Zeek Newsletter - Issue 40 - June 2024

Welcome to the Zeek Newsletter.


In this Issue:

  • TL;DR
  • Development Updates
  • Zeek in the Community
  • Zeek in the Enterprise
  • Friends of Zeek
  • Upcoming Events
  • Zeek Package Updates
  • Get Involved

[TL;DR] Special Announcement

It is with a heavy heart that we have to announce the cancellation of ZeekWeek 2024. We are 45 days from the beginning of the event at the time of this post, and we have around 9 registrations from non-project-affiliated people.

With this information, we extrapolate probably attendee numbers using registration data of our past events. This made us realize that we will likely not have enough attendees for a successful ZeekWeek this year, leading to the decision to cancel the event.

We are very saddened by this. For us as a team, ZeekWeek has always been the best way for direct interactions with the community. We use it to gather feedback and to get to know our users. Personally I always felt energized by the interactions at ZeekWeek.

The low registrations for ZeekWeek give us pause. We will re-think the event strategy for us as a project. Organizing an event like ZeekWeek takes a lot of volunteer time and energy. In addition to this, it also requires significant financial backing to be able to keep registration prices low.

We hoped to get more interest, as this was our first large in-person event since 2021. Our current working theory is that there just might not be as much interest in these kinds of events anymore.

We are very interested in more information from the community. If you are someone who was planning to come but did not register, had not yet decided, or had decided not to come – please either write to us at info@zeek.org, or fill out this anonymous feedback form 5.

We apologize to the people that already made travel arrangements – we hope that you will be able to recoup all (or at least most) of your costs.

We are going to fully refund the registration of everyone who registered so far. Please give us a couple of days to get this done; we will also reach out to each of you by email. If you did register and do not receive an email or refund in the next couple of days, please contact us.

Johanna Amann for the Zeek LT


Development Updates

No code was released in June.


Zeek in the Community

On 27 June Seth published a new version of Malcolm. Please see the project site for details:

https://malcolm.fyi/


Zeek in the Enterprise

Corelight is hiring a remote open source developer to work on Zeek. See this job description for details:

https://boards.greenhouse.io/corelight/jobs/5796333


Friends of Zeek

On 27 June, the Suricata project released versions 7.0.6 and 6.0.20. Visit their site for details:

https://suricata.io/download/


Upcoming Events

The next Zeek Community Call is 3 July at 1 pm ET. There is no need to register. Here is the Zoom link:

https://us06web.zoom.us/j/99882457331?pwd=WVZLRGtpbmx1V2FqSnlRT1FLRC9lQT09

The first Mal.Con conference supporting Malcom will be held 4 September in Arlington, VA. See this post for details:

https://github.com/cisagov/Malcolm/wiki/Mal.Con-'24-Announcement

The next Security Onion conference will be held 4 October in Augusta, GA. Registration opens 18 July. See this post for details:

https://blog.securityonion.net/2024/04/security-onion-conference-2024-save.html


Zeek Package Updates

Changes to packages are available via this search:

https://github.com/zeek/packages/pulls?q=is%3Apr+is%3Aclosed

The https://packages.zeek.org site reported the last 5 updates as of 2 June:

7/1/24, 4:13 AM shodan-zeek

6/27/24, 8:16 AM zeek-parser-Bacnet

6/26/24, 8:58 PM ja4

6/26/24, 4:32 PM bzar

6/17/24, 2:11 PM zeekjs-redis


Get Involved

If you have any comments or material for the newsletter please email news@zeek.org or join the #news Slack channel.

https://zeekorg.slack.com

The Slack channel has been active during the past month. Here is an invitation link:

https://join.slack.com/t/zeekorg/shared_invite/zt-12z1pjy93-zuVGuT1BF~yUJJvERxhp7g

Stay up to date by joining the Zeek Discourse:

https://community.zeek.org

Subscribe to our YouTube channel:

https://youtube.com/c/Zeekurity

Follow us on Twitter:

https://twitter.com/Zeekurity

Follow us on Mastodon:

https://infosec.exchange/@zeek

The old mailing list archives now redirect to this site:

https://community.zeek.org/archives/list/zeek@lists.zeek.org/

If you’d like to read the Leadership Team meeting notes, they are here:

https://github.com/zeek/zeek/wiki/LT-Meeting-Notes

Follow us on LinkedIn:

https://www.linkedin.com/company/zeekurity

To search LinkedIn for jobs mentioning Zeek skills, use this query:

https://www.linkedin.com/jobs/search/?keywords=zeek

See you next time!