Zeek software was first released in 1998, with permission BSD, and apparently will be adopted by Microsoft.
Zeek, the open source network security monitoring platform, integrates with Windows and will "operate on more than one billion global endpoints", according to Corelight's announcement.
From Press release by Corelight:
Corelight, the leader in open network detection and response, today announced the integration of Zeek, the world's most popular open source network security monitoring platform, as a component of Microsoft Windows and Defender for Endpoint. The integration will help security teams immediately respond to the most difficult attacks by providing “signals for advanced search απειλών, πλήρη και ακριβή ανακάλυψη συσκευών IoT και πιο ισχυρές possibilities detectionand response".
Originally created by Corelight's co-founder and chief scientist, Dr. Vern Paxson, while at Lawrence Berkeley National Laboratory Zeek software transforms network traffic into compact and high-fidelity logs, file content, and behavioral analyzes to accelerate security operations.
Vital funding for Zeek originally came from the National Science Foundation and the US Department of Energy's Office of Science. As adoption increased, Corelight was founded to provide a financial model and a corporate sponsor for the project.
"Microsoft is strongly committed to supporting open source projects and ecosystems," said Rob Lefferts, Microsoft corporate vice president. "We are proud to partner with Zeek and excited to bring this level of network intelligence and monitoring to our customers."
"This is an amazing development for Zeek and its community of contributors and users," said Paxson. “I never imagined that the tool I developed for network monitoring would find wider application in endpoint defense — but that's part of the creative magic of open source development.
"We are grateful for Microsoft's contributions and support, and are excited that the impact of the project and the contributor community will grow so much."
