Zeek Newsletter - Issue 32 - September 2023

Welcome to the Zeek Newsletter.


In this Issue:

  • TL;DR
  • Development Updates
  • Zeek in the Community
  • Zeek in the Enterprise
  • Upcoming Events
  • Zeek Package Updates
  • Get Involved

TL;DR

We have several free ZeekDay and training events scheduled in October and one in November. See the Upcoming Events for details. Register today to secure your seat.


Development Updates

On 12 September, Tim released Zeek 5.0.10 and 6.0.1. Both are bugfix and security releases. We encourage all users to update their systems. See this post for details:

https://community.zeek.org/t/zeek-bugfix-security-releases-5-0-10-and-6-0-1/


Zeek in the Community

The election process for the Zeek Leadership Team has finished. During the nomination phase, we received nominations for five individuals. One of the nominations was for Christian Kreibich, who, as someone who already has a seat on the LT, does not need to be elected.

Thus, we got four nominations for the four seats that were open. The nominees were Aashish Sharma, Fatema Bannat Walla, Keith Lehigh and Seth Grover.

As the remainder of the election process only has a purpose when there are more nominations than seats, the Zeek LT decided to short-circuit the process, and accept all nominees into the Zeek LT.

While we got enough nominations to fill the open seats, the fact that we are struggling to get Zeek community members interested to serve on the Zeek LT is problematic for a number of reasons. If you were on the fence about nominating for the Zeek LT, and/or decided to not self-nominate, please reach out to us. Similarly, we would be happy to hear any feedback about our process.

The makeup of the LT after this election is:

Aashish Sharma, Lawrence Berkeley National Laboratory

Christian Kreibich, Corelight (Technical Lead Seat)

Fatema Bannat Wala, ESnet

Johanna Amann, Corelight

Keith Lehigh, University of Colorado

Kelley Misata, Corelight (Community Seat, non-voting)

Robin Sommer, Corelight

Seth Grover, Idaho National Lab

Vern Paxson, Corelight & University of California at Berkeley (Founder Seat)

Welcome to Seth Grover, who is a new member of the LT. Seth also released a new version of Malcolm on 5 September. See this link for details:

https://github.com/idaholab/Malcolm/releases/tag/v23.09.0


Zeek in the Enterprise

Tenzir has published several interesting blog posts on using Zeek data. Access them here:

https://docs.tenzir.com/blog/tags/zeek


Upcoming Events

We have organized several ZeekDay events. These are free meetings with opportunities for education and networking:

Grand Canyon University in Phoenix, AZ, USA, on 4 October:

https://go.corelight.com/zeekday-grand-canyon-university

Washington University in St. Louis, located in St. Louis, MO, USA, on 24 October:

https://go.corelight.com/zeekday-washington-university-st-louis

Frankfurt, Germany, on 16 November:

https://go.corelight.com/zeekday-frankfurt-2023

We are also offering a free day of training during the National Science Foundation Cybersecurity summit on 23 October at Lawrence Berkeley National Laboratory:

https://zeek.org/2023/09/05/zeek-project-training-during-nsf-summit-oct-23rd-2023/

The next Zeek Community Call is 4 October at 1 pm ET. There is no need to register. Here is the Zoom link:

https://us06web.zoom.us/j/99882457331?pwd=WVZLRGtpbmx1V2FqSnlRT1FLRC9lQT09

BSides Augusta and the Security Onion Conference will take place on 6-7 October in Augusta, Georgia, USA. Expect to see representation from the Zeek project there, with a pre-conference presentation on 5 October likely. Here are the Web pages for each event:

https://securityonionsolutions.com/conference

https://bsidesaugusta.org/event-schedule/


Zeek Package Updates

Changes to packages are available via this search:

https://github.com/zeek/packages/pulls?q=is%3Apr+is%3Aclosed

The https://packages.zeek.org site reported the last 5 updates as of 2 June:

9/28/23, 4:13 AM shodan-zeek

9/26/23, 1:26 PM zeek-spicy-wireguard

9/26/23, 1:22 PM zeek-spicy-ipsec

9/26/23, 1:21 PM zeek-spicy-openvpn

9/26/23, 12:40 PM zeek-amadey-detector


Get Involved

If you have any comments or material for the newsletter please email news@zeek.org or join the #news Slack channel.

https://zeekorg.slack.com

The Slack channel has been very active during the past month. Here is an invitation link:

https://join.slack.com/t/zeekorg/shared_invite/zt-12z1pjy93-zuVGuT1BF~yUJJvERxhp7g

Stay up to date by joining the Zeek Discourse:

https://community.zeek.org

Subscribe to our YouTube channel:

https://youtube.com/c/Zeekurity

Follow us on Twitter:

https://twitter.com/Zeekurity

Follow us on Mastodon:

https://infosec.exchange/@zeek

The old mailing list archives now redirect to this site:

https://community.zeek.org/archives/list/zeek@lists.zeek.org/

If you’d like to read the Leadership Team meeting notes, they are here:

https://github.com/zeek/zeek/wiki/LT-Meeting-Notes

Follow us on LinkedIn:

https://www.linkedin.com/company/zeekurity

To search LinkedIn for jobs mentioning Zeek skills, use this query:

https://www.linkedin.com/jobs/search/?keywords=zeek

See you next time!