We’re hosting a hands-on Zeek training session at the 2026 NSF Cybersecurity Summit at the Beckman Center in Irvine, CA on October 27.
Led by Zeek Leadership Team members Fatema Bannat Wala (ESnet), Christian Kreibich (Corelight), and Aashish Sharma (LBNL), this session is designed to help you run and operate Zeek on your own hardware using real-world research and education deployment models.
Abstract
We will aim to give attendees the ability to run a real-world Zeek installation on their own hardware. We will start by introducing attendees to the basic architecture of Zeek. This includes showing attendees how to run and customize Zeek on the command line. It also includes guidance on how to do basic log analysis. We will also talk about what real-world deployments of Zeek look like, using examples used by R&E institutions. We will teach attendees how to set up their own Zeek cluster deployments in production together with all the cluster components, and the new Zeek management framework.
Other topics that we cover include the Zeek package manager, the configuration framework, the intelligence framework, customizing logging, and the input framework. This is a hands-on training, where attendees will be able to run Zeek on their laptops. Also this year we are planning to have a training session on Unicor, a tool that is uses MISP, pDNSSOC and Zeek together for doing threat hunting in the network.
About NSF Cybersecurity Summit
This event brings together leaders in research cyberinfrastructure (CI), cybersecurity, and higher ed researchers to build a trusting, collaborative community that addresses the community’s core cybersecurity challenges.
Register
-
Registration Fee: $300
-
Deadline to Register: October 9 at 11:59 PST.
Learn more: 2026 NSF Cybersecurity Summit — Trusted CI: The NSF Cybersecurity Center of Excellence