The Zeek Network Security Monitor
@zeek.org
Zeek is an open source network security monitor.
zeek.org | github.com/zeek | community.zeek.org
zeek.org | github.com/zeek | community.zeek.org
If you want the technical details on the new ZeroMQ backend architecture, setup, even performance monitoring, our recent video covers it all. Check it out below:
Zeek 8.1's big change: ZeroMQ as the default cluster backend. Arne's new video explains what that means and why it matters.
youtu.be/EeW_Oo-xNdQ
youtu.be/EeW_Oo-xNdQ
Cluster Backend Walkthrough
YouTube video by Zeek
youtu.be
January 22, 2026 at 6:32 PM
If you want the technical details on the new ZeroMQ backend architecture, setup, even performance monitoring, our recent video covers it all. Check it out below:
Zeek 8.1 cuts cluster CPU usage significantly with the new ZeroMQ backend. Head to our blog to learn why this architectural shift took years to ship, plus other updates in our latest release:
zeek.org/2026/01/intr...
zeek.org/2026/01/intr...
January 21, 2026 at 6:51 PM
Zeek 8.1 cuts cluster CPU usage significantly with the new ZeroMQ backend. Head to our blog to learn why this architectural shift took years to ship, plus other updates in our latest release:
zeek.org/2026/01/intr...
zeek.org/2026/01/intr...
The best Zeek stories come from users. This month our community is sharing recent discoveries - the weird, the threatening, and the unexpected.
Check out the newsletter to learn how you can share yours: community.zeek.org/t/zeek-newsl...
Check out the newsletter to learn how you can share yours: community.zeek.org/t/zeek-newsl...
Zeek Newsletter - Issue 58 - December 2025
Happy New Year and welcome to the Zeek Newsletter. In this Issue: Community News Tip of the Month Community Call Recap Development Updates Ecosystem News Packages Get Involved TL;DR: Zeek 8.1 RC2 i...
community.zeek.org
January 20, 2026 at 9:16 PM
The best Zeek stories come from users. This month our community is sharing recent discoveries - the weird, the threatening, and the unexpected.
Check out the newsletter to learn how you can share yours: community.zeek.org/t/zeek-newsl...
Check out the newsletter to learn how you can share yours: community.zeek.org/t/zeek-newsl...
Check out our recent Zeek scripting tutorial that walks through the fundamentals of writing custom detections from basic types to building a working script.
If you've wanted to customize Zeek for your environment or write your own detections, this is a solid starting point:
youtu.be/nae8cdrUUKY
If you've wanted to customize Zeek for your environment or write your own detections, this is a solid starting point:
youtu.be/nae8cdrUUKY
Zeek Scripting Tutorial: Learn the Fundamentals
YouTube video by Zeek
youtu.be
January 20, 2026 at 5:40 PM
Check out our recent Zeek scripting tutorial that walks through the fundamentals of writing custom detections from basic types to building a working script.
If you've wanted to customize Zeek for your environment or write your own detections, this is a solid starting point:
youtu.be/nae8cdrUUKY
If you've wanted to customize Zeek for your environment or write your own detections, this is a solid starting point:
youtu.be/nae8cdrUUKY
Zeek 8.1's big change: ZeroMQ as the default cluster backend. Arne's new video explains what that means and why it matters.
youtu.be/EeW_Oo-xNdQ
youtu.be/EeW_Oo-xNdQ
Cluster Backend Walkthrough
YouTube video by Zeek
youtu.be
January 14, 2026 at 6:52 PM
Zeek 8.1's big change: ZeroMQ as the default cluster backend. Arne's new video explains what that means and why it matters.
youtu.be/EeW_Oo-xNdQ
youtu.be/EeW_Oo-xNdQ
Zeek 8.1 is out now! What's inside? ZeroMQ cluster backend, JavaScript and WebSocket improvements, and much more.
community.zeek.org/t/zeek-featu...
community.zeek.org/t/zeek-featu...
Zeek feature release 8.1.0
Zeek feature release v8.1.0 is now available: https://zeek.org/get-zeek https://download.zeek.org/zeek-8.1.0.tar.gz See the release notes for details of the new functionality, breaking changes, and...
community.zeek.org
January 13, 2026 at 8:10 PM
Zeek 8.1 is out now! What's inside? ZeroMQ cluster backend, JavaScript and WebSocket improvements, and much more.
community.zeek.org/t/zeek-featu...
community.zeek.org/t/zeek-featu...
Find anything interesting in your Zeek logs lately? We're hearing from our community about unusual traffic, threats, and unexpected behaviors.
Catch up on our Topic of the Month discussions and more community updates in our newsletter: community.zeek.org/t/zeek-newsl...
Catch up on our Topic of the Month discussions and more community updates in our newsletter: community.zeek.org/t/zeek-newsl...
