Sign in

The Zeek Network Security Monitor

@zeek.org
98 followers 24 following 266 posts

Zeek is an open source network security monitor. zeek.org | github.com/zeek | community.zeek.org

PostsRepliesMedia
The Zeek Network Security Monitor @zeek.org · 15/10/2026
Steve Smoot joined last week's community call to talk about AI and Zeek in OT. Be sure to catch his talk here: youtu.be/3E1QM0QHKJw
youtu.be
AI and Zeek in an OT Context: Better Data and Disciplined Parser Building
YouTube video by Zeek
000
The Zeek Network Security Monitor @zeek.org · 14/10/2026
Patch releases for Zeek 8.0 and 9.0 are expected around the end of the month. The team's also been spending time on security fixes for issues reported through LLM and AI tooling. Catch up on all Zeek updates in our latest newsletter:
000
The Zeek Network Security Monitor @zeek.org · 13/10/2026
Sujala pointed Zeek at a simulated biological incubator to see whether it could monitor sensor telemetry instead of network traffic. We found the project on GitHub and asked her to write about what she learned building it: zeek.org/2026/10/buil...
000
The Zeek Network Security Monitor @zeek.org · 12/10/2026
First-time contributor Van started the work on a DHCPv6 analyzer for Zeek that's now merged into master - and we're looking for feedback! Learn more in our latest newsletter:
000
The Zeek Network Security Monitor @zeek.org · 08/10/2026
Development on Zeek 9.1 is underway, and the September newsletter is out with the rest of this month's news: community.zeek.org/t/zeek-newsl...
community.zeek.org
Zeek Newsletter - Issue 67 - September 2026
Welcome to the Zeek Newsletter In this Issue: Community News Development Updates Zeek Techniques Packages Get Involved TL;DR: Zeek 9.1 development is underway! We also merged an initial DHCPv6 analy...
010
The Zeek Network Security Monitor @zeek.org · 06/10/2026
Reminder for tomorrow's Community Call! Tune in live for project updates and a cool talk about AI and Zeek. zeek.org/events
000
The Zeek Network Security Monitor @zeek.org · 05/10/2026
Every default Zeek log exposes a hook you can use to veto individual log lines. Johanna shows how in her recent blog post:
010
The Zeek Network Security Monitor @zeek.org · 01/10/2026
Coming up at next Zeek Community Call: project updates, community news, and Zeek & AI. Tune in October 7 at 10am Pacific: zeek.org/events/
000
The Zeek Network Security Monitor @zeek.org · 28/09/2026
Renaming Zeek's JSON log fields to shorter names can save multiple gigabytes per day. Johanna shows how, plus how to use log filtering hooks to skip lines you don't need: zeek.org/2026/09/redu...
101
The Zeek Network Security Monitor @zeek.org · 24/09/2026
Evan demos experimental XDP support in Zeek: kernel-level traffic shunting that reduces processing overhead without specialized hardware. It’s experimental for now and feedback is welcome 😊 youtu.be/1B599l6lnWs
youtu.be
Experimental XDP Support in Zeek: Kernel-Level Traffic Shunting Demo
YouTube video by Zeek
000
The Zeek Network Security Monitor @zeek.org · 22/09/2026
Fatema, Christian, and Aashish are leading a hands-on Zeek training at the NSF Cybersecurity Summit in October. Bring your laptop and leave with a running Zeek cluster. Registration closes October 9: www.trustedci.org/2026-nsf-cyb...
trustedci.org
2026 NSF Cybersecurity Summit — Trusted CI: The NSF Cybersecurity Center of Excellence
000
The Zeek Network Security Monitor @zeek.org · 22/09/2026
Next up in our Zeek 9 preview series: Christian Kreibich walks through the new Log Schema package. See how to document your log structures and track schema drift across different Zeek installations: youtu.be/GDuwUnz119U
youtu.be
Introducing Log Schema for Zeek: Know What Your Logs Actually Look Like
YouTube video by Zeek
000
The Zeek Network Security Monitor @zeek.org · 21/09/2026
We put together a few short demos to highlight what’s new in Zeek 9. Check out Arne's walkthrough of the new systemd generator, a modern alternative to zeekctl for managing Zeek on Linux systems: youtu.be/wzFAz1pYg9c
youtu.be
Managing a Zeek Cluster with systemd
YouTube video by Zeek
000
The Zeek Network Security Monitor @zeek.org · 18/09/2026
All recordings from Zeek Workshop Berkeley 2026 are now available! Check them out and stay tuned for news about future Zeek events... www.youtube.com/playlist?lis...
youtube.com
Zeek Workshop Berkeley 2026 - YouTube
Presentations from Zeek Workshop Berkeley 2026, held at the David Brower Center on September 10 & 11, 2026. Sponsored by Corelight.
000
The Zeek Network Security Monitor @zeek.org · 17/09/2026
We're very, very excited to share that Zeek 9 has landed. Thank you to the contributors and community members who helped make this release happen! Read the full update on our blog: zeek.org/2026/09/intr...
