Security Onion Integrations

Elastic is a search company. Elasticsearch, Kibana Beats, Logstash, and Elasticsearch are the founders of the ElasticStack. These SaaS offerings allow data to be used in real-time and at scale for analytics, security, search, logging, security, and search. Elastic has over 100,000 members in 45 countries. Elastic's products have been downloaded more than 400 million times since their initial release. Today, thousands of organizations including Cisco, eBay and Dell, Goldman Sachs and Groupon, HP and Microsoft, as well as Netflix, Uber, Verizon and Yelp use Elastic Stack and Elastic Cloud to power mission critical systems that generate new revenue opportunities and huge cost savings. Elastic is headquartered in Amsterdam, The Netherlands and Mountain View, California. It has more than 1,000 employees in over 35 countries.

The Suricata engine excels in real-time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM), and offline packet capture (pcap) processing. It analyzes network traffic using a robust and comprehensive set of rules and signature languages, complemented by advanced Lua scripting capabilities that allow for the identification of intricate threats. Its compatibility with standard input and output formats such as YAML and JSON simplifies the integration with various tools, including established SIEMs, Splunk, Logstash/Elasticsearch, Kibana, and other databases. The development of Suricata is driven by a vibrant community focused on enhancing security, usability, and efficiency. Additionally, the project is managed and endorsed by the Open Information Security Foundation (OISF), a non-profit organization dedicated to fostering the ongoing development and success of Suricata as an open-source initiative. This commitment not only ensures the software's reliability but also actively encourages community contributions and collaboration.

Zeek, initially known as Bro, stands as the premier platform for monitoring network security. It is an adaptable, open-source solution driven by those dedicated to defense in the cybersecurity realm. With its origins tracing back to the 1990s, the project was initiated by Vern Paxson to gain insights into activities on university and national laboratory networks. In late 2018, to acknowledge its growth and ongoing advancements, the leadership team transitioned the name from Bro to Zeek. Unlike conventional security tools such as firewalls or intrusion prevention systems, Zeek operates passively by residing on a sensor, which can be a hardware, software, virtual, or cloud-based platform, that discreetly monitors network traffic. By analyzing the data it collects, Zeek generates concise, high-quality transaction logs, file contents, and customizable outputs that are well-suited for manual examination on storage devices or through more user-friendly applications like security information and event management (SIEM) systems. This unique approach allows for a deeper understanding of network activities without interfering with the traffic itself.

Ignite Your Digital Transformation Journey. Oversee intricate digital applications throughout your network with unmatched levels of intelligence and insight. The daily task of managing your network to maintain seamless availability can feel overwhelming. As networks accelerate, data volumes expand, and users and applications proliferate, effective monitoring and management become increasingly challenging. How can you successfully lead Digital Transformation? Imagine being able to guarantee network uptime while also gaining insight into your data in motion across physical, virtual, and cloud environments. Achieve comprehensive visibility across all networks, tiers, and applications, while obtaining critical intelligence about your complex application frameworks. Solutions from Gigamon can significantly elevate the performance of your entire network ecosystem. Are you ready to discover how these improvements can transform your operations?