So there you have it.
We finished the module all about installing and configuring Zeek.
We learned quite a bit about the installation and configuration of Zeek,
as well as how the processing works behind the scenes.
Let's review really quickly.
We started off this conversation by discussing the two
deployment options that Zeek allows us to have.
This is either in a standalone mode or cluster mode.
There are some benefits to each,
but for anything larger than a very small enterprise,
it's definitely recommended to go with cluster mode.
We then discussed ZeekControl and what it can do for us in
either one of these deployment types.
After,
we discussed Zeek's event engine and policy script interpreter and how those
function together to give us the full functionality of Zeek.
Then,
we went into the installation and configuration of Zeek so we can
learn about the requirements and prerequisites.
Finally,
we hopped into the lab again and performed all of this from the source code.
It was all a success.
Up next,
we'll be detailing the components of Zeek and talking
all about the different frameworks, subcomponents,
and plugins that we have available to us to make Zeek
function exactly how we want to.
Join me in the next module.