Zeek Blog
Zeek 7.1 Development Update
We're closing in on Zeek 7.1, the next feature release in Zeek’s current release cycle. Here's a quick look at our planned release timeline. Early next week the last planned 7.1 features will land in our master branch. We're planning to fork the release branch and...
Upcoming Zeek Workshop in Munich, Germany
Are you curious about Zeek? Do you live within reach of Munich, Germany? If so, we’ve got something special for you! The Zeek Project is thrilled to offer a two-day Zeek community workshop in Munich, Germany, on February 26th & 27th, 2025. Come and join us for technical talks, hands-on training, and discussions about Zeek, its many applications, and its future. Meet Zeek developers and leadership team, and connect with your colleagues. Registration is now open, and attendance is free.
Introducing Zeek 7
The Zeek team is proud to announce the release of Zeek 7! Work on this release began in February 2024 and includes some 1,100 commits, 330 pull requests, and 140 closed issues. As always, we are particularly grateful to our community members who contributed to this...
Zeek Webinar Series Announcement
It’s our pleasure to announce a new series of Zeek Webinars. The webinars will start on August 21st, 10 am Pacific Time and follow a roughly bi-weekly schedule, coinciding with the timeslot that we host our community calls in. The webinars will feature the talks that...
Cancellation of ZeekWeek 2024
Dear Zeek Community, It is with a heavy heart that we have to announce the cancellation of ZeekWeek 2024. We are 45 days from the beginning of the event at the time of this post, and we have around 9 registrations from non-project-affiliated people. With this...
ZeekWeek 2024 – Registration Open!
ZeekWeek 2024 will be held August 13th – 15th at the Caltech Ramo Auditorium in Pasadena, CA. This will be an in-person event. Registration Information Registration is now open! Day 1 and day 2 will consist of talks. If you would like to attend a training on day 3,...
ZeekWeek 2024 – Call for Presentations
ZeekWeek 2024 will be held on August 13th and 14th at the Caltech Ramo Auditorium located in Pasadena, California. Additionally there will be a Zeek training event on August 15th. ZeekWeek will be an in-person event. Presentations will be recorded and published after...
Recent Zeek Performance Improvements
Over the course of the past year we’ve made a number of changes to Zeek that have positively affected its performance, sometimes considerably. This blog post highlights a few places and changes that knowingly improved performance between Zeek 5.2 and Zeek 6.2....
A Note on Package Safety Considerations
On 5 March, the United States Cybersecurity and Infrastructure Security Agency (CISA) released an advisory pertaining to a Zeek package hosted by CISA’s GitHub account. This is not a security issue in Zeek itself but in a third-party provided package. The Zeek project...
Seeking Windows contributors
Since we announced experimental Windows support in 2022, we've received a slow but constant influx of bug reports and support requests for this platform. Over the past months our workload has increased substantially, for reasons that we're very happy about: Spicy has...
Save the Date – Zeek Week 2024 – August 13th & 14th + Training Day @ Caltech
We are happy to announce that Zeek Week 2024 is going to be held from August 13th to 14th at Caltech in Pasadena, Los Angeles County, California. In addition to the two main days, we are planning to have an adjacent one-day training, either directly before or directly...
A first look at Zeek’s new JavaScript support
The Zeek 6 release includes a very powerful new feature: the ability to script Zeek in JavaScript. In this post we’ll explain what this capability brings to Zeek, how it works internally, and where we see it going in the future. Meet JavaScript, Zeek-style Since its...
Introducing a new Zeek event format: ZeekDays
On May 31st, Corelight’s Open Source team hosted a “Meet the Zeek Developers” day in Amsterdam. Different from other Zeek events, this was a very informal gathering without a set agenda; this meeting was an opportunity for exchange between members of the Zeek...
2023 Zeek LT election results
Hello everyone, As previously announced, the nomination period for the Zeek LT closed on August 20th, 2023. To recap – during this election period, we looked to fill four seats on the Zeek leadership team. During the nomination phase, we received nominations for five...
