ZeekWeek 2021 was held online from 13-15 October.  This three-day event brought together over 2000 SOC professionals, Zeek users and developers from over 59 countries and 800 companies. 

If you missed this year’s events below is the agenda, with links to slides and more. 

Day 1 Training Track

  • Zeek Project Training: Introduction to Zeek (Slides, Video)
  • Zeek Project Training: Hands On Zeek Scripting (Slides, Video)
  • Corelight and Its Partners Training: (Slides, Video)

Day 2 SOC Professionals and Zeek Users Track

  • Welcome & Open Remarks – (Slides, Video)
  • Keynote – (Video)
  • DNS and Spoofed traffic investigation with Zeek – (Slides, Video)
  • Using a Forest to Explore the Logs: Automation, Analytics and AI with Zeek Logs at UC Davis. – (Slides, Video)
  • BadRandom: A Survey of TLS Implementations – (Slides, Video)
  • Investigating Remote Desktop Protocols attacks using the Zeek observatory at UIUC/NCSA – (Slides, Video)
  • A Better Way to Capture Packets with DPDK – (Video)
  • Details for DPDK plugin development and performance measurement – (Video)
  • Kerberos-haters guide to Zeek Threat Hunting – (Slides, Video)
  • PacketTotal – A Community Service for Zeek-Based PCAP Analysis – (Slides, Video)
  • Zeek the truth, in the Cloud – (Slides, Video)

Day 3 Zeek Roadmap and Developer Track

  • Keynote – (Slides, Video)
  • Roadmap & Contribution How-To – (Slides, Video)
  • The new packet processing pipeline – (Slides, Video)
  • zkg templates – (Slides, Video)
  • Creating Zeek analyzers packages with Spicy – (Slides, Video)
  • Compiling Zeek scripts – (Slides, Video)
  • Build Zeek with static plugins included – (Slides, Video)
  • Replacing ZeekControl with the new Cluster Controller – (Slides, Video)
  • Lightning Talks – (Video)
  • Ask the speakers – Q&A – (Video)
  • Summary, Wrap-Up and Thank you’s – (Video)

Thank you!

Thank you to everyone who helped make ZeekWeek 2021 a success: speakers, sponsors, attendees, sub-project leads, the Zeek LT and more. 

Connect with the Zeek community: 

If  you would like to get more involved in the Zeek Community below are several ways you can connect: 

Also, please take a look at zeek.org to find out more about the project, releases and more.