This is a one day Zeek workshop hosted by Portland State University and sponsored by Corelight, Inc.

This workshop is free to attend by registration is required.

In this workshop we'll introduce you to Zeek, best practice around deploying and running Zeek then we'll take a deeper look at the Zeek logs and how to use the data derived from the Zeek logs.

And for those who want to know more and become an active contributor and participant in the Zeek community we'll get you started.

Agenda:

• 8:30am-9:00am - Registration
• 9am - 9:15am - Welcome and Overview of the Day
• 9:15am - 10:00am - Introduction to Zeek
• 10:00am - 11am - Deploying and Running Zeek
• 11am - 11:15am - Break
• 11:15 - Noon - Zeek Log Review, pt. 1
• Noon - 1pm - Lunch
• 1pm - 1:30pm - Zeek Log Review, pt.2
• 1:30pm - 2:30pm - Practical Application of Zeek Data and Logs
• 2:30pm - 3pm - Stories from the Trenches: How Zeek helped solving incidents with Zeek.
• 3pm - 3:30pm - Wrap-up and giveaways

We'll also be giving away a Raspberry Pi 4 with Raspian and Zeek pre-loaded.

More about Zeek (formerly Bro) can be found at: zeek.org

Venue Information:

• Portland State University
• Smith Memorial Student Union (Room SMSU 327/8/9)
• 1825 SW Broadway
• Portland, OR 97201

If you are attending and have specific Zeek related questions, please feel free to let us know by emailing Amber Graner, Zeek Community Director at: akgraner@corelight.com