Simple play icon Course
Skills

Incident Response & Threat Hunting Using Bro/Zeek Data

by BSides Huntsville

BSides Huntsville | Incident Response & Threat Hunting Using Bro/Zeek Data | Alex Kirk

What you'll learn

The open source Zeek network security monitor provides valuable data for incident responders and threat hunters alike. This talk will discuss how to use that data to lower the time necessary to find attackers on your network, as well as ways that advanced users can take Zeek's scripting language to create powerful, flexible detection logic that goes beyond traditional point-in-time IDS signatures.

Table of contents

Incident Response & Threat Hunting Using Bro/Zeek Data
34mins

About the author

BSides Huntsville is the conference for those that work (or would like to work) in the trenches of cybersecurity. This is the opportunity for you to engage in fierce discussions about the next big ideas or the worst product you've ever seen in a friendly and informal setting.

Ready to upskill? Get started