Consider bookmarking this one if you're working on custom protocol parsers in Spicy. Evan's tutorial covers the full workflow:
Zeek is an open source network security monitor.
zeek.org | github.com/zeek | community.zeek.org
The Zeek Network Security Monitor
- 933 Followers
- 42 Following
- 399 Posts
YouTube
RE: https://infosec.exchange/@zeek/116534356390322075
Debugging zeek scripts? Check out the Zeek Techniques part of our newsletter for a quick tip:
https://community.zeek.org/t/zeek-newsletter-issue-62-april-2026/7981#p-29738-zeek-techniques-5
Zeek was built at LBNL, which is why we chose Berkeley as our next stop for a workshop.
The CFP is open - come share what you're doing with Zeek: https://zeek.org/zeek-workshop-berkeley-2026/
cc: @berkeleylab
Zeek 8.2 is out (the final stop before Zeek 9!).
Highlights: &publish_on_change for cluster state propagation, ZeroMQ CURVE encryption, Spicy 1.16, and a fully redesigned docs site.
The team was busy 
RE: https://infosec.exchange/@zeek/116529764294343248
Is Zeek up? What's the worker load? How's packet loss? Our recent blog covers how to keep Zeek running.
RE: https://infosec.exchange/@zeek/116534356390322075
ICYMI, we've been working on some new community content...
Check out the newsletter for a DNS NOTIFY investigation, dual-format logging, custom Spicy detections, and more!
RE: https://infosec.exchange/@zeek/116534356390322075
Don't miss what's coming in Zeek 8.2, our latest release, expected later today:
Zeek Workshop Berkeley 2026 CFP is open 
If you know someone who works with Zeek, send them our way - https://zeek.org/zeek-workshop-berkeley-2026/call-for-presentations-berkeley/
RE: https://infosec.exchange/@zeek/116490179782260872
Check out Johanna's blog on writing Zeek logs in multiple formats at once, inspired by a recent question from the community:
A new issue of our newsletter just dropped. Catch up on the last month of Zeek in under 5 minutes:
https://community.zeek.org/t/zeek-newsletter-issue-62-april-2026/7981
Zeek Newsletter - Issue 62 - April 2026
Welcome to the Zeek Newsletter In this Issue: Community News Development Updates Zeek Techniques Packages Get Involved TL;DR: Zeek 8.2 and 8.0.8 are releasing next week with documentation redesign and bug fixes. Berkeley workshop (Sept 10-11) CFP is open, and new blogs + videos from Fatema, Johanna, and Evan are live. Community News & Reminders Berkeley Workshop: Last week we announced the next Zeek workshop, which will take place September 10-11 at the David Brower Center in Berkeley, ...