Tweaks for Security Onion
Informational
Disable OSSEC as follows:
# Stop the running OSSEC processes
sudo service ossec-hids-server stop
sudo update-rc.d -f ossec-hids-server disable
#-----
XRPD for Security Onion
First Install XRPD and Xfce4
sudo apt-get install xrdp
sudo apt-get install xfce4
After you have installed these packages you need to let Ubuntu know that you’re using the xfce desktop. To do this run this command.
echo xfce4-session >~/.xsession
Then restart xrdp with this command.
sudo service xrdp restart