ZEEK
With more than 10,000 deployments worldwide, Zeek® is the world's most widely used network security monitoring platform and is the foundation for Corelight evidence.
The gold standard for network monitoring
Zeek transforms network traffic into compact, high-fidelity transaction logs, allowing defenders to understand activity, detect attacks, and respond to them. Zeek sits out-of-band, on-prem or in the cloud. It gathers metadata and extracted files, and formats everything for input into any SIEM or XDR. Zeek provides the evidence that is foundational to Corelight’s Open NDR Platform.
Free Zeek cheatsheets
A selection of cheatsheets for understanding what’s in Zeek metadata.
Have questions?
Talk with one of our experts today.
