The software Zeek was first released in 1998, under a BSD license, and it looks like it will be adopted by Microsoft.
Zeek, the platform open source network security monitoring, integrates with Windows and will "work on more than a billion global endpoints," according to Corelight's announcement.
From Press release by Corelight:
Corelight, the leader in open network detection and response, today announced the integration of Zeek, the world's most popular open source network security monitoring platform, as a component of Microsoft Windows και Defender for Endpoint. Η ενοποίηση θα βοηθήσει τις ομάδες ασφαλείας να ανταποκρίνονται άμεσα στις πιο δύσκολες επιθέσεις παρέχοντας “σήματα για προηγμένη αναζήτηση απειλών, πλήρη και ακριβή ανακάλυψη συσκευών IoT και πιο ισχυρές δυνατότητες ανίχνευσης και απόκρισης”.
Originally created by Corelight's co-founder and chief scientist, Dr. Vern Paxson, while at Lawrence Berkeley National Laboratory Zeek software transforms network traffic into compact and high-fidelity logs, file content, and behavioral analyzes to accelerate security operations.
Vital funding for Zeek originally came from the National Science Foundation and the US Department of Energy's Office of Science. As adoption increased, Corelight was founded to provide a financial model and a corporate sponsor for the project.
“Microsoft is strongly committed to support open source projects and ecosystems," said Rob Lefferts, Microsoft's corporate vice president. "We are proud to partner with Zeek and excited to bring this level of network intelligence and monitoring to our customers."
"This is an amazing development for Zeek and its community of contributors and users," said Paxson. “I never imagined that the tool I developed for network monitoring would find wider application in endpoint defense — but that's part of the creative magic of open source development.
"We are grateful for Microsoft's contributions and support, and are excited that the impact of the project and the contributor community will grow so much."
