Zeek
Extensibility as a Guiding Principle
To us, extensibility is not an afterthought that we try to tuck on in a few release cycles. It permeates the way we think about network monitoring.
Featured
Building “php2shell” detections before coordinated disclosure
We built Zeek and Suricata detections for php2shell, two serious remote code execution vulnerabilities in PHP, and released them as open source.