Focus on:  Hide Contributions
Back to Conference View
Login
Zeek (Bro) Workshop Europe 2019

from Tuesday 9 April 2019 (11:30) to Thursday 11 April 2019 (13:30)
CERN (31/3-004)

        : Sessions
    /     : Talks
        : Breaks
9 Apr 2019
10 Apr 2019
11 Apr 2019
AM
11:30
Registration and lunch (until 13:00)
08:15
Visit of CERN facilities (until 10:00)
10:15
Workshop presentations (until 11:45)
10:15 Running Zeek on the WAN: Experiences and solutions for large scale flow asymmetry - Sam Oehlert Scott Campbell (Unknown)  
10:45 DNSSEC protocol parser - A case study - Ms Fatema Bannat Wala (University of Delaware)  
11:15 The new Zeek Configuration Framework - Ms Amann Johanna (ICSI/Corelight/LBL)  
11:45
Lunch (until 13:15)
08:00
Breakfast (until 09:00)
09:00
Workshop presentations (until 10:30)
09:00 Without “U” there is no CommUnity: Nurturing and growing an active and contributing community - Ms Amber Graner (Corelight)  
09:30 Threat hunting @ Mozilla - Mr Michal Purzynski (Mozilla Corporation)  
10:00 Q&A Session with the Zeek Team  
10:30
Workshop wrap-up (until 11:30)
PM
13:00
Workshop presentations (until 15:00)
13:00 Opening remarks - Frederic Hemmer (CERN)  
13:10 Keynote: Finding the balance between academic freedom, operations and security - Stefan Lueders (CERN)  
14:00 How did we get here? - Prof. Vern Paxson (UC Berkeley / Corelight / ICSI)  
14:30 Real time ingestion of MISP threat intel into Zeek coupled with historical SIEM threat hunting - Dr Matthias Vallentin (Tenzir) Liviu Valsan (CERN)  
15:00
Coffee break (until 15:45) (Restaurant 2 - Coffee Area)
15:45
Workshop presentations (until 16:45)
15:45 Looking Forward: On Supervisors, Packages, and Sandboxes - Robin Sommer (Corelight / ICSI / LBNL)  
16:15 Email security auditing and alert triage with Zeek - Mr Barry Weymes  
17:00
Welcome reception (until 18:30)
13:15
Workshop presentations (until 14:45)
13:15 Selective Packet Capture at High Speed Rates - Dr Jordi Ros-Giralt  
13:45 Network Cartography Using Passive Traffic Analysis - Vivien Venuti  
14:15 A deep dive into the Zeek logging framework - Christian Kreibich (Corelight)  
14:45
Coffee break (until 15:30) (Restaurant 2 - Coffee Area)
15:30
Workshop presentations (until 17:00)
15:30 DHCP Overhaul - Mr Seth Hall (Corelight)  
16:00 JA3 and Windows hosts - Mr Jeff Atkinson (Verizon Media)  
16:30 Using Zeek Endpoint Event Logs when Fishing within a Data Lake - Mr Tim Larson  
Powered by Indico v3.3.7-pre