Overview

With the recent emergence of advanced technologies such as cloud, mobility, Internet of Things (IoT), securing computer networks has never been more difficult, and legacy network monitoring tools are unable to cope with the changing network security landscape. Zeek is an open-source network traffic analyzer, which is widely used by organizations as a network security monitor (NSM), as well as a network intrusion detection system. 

The course will start with a brief introduction to Zeek, followed by an explanation on how it monitors networks and detects and responds to suspicious or malicious activity. Moving ahead, you’ll learn how to install and setup Zeek, and the various formats and types of Logs generated by Zeek that describe network activity. You’ll also learn to interpret the Zeek scripting language, which allows organizations to customize and extend Zeek’s functionality. The course will end with the various software frameworks within Zeek which can be used to achieve application-specific functionality.

 By the end of the course, you’ll have a thorough understanding of Zeek and its functioning, and you’ll be able to deploy the tool to secure networks.