Skills with input "Zeek log files"

detecting-lateral-movement-with-zeek - Detecting Lateral Movement with Zeek

Updated 2026-09-19

Detect lateral movement in network traffic by analyzing Zeek logs to identify SMB transfers, NTLM spray, remote service execution, and connection anomalies.

⚙ Verify Zeek log collection ⚙ Parse conn.log for lateral patterns ⚙ Analyze SMB admin share access

detecting-lateral-movement-with-zeek - Detect lateral movement in network traffic using Zeek logs.

zeek lateral-movement smb dce-rpc

Updated 2026-09-19

Parses Zeek logs to identify SMB file transfers, NTLM account spray, remote service execution, and anomalous internal connections.

⚙ Parse Zeek network logs ⚙ Detect SMB admin share access ⚙ Identify DCE RPC service operations

detecting-lateral-movement-with-zeek - Detecting Lateral Movement with Zeek

zeek lateral-movement smb dce-rpc

Updated 2026-09-19

Analyze Zeek network logs to detect lateral movement including SMB share access, DCE/RPC service execution, and NTLM account spray.

⚙ Verify Zeek log collection ⚙ Parse conn.log for lateral connections ⚙ Analyze SMB admin share access