Zeek tracks extensive application-layer state across protocols, giving you a high-level, semantic archive of everything on your network. Its scripting language lets you write site-specific detection policies without locking into any single approach. Explore it here: osp.fyi/zeek
0 likes 0 replies
?