Video Description

In this segment we cover one of Zeek's most central concepts, the event. We discuss how events in Zeek are analogous to human network traffic analysis activities and describe how Zeek provides access to network traffic artifacts through the use of event handlers. Finally, we review several of Zeek's built-in events and discuss how they can be handled to perform various traffic analsyis tasks.

Course Modules