Sign in

The Zeek Network Security Monitor

@zeek.org
98 followers 24 following 266 posts

Zeek is an open source network security monitor. zeek.org | github.com/zeek | community.zeek.org

PostsRepliesMedia
The Zeek Network Security Monitor @zeek.org · 13/10/2026
Sujala pointed Zeek at a simulated biological incubator to see whether it could monitor sensor telemetry instead of network traffic. We found the project on GitHub and asked her to write about what she learned building it: zeek.org/2026/10/buil...
000
The Zeek Network Security Monitor @zeek.org · 01/10/2026
Coming up at next Zeek Community Call: project updates, community news, and Zeek & AI. Tune in October 7 at 10am Pacific: zeek.org/events/
000
The Zeek Network Security Monitor @zeek.org · 28/09/2026
Renaming Zeek's JSON log fields to shorter names can save multiple gigabytes per day. Johanna shows how, plus how to use log filtering hooks to skip lines you don't need: zeek.org/2026/09/redu...
101
The Zeek Network Security Monitor @zeek.org · 17/09/2026
We're very, very excited to share that Zeek 9 has landed. Thank you to the contributors and community members who helped make this release happen! Read the full update on our blog: zeek.org/2026/09/intr...
010
The Zeek Network Security Monitor @zeek.org · 10/09/2026
Berkeley is a blast 🤠
000
The Zeek Network Security Monitor @zeek.org · 08/09/2026
Really looking forward to Aashish's talk on Thursday, where he's breaking down a year of LLM experiments at Berkeley Lab. Last call to join us: zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 02/09/2026
Attacks rarely start with an exploit - they start with reconnaissance. In a new blog post, Aashish breaks down how scan detection works in Zeek, from tracking TCP failures with Simple Scan to using darknets and profile-based rules. zeek.org/2026/09/how-... #Zeek #NetworkSecurity
000
The Zeek Network Security Monitor @zeek.org · 01/09/2026
How does Lawrence Berkeley National Laboratory search through months of historical Zeek logs in seconds? We're excited to find out at next week's Zeek workshop in Berkeley. September 10-11. Free to attend: zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 31/08/2026
How do we secure network monitors against emerging AI and quantum threats? Phuong Cao (NCSA) is joining us in Berkeley to share lessons from massive testbeds on bug-hunting with AI Agent Harness and analyzing cryptographic parsers. Join us Sept 10: zeek.org/zeek-worksho... #Zeek #NetworkSecurity
000
The Zeek Network Security Monitor @zeek.org · 28/08/2026
Some early takeaways from this year's community survey are now up on the blog - a big thank you to those who shared feedback with our team! zeek.org/2026/08/2026...
000
The Zeek Network Security Monitor @zeek.org · 26/08/2026
Next week's Community Call features a Zeek 9 preview from the open-source team, covering: + Log schemas + Running Zeek clusters with systemd + XDP packet shunting Join us live next Wednesday: zeek.org/events/ #Zeek #NetworkSecurity
000
The Zeek Network Security Monitor @zeek.org · 25/08/2026
Just over two weeks out from our workshop in Berkeley 👀 Registration is still open, grab your seat while you can: zeek.org/zeek-worksho... Thank you to our sponsor @corelight-inc.bsky.social for the suport!
000
The Zeek Network Security Monitor @zeek.org · 20/08/2026
Pushing high traffic volumes? Vern Paxson is going to break down new speed capabilities, scripting techniques, and implementation strategies to improve your network analysis performance. Join us in Berkeley next month to learn more! It's free to attend: zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 18/08/2026
Curious about the Zeek roadmap? At the Berkeley workshop next month, Christian is presenting Zeek 9 and Beyond, covering the recent ZeroMQ cluster routing changes and what's next. Register for free here: zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 13/08/2026
When storing PCAPs is too costly, how do you debug false negatives in production? In Part 3 of his series, Yacin shows how to write a short driver script using the Input Framework to run and refine Zeek packages against months of historical log files. zeek.org/2026/07/the-...
