Consider bookmarking this one if you're working on custom protocol parsers in Spicy. Evan's tutorial covers the full workflow:

https://youtu.be/oLtpgLlD67M?si=cilXr-Mx8KQA6oaZ

#Zeek #Spicy #NetworkSecurity #OpenSource

Building a Custom Detection with Zeek and Spicy

YouTube