Well, that was a lot of learning that we just did.
We learned quite a bit about the language that Zeek uses and
saw some of it within our own environment.
Let's review what we covered here so we can move into the next module
and continue on with the next portion of our course.
In this module,
we were able to talk about many different aspects of the Zeek language.
We started out by talking about what the Zeek language is and how we can
compare it to the other languages like Python or Perl.
We then detailed the signature framework,
which was one of our frameworks that were briefly
mentioned in the previous module.
This signature framework gives us some nice capabilities that we
can use to add to the functionality of the tool.
After that,
we dove into the default scripts that Zeek comes with and looked at
where they are and how some of them are structured.
We then discussed some things to think about when writing
scripts and tuning the system so you can properly do so
based on what you want to see.
We briefly discussed some customization options for scripts in Zeek,
and now we're wrapping up the module.
This was a tough one, but a fun one to learn.
Don't go thinking that we're done quite yet though,
we still have a little bit of learning to do.
Up next,
we're going to talk about the various output options that we have with Zeek,
as well as some ways to customize these.
I hope to see you in the next module.