000
The Zeek Network Security Monitor @zeek.org · 13/08/2026
Zeek 9.0 is just around the corner! Christian wrote a blog post that breaks down the feature roadmap, extensive LLM-driven security audits, and the upcoming release timeline. Give it a read: zeek.org/2026/08/zeek... #Zeek #OpenSource #NetworkSecurity #CyberSecurity
010
The Zeek Network Security Monitor @zeek.org · 12/08/2026
How do you defend one of the world's most hostile network environments? Join us in Berkeley next month, where Mark is going to explore how Zeek and Suricata are combined to hunt threats and secure Black Hat globally. zeek.org/zeek-worksho... #Zeek #OpenSource #NetworkSecurity #ThreatHunting
020
The Zeek Network Security Monitor @zeek.org · 11/08/2026
In a new blog post, Arne breaks down how Zeek is shifting process management to native systemd and a new zeek.conf workflow for Zeek 9.0. If you run Zeek in production, read the rationale and share your feedback: zeek.org/2026/08/beyo... #Zeek #OpenSource #NetworkSecurity
010
The Zeek Network Security Monitor @zeek.org · 11/08/2026
We're one month out from Zeek Workshop Berkeley 2026 - don't forget to bring your laptop on Day 2 for training ⤵️ zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 07/08/2026
Read our July community recap on debugging your mental model (and surviving 74,000 alerts in two hours): zeek.org/2026/08/the-... #Zeek #NetworkSecurity
000
The Zeek Network Security Monitor @zeek.org · 05/08/2026
Evan's talk is going to be 🔥 🌶️ 🥵 zeek.org/zeek-worksho...
100
The Zeek Network Security Monitor @zeek.org · 04/08/2026
If you're looking to bring up your first cluster or write custom event handlers, Day 2 of the Berkeley Workshop offers a full-day training track (Sept 11, 9 AM–3 PM). Know someone who should be in the room? Forward this along: zeek.org/zeek-worksho... #Zeek #NetworkSecurity
010
The Zeek Network Security Monitor @zeek.org · 03/08/2026
Can't share a PCAP or testing a script that depends on an external service? Part 2 of Yacin's series covers hand-crafting events and using Zeek's built-in event tracing flag to test package functionality. zeek.org/2026/07/the-... #Zeek #NetworkSecurity
000
The Zeek Network Security Monitor @zeek.org · 03/08/2026
The next Zeek Community Call is happening THIS WEEK! Grab the Zoom link here: zeek.org/events/
000
The Zeek Network Security Monitor @zeek.org · 22/07/2026
Testing Zeek script logic shouldn't require spinning up a fake PCAP. In Part 1 of a new series, Yacin shows how to use BTest and native assert statements (added in Zeek 6.1.0) to unit test auxiliary functions inside zeek_init. zeek.org/2026/07/the-... #Zeek #NetworkSecurity #BTest
000
The Zeek Network Security Monitor @zeek.org · 22/07/2026
At the Berkeley Workshop, Arne's going to walk through building a modern Zeek deployment model for physical, virtual, and containerized environments without ZeekControl. Know someone who should be in the room for this discussion? Pass this along: zeek.org/zeek-worksho... #Zeek #NetworkSecurity
000
The Zeek Network Security Monitor @zeek.org · 21/07/2026
At the Berkeley Workshop, Aaron Scantlin will walk through how NERSC integrates Zeek directly into their daily security operations. He'll share lessons on deployment architecture, automation, log enrichment, and more. Details and registration: zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 20/07/2026
Will the next Zeek LTS break your downstream parsers? What changes when you drop in a new package? At the Berkeley Workshop, Christian will break down the logschema package + show you how to audit, track, and generate schemas using simple CLI commands. zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 16/07/2026
Last year, the community made it clear that "where do I start?" was a massive roadblock for contributors, so we rebuilt our Contribution Guide to make the process clearer. We need to know what to fix next. Let us know before August 14 👾 zeek.org/survey #Zeek #OpenSource
010
The Zeek Network Security Monitor @zeek.org · 15/07/2026
Zeek Workshop speaker promotion STARTS NOW! Whether you've been using Zeek (or Bro!) since the beginning or are just getting started, this is a must-attend session. Schedule: zeek.org/zeek-worksho... #Zeek #OpenSource #NetworkSecurity #ThreatIntelligence #BerkleyWorkshop
010
The Zeek Network Security Monitor @zeek.org · 14/07/2026
Spicy vs. Binpac: One year later, how much faster is Zeek's modern parser generator? ⏱️ New performance benchmarks are live, showing key speedups of up to 1.6x in microbenchmarks and real-world gains on Zeek 8.2. See what it means for your custom analyzers: zeek.org/2026/07/spic...
000
The Zeek Network Security Monitor @zeek.org · 09/07/2026
Our updated Contribution Guide now outlines more ways to get involved with the project. It's live on the Zeek wiki - read more: zeek.org/2026/07/weve...
