The Investigation module of Zeek has two components that equally Focus on signature detection and anomaly analysis. The main of those Assessment resources could be the Zeek occasion engine. This tracks for triggering gatherings, such as a new TCP connection or an HTTP ask for.A part of that