-import-pcap and data exfil

If you enjoy this video, please like and subscribe!

This video is a quick introduction to Security Onion. If you've never used Security Onion before, the easiest way to try it out is to download our ISO image and then import a pcap using the so-import-pcap tool. We've included some pcap samples in our Security Onion ISO image and we'll demonstrate how to import the pcap and take a look at some of the alerts generated. We wrap up by pivoting to full packet capture to see some of the data that was stolen from the victim PC in this case.

Ready to peel back the layers of your enterprise?
https://securityonion.net

For more information about so-import-pcap, please see:
https://securityonion.net/docs/so-imp...

If you have questions or problems, please send a detailed message to our mailing list:
https://securityonion.net/docs/mailin...

Interested in training, professional services, or hardware appliances?
https://securityonionsolutions.com

• #howto_style
• #ids
• #nsm
• #threat_hunting
• #intrusion_detection
• #network_security_monitoring
• #full_packet_capture
• #securityonion
• #security_onion