Extensions, Frameworks, & Integrations Used with Zeek from Pluralsight

Zeek is a customizable, open-source tool that allows you to monitor the network and analyze events within it. This course will teach how to integrate it with other tools such as Security Onion, Elasticsearch, and Arkime.

Zeek is an event-based network monitoring and analysis tool used to help monitor the network and detect potential threats. It enables users to see the traffic going through our networks and respond to it in different ways. It can use additional packages and integrations to help provide it more capabilities and allow organizations to expand its use. In this course, Extensions, Frameworks, & Integrations Used with Zeek, you will learn all about this tool's frameworks and integrations. First, you will learn about the various extensions, integrations, and packages to be used with Zeek. Next, you will learn about the how Zeek integrates with tools such as Security Onion, Arkime, Elasticsearch, and RockNSM. Finally, you will use file carving and metadata to analyze Zeek data streams, and the intelligence framework to add additional context and intelligence to it. When you're finished with this course, you will have the ability to modify Zeek and integrate it with other tools in order to support your desired use cases and environment.

What's inside

Syllabus

Course Overview

Identifying Zeek Integrations

Deploying Zeek with Security Onion

Ingesting and Enriching Zeek Logs

Traffic lights

Read about what's good

what should give you pause

and possible dealbreakers

Strengthens existing foundations for intermediate learners through instruction in extensions, integrations, and packages

Provides an overview of the security monitoring tool, Zeek

Exposes learners to Zeek's ability to integrate with other security tools like Security Onion

Develops the ability to analyze data streams and add context and intelligence through the use of metadata and the intelligence framework in Zeek

Provides instruction in additional packages, plugins, and integrations to expand the functionality of Zeek

Reviews summary

Practical zeek integration for network security

According to learners, this course provides a strong foundation in extending and integrating Zeek for network monitoring and security analysis. Many found the practical, hands-on labs particularly valuable, offering clear demonstrations of how to integrate Zeek with essential tools like Security Onion, Elasticsearch, Arkime, and RockNSM. While some learners appreciated the clear explanations, a few noted that the pace can be fast, and it helps to have prior familiarity with Zeek or networking fundamentals. Initial technical setup challenges were also occasionally mentioned. Overall, it's considered highly relevant for cybersecurity professionals.

Concepts are well-explained, making complex topics accessible.

"The instructor breaks down complex Zeek frameworks into digestible parts."

"I found the explanations easy to follow, even for advanced topics."

"The course material was presented clearly and logically."

Covers vital integrations for Zeek in a security environment.

"Learning to use Zeek with Security Onion was a highlight for me."

"The sections on Elasticsearch and Arkime integration were highly valuable."

"I now understand how to leverage Zeek's intelligence framework more effectively."

Focuses on real-world scenarios and practical implementation.

"The labs were instrumental in applying the concepts; I learned by doing."

"I really valued the practical demonstrations of Zeek integrations."

"This course helped me put theory into practice for my network security work."

The course moves quickly, some topics could benefit from more depth.

"The pace felt a bit rushed in certain sections, especially for complex integrations."

"I would have liked more in-depth examples on advanced Zeek customizations."

"While comprehensive, some topics felt like they could use more elaborate discussion."

Requires some technical background; setup can be demanding.

"Had some difficulty getting my lab environment set up correctly; troubleshooting took time."

"This course is better suited for those with existing Linux and networking knowledge."

"I felt the course assumed a bit more prior Zeek experience than I had."

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Extensions, Frameworks, & Integrations Used with Zeek with these activities:

Review networking fundamentals

Show steps

Begin by reviewing the basics of computer networking before diving into the course content, which builds heavily on these foundational concepts.

Browse courses on Computer Networking

Show steps

Review OSI model and network protocols
Read up on network topologies and network devices
Refresh knowledge of IP addressing and routing concepts

Show all one activities

Career center

Learners who complete Extensions, Frameworks, & Integrations Used with Zeek will develop knowledge and skills that may be useful to these careers:

Cloud Security Engineer

Cloud Security Engineers work to protect cloud-based systems and applications from unauthorized access, use, disclosure, disruption, modification, or destruction. They work to identify and mitigate security risks, and to develop and implement security measures to protect against cyber threats. An understanding of network monitoring and analysis tools is essential for Cloud Security Engineers. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools and how to use this information to detect and mitigate cyber threats.

See salaries and explore the career path for Cloud Security Engineer

Intelligence Analyst

Intelligence Analysts work to interpret information gathered from various sources to make assessments and draw conclusions. They then use this information to advise decision-makers on a variety of topics, including resource allocation and strategy development. The ability to organize and analyze intelligence data is essential to succeed as an Intelligence Analyst. This is an important skill which you will refine by taking this course. By learning to implement the intelligence framework, you will learn to add context and more easily analyze intelligence data.

