SO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!

No ratings

Presented at BSidesAugusta 2026 by

Doug Burks

SO-CRATES is a new free and open source project for analyzing pcap files, log files, and binary files. Designed from first principles, it's a single container image that is simple yet tremendously powerful. In this talk, we'll discuss the reasons for building a new tool, how it compares to the full Security Onion platform, and then see how you can view network alerts, file alerts, and log alerts. We'll then dive deeper into browsing network metadata (DNS, HTTP, TLS, flows), extracting ASCII transcripts, viewing per-packet hexdumps, and carving individual streams.