Zeek – Suppress SSL/TLS Notices
Christos There are times that you get a lot of Zeek Notices that have no value to your security model or these are false positives. Maybe it will not be in…
Zeek – SMTP URL Extraction
Zeek is a powerful tool for monitoring your networks. It has many powerful capabilities, but the best of all, it is the Zeek script language, that gives you the capability…
Zeek – Log Rotation
These days the traffic that we have to monitor is huge so maybe keeping logs forever is not something that can be achieved. In order to configure how many days…
Zeek – Enable AF-Packet
When you install an IDPS Sensor in an environment with a high traffic rate, it is preferred to run your sensor with AF-Packet. UPDATE: There is no need in the…
Zeek – JSON Log Output
There are cases where it is preferred to send your logs in JSON format.Why?Because JSON format is easier to parse.So if you want to send your logs to a SIEM…
