Zeek is an open-source network analysis framework. Unlike an active security device such as a firewall, Zeek operates on a versatile ‘sensor’ that can be a hardware, software, virtual, or cloud ...
An investigation leveraging Cisco XDR, Splunk, Cisco Secure Firewall, and Endace (Zeek) to separate signal from noise. Cisco Live EMEA in Amsterdam is the kind of environment where security telemetry ...