by Seth Grover | Jan 27, 2026 | Packages
Learn how to use JA4 network fingerprinting in Zeek to identify client and server software, detect malware, and track behavior across encrypted connections without requiring decryption. Network fingerprinting helps identify client and server software without...
by Christian Kreibich | Jan 21, 2026 | 8.1, development, development update, release
The Zeek team is proud to announce Zeek 8.1! This release achieves a major milestone in our architectural shift away from the Broker messaging backend, includes a bunch of analyzer enhancements, takes first steps to phase out MD5 support, and features a host of other...
by Michelle Pathe | Jan 7, 2026 | community
Zeek rarely works in isolation. The real power comes from pairing it with other tools – SIEMs for log aggregation, IDS/IPS for signature-based detection, threat intel feeds for enrichment, packet capture tools for deeper investigation. We recently asked our...
RSS - Posts