Security Onion Live Cd Site

You can boot the system and immediately start sniffing traffic on local interfaces (like eth0 ) using tools like Snort or Suricata .

Built on the Elastic Stack (Elasticsearch, Logstash, Kibana) to store and visualize massive amounts of security data. Quick Start Guide

Employs Stenographer or Suricata PCAP to act as a "DVR for your network," recording every packet for retrospective analysis.