Zeek Newsletter - Issue 58 - December 2025
Happy New Year and welcome to the Zeek Newsletter. In this Issue: Community News Tip of the Month Community Call Recap Development Updates Ecosystem News Packages Get Involved TL;DR: Zeek 8.1 RC2 i...
community.zeek.org
January 12, 2026 at 11:12 PM
Find anything interesting in your Zeek logs lately? We're hearing from our community about unusual traffic, threats, and unexpected behaviors.
Catch up on our Topic of the Month discussions and more community updates in our newsletter: community.zeek.org/t/zeek-newsl...
Catch up on our Topic of the Month discussions and more community updates in our newsletter: community.zeek.org/t/zeek-newsl...
Zeek 8.1 is almost ready, with RC2 out and awaiting feedback. Are you up to speed on what's coming? Read our newsletter for all the info you'll need: community.zeek.org/t/zeek-newsl...
January 9, 2026 at 8:57 PM
Zeek 8.1 is almost ready, with RC2 out and awaiting feedback. Are you up to speed on what's coming? Read our newsletter for all the info you'll need: community.zeek.org/t/zeek-newsl...
December already feels like 100 years ago. Check out our latest newsletter for a few reminders of what's been happening with Zeek: community.zeek.org/t/zeek-newsl...
January 8, 2026 at 6:44 PM
December already feels like 100 years ago. Check out our latest newsletter for a few reminders of what's been happening with Zeek: community.zeek.org/t/zeek-newsl...
Have you registered for our upcoming workshop yet? If not, grab your spot soon - we'd love to see you at CERN!
zeek.org/workshop-cer...
zeek.org/workshop-cer...
January 7, 2026 at 10:57 PM
Have you registered for our upcoming workshop yet? If not, grab your spot soon - we'd love to see you at CERN!
zeek.org/workshop-cer...
zeek.org/workshop-cer...
Happy New Year, folks! We're looking forward to starting 2026 with a Community Call to share project updates and news from the Leadership Team. Please join us! Find the Zoom link and all upcoming Zeek events here: zeek.org/events/#cale...
January 5, 2026 at 6:17 PM
Happy New Year, folks! We're looking forward to starting 2026 with a Community Call to share project updates and news from the Leadership Team. Please join us! Find the Zoom link and all upcoming Zeek events here: zeek.org/events/#cale...
Benjamin demoed zeek-websocket-rs at the December call. Curious? Watch it here: www.youtube.com/watch?v=pP2b... #Zeek
Zeek 8.1, ZeroMQ Integration, WebSocket Bindings & Community News – December 2025 Community Call
YouTube video by Zeek
www.youtube.com
December 23, 2025 at 9:48 PM
Benjamin demoed zeek-websocket-rs at the December call. Curious? Watch it here: www.youtube.com/watch?v=pP2b... #Zeek
Are you joining us at CERN in March? We're excited for two days of Zeek talks, training sessions, and opportunities to connect with the community. Don't miss it: zeek.org/workshop-cer...
December 19, 2025 at 5:39 PM
Are you joining us at CERN in March? We're excited for two days of Zeek talks, training sessions, and opportunities to connect with the community. Don't miss it: zeek.org/workshop-cer...
Need to analyze compressed pcaps? This month's Zeek tip shows you how to skip the decompression step.
Check it out in our latest newsletter: community.zeek.org/t/zeek-newsl...
#Zeek #OpenSource #ZeekTip
Check it out in our latest newsletter: community.zeek.org/t/zeek-newsl...
#Zeek #OpenSource #ZeekTip
December 17, 2025 at 7:36 PM
Need to analyze compressed pcaps? This month's Zeek tip shows you how to skip the decompression step.
Check it out in our latest newsletter: community.zeek.org/t/zeek-newsl...
#Zeek #OpenSource #ZeekTip
Check it out in our latest newsletter: community.zeek.org/t/zeek-newsl...
#Zeek #OpenSource #ZeekTip
Scripting in Zeek is powerful for detection, even with just the basics. Learn (or brush up!) the fundamentals in our new video tutorial: www.youtube.com/watch?v=nae8...
Zeek Scripting Tutorial: Learn the Fundamentals
YouTube video by Zeek
www.youtube.com
December 16, 2025 at 6:05 PM
Scripting in Zeek is powerful for detection, even with just the basics. Learn (or brush up!) the fundamentals in our new video tutorial: www.youtube.com/watch?v=nae8...
New on the blog: Developing Zeek Scripts with Style. Best practices for writing clean, maintainable scripts. Check it out:
zeek.org/2025/12/deve...
zeek.org/2025/12/deve...
December 15, 2025 at 6:46 PM
New on the blog: Developing Zeek Scripts with Style. Best practices for writing clean, maintainable scripts. Check it out:
zeek.org/2025/12/deve...
zeek.org/2025/12/deve...
Two days at CERN @cern.bsky.social focused on Zeek, including hands-on training and discussions. Join us in March.
zeek.org/workshop-cer...
zeek.org/workshop-cer...
