Latest news, tutorials, and insights by Amber Graner.
In this episode, Richard Bejtlich explores how to figure out where to put a sensor on your network. He describes a simple enterprise network, traffic flows, and device addressing, all of which affect sensor placement. Find…
read more about Zeek in Action, Video 4, Where Should I Put My Sensor?ZeekWeek 2021 will be held 13-15 October at the AT&T Hotel and Conference Center located in Austin, Texas. This will be an in-person event, with the option of remote participation. ZeekWeek is the annual gathering of…
read more about ZeekWeek 2021 – Registration Open!UPDATES: Call for Papers – Deadline Extended to 25 August 2021; Due to the Delta Covid variant we are also allowing for remote presentations. If you aren’t comfortable traveling to Austin, but would like to submit…
read more about ZeekWeek 2021 – Call For Participation – Speakers and SponsorsIn this episode, Richard Bejtlich looks at PCAPs from Tcpreplay using Zeek, Brim Security and Wireshark. This comparison isn’t to say one tool is better than the other, but to show users what data each tool…
read more about Zeek in Action, Video 3, Comparisons of Data SourcesIssue 10 – May 2021 In this Issue: Highlights Zeek BlogZeek In The CommunityNew Zeek PackagesUpcoming EventsZeek Related JobsVolunteer OpportunitiesGet Involved Join over 1500+ Zeek users and fans in 21 Zeek related Slack channels for real-time Q&A,…
read more about Zeek Monthly Newsletter – Issue 10 – May 2021In this episode, Richard Bejtlich traces a trickbot infection known as CATBOMBER, posted by Brad Duncan on his Malware Traffic Analysis site. Richard uses try.zeek.org to look at the PCAP for signs of suspicious and malicious…
read more about Zeek In Action, Video 2, Tracing a Trickbot InfectionIssue 9 – April 2021 In this Issue: TL;DR Development UpdatesZeek BlogZeek In The CommunityNew Zeek PackagesZeek in EnterpriseUpcoming EventsZeek Related JobsVolunteer OpportunitiesGet Involved TL;DR Zeek releases: 3.0.13, 3.2.4,4.0.0, 3.0.14 and 4.0.1, and Spicy 1.0 Notable blog…
read more about Zeek Monthly Newsletter – Issue 9 – April 2021UPDATE: If you would like to participate as an attendee, please register at: https://www.eventbrite.com/e/zeek-in-enterprise-tickets-159473697121 (See below for list of companies) The Zeek Project is looking to host a “Zeek in Enterprise” Day on 16 June 2021…
read more about Zeek in Enterprise DayWe are thrilled to announce the winners of the third Zeek Package Contest, which was sponsored by Corelight. The contest was open to all Zeek packages compatible with Zeek 3.0 and above. Below is a list…
read more about ZPC-3 Winners AnnouncedIssue 8 – February 2021 Welcome to the first Zeek Newsletter of 2021! In this Issue: TL;DR Development UpdatesZeek BlogZeek In the CommunityNew Zeek PackagesZeek in the EnterpriseUpcoming EventsZeek Related JobsVolunteer Opportunities TL;DR Zeek releases: 4.0 RC …
read more about Zeek Monthly Newsletter – Issue 8 – February 2021