From the course: Complete Guide to Open Source Security

Unlock the full course today

Join today to access over 24,500 courses taught by industry experts.

Installing Sirius CE

Installing Sirius CE

From the course: Complete Guide to Open Source Security

Start my 1-month free trial Buy for my team

Installing Sirius CE

“

- [Instructor] Scirius CE is an open-source security analytics tool that uses the Suricata intrusion detection system to enable threat detection. It's the community version of the commercial Stamus Security Platform, and is built using Suricata, the Elasticsearch, Logstash, Kibana SEAM, and the Arkime deep packets inspection tools. We can use this as a SEAM for alert monitoring, as well as an incident investigation and threat hunting tool. It uses Elasticsearch, which is resource-hungry, so we need to configure the VM with two cores and 8 gigabytes of RAM. The simplest way to install Scirius is to bring it in as a Docker image. We're in a Kali Purple system, which has Docker installed, so let's start by cloning the SELKS repository. git clone https: //github.com /StamusNetworks /SELKS.git. And we'll go into the folder SELKS/docker. And we can now run the installation script with sudo ./easy-setup.sh. We're now asked if we want to load Portainer. This is a graphical management tool for…

Contents