Hi everyone.
My name is Joe Abraham, and welcome to my course Writing Zeek Rules and Scripts.
I'm currently a cybersecurity consultant and a Pluralsight author
for both IT operations and security topics.
Are you trying to customize your Zeek environment, but don't
really know how? Do you need to learn all about the Zeek
scripting capabilities and how to write rules?
Well, in this course, I'm going to help. I'll walk you through the open
source tool and how to write custom scripts to use with it.
Some of the major topics that we will cover include
illustrating the Zeek signature framework,
understanding the logging and notice frameworks,
optimizing Zeek scripts, and customizing scripts to extend Zeek's functionality.
By the end of this course, you'll know all about Zeek and its scripting
capabilities, as well as how to write your own scripts and rules within
your environment. Before beginning this course,
you should be familiar with basic IT terminology and network functionality, as
well as have a solid understanding of the Zeek tool's uses. From here, you
should feel comfortable diving further into Zeek scripting and learning more
about network and security analysis in general through skill paths and courses
at Pluralsight, such as Enterprise Security Monitoring with Open Source
Network IDS & IPS. I hope you'll join me on this journey to learn more about
this great tool with the Writing Zeek Rules and Scripts course here at
Pluralsight.