010
The Zeek Network Security Monitor @zeek.org · 15/09/2026
If you missed out on Zeek Workshop Berkeley last week, we'll be uploading most of the talks here: www.youtube.com/playlist?lis... Keep an eye out as we continue sharing videos throughout the week.
youtube.com
Zeek Workshop Berkeley 2026
YouTube video by Zeek
000
The Zeek Network Security Monitor @zeek.org · 14/09/2026
We're always eager to share great content from our community members. Be sure to check out our monthly newsletter to get up to speed, and don't miss Aashish's and Arne's latest blog posts!
000
The Zeek Network Security Monitor @zeek.org · 10/09/2026
Berkeley is a blast 🤠
000
The Zeek Network Security Monitor @zeek.org · 09/09/2026
Zeek 9 RC2 is out for a few more days and we're looking for folks to test it. Details in the August newsletter: #Zeek #NetworkSecurity #OpenSource
community.zeek.org
Zeek Newsletter - Issue 66 - August 2026
Welcome to the Zeek Newsletter In this Issue: Community News Development Updates Zeek Techniques Ecosystem News Packages Get Involved TL;DR: Zeek 9 RC2 is out and the team needs your testing feedbac...
010
The Zeek Network Security Monitor @zeek.org · 08/09/2026
Really looking forward to Aashish's talk on Thursday, where he's breaking down a year of LLM experiments at Berkeley Lab. Last call to join us: zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 08/09/2026
This month's newsletter has a tip on a built-in function that generates an approximate object count for every global container variable, so you can spot the problem without guessing. Find it here! community.zeek.org/t/zeek-newsl... #Zeek #NetworkSecurity #OpenSource
community.zeek.org
Zeek Newsletter - Issue 66 - August 2026
Welcome to the Zeek Newsletter In this Issue: Community News Development Updates Zeek Techniques Ecosystem News Packages Get Involved TL;DR: Zeek 9 RC2 is out and the team needs your testing feedbac...
020
The Zeek Network Security Monitor @zeek.org · 03/09/2026
We just published our monthly newsletter - catch up on development news, community happenings, and more: community.zeek.org/t/zeek-newsl...
community.zeek.org
Zeek Newsletter - Issue 66 - August 2026
Welcome to the Zeek Newsletter In this Issue: Community News Development Updates Zeek Techniques Ecosystem News Packages Get Involved TL;DR: Zeek 9 RC2 is out and the team needs your testing feedbac...
000
The Zeek Network Security Monitor @zeek.org · 02/09/2026
Attacks rarely start with an exploit - they start with reconnaissance. In a new blog post, Aashish breaks down how scan detection works in Zeek, from tracking TCP failures with Simple Scan to using darknets and profile-based rules. zeek.org/2026/09/how-... #Zeek #NetworkSecurity
000
The Zeek Network Security Monitor @zeek.org · 01/09/2026
How does Lawrence Berkeley National Laboratory search through months of historical Zeek logs in seconds? We're excited to find out at next week's Zeek workshop in Berkeley. September 10-11. Free to attend: zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 01/09/2026
At tomorrow's Community Call, we're talking all about Zeek 9. zeek.org/events/
000
The Zeek Network Security Monitor @zeek.org · 31/08/2026
How do we secure network monitors against emerging AI and quantum threats? Phuong Cao (NCSA) is joining us in Berkeley to share lessons from massive testbeds on bug-hunting with AI Agent Harness and analyzing cryptographic parsers. Join us Sept 10: zeek.org/zeek-worksho... #Zeek #NetworkSecurity
000
The Zeek Network Security Monitor @zeek.org · 28/08/2026
Some early takeaways from this year's community survey are now up on the blog - a big thank you to those who shared feedback with our team! zeek.org/2026/08/2026...
000
The Zeek Network Security Monitor @zeek.org · 26/08/2026
Next week's Community Call features a Zeek 9 preview from the open-source team, covering: + Log schemas + Running Zeek clusters with systemd + XDP packet shunting Join us live next Wednesday: zeek.org/events/ #Zeek #NetworkSecurity
000
The Zeek Network Security Monitor @zeek.org · 25/08/2026
Just over two weeks out from our workshop in Berkeley 👀 Registration is still open, grab your seat while you can: zeek.org/zeek-worksho... Thank you to our sponsor @corelight-inc.bsky.social for the suport!
000
The Zeek Network Security Monitor @zeek.org · 20/08/2026
Pushing high traffic volumes? Vern Paxson is going to break down new speed capabilities, scripting techniques, and implementation strategies to improve your network analysis performance. Join us in Berkeley next month to learn more! It's free to attend: zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 19/08/2026
How are you currently managing Zeek processes? As we prepare for Zeek 9.0, we want to make sure the shift to native systemd aligns with how you run Zeek in production. Give this a read and let us know:
000
The Zeek Network Security Monitor @zeek.org · 18/08/2026
Curious about the Zeek roadmap? At the Berkeley workshop next month, Christian is presenting Zeek 9 and Beyond, covering the recent ZeroMQ cluster routing changes and what's next. Register for free here: zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 17/08/2026
Monitoring a high-traffic Linux network? The updated zeek-xdp package is built to help Zeek process heavy traffic loads much more efficiently. Grab the package link in our latest newsletter:
000
The Zeek Network Security Monitor @zeek.org · 13/08/2026
When storing PCAPs is too costly, how do you debug false negatives in production? In Part 3 of his series, Yacin shows how to write a short driver script using the Input Framework to run and refine Zeek packages against months of historical log files. zeek.org/2026/07/the-...
