Welcome to the Zeek Newsletter.
In this Issue:
- TL;DR
- Development Updates
- Zeek in the Community
- Zeek in the Enterprise
- Upcoming Events
- Zeek Package Updates
- Get Involved
TL;DR
Zeek 6 is here. See below for details.
Development Updates
The Zeek team is proud to announce the release of Zeek 6. Work on this release began in February and comprises around 720 commits in 210 pull requests. We’re deeply grateful to our contributors in this release cycle, including Jan Grashöfer, Eldon Koyle, Michael Torres, and Fupeng Zhao for their feature work, as well as Aashish Sharma, Mike Patterson, and the members of our testing subgroup for their time and effort — thank you!
Highlights include Javascript integration, Spicy integration, bundled Community ID, JSON ingestion via from_json(), non-routable (RFC 1918) address space treated as site-local, multi-logger support for writing to files, and more.
You can read more about Zeek 6 here:
https://community.zeek.org/t/introducing-zeek-6/
You can access the release here:
https://github.com/zeek/zeek/releases/tag/v6.0.0
Zeek in the Community
The election process for the Zeek Leadership Team has closed. We will report the results shortly. Thank you to everyone who nominated candidates.
Keith Jones continues to publish insightful videos on Zeek. Here is his Zeek playlist:
https://www.youtube.com/playlist?list=PLNEVgQAFtunt8SmBf2qjXW5AZf0wkbGip
Here is his Spicy playlist:
https://www.youtube.com/playlist?list=PLNEVgQAFtuntGVw4tc_McJqeshldo3l3j
Zeek in the Enterprise
Tenzir has published several interesting blog posts on using Zeek data. Access them here:
https://docs.tenzir.com/blog/tags/zeek
Upcoming Events
Johanna posted an update on the status of ZeekWeek and regional events. In short, there is no ZeekWeek this year, but we have several other regional events in the works. Please see this post for details:
https://community.zeek.org/t/update-zeekweek-on-hiatus-regional-learning-events-announced/
When we have details on the regional events, we will share them via our social media channels.
The next Zeek Community Call is 6 September at 1 pm ET. There is no need to register. Here is the Zoom link:
https://us06web.zoom.us/j/99882457331?pwd=WVZLRGtpbmx1V2FqSnlRT1FLRC9lQT09
BSides Augusta and the Security Onion Conference will take place on 6-7 October in Augusta, Georgia, USA. Expect to see representation from the Zeek project there, with a pre-conference presentation on 5 October likely. Check our social media for details as the date approaches. Here are the Web pages for each event:
https://securityonionsolutions.com/conference
https://bsidesaugusta.org/event-schedule/
Zeek Package Updates
Changes to packages are available via this search:
https://github.com/zeek/packages/pulls?q=is%3Apr+is%3Aclosed
The https://packages.zeek.org site reported the last 5 updates as of 2 June:
8/30/23, 4:13 AM shodan-zeek
8/28/23, 8:45 PM icsnpp-opcua-binary
8/28/23, 6:02 PM icsnpp-modbus
8/28/23, 6:01 PM icsnpp-dnp3
8/28/23, 6:00 PM icsnpp-s7comm
Get Involved
If you have any comments or material for the newsletter please email news@zeek.org or join the #news Slack channel.
The Slack channel has been very active during the past month. Here is an invitation link:
https://join.slack.com/t/zeekorg/shared_invite/zt-12z1pjy93-zuVGuT1BF~yUJJvERxhp7g
Stay up to date by joining the Zeek Discourse:
Subscribe to our YouTube channel:
https://youtube.com/c/Zeekurity
Follow us on Twitter:
Follow us on Mastodon:
https://infosec.exchange/@zeek
The old mailing list archives now redirect to this site:
https://community.zeek.org/archives/list/zeek@lists.zeek.org/
If you’d like to read the Leadership Team meeting notes, they are here:
https://github.com/zeek/zeek/wiki/LT-Meeting-Notes
Follow us on LinkedIn:
https://www.linkedin.com/company/zeekurity
To search LinkedIn for jobs mentioning Zeek skills, use this query:
https://www.linkedin.com/jobs/search/?&keywords=zeek
See you next time!