Suri-Oculus Project
Development of Suri Oculus 4.0 is nearing completion. This is one of the most significant updates to the project so far, with major changes across the backend, web interface, Suricata rule management, event processing, and supporting tools. The main goal of version 4.0 is to […]
One of the areas I’m currently working on for Suri Oculus 4.0 is improving the management of local Suricata rules. Many Suricata deployments eventually accumulate a growing collection of custom rules. These may include internal detections, IoC-based rules, environment-specific signatures, or temporary rules created during […]
New 0.85 version of AI module is ready. Please visit downloads page.
Work is currently underway on an extension module for Suri Oculus.The release is planned for May 2026. The extension focuses on a different analytical perspective: not event-centric, but host-centric analysis. Instead of examining individual alerts in isolation, the system will analyze device behavior over time. […]
We’re pleased to announce the release of daemonmove version 3.0 — a key service in the Suri Oculus ecosystem responsible for processing Suricata logs through Redis. The new version introduces a redesigned synchronization mechanism with a global lock, configurable timing parameters (sleeping_time and lock_expiration_time), and […]
We’re excited to announce that Suri Oculus — the management and analysis system for IDS/IPS Suricata events — is now available as ready-to-use .deb packages for the popular Debian 12 and Ubuntu 22.04 distributions. Installation is now easier and faster, making it especially convenient for […]
Intelligent Security, Evolving Protection