Complete Home Network Security Monitoring w/ Security Onion

A Recipe for Total Network Activity Awareness in Your Home

What you'll learn
You will gain hands-on experience with state-of-the-art network analysis software right in your own home.
You will learn tools to radically increase the information you have about activity on your network.
You will learn how to setup and where to deploy highly advanced network monitoring hardware in a small network.
You will build a network designed for comprehensive data capture and total network activity awareness.
You will learn powerful tools for tracking the activity of hackers on your network.

Requirements
This class requires that you have general familiarity with computer interfaces. Experience using Microsoft Windows (or Mac) operating systems should be sufficient. Experience with Linux command line interfaces would be helpful but is not required.
Some familiarity with setting up your own local area network (e.g. in your home) is recommended, but not absolutely required. This course includes a detailed description of network setup.
There is no programming requirement for this class.

Description
In this course I will walk you through the process of setting up a small network (including both wired and wireless connectivity) that is designed for total network activity capture and analysis by Security Onion, a highly advanced free and open source server for network security monitoring. I will provide step by step instructions on the hardware you will need, where you can get it, how to configure it for Security Onion, how to deploy Security Onion, and how to get started using some of Security Onion's powerful tools.This class includes the following:A diagrammatic overview (including a detailed description) of network architecture;Details of specific required hardware and where it can be inexpensively acquired;Hardware configurations to achieve the desired network architecture;How to prepare the Security Onion software, install it onto hardware, and deploy it into the network;Remote administration examples of the Security Onion server;Network analysis examples using Security Onion's default network analyst tools.I am actively expanding the content of this class, and new lectures will be added as they are completed. Lectures being currently recorded, edited, and voiced over include the following:How to configure network devices for SSL encrypted administration;How to configure the Firefox web browser to alert only when SSL public keys have changed;How to forward system logs from devices and hosts on the network to Security Onion for analysis;How to configure FleetDM to monitor network hosts for known vulnerabilities in software;How to setup network host monitoring with Wazuh.I have some additional lectures planned that I am not working on yet, and those too will be posted as they are completed.

Who this course is for
This class is targeted at medium skill level computer users, but beginners should still be able to finish this class as long as they have a good grasp on the basics of interfacing with desktop computers.
If you are a power user, then this class will be easy for you. But, you will still learn how to set up and deploy Security Onion into a network that is designed for comprehensive packet capture and analysis.

Homepage