Zeek Newsletter - Issue 30 - June 2023

Announcements
1

Welcome to the Zeek Newsletter.

In this Issue:

  • TL;DR
  • Development Updates
  • Zeek in the Community
  • Zeek in the Enterprise
  • Upcoming Events
  • Zeek Package Updates
  • Get Involved

TL;DR

We released more code this month. See below for details.

Development Updates

Tim released two Zeek updates since the last newsletter. The latest was on 22 June: Zeek LTS pre-release candidate version 6.0.0-rc3.

https://community.zeek.org/t/zeek-lts-pre-release-6-0-0-rc3/

Benjamin released two Spicy updates since the last newsletter. The latest was on 5 July: Spicy bugfix release 1.8.1:

https://community.zeek.org/t/spicy-bugfix-release-1-8-1/

Zeek in the Community

On 21 June Arne reminded the community that we are retiring zeekurity/zeek Docker images:

https://community.zeek.org/t/sun-setting-zeekurity-zeek-container-images/

Please switch to using container images from zeek/zeek, or public.ecr.aws/zeek/zeek instead.

Zeek helped monitor the Black Hat Asia 2023 network. See this blog post for details:

https://corelight.com/blog/black-hat-asia-2023-deploying-corelight

Zeek in the Enterprise

Corelight is heavily leveraging Zeek in its new software collection for monitoring Industrial Control Systems (ICS) and Internet of Things (IoT) devices:

https://corelight.com/blog/extending-visibility-with-new-ics-ot-collection

Upcoming Events

The next Zeek Community Call is 5 July at 1 pm ET. There is no need to register. Here is the Zoom link:

https://us06web.zoom.us/j/99882457331?pwd=WVZLRGtpbmx1V2FqSnlRT1FLRC9lQT09

Zeek Package Updates

Changes to packages are available via this search:

https://github.com/zeek/packages/pulls?q=is%3Apr+is%3Aclosed

The https://packages.zeek.org site reported the last 5 updates as of 2 June:

7/5/23, 4:12 AM shodan-zeek

7/3/23, 12:38 AM anomalous-dns

6/30/23, 6:47 AM zeek-parser-CCLinkField-CCLinkControl

6/30/23, 6:46 AM zeek-parser-CCLinkFieldBasic

6/29/23, 6:14 PM zeekjs

Get Involved

If you have any comments or material for the newsletter please email news@zeek.org or join the #news Slack channel.

https://zeekorg.slack.com

The Slack channel has been very active during the past month. Here is an invitation link:

https://join.slack.com/t/zeekorg/shared_invite/zt-12z1pjy93-zuVGuT1BF~yUJJvERxhp7g

Stay up to date by joining the Zeek Discourse:

https://community.zeek.org

Subscribe to our YouTube channel:

https://youtube.com/c/Zeekurity

Follow us on Twitter:

https://twitter.com/Zeekurity

Follow us on Mastodon:

https://infosec.exchange/@zeek

The old mailing list archives now redirect to this site:

https://community.zeek.org/archives/list/zeek@lists.zeek.org/

If you’d like to read the Leadership Team meeting notes, they are here:

https://github.com/zeek/zeek/wiki/LT-Meeting-Notes

Follow us on LinkedIn:

https://www.linkedin.com/company/zeekurity

To search LinkedIn for jobs mentioning Zeek skills, use this query:

<https://www.linkedin.com/jobs/search/?keywords=zeek>

See you next time!