Hello, and welcome to the course, Getting Started with Zeek.
I'm Joe,
a network security consultant and a big fan of network
monitoring tools and applications.
In this course,
I'm going to teach you all about Zeek and everything you
need to know to get started with it.
We'll dive into this tool's functions and uses and learn
how to get it installed and configured.
You may be asking yourself, what the heck is Zeek?
Well,
it's a network monitoring tool that you can use to alert you to
threats or suspicious activity on your network.
But before we start getting into all of that,
you may need to know that Zeek is the new name for what
many of us used to know this tool as, Bro.
Yes, this course is all about the tool Bro.
The name change just happened in 2018,
so there are plenty of people that still use the name Bro.
Even some of the scripting within the application does too.
I'll use the name Zeek and Bro interchangeably if I
need to throughout this course.
So, Zeek is Bro 3.0,
and it's the same awesome tool that we knew from the other name.
Okay, now that any confusion about that is gone, let's talk about this course.
We're going to be using a topology like this,
simple enough, so that we can see a little bit of data and see how Zeek reacts.
We have our CentOS virtual machine that Zeek will be
installed on to capture the data, as well as the rest of our network.
Clients and our Windows Server are all going to a router.
Using this topology,
we'll be able to configure and use Zeek to detect threats
and suspicious activity on our network.
So you work for a wonderful company Globomantics, the robotics company.
They're looking to improve their network monitoring capabilities and want
to try to stick with an open source tool if possible.
Zeek was one of the tools on the list, and here we are.
We'll learn all about it so that you can make a
decision on if the tool fits your needs,
as well as how to install it and configure it for
whenever you do move forward with it.
You're going to be the one to advocate for Zeek and
what it can do for your network.