And now that we're out of that fun lab,
let's review what we've learned really quick before we move
on to the final module of the course.
In this one, we took a look at RockNSM and saw how
Zeek interacts with that system.
We were able to see the configurations,
see how Rock uses the Zeek data, and validate some of the
dashboards that are available using Kibana. Then, we moved on and
talked about Zeek's file carving capabilities.
We have two options here.
We can either carve files using our own custom scripts and the
analyzers that are built in or use a precreated package that provides
us with plenty of file extraction capabilities.
Either way you go,
you'll be able to successfully carve files and use them for other things.
Coming up next, we're going to close out the course. But before we do,
we need to talk about one more topic, intelligence.
We want to enrich our Zeek data and allow that intelligence to be
used with other tools or by Zeek in different ways.
We'll figure out how, and then we'll close out the course in the next module.
Join me there.