Zeek

Published on
June 9, 2021
Analyzing Zeek's SSH Brute Force Detection Script
zeek dpi
Analyzing Zeek's built-in SSH brute force detection script, understanding its detection logic and threshold design.
Published on
April 30, 2021
Using Zeek to Analyze POP3 Protocol (2)
zeek dpi
Continuing POP3 protocol analysis — extracting and reconstructing email content.
Published on
April 26, 2021
Using Zeek to Analyze POP3 Protocol (1)
zeek dpi
Using Zeek to parse POP3 protocol, exploring Zeek's API and event-driven protocol analysis.

Analyzing Zeek's SSH Brute Force Detection Script