# Zeek Newsletter - Issue 28 - April 2023

**URL:** <https://community.zeek.org/t/zeek-newsletter-issue-28-april-2023/7016>\
**Category:** Announcements\
**Tags:** newsletter\
**Created:** [May 2, 2023, 3:00am UTC](https://community.zeek.org/t/zeek-newsletter-issue-28-april-2023/7016 "2023-05-02T03:00:51Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Richard\_Bejtlich](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/richard_bejtlich/32/597_2.png) [@Richard\_Bejtlich](https://community.zeek.org/u/Richard_Bejtlich)\
**Post date:** [May 2, 2023, 3:00am UTC](https://community.zeek.org/t/zeek-newsletter-issue-28-april-2023/7016/1 "2023-05-02T03:00:51Z")

</div>

Welcome to the Zeek Newsletter.

* * *

In this Issue:

- TL;DR
- Development Updates
- Zeek in the Community
- Zeek in the Enterprise
- Upcoming Events
- Zeek Package Updates
- Get Involved

* * *

TL;DR

Details on meeting the Zeek developers in Amsterdam on 31 May are now available:

[https://go.corelight.com/zeek-day](https://go.corelight.com/zeek-day)

See the upcoming events below for a schedule.

* * *

Development Updates

On 11 April, Tim Wojtulewicz released Zeek 5.0.8 and 5.2.1. These are security and bug fix releases.

[https://community.zeek.org/t/zeek-bugfix-security-releases-5-0-8-and-5-2-1/](https://community.zeek.org/t/zeek-bugfix-security-releases-5-0-8-and-5-2-1/)

On 18 April, Benjamin Bannier released Spicy 1.5.4. This is a bug fix release.

[https://community.zeek.org/t/spicy-bugfix-release-1-5-4/](https://community.zeek.org/t/spicy-bugfix-release-1-5-4/)

* * *

Zeek in the Community

The community survey results are live. If you view them in dark mode, switch to light mode in order to see the tables.

[https://community.zeek.org/t/zeek-2023-community-survey-results/](https://community.zeek.org/t/zeek-2023-community-survey-results/)

On 17 April, Doug Burks announced the inclusion of Zeek 5.0.8 now in Security Onion 2.3.230:

[https://blog.securityonion.net/2023/04/security-onion-23230-now-available.html](https://blog.securityonion.net/2023/04/security-onion-23230-now-available.html)

* * *

Zeek in the Enterprise

On 18 April, Microsoft published a blog post explaining how Windows uses Zeek to improve its detection processes on the endpoint:

[https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/enrich-your-advanced-hunting-experience-using-network-layer/ba-p/3794693](https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/enrich-your-advanced-hunting-experience-using-network-layer/ba-p/3794693)

* * *

Upcoming Events

We are working on a “meet the developers” get-together in Amsterdam on 31 May. We would like to interact with local community members and discuss the Zeek roadmap and related issues.

[https://go.corelight.com/zeek-day](https://go.corelight.com/zeek-day)

Here is the agenda:

9:30 - 9:45 - Welcome | Agenda for the Day | Introduce the Team

9:45 - 11:00 - General session (TBC). (These sessions will be a culmination of Zeek developer topics such as, technical roadmap, Spicy, team projects and new ideas).

11:00 - 11:15 - Break

11:15 - 12:15 - Ask the Zeek Developer(s) Informal Roundtables

12:15 - 13:30 - Lunch and Networking

13:30 - 14:30 - General session (TBC).

14:30 - 15:15 - Zeek & Corelight Journey (Barry Weymes - Aramco)

15:15 - 17:00 - Ask the Zeek Developer(s) Informal Roundtables

17:00 - Informal Meetings and Discussions over Drinks

We are working on other small get-togethers for the future. We will use this Amsterdam event to test our ideas.