See salaries and explore the career path for Intelligence Analyst

Network Engineer

Network Engineers design, implement, and maintain computer networks. They work to ensure that networks are running smoothly and securely. They analyze network traffic and performance, troubleshoot problems, and perform maintenance. An understanding of network monitoring and analysis tools is essential for Network Engineers. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools and how to use it to monitor the network.

See salaries and explore the career path for Network Engineer

Security Analyst

Security Analysts help to protect organizations from cyber threats. They work to identify vulnerabilities and security risks, and to develop and implement security measures to mitigate these risks. An understanding of network monitoring and analysis tools is essential for Security Analysts. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools, such as Security Onion and Elasticsearch.

See salaries and explore the career path for Security Analyst

Cybersecurity Analyst

Cybersecurity Analysts work to protect computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. They work to identify and mitigate security risks, and to develop and implement security measures to protect against cyber threats. An understanding of network monitoring and analysis tools is essential for Cybersecurity Analysts. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools and how to use this information to detect and mitigate cyber threats.

See salaries and explore the career path for Cybersecurity Analyst

Information Security Analyst

Information Security Analysts work to protect the integrity, confidentiality, and availability of information. They work to identify and mitigate security risks, and to develop and implement security measures to protect against cyber threats. An understanding of network monitoring and analysis tools is essential for Information Security Analysts. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools and how to use this information to detect and mitigate cyber threats.

See salaries and explore the career path for Information Security Analyst

Information Technology Auditor

Information Technology Auditors are responsible for examining and evaluating the effectiveness of an organization's information systems and security controls. They work to identify and mitigate security risks, and to ensure that the organization is compliant with regulatory requirements. An understanding of network monitoring and analysis tools is essential for Information Technology Auditors. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools and how to use this information to identify and mitigate security risks.

See salaries and explore the career path for Information Technology Auditor

IT Security Specialist

IT Security Specialists are responsible for protecting an organization's information systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. They work to identify and mitigate security risks, and to develop and implement security measures to protect against cyber threats. An understanding of network monitoring and analysis tools is essential for IT Security Specialists. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools and how to use this information to detect and mitigate cyber threats.

See salaries and explore the career path for IT Security Specialist

Cyber Threat Intelligence Analyst

Cyber Threat Intelligence Analysts work to collect, analyze, and disseminate information about cyber threats. They work to identify and mitigate security risks, and to develop and implement security measures to protect against cyber threats. An understanding of network monitoring and analysis tools is essential for Cyber Threat Intelligence Analysts. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools and how to use this information to detect and mitigate cyber threats.

See salaries and explore the career path for Cyber Threat Intelligence Analyst

DevSecOps Engineer

DevSecOps Engineers work to integrate security into the software development lifecycle. They work to ensure that software is developed securely and that security risks are identified and mitigated early in the development process. An understanding of network monitoring and analysis tools is essential for DevSecOps Engineers. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools and how to use this information to identify and mitigate security risks.

See salaries and explore the career path for DevSecOps Engineer

Computer Network Architect

Computer Network Architects design, implement, and maintain computer networks. They work to ensure that networks are reliable, efficient, and secure. An understanding of network monitoring and analysis tools is essential for Computer Network Architects. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools and how to use this information to identify and mitigate security risks.

See salaries and explore the career path for Computer Network Architect

Computer Systems Analyst

Computer Systems Analysts design, implement, and maintain computer systems. They work to ensure that systems are reliable, efficient, and secure. An understanding of network monitoring and analysis tools is essential for Computer Systems Analysts. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools and how to use this information to identify and mitigate security risks.

See salaries and explore the career path for Computer Systems Analyst

Network Security Architect

Network Security Architects design, implement, and maintain network security solutions. They work to ensure that networks are protected from unauthorized access, use, disclosure, disruption, modification, or destruction. An understanding of network monitoring and analysis tools is essential for Network Security Architects. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools and how to use this information to identify and mitigate security risks.

See salaries and explore the career path for Network Security Architect

Software Developer

Software Developers design, develop, and maintain software applications. They work to ensure that software is developed securely and that security risks are identified and mitigated early in the development process. An understanding of network monitoring and analysis tools is essential for Software Developers. This course will help you to build a foundation in these skills. Specifically, you will learn about integrating Zeek with other tools and how to use this information to identify and mitigate security risks.

See salaries and explore the career path for Software Developer

Data Analyst

Data Analysts work to organize and interpret large sets of data. They frequently apply statistical analysis and predictive modeling to identify trends and advise decision making. An understanding of how to attach metadata to datastreams would be an extremely valuable asset to a Data Analyst. By taking this course, you will gain this ability, in addition to more general techniques for working with and analyzing data. More specifically, you will work with file carving and metadata, enabling you to enhance data analysis efforts.

See salaries and explore the career path for Data Analyst