December 10, 2025 at 6:16 PM
Two days at CERN @cern.bsky.social focused on Zeek, including hands-on training and discussions. Join us in March.
zeek.org/workshop-cer...
zeek.org/workshop-cer...
🏗️ This month in Zeek development: the 8.1 release is around the corner (ZeroMQ as the new default cluster backend!), plus updates on WebSocket bindings and more.
Get the full rundown in our newsletter: community.zeek.org/t/zeek-newsl...
#Zeek
Get the full rundown in our newsletter: community.zeek.org/t/zeek-newsl...
#Zeek
Zeek Newsletter - Issue 57 - November 2025
Welcome to the Zeek Newsletter In this Issue: Reminders Tip of the Month Community Call Recap Development Updates Packages Get Involved TL;DR: Zeek 8.1 enters final stretch with mid-December fork a...
community.zeek.org
December 9, 2025 at 9:57 PM
🏗️ This month in Zeek development: the 8.1 release is around the corner (ZeroMQ as the new default cluster backend!), plus updates on WebSocket bindings and more.
Get the full rundown in our newsletter: community.zeek.org/t/zeek-newsl...
#Zeek
Get the full rundown in our newsletter: community.zeek.org/t/zeek-newsl...
#Zeek
Missing IDE features when you write Zeek scripts? There are tools for that.
Our latest blog post covers syntax highlighting, auto-formatting, linting, and language servers that work across editors:
zeek.org/2025/12/deve...
Our latest blog post covers syntax highlighting, auto-formatting, linting, and language servers that work across editors:
zeek.org/2025/12/deve...
December 9, 2025 at 5:23 PM
Missing IDE features when you write Zeek scripts? There are tools for that.
Our latest blog post covers syntax highlighting, auto-formatting, linting, and language servers that work across editors:
zeek.org/2025/12/deve...
Our latest blog post covers syntax highlighting, auto-formatting, linting, and language servers that work across editors:
zeek.org/2025/12/deve...
Check out our latest newsletter, where we cover 8.1 development updates, community news, and more: community.zeek.org/t/zeek-newsl...
December 8, 2025 at 9:56 PM
Check out our latest newsletter, where we cover 8.1 development updates, community news, and more: community.zeek.org/t/zeek-newsl...
The last Community Call of 2025 is on the calendar for next week. Grab the details and Zoom link here: zeek.org/events/
November 25, 2025 at 5:42 PM
The last Community Call of 2025 is on the calendar for next week. Grab the details and Zoom link here: zeek.org/events/
We have a few open spots for community presentations at our upcoming workshop at @cern.bsky.social ! Learn more: zeek.org/workshop-cer...
November 20, 2025 at 9:13 PM
We have a few open spots for community presentations at our upcoming workshop at @cern.bsky.social ! Learn more: zeek.org/workshop-cer...
Newsletter highlights 📬: Malcolm v25.11.0 launched with a rebuilt install script and new visualizations, and @securityonion.bsky.social 2.4.190 includes updated Zeek components.
Details and links over here: community.zeek.org/t/zeek-newsl...
Details and links over here: community.zeek.org/t/zeek-newsl...
Zeek Newsletter - Issue 56 - October 2025
Welcome to the Zeek Newsletter In this Issue: Reminders Tip of the Month Community Call Recap Contributor Shoutout Development Updates Ecosystem News Packages Get Involved TL;DR: Zeek 8.0.4 is out ...
community.zeek.org
November 19, 2025 at 4:43 PM
Newsletter highlights 📬: Malcolm v25.11.0 launched with a rebuilt install script and new visualizations, and @securityonion.bsky.social 2.4.190 includes updated Zeek components.
Details and links over here: community.zeek.org/t/zeek-newsl...
Details and links over here: community.zeek.org/t/zeek-newsl...
Zeek Workshop Europe: March 25–26 at CERN (@cern.bsky.social)
• Talks from the community + CERN team
• Full day hands-on Zeek training
• CERN facility tour
Learn more and register here: zeek.org/workshop-cer...
• Talks from the community + CERN team
• Full day hands-on Zeek training
• CERN facility tour
Learn more and register here: zeek.org/workshop-cer...
November 18, 2025 at 5:47 PM
Zeek Workshop Europe: March 25–26 at CERN (@cern.bsky.social)
• Talks from the community + CERN team
• Full day hands-on Zeek training
• CERN facility tour
Learn more and register here: zeek.org/workshop-cer...
• Talks from the community + CERN team
• Full day hands-on Zeek training
• CERN facility tour
Learn more and register here: zeek.org/workshop-cer...
Need JSON logging or want to change connection handling on the fly? There's a quick command for it. No extra scripts required. Full examples in our newsletter: community.zeek.org/t/zeek-newsl...
November 17, 2025 at 6:26 PM
Need JSON logging or want to change connection handling on the fly? There's a quick command for it. No extra scripts required. Full examples in our newsletter: community.zeek.org/t/zeek-newsl...