AlienVault OSSIM VS SecurityOnion

AlienVault OSSIM Reviews

SecurityOnion Reviews

AlienVault OSSIM mentions (9)

• SIEM for your own internal network

  You can look at a table with the differences here: Https://cybersecurity.att.com/products/ossim. Source: 11 months ago

• What do you guys use for networking monitoring

  Another is AT&T's AlienVault OSSIM software. If you can put it on its own hardware, it runs FAR better than it did on a VM in my experience. I've seen this in action and it's a huge monster to get into - I barely scratched the surface and thought I was hitting walls, so it might not be the most intuitive - but I'd recommend watching a few youtube videos to show off what it can do I suppose. Mine set off my... Source: about 1 year ago

• SIEM solution

  There's also https://cybersecurity.att.com/products/ossim by AlienVault (now AT&T). Source: over 1 year ago

• Does the BGW320 perform automated SSH vulnerability tests on clients?

  I enabled my ATT security this morning and had a download going that used about 70% of my capacity. I also have an Ubiquiti setup, I don’t believe ATT’s security is as harsh on cpu load that Ubiquiti is. Several years ago, ATT bought Alien Vault which primarily monitors log files and conducts routine vulnerability scans. Since it was purchased, they renamed us as ATT Cybersecurity.... Source: over 2 years ago

• Top 20 Open-source tools for every Blue Teamer

  As a SIEM system, OSSIM is intended to give security analysts and administrators a more complete view of all the security-related aspects of their system, by combining log management which can be extended with plugins and asset management and discovery with information from dedicated information security controls and detection systems. This information is then correlated together to create contexts to the... Source: over 2 years ago

SecurityOnion mentions (23)

• Self Hosted Traffic Monitoring

  You’re looking for Security Onion, https://securityonionsolutions.com/. It’s a bunch of integrated tools that will sniff traffic and show alerts. Self hosted, open source, and free. Source: 5 months ago

• Did I get a cyber role too early?

  Grab Security Onion for some blue team tools, try to get Zeek, Wazuh, and Suricata working and look at the output. Source: 10 months ago

• Do you have any recommendations for a way to log every website that comes across my network with the mac address that requested it?

  If you want a GUI tool try Security Onion. (https://securityonionsolutions.com/). It is essentially zeek & more wrapped up in an easy to use GUI. Source: 10 months ago

• Home Virtual SIEM Lab Suggestions?

  Used security onion many years ago. https://securityonionsolutions.com/. Source: about 1 year ago

• Server Hardening

  Active Measures - Includes (IDS/IPS) such as open-source Suricata or Snort on pfSense, and File Integrity Monitoring (FIM), such as the commercial Tripwire and dated, open-source Tripwire, or the open-source Wazuh installed on servers. These can be combined into a Security Information and Event Management (SIEM) system like the open-source solution, Security Onion. Wazuh itself has evolved into a SIEM. Source: over 1 year ago