Forum Discussion

lupolder's avatar
lupolder
Icon for Bronze I rankBronze I
7 days ago

Zeek - Demonstrate Your Skills

Hi, I've done the Q1-15 and added the SHA1 Hash from Q14 to the hash-intel.txt. When i rerun the pcap with "zeek -r demonstrate.pcap", no logs for the Intel-Files will be created (no token generated...
defensive cyber
help & support
lupolder's avatar
lupolder
Icon for Bronze I rankBronze I

Now i was able to solve it. I copied the zeek.local file and run it manually through console. That worked... i don't know why the standard run command didn't work 🤷‍♂️
@ netcat: thank you!

KieranRowley's avatar
KieranRowley
Icon for Community Manager rankCommunity Manager
3 days ago

lupolder I'm glad that the community was able to help you solve this one, please mark netcat's reply as the solution :)