The Investigation module of Zeek has two things that equally work on signature detection and anomaly Evaluation. The primary of those analysis equipment would be the Zeek occasion engine. This tracks for triggering functions, such as a new TCP connection or an HTTP ask for.Identifies Intrude