The Zeek Network Security Monitor
LightNews LightNews
banner
zeek.org
The Zeek Network Security Monitor
@zeek.org
98 followers 24 following 260 posts
Zeek is an open source network security monitor.

zeek.org | github.com/zeek | community.zeek.org
Posts Replies Media Videos
zeek.org
Coming up at next Zeek Community Call: project updates, community news, and Zeek & AI. Tune in October 7 at 10am Pacific: zeek.org/events/
October 1, 2026 at 3:43 PM
zeek.org
Renaming Zeek's JSON log fields to shorter names can save multiple gigabytes per day. Johanna shows how, plus how to use log filtering hooks to skip lines you don't need:

zeek.org/2026/09/redu...
September 28, 2026 at 7:45 PM
zeek.org
Evan demos experimental XDP support in Zeek: kernel-level traffic shunting that reduces processing overhead without specialized hardware. It’s experimental for now and feedback is welcome 😊

youtu.be/1B599l6lnWs
Experimental XDP Support in Zeek: Kernel-Level Traffic Shunting Demo
YouTube video by Zeek
youtu.be
September 24, 2026 at 7:03 PM
zeek.org
Fatema, Christian, and Aashish are leading a hands-on Zeek training at the NSF Cybersecurity Summit in October. Bring your laptop and leave with a running Zeek cluster.

Registration closes October 9:
www.trustedci.org/2026-nsf-cyb...
2026 NSF Cybersecurity Summit — Trusted CI: The NSF Cybersecurity Center of Excellence
www.trustedci.org
September 22, 2026 at 7:31 PM
zeek.org
Next up in our Zeek 9 preview series: Christian Kreibich walks through the new Log Schema package.

See how to document your log structures and track schema drift across different Zeek installations: youtu.be/GDuwUnz119U
Introducing Log Schema for Zeek: Know What Your Logs Actually Look Like
YouTube video by Zeek
youtu.be
September 22, 2026 at 4:36 PM
zeek.org
We put together a few short demos to highlight what’s new in Zeek 9. Check out Arne's walkthrough of the new systemd generator, a modern alternative to zeekctl for managing Zeek on Linux systems:

youtu.be/wzFAz1pYg9c
Managing a Zeek Cluster with systemd
YouTube video by Zeek
youtu.be
September 21, 2026 at 7:03 PM
zeek.org
All recordings from Zeek Workshop Berkeley 2026 are now available! Check them out and stay tuned for news about future Zeek events...

www.youtube.com/playlist?lis...
Zeek Workshop Berkeley 2026 - YouTube
Presentations from Zeek Workshop Berkeley 2026, held at the David Brower Center on September 10 & 11, 2026. Sponsored by Corelight.
www.youtube.com
September 18, 2026 at 4:42 PM
zeek.org
We're very, very excited to share that Zeek 9 has landed. Thank you to the contributors and community members who helped make this release happen!

Read the full update on our blog: zeek.org/2026/09/intr...
September 17, 2026 at 9:46 PM
zeek.org
If you missed out on Zeek Workshop Berkeley last week, we'll be uploading most of the talks here: www.youtube.com/playlist?lis...

Keep an eye out as we continue sharing videos throughout the week.
Zeek Workshop Berkeley 2026
YouTube video by Zeek
www.youtube.com
September 15, 2026 at 4:16 PM
zeek.org
We're always eager to share great content from our community members. Be sure to check out our monthly newsletter to get up to speed, and don't miss Aashish's and Arne's latest blog posts!
September 14, 2026 at 5:45 PM
zeek.org
Berkeley is a blast 🤠
September 10, 2026 at 8:12 PM
zeek.org
Zeek 9 RC2 is out for a few more days and we're looking for folks to test it. Details in the August newsletter:

#Zeek #NetworkSecurity #OpenSource
September 9, 2026 at 6:33 PM
zeek.org
Really looking forward to Aashish's talk on Thursday, where he's breaking down a year of LLM experiments at Berkeley Lab.

Last call to join us: zeek.org/zeek-worksho...
September 8, 2026 at 7:51 PM
zeek.org
This month's newsletter has a tip on a built-in function that generates an approximate object count for every global container variable, so you can spot the problem without guessing.

Find it here! community.zeek.org/t/zeek-newsl...