000
The Zeek Network Security Monitor @zeek.org · 13/08/2026
Zeek 9.0 is just around the corner! Christian wrote a blog post that breaks down the feature roadmap, extensive LLM-driven security audits, and the upcoming release timeline. Give it a read: zeek.org/2026/08/zeek... #Zeek #OpenSource #NetworkSecurity #CyberSecurity
010
The Zeek Network Security Monitor @zeek.org · 12/08/2026
How do you defend one of the world's most hostile network environments? Join us in Berkeley next month, where Mark is going to explore how Zeek and Suricata are combined to hunt threats and secure Black Hat globally. zeek.org/zeek-worksho... #Zeek #OpenSource #NetworkSecurity #ThreatHunting
020
The Zeek Network Security Monitor @zeek.org · 12/08/2026
If you've ever had to manually convert raw Unix timestamps while sifting through JSON logs, a simple inline jq command handles it on the fly. Grab the snippet from our monthly Zeek Techniques spotlight in the latest newsletter:
000
The Zeek Network Security Monitor @zeek.org · 11/08/2026
In a new blog post, Arne breaks down how Zeek is shifting process management to native systemd and a new zeek.conf workflow for Zeek 9.0. If you run Zeek in production, read the rationale and share your feedback: zeek.org/2026/08/beyo... #Zeek #OpenSource #NetworkSecurity
010
The Zeek Network Security Monitor @zeek.org · 11/08/2026
We're one month out from Zeek Workshop Berkeley 2026 - don't forget to bring your laptop on Day 2 for training ⤵️ zeek.org/zeek-worksho...
000
The Zeek Network Security Monitor @zeek.org · 10/08/2026
What happens when you run extensive LLM security scanning and continuous fuzzing against the Zeek codebase? A massive batch of bug fixes heading into Zeek 9.0 rc1 and 8.0.10. Details on the mid-August release target in our latest newsletter:
010
The Zeek Network Security Monitor @zeek.org · 07/08/2026
Read our July community recap on debugging your mental model (and surviving 74,000 alerts in two hours): zeek.org/2026/08/the-... #Zeek #NetworkSecurity
000
The Zeek Network Security Monitor @zeek.org · 06/08/2026
Our latest newsletter is out 🗞️ community.zeek.org/t/zeek-newsl...
community.zeek.org
Zeek Newsletter - Issue 65 - July 2026
Welcome to the Zeek Newsletter In this Issue: Community News Development Updates Zeek Techniques Packages Get Involved TL;DR: Zeek 9.0 rc1 and 8.0.10 are targeting mid-August with extensive security...
000
The Zeek Network Security Monitor @zeek.org · 06/08/2026
Slides will definitely be made available on our community Slack workspace -> zeek.org/community/ Maybe we'll host an event in your neck of the woods one day 🤞
zeek.org
Community – Zeek Network Security
Join the Zeek community. Connect on Slack and Discourse, contribute code and documentation, and get involved with the open-source network security project.
010
The Zeek Network Security Monitor @zeek.org · 05/08/2026
Evan's talk is going to be 🔥 🌶️ 🥵 zeek.org/zeek-worksho...
100
The Zeek Network Security Monitor @zeek.org · 05/08/2026
There won't be live streaming or recording for this one - but I have considered asking speakers if they would be able to record separately. In what country/general area are you located?
110
The Zeek Network Security Monitor @zeek.org · 04/08/2026
@dc510.bsky.social is this something your community would be interested in?
210
The Zeek Network Security Monitor @zeek.org · 04/08/2026
Reminder for tomorrow's community call - feel free to just tune in and listen: zeek.org/events/
000
The Zeek Network Security Monitor @zeek.org · 04/08/2026
If you're looking to bring up your first cluster or write custom event handlers, Day 2 of the Berkeley Workshop offers a full-day training track (Sept 11, 9 AM–3 PM). Know someone who should be in the room? Forward this along: zeek.org/zeek-worksho... #Zeek #NetworkSecurity
010
The Zeek Network Security Monitor @zeek.org · 03/08/2026
Can't share a PCAP or testing a script that depends on an external service? Part 2 of Yacin's series covers hand-crafting events and using Zeek's built-in event tracing flag to test package functionality. zeek.org/2026/07/the-... #Zeek #NetworkSecurity
000
The Zeek Network Security Monitor @zeek.org · 03/08/2026
The next Zeek Community Call is happening THIS WEEK! Grab the Zoom link here: zeek.org/events/
000