Hello everyone.
My name is Michael Edie, and welcome to my course Utilizing Zeek in an
Enterprise Environment or for Distributed Operations.
I'm a security engineer and independent consultant working in the DOD.
Cybersecurity professionals are tasked with defending networks against
malicious attackers who are becoming more sophisticated and harder to
detect. Knowing how to properly deploy.
Zeek in an enterprise network can help defenders with
early detection of adversarial activity.
In this course,
we're going to learn how to feed the data from Zeek into the Elastic Stack and
then analyze the data to support network security monitoring.
Some of the major topics that we will cover include
developing a sense of strategy,
continuous monitoring, threat hunting, and incident response.
There will be demos all along the way to show you how you
can apply this knowledge immediately.
By the end of this course,
you will have a solid foundation to get started using Zeek to
pursue adversarial threats on an enterprise network.
Before beginning this course, you should be familiar with network fundamentals,
basic Linux administration, and how to use the Kibana web interface.
I hope you'll join me on this journey to learn network security
monitoring with the Utilizing Zeek in an Enterprise Environment or for
Distributed Operations course at Pluralsight.