The analysis module of Zeek has two factors that the two work on signature detection and anomaly Evaluation. The 1st of such Investigation instruments would be the Zeek celebration motor. This tracks for triggering functions, such as a new TCP relationship or an HTTP ask for.Part of that profile includes the endpoints that the resource communicates