Zeek Newsletter - Issue 35 - January 2024

Welcome to the Zeek Newsletter.


In this Issue:

  • TL;DR
  • Development Updates
  • Zeek in the Community
  • Zeek in the Enterprise
  • Upcoming Events
  • Zeek Package Updates
  • Get Involved

TL;DR

We released more code and made more plans for 2024. Slack has been on fire as well as we try to answer questions.


Development Updates

On 11 January, Benjamin published Spicy 1.8.3. This is a bugfix release for the 1.8 Spicy release series we maintain for long-term support in Zeek LTS releases. Please see the announcement for more details:

https://community.zeek.org/t/spicy-bugfix-release-1-8-3/

On 22 January Tim published Zeek Bugfix/security releases Zeek 6.0.3 and 6.1.1. Please see the announcement for more details:

https://community.zeek.org/t/zeek-bugfix-security-release-6-0-3-and-6-1-1/


Zeek in the Community

On 2 January Arne posted on Using Zeek’s new JavaScript support for MISP integration:

https://www.misp-project.org/2024/01/03/Zeek_JavaScript_MISP_Integration.html/

On 17 January, Seth announced the release of Malcolm v24.01.0. This version includes a new Malcolm instance landing page, a new option for determining what type of files Zeek will carve from network traffic, the ability to download Zeek-carved files as AE-2 AES-encrypted ZIP files, more control over the OpenSearch/Elasticearch indices to which logs are written, and more. For details, see:

https://idaholab.github.io/Malcolm


Zeek in the Enterprise

If you are interested in running Zeek on Windows, please join the windows channel on Slack. We are happy for any help that we can get. Most of the Zeek development team does not have experience with Windows development.


Upcoming Events

The next Zeek Community Call is 7 February at 1 pm ET. There is no need to register. Here is the Zoom link:

https://us06web.zoom.us/j/99882457331?pwd=WVZLRGtpbmx1V2FqSnlRT1FLRC9lQT09


Zeek Package Updates

Changes to packages are available via this search:

https://github.com/zeek/packages/pulls?q=is%3Apr+is%3Aclosed

The https://packages.zeek.org site reported the last 5 updates as of 2 June:

1/31/24, 4:13 AM shodan-zeek

1/30/24, 1:09 AM zeek-dag

1/26/24, 8:45 PM zeek-open-connections

1/26/24, 5:52 PM zeekjs

1/23/24, 3:40 PM zeek-elf


Get Involved

If you have any comments or material for the newsletter please email news@zeek.org or join the #news Slack channel.

https://zeekorg.slack.com

The Slack channel has been active during the past month. Here is an invitation link:

https://join.slack.com/t/zeekorg/shared_invite/zt-12z1pjy93-zuVGuT1BF~yUJJvERxhp7g

Stay up to date by joining the Zeek Discourse:

https://community.zeek.org

Subscribe to our YouTube channel:

https://youtube.com/c/Zeekurity

Follow us on Twitter:

https://twitter.com/Zeekurity

Follow us on Mastodon:

https://infosec.exchange/@zeek

The old mailing list archives now redirect to this site:

https://community.zeek.org/archives/list/zeek@lists.zeek.org/

If you’d like to read the Leadership Team meeting notes, they are here:

https://github.com/zeek/zeek/wiki/LT-Meeting-Notes

Follow us on LinkedIn:

https://www.linkedin.com/company/zeekurity

To search LinkedIn for jobs mentioning Zeek skills, use this query:

181 Zeek jobs in United States (3 new)>

See you next time!