SO-CRATES - Welcome

SO-CRATES

Investigate alerts and then slice and dice your metadata!

Loading...

This may take a minute or two depending on file size

Error

Confirm Delete

Are you sure you want to delete ?

Confirm Delete All

Are you sure you want to delete all previous analyses? This cannot be undone.

Confirm Re-analyze

This will delete the existing analysis for and re-run the analysis pipeline. The uploaded file will be preserved.

WARNING! You have one or more notes on a table row and these will be destroyed.

Help

Loading...

Show this message each time I connect

Settings

Max rows fetched per view (aggregation tables, diagram, sorted/filtered tables)

Larger limits may take longer to load, especially in the combined "All Events" / Sigma Alerts views.

Max upload size (MB)

Custom Lookup Sites

Added to every row/detail-panel/aggregation pivot menu, alongside the built-in ones (Google, VirusTotal, ...). Use {value} in the URL as a placeholder for whatever was clicked.

Danger Zone

About

SO-CRATES

SO-CRATES

Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus

Made with by defenders for defenders - Sponsored by Security Onion Solutions, LLC

SO-CRATES Documentation SO-CRATES GitHub repo (give it a star!)

Check GitHub for newer SO-CRATES releases

Security Onion

Themes

Sync theme to OhMyDebn theme

Theme is controlled by OhMyDebn. Turn off the sync option above to choose a theme manually.

Previewing theme

Hover over a theme name below to preview it in this live preview. Click the theme name to apply the theme to the entire window.

You can also press </> at any time to cycle through themes.

Notes

Rules

Loading...

Notify me when detection rules are stale after days

Shows a notification on the Welcome screen if any ruleset above is showing stale.

Data Table

SO-CRATESUpdate available

© 2026 Security Onion Solutions, LLC