000
The Zeek Network Security Monitor @zeek.org · 08/07/2026
The CFP for Zeek Workshop Berkeley is now closed. We'll begin sharing the initial speaker lineup next week 😎 Registration is still open - join us Sept 10-11! zeek.org/zeek-worksho... #Zeek #OpenSource
010
The Zeek Network Security Monitor @zeek.org · 07/07/2026
Zero contributors in a recent community discussion said they use Zeek's Intel Framework for detection. We recapped the reasons behind this, and what they're doing instead: zeek.org/2026/07/what...
000
The Zeek Network Security Monitor @zeek.org · 01/07/2026
We've extended the CFP deadline for Zeek Workshop Berkeley to July 8. Have a talk in mind? Submit it! zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 24/06/2026
The next Zeek Community Call is on the calendar for July 1 at 10am Pacific. We hope to see ya there! zeek.org/events/
000
The Zeek Network Security Monitor @zeek.org · 23/06/2026
It's that time of the year 😀 zeek.org/survey
000
The Zeek Network Security Monitor @zeek.org · 22/06/2026
Less than two weeks to submit a talk for Zeek Workshop Berkeley. Community and practitioner submissions especially welcome 😇 CFP closes July 1: zeek.org/zeek-worksho... #Zeek #OpenSource
030
The Zeek Network Security Monitor @zeek.org · 10/06/2026
The 2026 Zeek Project Survey opens June 23. If you filled it out last year, give this post a quick read to understand how your feedback shaped our recent community projects: zeek.org/2026/06/the-...
000
The Zeek Network Security Monitor @zeek.org · 08/06/2026
Evan is at RVAsec tomorrow - catch his talk "Building Custom Detections with Zeek and Spicy" at 1pm + say hi if you're there! Other community news & more in our newsletter: community.zeek.org/t/zeek-newsl...
000
The Zeek Network Security Monitor @zeek.org · 03/06/2026
Last month's community discussion was all about sensor placement. Check out the recap on our blog and find out what themes came up again and again: zeek.org/2026/06/zeek...
000
The Zeek Network Security Monitor @zeek.org · 27/05/2026
Mark your calendars: the next Zeek Community Call is happening June 3 at 10am Pacific Time. The Leadership Team will be sharing project news, development updates, and more: zeek.org/events/
000
The Zeek Network Security Monitor @zeek.org · 19/05/2026
Bringing our next Zeek workshop to Berkeley this September feels like a bit of a homecoming. cc @berkeleylab.lbl.gov CFP open through July 1 if you want to speak... zeek.org/zeek-worksho... #Zeek #OpenSource
010
The Zeek Network Security Monitor @zeek.org · 18/05/2026
Zeek 8.2 is out! Check out our blog for full updates. What's inside: New &publish_on_change attribute for cluster state propagation, ZeroMQ encryption via CURVE, configurable analyzer ports, Spicy 1.16, and a redesigned documentation site with a new tutorial. zeek.org/2026/05/intr...
000
The Zeek Network Security Monitor @zeek.org · 06/05/2026
New on the blog: How the heck do you know Zeek is working? zeek.org/2026/05/how-...
000
The Zeek Network Security Monitor @zeek.org · 01/05/2026
Join us in-person at Zeek Workshop Berkeley 2026! September 10-11 at the David Brower Center in Berkeley, CA. Free to attend. Registration open now: zeek.org/zeek-worksho... #Zeek #NetworkSecurity #OpenSource
011
The Zeek Network Security Monitor @zeek.org · 29/04/2026
New on the blog: Zeek can write TSV and JSON from the same log stream at the same time. Johanna shows how 👉 zeek.org/2026/04/how-...
000
The Zeek Network Security Monitor @zeek.org · 29/04/2026
Heads up! The next Zeek Community Call is happening next week. Join us on May 6 at 10am Pacific Time for project updates and more. Grab the Zoom link from our website: zeek.org/events/
000
The Zeek Network Security Monitor @zeek.org · 23/04/2026
ESnet was logging 4.2M weirds a day - most of it was legitimate traffic Zeek didn't recognize. Learn how they cut the noise by 70%: zeek.org/2026/04/revi...
000
The Zeek Network Security Monitor @zeek.org · 22/04/2026
Don't forget - Arne recently talked about Zeek + AWS Traffic Mirroring over on the blog: zeek.org/2026/02/usin...
000