Our next monthly community call will take place on Wednesday 3 May at 1 pm ET. Register here:

[https://zoom.us/meeting/register/tJ0lf-usqzwpGdXz35YcBhYtJOEjvSZcgl6W](https://zoom.us/meeting/register/tJ0lf-usqzwpGdXz35YcBhYtJOEjvSZcgl6W)

After registering, you will receive a confirmation email containing information about joining the meeting.

If you have any questions please email: [fatema@zeek.org](mailto:fatema@zeek.org)

One way to stay informed on video content is to subscribe to the Zeek YouTube channel:

[https://youtube.com/c/Zeekurity](https://youtube.com/c/Zeekurity)

The following playlist contains all 19 videos for ZeekWeek 2022:

[https://www.youtube.com/playlist?list=PL2EYTX8UVCMhWO6m\_uanhXLrSPrCMxO74](https://www.youtube.com/playlist?list=PL2EYTX8UVCMhWO6m_uanhXLrSPrCMxO74)

* * *

Zeek Package Updates

Changes to packages are available via this search:

[https://github.com/zeek/packages/pulls?q=is%3Apr+is%3Aclosed](https://github.com/zeek/packages/pulls?q=is%3Apr+is%3Aclosed)

The [https://packages.zeek.org](https://packages.zeek.org) site reported the last 5 updates as of 3 January:

5/1/23, 4:12 AM[shodan-zeek](https://packages.zeek.org/packages/view/361b085c-5b2e-11ed-94a6-0a598146b5c6)

4/29/23, 9:43 AM[spicy-plugin](https://packages.zeek.org/packages/view/cfa999bc-9348-11eb-81e7-0a598146b5c6)

4/27/23, 3:50 PM[zeek-pcapovertcp-plugin](https://packages.zeek.org/packages/view/5845306d-db44-11ed-9c2f-0a598146b5c6)

4/26/23, 4:57 PM[icsnpp-synchrophasor](https://packages.zeek.org/packages/view/50ae999e-c3b1-11ed-9c2f-0a598146b5c6)

4/25/23, 10:40 PM[zeek-plugin-tds](https://packages.zeek.org/packages/view/c794c6db-9348-11eb-81e7-0a598146b5c6)

* * *

Get Involved

If you have any comments or material for the newsletter please email [news@zeek.org](mailto:news@zeek.org) or join the #news Slack channel.

[https://zeekorg.slack.com](https://zeekorg.slack.com)

The Slack channel has been very active during the past month. Here is an invitation link:

[https://join.slack.com/t/zeekorg/shared\_invite/zt-12z1pjy93-zuVGuT1BF~yUJJvERxhp7g](https://join.slack.com/t/zeekorg/shared_invite/zt-12z1pjy93-zuVGuT1BF~yUJJvERxhp7g)

Stay up to date by joining the Zeek Discourse:

[https://community.zeek.org](https://community.zeek.org)

Subscribe to our YouTube channel:

[https://youtube.com/c/Zeekurity](https://youtube.com/c/Zeekurity)

Follow us on Twitter:

[https://twitter.com/Zeekurity](https://twitter.com/Zeekurity)

Follow us on Mastodon:

[https://infosec.exchange/@zeek](https://infosec.exchange/@zeek)

The old mailing list archives now redirect to this site:

[https://community.zeek.org/archives/list/zeek@lists.zeek.org/](https://community.zeek.org/archives/list/zeek@lists.zeek.org/)

If you’d like to read the Leadership Team meeting notes, they are here:

[https://github.com/zeek/zeek/wiki/LT-Meeting-Notes](https://github.com/zeek/zeek/wiki/LT-Meeting-Notes)

Follow us on LinkedIn:

[https://www.linkedin.com/company/zeekurity](https://www.linkedin.com/company/zeekurity)

To search LinkedIn for jobs mentioning Zeek skills, use this query:

[https://www.linkedin.com/jobs/search/?keywords=zeek](https://www.linkedin.com/jobs/search/?keywords=zeek)

See you next time!
