--- title: SELKS5 RC1 - Threat Hunting and more... description: SELKS5 RC1 - Threat Hunting and more... image: https://www.stamus-networks.com/hubfs/SELKS5_RC1_Featured_Image.png --- [![Stamus-Logo-with-R-color-small](https://www.stamus-networks.com/hubfs/Stamus-Logo-with-R-color-small.png "Stamus-Logo-with-R-color-small")](https://www.stamus-networks.com/?hsLang=en) # SELKS5 RC1 - Threat Hunting and more... by [Peter Manev](https://www.stamus-networks.com/blog/author/peter-manev) | Dec 21, 2018 | [SELKS](https://www.stamus-networks.com/blog/tag/selks), [Open Source](https://www.stamus-networks.com/blog/tag/open-source), [Threat Hunting](https://www.stamus-networks.com/blog/tag/threat-hunting), [Suricata](https://www.stamus-networks.com/blog/tag/suricata), [Stamus Labs](https://www.stamus-networks.com/blog/tag/stamus-labs) ![](https://www.stamus-networks.com/hubfs/SELKS5_RC1_Featured_Image.png) Hi! Yet another upgrade of our SELKS. We are very thankful to all the great  Open Source projects and tools for making it possible to showcase Suricata with our new distro. Features and fixes post SELKS 5 Beta : - [Elasticsearch 6.5.3](https://www.elastic.co/products/elasticsearch) - [Logstash 6.5.3](https://www.elastic.co/products/logstash) - [Kibana 6.5.3](https://www.elastic.co/products/kibana) - [Moloch 1.6.2](https://molo.ch/)  -  The new SELKS makes use of Moloch and Moloch viewer to parse and view the full packet capture done by Suricata. Moloch comes with an arsenal of tools and features on its own like: - [CyberChef](https://gchq.github.io/CyberChef/) - Extremely flexible and easy to use interface for FPC drill down, filtering,search and pcap export - Scirius 3.1.0 CE   [![Scirus Alerting rules event details](https://www.stamus-networks.com/hs-fs/hubfs/Imported_Blog_Media/Screenshot-from-2018-12-21-14-09-52-300x144.png?width=300&height=144&name=Screenshot-from-2018-12-21-14-09-52-300x144.png)](https://www.stamus-networks.com/hubfs/Imported_Blog_Media/Screenshot-from-2018-12-21-14-09-52.png?hsLang=en) Scirus Alerting rules event details   - Suricata  - always latest git edition and features available. - SELKS scripts upgrade - available now system wide in "/usr/bin" - Full packet Capture retention policy - thanks [Joren0494](https://github.com/Jeroen0494) ! - Thank you for all the major community contributors form the community - Debian - always thankful ! - [EveBox](https://evebox.org/) - always the latest and very thankful for your support and extremely fast bug fixing and feature addition [Read more about the features and browse through screenshots of major SELKS 5 release ](https://www.stamus-networks.com/2018/10/26/selks5-beta/?hsLang=en) SELKS is both Live and installable Network Security Management ISO based on Debian implementing and focusing on a complete and ready to use Suricata IDS/IPS ecosystem with its own graphic rule manager. Stamus Networks is a proud member of the Open Source community and SELKS is released under GPLv3 license. #### Download To download SELKS 5, pick one of the two flavors: ##### SELKS with desktop - HTTP: [SELKS-5.0RC1-desktop.iso](http://dl.stamus-networks.com/selks/SELKS-5.0rc1-desktop.iso) - MD5sum: 192aa38436dcee6c98a6ae36d9e3b7df - Sha1sum: f48c0fe1edaaa8817c0a9043cb29e3edee4af93e - Sha256sum: 9f55a9ff4ee5c4c3c67646d0d5ae4e343f01f6abaf8e433ee9e3e78426c2f3e7 ##### SELKS without desktop - HTTP: [SELKS-5.0RC1-nodesktop.iso](http://dl.stamus-networks.com/selks/SELKS-5.0rc1-nodesktop.iso) - MD5sum: 27733887bd1ad20c61d9be4973a66074 - Sha1sum: dde637f8639254879ada06b9b68e691c3c904748 - Sha256sum: b32370a35785f336d863d763372820ec13987c3a83a974f26d849eb81f721f4f #### Usage You can find the start instruction including the initial setup script usage on [SELKS 5.0 wiki page](https://github.com/StamusNetworks/SELKS/wiki/SELKS-5.0-RC1). SELKS 4 user can upgrade their running systems using the following [Upgrade instructions](https://github.com/StamusNetworks/SELKS/wiki/SELKS-4.0-to-SELKS-5.0-RC1-upgrades). #### Feedback is welcome Any feedback as always is greatly appreciated! :) Give us feedback and get help on: - Freenode IRC on the #SELKS channel - [Google Mailing list](http://groups.google.com/d/forum/selks) While this test upgrade/installation has been verified and tested please make sure you try it in your test/QA set up first. Thank you!   [![Share on facebook](https://7528309.fs1.hubspotusercontent-na1.net/hub/7528309/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/facebook-color.png?width=24&name=facebook-color.png) ](https://www.facebook.com/share.php?u=https%3A%2F%2Fwww.stamus-networks.com%2Fblog%2F2018%2F12%2F21%2Fselks5-rc1-threat-hunting-and-more%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/linkedin-color.png?width=24&name=linkedin-color.png) ](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.stamus-networks.com%2Fblog%2F2018%2F12%2F21%2Fselks5-rc1-threat-hunting-and-more%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://7528304.fs1.hubspotusercontent-na1.net/hub/7528304/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/twitter-color.png?width=24&name=twitter-color.png) ](