SELKS 5 is out! Thank you to the whole community for your help and feedback! Thank you to all the great Open Source projects and tools mentioned below for making it possible to showcase Suricata with this new release.
All components have been upgraded in this release to the latest version available but this is not the main improvement. SELKS is now able of doing Full Packet Capture thanks to Suricata and Moloch and benefit from an upgraded Scirius CE adding a new threat hunting interface.
Moloch addition allows the user to investigate and explore captured data via the Moloch viewer that provide an intuitive interface. The new Scirius threat hunting interface proposes a drill-down approach that allow to quickly find relevant alerts in a haystack and start investigation by what matter.
Features, fixes and major improvements:
SELKS is both Live and installable Network Security Management ISO based on Debian implementing and focusing on a complete and ready to use Suricata IDS/IPS ecosystem with its own graphic rule manager. Stamus Networks is a proud member of the Open Source community and SELKS is released under GPLv3 license.
To download SELKS 5, pick one of the two flavors:
You can find the first time set up instructions on our SELKS 5.0 wiki page.
SELKS 4 user can upgrade their running systems using the following Upgrade instructions.
Any feedback as always is greatly appreciated! 🙂
Give us feedback and get help on:
While this test upgrade/installation has been verified and tested please make sure you try it in your test/QA set up first.