Zeek Project training during NSF summit – Oct 23rd 2023
The Zeek Project team is excited to host a one-day in-person Zeek training event during the NSF cybersecurity summit happening at the Lawrence Berkeley National Laboratory. We will be hosting two trainings: “Intermediate to Zeek” and “Hands-On Zeek Scripting” running...
Zeek LT Election 2023
We just started the process for the third Zeek LT election. During this election, four of the LT seats are up for re-election. The Zeek LT is the governing body of the Zeek project. The work of the Zeek LT mostly revolves around topics such as event planning, outreach...
Introducing Zeek 6
The Zeek team is proud to announce the release of Zeek 6! Work on this release began in February and comprises around 720 commits in 210 PRs. We’re deeply grateful to our contributors in this release cycle, including Jan Grashöfer, Eldon Koyle, Michael Torres, and...
Update: ZeekWeek on Hiatus, Regional Learning Events Announced
We have some important news to share with the Zeek community regarding this year's ZeekWeek conference. After careful consideration and discussions with Corelight, the ZeekWeek sponsor, we have decided that ZeekWeek is going on a hiatus for 2023. However, we are...
Zeek 2023 Community Survey Results
The Zeek project conducted a two week survey of its user community in early 2023, soliciting 98 responses. The majority of respondents (75%) report living in North America, with a plurality (29%) reporting that their closest major city was located on the east coast....
Introducing Zeek 5.2
The Zeek team is proud to announce the release of Zeek 5.2, starting the final line of feature releases in the 5.x cycle. Development on 5.2 began in late September 2022 and has included some 660 commits, 178 PRs, and external contributions from the teams at Microsoft...
Modern developer tooling for Zeek script
The typical experience of developing in a programming language has changed substantially since the time Zeek script was first introduced in the mid 90s. Today users rightfully expect an inclusive environment with approachable ways to interact with the community, and...
Zeek on Windows
As we shared at ZeekWeek 2022 in October, we’re thrilled to announce emerging support for Zeek on Windows, thanks to an open-source contribution from Microsoft. Part of its integration of Zeek into its Defender for Endpoint security platform, this contribution...
Nomination Phase for the 2022 Zeek Leadership Team Election is now open
This year, half of the Zeek LT seats are up for re-election. We just entered the Nomination Phase of the Zeek Leadership Team (LT) elections. During this phase you can nominate either yourself or someone you know for a seat on the LT. Please submit nominations for a...
ZeekWeek 2022 – Registration Open!
ZeekWeek 2022 will be held 12-14 October at the AT&T Hotel and Conference Center located in Austin, Texas. Registration Open!
Zeek 5.0
The Zeek team is quite excited to announce Zeek 5.0: it’s a major release providing a lot of new functionality, both extending Zeek itself and also growing its ecosystem through new capabilities and tools. Thanks to everybody who has contributed to this release, many...
Zeek Week 2022 – Call for Presentations
ZeekWeek 2022 will be held from October 12th to 14th at the AT&T Hotel and Conference Center located in Austin, Texas. ZeekWeek will be an in-person event. Presentations will be recorded and published after the event. ZeekWeek is the annual gathering of defenders,...
Zeek Project training
The Zeek Project is delighted to announce that we are going to offer the Zeek community training next month. Usually it is a one day event offered during ZeekWeeks, but due to high demand and long waitlist of people during ZeekWeek, we have decided to offer it twice...
Save the date – ZeekWeek 2022 – October 12th to 14th
We are happy to announce that ZeekWeek 2022 will be held on October 12th to 14th in Austin, Texas. More details, as well as a Call for Presentations will be released in the next few weeks. Mark your calendars – and we hope to see you all in Austin in October.
Zeek In Action, Video 12, zeek2es
In this video, Keith Jones (Sr. Security Researcher, Corelight) introduces a simple Python program written to help you take your Zeek ASCII tab delimited files and make them full text searchable with ElasticSearch+Kibana (or OpenSearch, if you prefer). If you don’t...
Zeek in Action, Video 11, Using Spicy Driver
In this Zeek in Action video, Keith Jones explains his Spicy protocol analyzer rapid development process on a new Radius analyzer. Of course Radius is in core Zeek, but it can be replaced with a Spicy Radius protocol analyzer.
RSS - Posts