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fwww.stamus-networks.com%2Fblog%2F2018%2F12%2F21%2Fselks5-rc1-threat-hunting-and-more%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fwww.stamus-networks.com%2Fblog%2F2018%2F12%2F21%2Fselks5-rc1-threat-hunting-and-more%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://7528311.fs1.hubspotusercontent-na1.net/hub/7528311/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/email-color.png?width=24&name=email-color.png) ](mailto:?subject=Check+out+https%3A%2F%2Fwww.stamus-networks.com%2Fblog%2F2018%2F12%2F21%2Fselks5-rc1-threat-hunting-and-more%3Futm_medium%3Dsocial%26utm_source%3Demail&body=Check+out+https%3A%2F%2Fwww.stamus-networks.com%2Fblog%2F2018%2F12%2F21%2Fselks5-rc1-threat-hunting-and-more%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Peter Manev](https://www.stamus-networks.com/hubfs/Stamus_Peter_Square-1.jpg) #### Peter Manev Peter Manev is the co-founder and chief strategy officer (CSO) at Stamus Networks. He is a member of the executive team at Open Network Security Foundation (OISF). Peter has over 20 years of experience in the IT industry, including enterprise-level IT security practice. He is a passionate user, developer, and explorer of innovative open-source security software, and he is responsible for training as well as quality assurance and testing on the development team of Suricata – the open-source threat detection engine. Peter is a regular speaker and educator on open-source security, threat hunting, and network security at conferences and live-fire cyber exercises, such as Crossed Swords, DeepSec, Troopers, DefCon, RSA, Suricon, SharkFest, and others. Peter resides in Gothenburg, Sweden. [**](https://www.linkedin.com/in/peter-manev-64918336/) [** ](https://twitter.com/pevma) ## Schedule a Demo of Clear NDR [![REQUEST A DEMO](https://no-cache.hubspot.com/cta/default/6344338/a3da5fbf-412c-4e3f-a140-f6f33ed8cc5f.png)](https://cta-redirect.hubspot.com/cta/redirect/6344338/a3da5fbf-412c-4e3f-a140-f6f33ed8cc5f) ## Related posts [![Suricata Language Server 2.0 Now Available from Stamus Networks](https://www.stamus-networks.com/hubfs/SN-SLS-2-Blog-Featured.jpg) ](https://www.stamus-networks.com/blog/suricata-language-server-2.0?hsLang=en) ### [Suricata Language Server 2.0: Major Update with Workspace Intelligence](https://www.stamus-networks.com/blog/suricata-language-server-2.0?hsLang=en) We're excited to announce version 2.0 of the Suricata Language Server, featuring workspace-wide... [![Suricata Language Server 1.3.0: Automated PCAP Testing, Multi-Version Support, and Syntax Highlighting](https://www.stamus-networks.com/hubfs/SLS-1.3-18-Dec-2025.jpg) ](https://www.stamus-networks.com/blog/suricata-language-server-1.3-automated-pcap-testing-and-multi-version-support?hsLang=en) ### [Suricata Language Server 1.3.0: Automated PCAP Testing, Multi-Version Support, and Syntax Highlighting](https://www.stamus-networks.com/blog/suricata-language-server-1.3-automated-pcap-testing-and-multi-version-support?hsLang=en) [Suricata Language Server](https://www.stamus-networks.com/suricata-language-server?hsLang=en) 1.3.0 is now available and it surfs on the concept of magic comment... [![](https://www.stamus-networks.com/hubfs/SLS-1.1.0-13-Nov-2025.jpg) ](https://www.stamus-networks.com/blog/suricata-language-server-1.1.0-reduces-installation-requirements-with-docker-container-mode?hsLang=en) ### [Suricata Language Server 1.1.0 Reduces Installation Requirements with Docker Container Mode](https://www.stamus-networks.com/blog/suricata-language-server-1.1.0-reduces-installation-requirements-with-docker-container-mode?hsLang=en) Writing and validating Suricata signatures shouldn't require wrestling with complex installation... [![Stamus-Logo-with-R-white](https://www.stamus-networks.com/hs-fs/hubfs/Stamus-Logo-with-R-white.png?width=2000&height=536&name=Stamus-Logo-with-R-white.png "Stamus-Logo-with-R-white")](https://www.stamus-networks.com/?hsLang=en) ABOUT STAMUS® NETWORKS Stamus Networks is the network intelligence foundation for AI-powered security operations and the creator of the Clear NDR® system. Built on Suricata, the world's leading open-source network security engine, Clear NDR transforms raw network traffic into actionable security insights with unmatched transparency, customization, and effectiveness. Designed to close visibility gaps and reduce alert fatigue, Clear NDR is trusted by leading financial institutions, government agencies, and has been battle-tested over ten years in NATO's largest cybersecurity exercises. Stamus Networks empowers security teams with greater control, fewer false positives, faster response times, and a more responsive, open approach than legacy vendors. - [**](https://www.linkedin.com/company/stamus-networks) - [**](https://twitter.com/StamusN/) - [**](https://www.youtube.com/Stamus-Networks) - [* *](https://discord.gg/JUMSU9uA) - Paris, FranceIndianapolis, USA **[contact@stamus-networks.com](mailto:contact@stamus-networks.com) [Privacy](https://www.stamus-networks.com/privacy-policy?hsLang=en) © 2014-2026 Stamus Networks, Inc. All rights Reserved.