This four-day course is geared for analysts and administrators of Security Onion. Students will gain a foundational understanding of the platform – how to architect, deploy, and manage their Security Onion grid.

Security Onion Solutions instructors have years of experience in threat hunting, enterprise security monitoring, and log management. They have worked in real-world operational security roles, engineered monitoring strategies and solutions, and handled real-world incidents. They bring their practical experience to the classroom, enabling students in both theory and hands-on application to hunt adversaries in environments large and small.

Course Description: This four-day course is geared for analysts and administrators of Security Onion. Students will gain a foundational understanding of the platform – how to architect, deploy, and manage their Security Onion grid. The course also covers major analyst workflows, reinforced through real-world case studies.

Knowledge/Experience/Prerequisites: Security Onion Essentials HERE (2 hours; free) Students should have a basic understanding of networks, TCP/IP, and standard protocols such as DNS, HTTP, SSL, etc. Knowledge/experience with Linux is recommended, but not required.

What attendees need to bring: Laptops and coursebooks will be provided to students. Students may want to bring writing utensils to take notes in their course books.

The course also covers major analyst workflows, reinforced through real-world case studies. (Discounts are available for active-duty US Military, active US Federal civilian employees, as well as active members of ISSA and Infragard. E-mail info@bsidesaugusta.org for details.)