Zeek Newsletter - Issue 24 - December 2022

Welcome to the Zeek Newsletter.


In this Issue:

  • TL;DR
  • Development Updates
  • Zeek in the Community
  • Zeek in the Enterprise
  • Upcoming Events
  • Zeek Package Updates
  • Get Involved

TL;DR

ZeekWeek 2022 videos finished premiering on YouTube in December. Benjamin Bannier released Spicy 1.6.0. Otherwise, it was a fairly quiet month.


Development Updates

On 12 December, Benjamin Bannier announced the release of Spicy 1.6.0. See the NEWS file for a high-level summary, or the CHANGES file for a detailed list of changes.

https://github.com/zeek/spicy/blob/v1.6.0/NEWS.rst

https://github.com/zeek/spicy/blob/v1.6.0/CHANGES


Zeek in the Community

On 5 December, Doug Burks announced the release of Security Onion 2.3.190, including Zeek 5.0.4:

https://blog.securityonion.net/2022/12/security-onion-23190-now-available.html

On 6 December, Seth Grover announced the release of Malcolm 6.4.3, including Zeek 5.0.4:

https://github.com/idaholab/Malcolm/releases/tag/v6.4.3

On 7 December, Fatema Bannat Wala hosted a Zeek community call. The recording is here:

https://youtu.be/2JTwUuDREUY

Thanks to everyone subscribed to our YouTube channel, we’ve hit the 4,000 mark, with 250k views! Check us out here:

https://youtube.com/c/zeekurity


Zeek in the Enterprise

Thanks to Gavin Li who prompted the creation of a #windows channel in the Zeek Slack. He has been trying to compile Zeek on Windows using Microsoft’s contribution to the code base.

At this point we provide experimental support for Windows. The Zeek 5.2 release, scheduled for early 2023, will be the first to formally feature Windows support. Please consider testing the new code by compiling it on Windows:

https://docs.zeek.org/en/master/install.html#building-from-source


Upcoming Events

All ZeekWeek 2022 videos are on YouTube.

The easiest way to stay informed on this content is to subscribe to the Zeek YouTube channel:

<https://youtube.com/c/Zeekurity>

The following playlist contains all 19 videos:

https://www.youtube.com/playlist?list=PL2EYTX8UVCMhWO6m_uanhXLrSPrCMxO74


Zeek Package Updates

Changes to packages are available via this search:

https://github.com/zeek/packages/pulls?q=is%3Apr+is%3Aclosed

The https://packages.zeek.org site reported the last 5 updates as of 3 January:

1/3/23, 4:12 AM shodan-zeek

1/1/23, 10:53 PM anomalous-dns

12/27/22, 7:20 PM bro-http2

12/23/22, 10:27 AM spicy-dhcp

12/23/22, 3:02 AM zeekjs


Get Involved

If you have any comments or material for the newsletter please email news@zeek.org or join the #news Slack channel.

https://zeekorg.slack.com

The Slack channel has been very active during the past month. Here is an invitation link:

https://join.slack.com/t/zeekorg/shared_invite/zt-12z1pjy93-zuVGuT1BF~yUJJvERxhp7g

Stay up to date by joining the Zeek Discourse:

https://community.zeek.org

Subscribe to our YouTube channel:

https://youtube.com/c/Zeekurity

Follow us on Twitter:

https://twitter.com/Zeekurity

Follow us on Mastodon:

https://infosec.exchange/@zeek

The old mailing list archives now redirect to this site:

https://community.zeek.org/archives/list/zeek@lists.zeek.org/

If you’d like to read the Leadership Team meeting notes, they are here:

https://github.com/zeek/zeek/wiki/LT-Meeting-Notes

Follow us on LinkedIn:

https://www.linkedin.com/company/zeekurity

To search LinkedIn for jobs mentioning Zeek skills, use this query:

https://www.linkedin.com/jobs/search/?keywords=zeek

See you next time!