Security Onion
Cybrary
Course
Security Onion is an open source Network Security Monitoring and log management Linux Distribution. In this course we will learn about the history, components, and architecture of the distro, and we will go over how to install and deploy single and multiple server architectures, as well as how to replay or sniff traffic.
Time
3 hours 10 minutes
Difficulty
Beginner
CEU/CPE
3
Time
3 hours 10 minutes
Difficulty
Beginner
CEU/CPE
3

Course Content
Module 1: Introduction
Module 2: What is Security Onion?
Module 3: Installing a Standalone Server
Module 4: Installing a Distributed Environment
Module 5: Reviewing the Installation
Module 6: Resources
Module 7: Replaying Traffic on a Standalone Server
Module 8: Sniffing Traffic in a Distributed Environment
Module 9: Management Tips and Best Practices
Module 10: Other Functionality
Module 11: Wrap Up
Course Description
Overall, this course will allow you to learn how to maintain and update Security Onion.
Students should have networking knowledge (TCP/IP, Protocols, Packets, etc.), linux knowledge (mkdir, Is, vi, ifconfig, etc.), and security technology knowledge (IDS, Full Packet Capture, etc).
Instructed By

Karl Hansen
Senior SOC Analyst
Instructor
Provider

Certificate of Completion

Complete this entire course to earn a Security Onion Certificate of Completion
Competency Areas
WorkRole
Similar Content