Latest news, tutorials, and insights by Richard Bejtlich.
Issue 14 – November 2021 Welcome to the Zeek Monthly Newsletter! In this Issue: TL;DR Development Updates Zeek Blog and Mailing List Zeek in the Community Zeek Package Updates Zeek in the Enterprise Upcoming Events Zeek…
read more about Zeek Newsletter – Issue 14 – November 2021In this episode of Zeek in Action, Richard examines the four types of network security monitoring data: 1) full content data (“PCAP”), 2) transaction logs, 3) extracted content, and 4) intrusion detection systems (IDS) alerts. He…
read more about Zeek in Action, Video 10, Examining the Four Types of Network Security Monitoring DataIssue 13 – October 2021 Welcome to the Zeek Monthly Newsletter! In this Issue: TL;DR Development Updates Zeek Blog and Mailing List Zeek in the Community Zeek Package Updates Zeek in the Enterprise Upcoming Events Zeek…
read more about Zeek Monthly Newsletter – Issue 13 – October 2021The first video examining network traffic using Zeek and related applications is now available. This episode looks at a suspected malware compromise, posted by Brad Duncan on his Malware Traffic Analysis site. We use Brim to…
read more about Welcome to Zeek in Action, Video 1, Suspected Malware CompromiseWelcome to Zeek in Action, a new series of videos for Zeek users and fans. The purpose of the series is to show how analysts can interpret data in Zeek and related formats to solve various…
read more about Zeek in Action: Introduction and How to Set Up a Windows Workstation Using Brim Security