Course outline(W48M23) Zeek

Your course

Network Monitoring with Security Onion (W48)

Module 1

Before the course

  1. 1.(W00) Course Instructions

Module 2

Module 1

  1. 1.(W48M01) Introduction to the course and instructor
  2. 2.(W48M02) Introduction to Security Onion
  3. 3.(W48M03) SO 2x Architecture
  4. 4.(W48M04) Deployment Scenarios
  5. 5.(W48M05) Hardware and Software Specs

Module 3

Module 2

  1. 1.(W48M06) Introduction to SOC
  2. 2.(W48M07) Hunt Interface
  3. 3.(W48M08) PCAP Interface
  4. 4.(W48M09) Kibana
  5. 5.(W48M10) Grafana
  6. 6.(W48M11) CyberChef
  7. 7.(W48M12) Playbook
  8. 8.(W48M13) Fleet
  9. 9.(W48M14) Hive
  10. 10.(W48M15) ATT&CK Navigator
  11. 11.(W48M16) so-import-pcap

Module 4

Module 3

  1. 1.(W48M17) Introduction and Network Miner
  2. 2.(W48M18) Wireshark
  3. 3.(W48M19) Network and Host Visibility
  4. 4.(W48M20) AF-PACKET
  5. 5.(W48M21) Stenographer
  6. 6.(W48M22) Suricata
  7. 7.(W48M23) Zeek
  8. 8.(W48M24) Strelka
  9. 9.(W48M25) Osquery
  10. 10.(W48M26) Beats
  11. 11.(W48M27) Wazuh
  12. 12.(W48M28) Syslog
  13. 13.(W48M29) Sysmon Autorun

Module 5

Module 4

  1. 1.(W48M30) Introduction
  2. 2.(W48M31) Ingest
  3. 3.(W48M32) Filebeat
  4. 4.(W48M33) Logstash
  5. 5.(W48M34) Redis
  6. 6.(W48M35) Elasticsearch
  7. 7.(W48M36) Elastalert
  8. 8.(W48M37) Curator
  9. 9.(W48M38) Data Fields
  10. 10.(W48M39) Tuning
  11. 11.(W48M40) Tips and Tricks

Module 6

Final Exam

Course overview
Module 4Lesson 7

(W48M23) Zeek

Lesson videoLocked

Member lesson

Unlock the full lesson

Sign in to watch and unlock the course materials.