Writing Zeek Rules and Scripts

Zeek is an event-based monitoring and analysis tool that helps to monitor networks and identify potential threats. It allows users to monitor traffic through networks and to respond in different ways. This tool can be used more efficiently if you know how to modify its functionality using rules and scripts. This course, Writing Zeek Rules & Scripts, will teach you all about the frameworks of this tool and how to customize it. You'll also learn how to use it. You will first learn about Zeek customization and scripting. Next, you'll learn about the Default scripts as well as how to modify them to your requirements. You will also learn how to use the frameworks to create the functionality you need for your specific use cases. After completing this course, Zeek will be available for you to modify to suit your needs and the environment.