About This File
The WinSuricata Host Edition is designed as an add-on to the WinSuricata Core Edition, extending an existing Headless sensor into a centralized security management and analytics platform. It builds directly on the existing Suricata EVE JSON event stream, adding EveBox, OpenSearch, OpenSSL-based PKI infrastructure, HTTPS/TLS security, centralized event storage, and the supporting Windows services required for centralized alert management and analysis. The Host Edition preserves the underlying Core Edition installation and does not replace the local Suricata detection engine.
The Host Edition also serves as the central integration point for Remote Nodes. Registered Remote Nodes can securely forward applicable Suricata alert telemetry to the Host using Host-generated authentication and TLS/PKI configuration. Once integrated, sensor telemetry can be stored, searched, visualized, and managed through the centralized EveBox/OpenSearch environment. Installation, service registration, security configuration, certificate management, and centralized logging components are automated to minimize manual configuration. This modular architecture extends the existing Core Edition with centralized event analysis, Remote Node integration, authenticated sensor communication, and certificate validation and recovery while preserving local Suricata detection and EVE JSON generation on every sensor.
Complete installation instructions, deployment requirements, verification procedures, troubleshooting information, architecture details, and the final deployment checklist are included in the `README-INSTALL.txt` file contained within this package. Please review the included documentation before beginning the installation and retain it for future administration and troubleshooting.
PACKAGE SECURITY & INTEGRITY
Before extracting or installing the package, verify the downloaded ZIP file against the published SHA-1 hash to confirm that the archive has not been corrupted or altered.
Archive Password : w1nsn03t.c0m SHA-1 Hash : 3CC78C1F9F1850C962CF783F719D1E4CE209145C
To verify the package in Windows, run the following command from Command Prompt or PowerShell, replacing the filename if necessary:
certutil -hashfile "WinSuricata-Host-Installer.zip" SHA1
The calculated SHA-1 value must match the published value exactly. If the hash does not match, do not extract or install the package. Obtain a new copy from the authorized distribution source and perform the verification again.