Latest news, tutorials, and insights from the Zeek category.
Last week, Zeek’s Technical Lead Christian Kreibich presented at hack.lu in Luxembourg, a conference that draws around 400 security practitioners spanning both offensive and defensive disciplines. Christian presenting at hack.lu 2025. His talk tackled a challenge…
read more about Integrating Zeek With Third-Party Applications (a hack.lu Recap)We’re proud to announce the release of Zeek 8.0! This release introduces a range of technical innovations and culminates architectural improvements we’ve been working on since the release of Zeek 7 a year ago. Customizable Flow…
read more about Introducing Zeek 8On June 23, we’re launching the Zeek Project Survey 2025 to understand how the community is currently using Zeek, what challenges you face, and where you want to see the project grow. This survey is a…
read more about Help Us Build the Best Zeek Yet: Community Survey Launching June 23Within Zeek, there are two separate parser generators: Binpac (the old one) and Spicy (the new one). Both allow users to write protocol parsers by declaring what the protocol looks like rather than writing C++ code…
read more about Are Spicy parsers slower than Binpac parsers?The Zeek team is proud to announce Zeek 7.2! Work on this release began in December 2024 and includes some 1,200 commits, 330 merged pull requests, and 130 closed issues. The 7.2 release brings important new…
read more about Introducing Zeek 7.2In our last post, we left off with a functional but incomplete analyzer for Redis. It analyzed RESP (Redis Serialization Protocol) traffic, crudely created “command” objects, then sent that off into Zeek script in events in…
read more about Building a Redis Analyzer with Spicy, Part IIYou can find the source code referenced throughout this post here — though, it is quite different from what is written here. Redis is an in-memory, key-value database. Its primary use is for caching. It does…
read more about Building a Redis Analyzer with SpicyThe Zeek team is proud to announce Zeek 7.1! Work on this release began in July 2024 and includes some 1,400 commits, 340 pull requests, and 130 closed issues. The 7.1 release introduces new user-visible features,…
read more about Introducing Zeek 7.1The Zeek team is proud to announce the release of Zeek 7! Work on this release began in February 2024 and includes some 1,100 commits, 330 pull requests, and 140 closed issues. As always, we are…
read more about Introducing Zeek 7Over the course of the past year we’ve made a number of changes to Zeek that have positively affected its performance, sometimes considerably. This blog post highlights a few places and changes that knowingly improved performance…
read more about Recent Zeek Performance Improvements