homelabsecuritymonitoring/Network_-_Zeek.html at main · BoredHackerBlog/homelabsecuritymonitoring · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
<!doctype html>
<html>
<head>
  <meta http-equiv="content-type" content="text/html; charset=utf-8">
  <title>Network - Zeek</title>
  <meta name="generator" content="CherryTree">
  <link rel="stylesheet" href="res/styles3.css" type="text/css" />
</head>
<body>
<div class='page'><h1 class='title'>Network - Zeek</h1><br/><h1>Zeek<br /></h1><br /><h2>• Zeek is a network monitoring solution<br />• Zeek logs network traffic and decodes various protocols and logs information related to those as well<br />• In addition to logging, Zeek can have plugins that do various things including alert on IOC&#39;s or detect attacks<br />• Probably not a good idea to forward these to Humio w/ free tier as Zeek generates a ton of logs<br /><br /></h2>More info: <a href="https://docs.zeek.org/en/master/">https://docs.zeek.org/en/master/</a><br /></div>
</body>
</html>