Zeek & Network Metadata

intermediate Hands-on lab 50 min 3 tasksSubscription

Investigate with Zeek's connection logs instead of full packets: read conn.log, dns.log, and http.log to spot C2 beaconing and DGA/tunneling DNS, and pull the IOCs that drive your hunts.

This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.

Part of these paths

Network Security Monitoring

Unlock this lab

Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.

Create free account Sign in to start

Updated 2026-06-15