Name: Zeek (Bro) Workshop Europe 2019
Start: 2019-04-09T11:30:00+02:00
End: 2019-04-11T13:30:00+02:00
Location: CERN

Zeek (Bro) Workshop Europe 2019

from Tuesday, 9 April 2019 (11:30) to Thursday, 11 April 2019 (13:30)

Monday, 8 April 2019
Tuesday, 9 April 2019

11:30

11:30 - 13:00
Room: 31/3-004 - IT Amphitheatre
13:00
13:00 - 15:00
Room: 31/3-004 - IT Amphitheatre
Contributions

13:00 Opening remarks - Frederic Hemmer (CERN)

13:10 Keynote: Finding the balance between academic freedom, operations and security - Stefan Lueders (CERN)

14:00 How did we get here? - Vern Paxson (UC Berkeley / Corelight / ICSI)

14:30 Real time ingestion of MISP threat intel into Zeek coupled with historical SIEM threat hunting - Liviu Valsan (CERN) Matthias Vallentin (Tenzir)
15:00

15:00 - 15:45
Room: Restaurant 2 - Coffee Area
15:45
15:45 - 16:45
Room: 31/3-004 - IT Amphitheatre
Contributions

15:45 Looking Forward: On Supervisors, Packages, and Sandboxes - Robin Sommer (Corelight / ICSI / LBNL)

16:15 Email security auditing and alert triage with Zeek - Barry Weymes
17:00

17:00 - 18:30
Room: CERN Restaurant no. 2
Wednesday, 10 April 2019

08:15

08:15 - 10:00
Room: 31/3-009 - IT Amphitheatre Coffee Area
10:15
10:15 - 11:45
Room: 31/3-004 - IT Amphitheatre
Contributions

10:15 Running Zeek on the WAN: Experiences and solutions for large scale flow asymmetry - Scott Campbell (Unknown) Sam Oehlert

10:45 DNSSEC protocol parser - A case study - Fatema Bannat Wala (University of Delaware)

11:15 The new Zeek Configuration Framework - Amann Johanna (ICSI/Corelight/LBL)
11:45

11:45 - 13:15
Room: CERN Restaurant no. 2
13:15
13:15 - 14:45
Room: 31/3-004 - IT Amphitheatre
Contributions

13:15 Selective Packet Capture at High Speed Rates - Jordi Ros-Giralt

13:45 Network Cartography Using Passive Traffic Analysis - Vivien Venuti

14:15 A deep dive into the Zeek logging framework - Christian Kreibich (Corelight)
14:45

14:45 - 15:30
Room: Restaurant 2 - Coffee Area
15:30
15:30 - 17:00
Room: 31/3-004 - IT Amphitheatre
Contributions

15:30 DHCP Overhaul - Seth Hall (Corelight)

16:00 JA3 and Windows hosts - Jeff Atkinson (Verizon Media)

16:30 Using Zeek Endpoint Event Logs when Fishing within a Data Lake - Tim Larson
Thursday, 11 April 2019

08:00

08:00 - 09:00
Room: 31/3-009 - IT Amphitheatre Coffee Area
09:00
09:00 - 10:30
Room: 31/3-004 - IT Amphitheatre
Contributions

09:00 Without “U” there is no CommUnity: Nurturing and growing an active and contributing community - Amber Graner (Corelight)

09:30 Threat hunting @ Mozilla - Michal Purzynski (Mozilla Corporation)

10:00 Q&A Session with the Zeek Team
10:30 Workshop Wrap-up
Workshop Wrap-up
10:30 - 11:30
Room: 31/3-004 - IT Amphitheatre

Choose timezone

Share this page

Direct link

Social networks

Calendaring