Latest news, tutorials, and insights by Yacin Nadji.
This is Part 3 of a three-part series. Read Part 1 and Part 2. Introduction Back in Part 1 and Part 2, we presented our motivational package, ip-distance, how you can easily write unit tests in…
read more about The Cure for Exceptional Zeek Package Testing (Part 3)This is Part 2 of a three-part series. Read Part 1 and Part 3. Introduction In the previous part of this blog series, we presented our motivational package, ip-distance, and how you can easily write unit…
read more about The Cure for Exceptional Zeek Package Testing (Part 2)This is Part 1 of a three-part series. Read Part 2 and Part 3. Introduction As someone who ships a lot of Zeek packages to production, I’m always looking for ways to improve package testing. In…
read more about The Cure for Exceptional Zeek Package Testing (Part 1)Notices in Zeek Zeek’s Notice Framework enables network operators to specify how potentially interesting network findings can be reported. This decoupling of detection and reporting highlights Zeek’s flexibility: a notice-worthy event in network A may…
read more about Telegram Zeek, you’re my main notice