Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
Since the base image for sensoroni was updated, Python 3.12 breaks the analyzer since it relies on a version of python-whois using imp instead of import lib. Updating the python-whois package doesn't immediately fix it, so we will need to look into it more.
Since the base image for sensoroni was updated, Python 3.12 breaks the analyzer since it relies on a version of python-whois using imp instead of import lib. Updating the python-whois package doesn't immediately fix it, so we will need to look into it more.