One installer. Every role. Rules updated the Unix way.
The new WinSuricata All-in-One Installer combines the Core, Console, Host, and Remote Node installers into one package. Choose your role and the installer does the rest, from standalone sensor to distributed monitoring.
Core First, Every Time
Every deployment begins with the same foundation: the Suricata engine, Npcap packet capture, a bundled Python environment, and service management, configured and verified before your chosen role is added. Windows Defender exclusions and firewall rules are handled for you, and the installer can create a System Restore point.
Pick Your Role
- Console: Standalone event management with the EveBox web console and local SQLite storage. It is ideal for a single sensor.
- Host: Centralized monitoring built on EveBox and OpenSearch, with TLS certificates and PKI generated automatically. One Host can watch its own sensor while receiving telemetry from every Remote Node.
- Node: A remote Suricata sensor with the EveBox agent, forwarding events securely to your Host. Each Node gets its own Host-generated authentication package.
Launch from the interactive menu, or pass the role on the command line for unattended installs.
Rules Updates That Mimic Unix, Exactly
WinSuricata uses suricata-update powered by Cygwin, so your Windows sensors update rules the same way a Unix sensor does. You get the same tool, the same behavior, and the same rule sources, including ET Pro and custom rule keys.
Around it, the Rules Updater adds:
- Built-in verification of every update
- Automatic rollback to your last working rules if verification fails
- Scheduled updates
- SMTP email notifications for successful updates, no-change results, and errors, with a built-in Test button
A Management Console for Everything After Install
The WinSuricata Management Console puts maintenance, monitoring, and recovery in one place. It includes:
-
Diagnostics that check services, rules,
eve.jsongeneration, scheduled tasks, and disk space - A System Tray Monitor with On, Off, and Restart controls
- Cleanup and Restore
- Node setup, recovery, and key-update tools
- PKI validation for Hosts
The console is role-aware, so each system shows only the tools that apply to it.
Documentation Included
The package ships with a detailed install guide covering every role, verification steps, post-install management, and troubleshooting. Whether this is your first sensor or your fiftieth, the answers are in the box.
Download WinSuricata 4.5 Today
One installer. Three roles. Rules updates that match Unix exactly.
[Download Now] | [Read the Docs] | [Report an Issue]