How Colleges and Universities Can Use Open Source Zeek to Defend Their Networks

Open source Zeek (formerly Bro) offers powerful network security monitoring capabilities that help security teams make fast sense of their traffic. With direct access to rich network evidence, security analysts can accelerate incident response times, manage the risks of misconfigurations, hunt for threats, and more. This presentation provides a brief introduction to Zeek through the medium of slides and a fireside chat with an expert in the field who has spent years using Zeek to defend college and university networks.