#Zeek #NetworkSecurity #OpenSource
Zeek Newsletter - Issue 66 - August 2026
Welcome to the Zeek Newsletter In this Issue: Community News Development Updates Zeek Techniques Ecosystem News Packages Get Involved TL;DR: Zeek 9 RC2 is out and the team needs your testing feedbac...
community.zeek.org
September 8, 2026 at 4:42 PM
zeek.org
We just published our monthly newsletter - catch up on development news, community happenings, and more:

community.zeek.org/t/zeek-newsl...
Zeek Newsletter - Issue 66 - August 2026
Welcome to the Zeek Newsletter In this Issue: Community News Development Updates Zeek Techniques Ecosystem News Packages Get Involved TL;DR: Zeek 9 RC2 is out and the team needs your testing feedbac...
community.zeek.org
September 3, 2026 at 8:17 PM
zeek.org
Attacks rarely start with an exploit - they start with reconnaissance. In a new blog post, Aashish breaks down how scan detection works in Zeek, from tracking TCP failures with Simple Scan to using darknets and profile-based rules.

zeek.org/2026/09/how-...

#Zeek #NetworkSecurity
September 2, 2026 at 6:30 PM
zeek.org
How does Lawrence Berkeley National Laboratory search through months of historical Zeek logs in seconds? We're excited to find out at next week's Zeek workshop in Berkeley.

September 10-11. Free to attend: zeek.org/zeek-worksho...
September 1, 2026 at 7:54 PM
zeek.org
At tomorrow's Community Call, we're talking all about Zeek 9.

zeek.org/events/
zeek.org The Zeek Network Security Monitor @zeek.org · Aug 26
Next week's Community Call features a Zeek 9 preview from the open-source team, covering:

+ Log schemas
+ Running Zeek clusters with systemd
+ XDP packet shunting

Join us live next Wednesday: zeek.org/events/

#Zeek #NetworkSecurity
September 1, 2026 at 6:06 PM
zeek.org
How do we secure network monitors against emerging AI and quantum threats?

Phuong Cao (NCSA) is joining us in Berkeley to share lessons from massive testbeds on bug-hunting with AI Agent Harness and analyzing cryptographic parsers.

Join us Sept 10: zeek.org/zeek-worksho...

#Zeek #NetworkSecurity
August 31, 2026 at 9:20 PM
zeek.org
Some early takeaways from this year's community survey are now up on the blog - a big thank you to those who shared feedback with our team!

zeek.org/2026/08/2026...
August 28, 2026 at 4:25 PM
zeek.org
Next week's Community Call features a Zeek 9 preview from the open-source team, covering:

+ Log schemas
+ Running Zeek clusters with systemd
+ XDP packet shunting

Join us live next Wednesday: zeek.org/events/

#Zeek #NetworkSecurity
August 26, 2026 at 7:15 PM
zeek.org
Just over two weeks out from our workshop in Berkeley 👀

Registration is still open, grab your seat while you can: zeek.org/zeek-worksho...

Thank you to our sponsor @corelight-inc.bsky.social for the suport!
August 25, 2026 at 5:09 PM
zeek.org
Pushing high traffic volumes?

Vern Paxson is going to break down new speed capabilities, scripting techniques, and implementation strategies to improve your network analysis performance.

Join us in Berkeley next month to learn more!

It's free to attend: zeek.org/zeek-worksho...
August 20, 2026 at 2:11 PM
zeek.org
How are you currently managing Zeek processes?

As we prepare for Zeek 9.0, we want to make sure the shift to native systemd aligns with how you run Zeek in production.

Give this a read and let us know:
zeek.org The Zeek Network Security Monitor @zeek.org · Aug 11
In a new blog post, Arne breaks down how Zeek is shifting process management to native systemd and a new zeek.conf workflow for Zeek 9.0.

If you run Zeek in production, read the rationale and share your feedback: zeek.org/2026/08/beyo...

#Zeek #OpenSource #NetworkSecurity
August 19, 2026 at 7:23 PM
zeek.org
Curious about the Zeek roadmap?

At the Berkeley workshop next month, Christian is presenting Zeek 9 and Beyond, covering the recent ZeroMQ cluster routing changes and what's next.

Register for free here: zeek.org/zeek-worksho...
August 18, 2026 at 5:15 PM