Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus
A standalone web application for analyzing pcap files, log files, and binary files. Features include Suricata network analysis, YARA binary scanning, Sigma rule detection for logs, and a single-page UI for browsing alerts, metadata, transcripts, and hexdumps.
📖 Full documentation: https://so-crates.org/
- Interactive Demo
- Installation (OhMyDebn, Docker, Podman)
- Usage
- Themes
- Configuration
- Security
- Architecture / API Reference / Filtering
- Credits
- Release Notes
See AGENTS.md for agent-focused guidance on maintaining SO-CRATES, including updating vendored dependencies.
# All tests
python3 -m unittest discover -vSee LICENSE.