vZW20- Day 3 - Packaging Zeek's policy scripts w/better zkg templating - V. Grigorescu & C. Kreibich
Channel: Zeek
Date: 2020-11-02

Vlad Grigorescu and Christian Kreibich present Packaging Zeek's policy scripts with better zkg templating 

Out of the box, Zeek comes with scripts for identifying malicious or suspicious traffic. These scripts are designed to be customizable to your environment, as "malicious" and "suspicious" are highly subjective. In this talk, we'll report on an emerging effort to migrate these to zkg packages. This provides a number of benefits, including faster iteration, a more community-driven feature set, explicit dependencies, and a more manageable codebase. To streamline this migration with consistent, maintainable, CI-enabled packages, we will also present a new open-source zkg package template authored by ESnet that lets script authors hit the ground running and avoid several potential pitfalls during package creation.

More about Zeek and connecting with the community can be found at: https://zeek.org/ 

Join the discussion on Slack at: http://bit.ly/ZeekOrgSlackInvite