Zeek-Bro Security Monitoring with Tim Garcia

preview_player
Показать описание
This video is about threat detection using the open source tool, Zeek/Bro to perform traffic logging and security monitoring on corporate networks by Tim Garcia, SANS instructor (Tool Time with Tim) VP-CISSP,GSEC,GCDA,GCCC,GMON,GCED

Can a 20 year old technology help give you strategic visibility into a modern enterprise netowork? The answer is yes!. Welcome to a powerful network monitoring/logging tool most people have never heard of.

Tim Garcia will review the capabilities and use of the the Zeek and Bro IDS (two separate tools that are often used together) for security threat hunting.

(Originally the presentation was to be on the use of the Yara scripting tool to identify malware signatures but the Zeek/Bro topic won out due to popular demand).

Tim is SANS Instructor primarily focused on blue team activities, ethical hacking, incident handling, security management and general information security principles. Instructor in Information Systems Security, Systems Analysis and Project Management for several local universities in the Phoenix area.
Рекомендации по теме
Комментарии
Автор

Thanks for the shout out and for advocating Zeek and NSM!

RichardBejtlich
Автор

Michael Edgar watched this on 25 JUL 2020

michaeledgar