Corelight's Zeek Threat Hunting Lunch & Learn


This event qualifies for 3 CPEs

To protect the health and safety of attendees, this event has been canceled due to COVID-19 concerns.


Attackers have taken over the network. They've infected workstations and are actively exfiltrating files out of your network using encrypted protocols. We suspect they used a zero-day exploit to gain initial access to our systems. Think you've got what it takes to track them down?

Join Corelight and Carahsoft for a three-hour capture the flag defensive exercise. We will start with a brief introduction to the powerful network analysis framework called Zeek and using Zeek data to understand what's going on in your network.

Then you'll spend hours, with nothing but your wits and Zeek, to hunt attackers across a variety of protocols. We'll be here to answer questions, but your hands will be on the keyboard and prizes are at stake! At the conclusion, we'll discuss the attacks and talk briefly about how Corelight can help you bring the power of Zeek to defend your own network.


Time Session
11:30am - 12:00pm Welcome & Lunch
12:00pm - 12:30pm Intro to Zeek, Corelight, and Capture the Flag Exercise
12:30pm - 2:15pm Capture the Flag
2:15pm - 3:00pm Winner Announcement & Wrap-Up

The capture the flag winner will get the latest Raspberry Pi! 
The winner will receive a Raspberry Pi 4 (the best model with Wi-Fi, gigabit Ethernet, and 4GB RAM), along with a 128GB SD card that's pre-loaded with the latest Zeek 3.0.

Seats are limited, don't miss out! Register today to reserve your spot!

Relevant Government Agencies

DOD & Military, Other Federal Agencies, Federal Government, State & Local Government

Register as Attendee

Add to Calendar

This event has no exhibitor/sponsor opportunities

Tue, Apr 21, 2020, 11:30am - 3:00pm ET

Complimentary:    $ 0.00

Carahsoft Office
11493 Sunset Hills Road
CarahCafe Suite 100
Reston, VA 20190
Get directions

Click here to visit event website

Corelight Government Team at Carahsoft

Contact Event Organizer

Return to search results