Zeek From Home, Episode 5 recorded on 3 June and featured guests Phil Rzewski, Technical Director and Steve McCanne, Coding CEO at Brim Security who discussed and presented on Brim’s recent open source app and more. 

Zeek From Home is a weekly Zeek Webinar series where Zeek users, developers and invited guests can present on all things Zeek and more. You can find out more about upcoming Zeek webinars on the zeek.org events calendar

Latest Zeek From Home Webinar 3 June – Brim Security

This webinar was for those who are interested in Brim Security and their use of Zeek.  Brim recently introduced their open source desktop app that leverages Zeek for processing packet captures, performing search & analytics on Zeek events, and more. 

In this webinar Phil, Steve and other members of the Brim team walked attendees through details on:

  • The history of the open source Brim projects and how they relate to Zeek
  • Tips for working with Zeek data in Brim and the underlying zq toolkit
  • The ZNG data format and its compatibility with the rich Zeek data type system
  • How the Brim project is bringing Zeek to Windows users
  • Using Brim to help with your authoring/debugging of Zeek scripts
  • An early look at a prototype for working with a long tail of archived Zeek logs

The Zeek From Home webinars are recorded and if you were unable to attend the Brim Security webinar we have made the following available: video, audio only, slides and also posted the video on the Zeek YouTube Channel

Many thanks to all those who participated!! Keep those questions and feedback coming!! 

Upcoming Zeek From Home Webinar 10 June – Zeek Scripts – 101 to 595 – with host Aashish Sharma

Aashish Sharma is a member of the Cyber Security Team at the Lawrence Berkeley National Lab and an avid Zeek fan. 

Aashish has updated his 2018 BroCon (now ZeekWeek) talk. If you’re interested in Zeek Scripts this is the talk for you!

Check out Anthony Kasza’s latest blog post which was inspired by Aashish’s 2018 talk: https://zeek.org/2020/06/08/7-dos-and-donts-for-zeek-scripting/

REMINDER:  These webinars are free to attend but registration is required.

Register in advance for this webinar at: https://corelight.zoom.us/webinar/register/2115913045997/WN_fa_KZa_RTMmVZTYpAUx4Kw

After registering, you will receive a confirmation email containing information about joining the webinar.

More information can be found about this webinar and future events at: https://zeek.org/events/

If you have any questions please email akgraner@corelight.com or join the Zeek #webinars slack channel

How can you or your organization get on the Zeek From Home Schedule?

Have you presented at past Zeek Weeks or Zeek events?  Do you have a Zeek related topic you’d like to share with the Zeek Community?   If so, take a look at the Zeek from Home announcement