DevOps & Infrastructure
Performing Network Traffic Analysis With Zeek
Zeek operates as a passive network security monitor, generating structured logs of protocol metadata including HTTP, DNS, TLS, SSH, SMTP, and FTP. The skill allows the creation of custom detection scripts and seamless integration with SIEM platforms, enabling continuous, high‑fidelity traffic monitoring for threat detection, anomaly identification, or forensic investigation. This is ideal for organizations that require detailed, real‑time insight into network activity beyond raw PCAP analysis.
- Publisher / source
- Cybersecurity Skills (Community)
- Upstream record
- mukul975/Anthropic-Cybersecurity-Skills
- Version
- Version 3
- Published
- Publication review
- Approved for publication
- Content fingerprint
00175ea1e836e01818bab9eaa33f26a7315ac48920387723a8cecc950004b483