← Back to match
Zeek
Network traffic analysis framework for security monitoring, deployable as a full NSM system
PlatformWebfree
Zeek is an open-source network security monitor that analyzes traffic in depth using built-in protocol analyzers and a domain-specific scripting language, letting operators write site-specific monitoring policies rather than relying on one fixed detection approach. It targets high-performance networks and keeps extensive application-layer state as an archive of network activity. It is aimed at network security teams at large sites who need deep, customizable traffic analysis rather than a typical signature-only IDS.
Categories
Network SecurityNetwork MonitoringThreat Hunting

