I have been working more with my VMware virtual machines. I managed to get Security Onion installed and let it run for a few days to see if would produce any types of alerts from its default settings. It has a web-based dashboard so been messing around with it. It does give a few alerts based on simple settings like login attempts, but since the virtual network is not really online there is not a lot for it to monitor. I did manage to get it working which is good practice.
Leave a Reply