Include so-analyst RPMs on the ISO image for airgap

Security-Onion-Solutions / securityonion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

https://securityonion.net

3.22k stars 498 forks source link

Include so-analyst RPMs on the ISO image for airgap #3160

Closed TOoSmOotH closed 2 years ago

TOoSmOotH commented 3 years ago

Allow users to install a Analyst Workstation in an airgap environment.

TOoSmOotH commented 3 years ago

One idea here is to have a smaller ISO that could be used for remote sites as well as analyst workstation for airgap

dougburks commented 2 years ago

This was completed in 2.3.120: https://blog.securityonion.net/2022/04/security-onion-23120-now-available.html https://docs.securityonion.net/en/2.3/release-notes.html#changes