Packet & Log Analysis with Zeek P1 | TryHackMe Zeek

In this video walkthrough, we covered an introduction to Zeek, packets and logs analyzer, that can be used for network security monitoring, incident analysis and logs investigation. Zeek has two primary layers; "Event Engine" and "Policy Script Interpreter" that are used to process and extract key data and insights from the logs such as source and destination IP addresses and ports. This was part of TryHackMe SOC analyst level 1 pathway.
******
Receive Cyber Security Field, Certifications Notes and Special Training Videos
******
Writeup
TryHackMe Zeek
********
Patreon
Instagram
Twitter
Facebook
LinkedIn
Website
Backup channel
My Movie channel:
******

[shxcxchcxsh]

Thank you for your videos sir. I'm following along and you're helpful in my SOC L1 path

[aliasgarkachwala]

Love your videos man.
Just one thing while explaining things instead of writing on a canvas it would look much better if you type as points.
Reason because its hard to read the second time.

[Malwr]

Your videos are always to the point and really helpful ❤

[san_lowkey]

The main difference between the both is that Snort is Signature-based where zeek is Anomaly-based
Also Snort focuses on the Network layer where Zeek offers multilayer analysis

[AdetolaAdedoyin]

Hello, Thanks so much for your videos. They are very helpful.... Great Job. I will like a copy of your sheet/notes.

[mohamedali-lsoz]

Thank you so much for your great explain, what is the tool that you use for keeping your notes as shown in the video

[vladassassin]

Hi, what's is the program for drawing?