Zeek Training sub-group Meeting minutes

Training
1

Hi everyone,

Thank you for joining the sub-group meeting this morning. Appreciate the participation.
Please find below the meeting minutes from today’s meeting.

Let me know in case of any questions or issues.

Meeting Minutes:

We briefly discussed next steps for our two short term goals:

  • Goal 1: To work on Zeek Approved Training FW

  • The Zeek Approved training FW skeleton is almost done, and will be using the new improved ZeekWeek’s training to run through it. The Goal is to get the new ZW’s training Zeek approved by the end of September - early October.

  • Goal 2: Focus on polishing ZW training and getting it through the Zeek Approved Training FW.

  • The call for participation for training content creation for ZW’21 went out this week.

  • From late next week we will start having meetings with the interested people for training content creation.The target to get the training updated and polished is End of August.

  • We have four major areas to focus on, for this year’s ZW training

  • Running Zeek inside Docker for easy access and broader usability

  • Revamping the exercises to include new pcaps and scripts

  • Use-cases from community

  • Focus more time on hands-on exercises and IP/Threat hunting

Details on the discussed ideas and steps can be found in the Training Subgroup goals document.

Thanks,
Fatema