[Zeek] Updating Zeek 2.5.3

Johanna Amann johanna at icir.org
Thu Jun 20 10:05:42 PDT 2019


Hi,

> I was wondering if theres a way to update the signature database in Zeek
> 2.5.3 without updating to a newer version of Zeek.

What exactly do you mean by the signature database?

Zeek is not really signature centric like other projects - and does not
come with an internal database of attack signatures (or similar) - hence
the question :).

If you install additional scripts that perform detection (e.g. from
bro-pkg) - a lot of them will run on several versions of Zeek.

Johanna


More information about the Zeek mailing list