• Sguil
  • Wireshark
  • ELSA

Explanation: PulledPork is a rule management utility included with Security Onion to automatically download rules for Snort.