Latest news, tutorials, and insights by Benjamin Bannier.
With zeek-8.1.0 dns.log now includes information on dynamic update messages (RFC 2136) adding new opcode and opcode_name columns. During the RC phase we received feedback that this change to the log schema might break downstream consumers of dns.log, so we also included a…
read more about Why Zeek keeps breaking your test baselinesWhether you’re extending Zeek’s functionality or integrating it into a larger NDR stack, your work probably involves some form of source code. While that code is ultimately a means to an end, I like code to…
read more about Developing Zeek Scripts with StyleThe typical experience of developing in a programming language has changed substantially since the time Zeek script was first introduced in the mid 90s. Today users rightfully expect an inclusive environment with approachable ways to interact…
read more about Modern developer tooling for Zeek script