About this Event
About Security Onion
Security Onion is a free and open platform built by defenders for defenders. It includes network visibility, host visibility, intrusion detection honeypots, log management, and case management. Security Onion has been downloaded over 2.5 million times and is being used by security teams around the world to monitor and defend their enterprises. Our easy-to-use Setup wizard allows you to build a distributed grid for your enterprise in minutes!
For more about Security Onion, please see https://securityonion.com
About the Course
This course is geared for analysts and administrators of Security Onion. Students will gain a foundational understanding of the platform - how to architect, deploy, and manage their Security Onion grid. The course also covers major analyst workflows, reinforced through real-world case studies. Each student will receive:
What is included in the price of this class?
- 4 full days of class instruction from the developers of Security Onion
- 300+ pages of course material
- Certificate of Completion
- Laptop to use during class time
When is the class?
Tuesday, February 24, 2026 through Friday, February 27, 2026
8-hour class with a one hour lunch on your own from 8:00 AM - 5:00 PM (Central Time) each day
When does registration close?
Registration closes February 5, 2026, at 11:59 PM Eastern
Where is the class being held?
The class will be held at the Kinected Coworking Building,10401 IH 10 West, Ste. 220, San Antonio, TX 78230
Is there parking at the training venue?
There is free parking at the training venue.
What hardware, etc. will be required for the class?
Security Onion Solutions will provide laptops for use during the course.
Which version of Security Onion will we be using?
We'll be using the latest Security Onion 2.4 release as of January 26, 2026.
You don't need it for the class, but the latest stable release can be found here: https://securityonion.net/download
What skills/knowledge should students have before attending this course?
Students should attend the free 2-hour Security Onion Essentials course before the first day of class. One topic covered by this course is building a Security Onion VM. Note that students do not need to build a Security Onion VM for this class. We will be using virtual machines on the class laptops provided by Security Onion Solutions.
Students should have a basic understanding of networks, TCP/IP, and standard protocols such as DNS, HTTP, etc. Some Linux knowledge/experience is recommended, but not required.
What's the cancellation policy?
Security Onion Solutions reserves the right to cancel this class up to one day after registration closes if the class does not meet a minimum number of students. If class is canceled, the training ticket cost will be refunded.
What's the refund policy?
You may log into your Eventbrite account to request a refund up until the last day of ticket sales. Note that the Eventbrite fees of $252.46 are not refundable unless you are refunded due to class cancellation. Please use the "Request a Refund" button as shown here: https://www.eventbrite.com/support/articles/en_US/How_To/can-i-get-a-refund
What if my organization would like to use a purchase order?
Please contact us for further details.
What if my organization is exempt from sales tax in Texas?
Please contact us for further details.
Are there discounts available?
For this course, we are offering a discount to active duty US military and active US Federal employees. Contact us for more information.
Does the class prepare students to pass the Security Onion Certified Professional (SOCP) exam?
Yes! In conjunction with the official Security Onion Documentation book, the instruction and associated course materials from this class will prepare you for the SOCP exam.
What topics are covered in this class?
Note: Syllabus is subject to change
- Security Onion Console
- Security Onion System Architecture
- Security Onion Workflows
+ Alert Triage & Case Creation with SOC Alerts and Cases
+ Threat Hunting with SOC Hunt and Dashboards
+ Detection Engineering
- Grid Management
+ Users
+ Firewalls
+ Monitoring
+ Troubleshooting
- Tuning the Grid
+ Berkeley Packet Filters
+ Performance Tuning - Zeek and Suricata
+ Data Pipeline Tuning - Logstash and Elasticsearch
+ Alert Tuning
- Customizing Security Onion Console
- Integrating Endpoint Telemetry
- Capstone Capture the Flag Event
- Multiple Labs and Case Studies
Event Venue & Nearby Stays
10401 IH 10 W Acc Rd ste 220, 10401 IH 10 West Access Road, San Antonio, United States
USD 182.94 to USD 4111.34
