Zeek Newsletter - Issue 34 - November-December 2023

Welcome to the Zeek Newsletter.

In this Issue:

  • TL;DR
  • Development Updates
  • Zeek in the Community
  • Zeek in the Enterprise
  • Upcoming Events
  • Zeek Package Updates
  • Get Involved


On the surface, it’s been a quiet six weeks. Behind the scenes, Zeek project developers continue to work on the code base. The Leadership Team is busy planning for 2024 as well.

Development Updates

We have not published any new releases since the last newsletter. We hear that developers have been looking at Spicy performance and Zeek Agent. Expect news on development in the new year.

Zeek in the Community

We are considering holding another in-person ZeekWeek event in 2024. Stay tuned for details. Thank you to those who responded to our polls on social media.

Zeek in the Enterprise

The Corelight blog featured how a subset of Zeek logs map to the MITRE Attack framework:


Upcoming Events

The next Zeek Community Call is 3 Jan at 1 pm ET. There is no need to register. Here is the Zoom link:


Zeek Package Updates

Changes to packages are available via this search:


The https://packages.zeek.org site reported the last 5 updates as of 2 June:

12/15/23, 4:14 AM shodan-zeek

12/14/23, 7:01 PM Zeek-Pcap-Features-Extractor

12/13/23, 2:55 PM domain-tld

12/11/23, 6:39 PM zeekjs

12/11/23, 4:05 PM zeek-agent-v2

Get Involved

If you have any comments or material for the newsletter please email news@zeek.org or join the #news Slack channel.


The Slack channel has been active during the past month. Here is an invitation link:


Stay up to date by joining the Zeek Discourse:


Subscribe to our YouTube channel:


Follow us on Twitter:


Follow us on Mastodon:


The old mailing list archives now redirect to this site:


If you’d like to read the Leadership Team meeting notes, they are here:


Follow us on LinkedIn:


To search LinkedIn for jobs mentioning Zeek skills, use this query:


See you next time!