{"id":103731,"date":"2022-04-07T15:36:45","date_gmt":"2022-04-07T13:36:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-distributiva-selks-7-0-naczelennogo-na-sozdanie-sistem-obnaruzheniya-vtorzhenij"},"modified":"2022-04-07T15:36:45","modified_gmt":"2022-04-07T13:36:46","slug":"vypusk-distributiva-selks-7-0-naczelennogo-na-sozdanie-sistem-obnaruzheniya-vtorzhenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-distributiva-selks-7-0-naczelennogo-na-sozdanie-sistem-obnaruzheniya-vtorzhenij","title":{"rendered":"Release of the SELKS 7.0 distribution aimed at creating intrusion detection systems","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Stamus Networks has released a specialized distribution of SELKS 7.0, designed for deploying intrusion detection and prevention systems, as well as responding to identified threats and monitoring network security. Users are provided with a fully ready-to-use solution for managing network security that can be utilized immediately after download. The distribution supports operation in Live mode and can be launched in virtualization environments or containers. Project developments are distributed under the GPLv3 license. The size of the boot image is 3 GB. <\/p>\n

The system is built on a Debian package base and the open IDS platform Suricata. Data is processed using Logstash and stored in an ElasticSearch repository. A web interface implemented over Kibana is provided for monitoring the current status and identified incidents. A web interface Scirius CE is used for managing rules and visualizing associated activity. The package also includes the Arkime packet capture system, the EveBox interface for event evaluation, and the data analyzer CyberChef. <\/p>\n

In addition to updating the package base, the new version highlights the following improvements: <\/p>\n