Monitorama PDX 2023 - Meet Zeek, the extensible, scriptable network monitor

Christian Kreibich's session from Monitorama PDX 2023.
Network monitoring is key for understanding your infrastructure, whether that's your home network or a thousand-seat corporate environment. Using its domain-specific scripting language, the Zeek network monitor helps you turn the packets in your network into streams of actionable logs, organized around protocols and themes that matter to you. Zeek is a mature, battle-hardened platform and ecosystem that runs on anything from Raspberry Pi's to to industrial-scale deployments, such as Microsoft Defender
I am the technical lead for the Zeek project, and in this talk I'll give an overview of Zeek, its architecture and capabilities, and the goals of the project.