Skills with input "Zeek log directory"

detecting-lateral-movement-with-zeek - Detecting Lateral Movement with Zeek

Updated 2026-09-19

Detect lateral movement in network traffic by analyzing Zeek logs to identify SMB transfers, NTLM spray, remote service execution, and connection anomalies.

⚙ Verify Zeek log collection ⚙ Parse conn.log for lateral patterns ⚙ Analyze SMB admin share access

detecting-lateral-movement-with-zeek - Detect Lateral Movement with Zeek

zeek lateral-movement smb dce-rpc

Updated 2026-09-19

Parses Zeek logs to detect SMB admin share access, DCE/RPC remote service execution, NTLM account spray, and anomalous internal connections.

⚙ Parse Zeek network logs ⚙ Analyze SMB admin share access ⚙ Detect DCE RPC service operations

detecting-lateral-movement-with-zeek - Detect lateral movement in network traffic using Zeek logs.

zeek lateral-movement smb dce-rpc

Updated 2026-09-19

Parses Zeek logs to identify SMB file transfers, NTLM account spray, remote service execution, and anomalous internal connections.

⚙ Parse Zeek network logs ⚙ Detect SMB admin share access ⚙ Identify DCE RPC service operations