Cybersecurity

Zeek Workshop Berkeley 2026

This workshop brings together Zeek developers, core contributors, and practitioners from across the community for two days of technical talks, hands-on training, and conversations about Zeek in real-world applications. Attendees include those running Zeek in production, professionals in incident response and network security monitoring, and newcomers seeking…

Visit the official site
13Speakers
1Sponsors
154Sessions
10Companies · in total

Speakers

Programmed at Zeek, in alphabetical order.

Aaron J. Scantlin
Zeek Geek · National Energy Research Scientific Computing Center
Aaron Scantlin
Resident Zeek Geek at NERSC · NERSC
Aashish Sharma
Member of the Cyber Security Team · Lawrence Berkeley National Laboratory
Arne Welzel
Software Engineer on Open Source team at Corelight · Corelight
Christian Kreibich
Technical Lead of Zeek project and engineer at Corelight · Corelight
Evan Typanski
Software Engineer at Corelight · Corelight
Fatema Bannat Wala
Security Engineer · ESnet/Lawrence Berkeley National Laboratory
Mark Overholser
Threat Hunter in Black Hat Conference NOC · Black Hat NOC
Michelle Pathe
Community Liaison for the Zeek Project · Zeek Project
Peter Buffon
Member of the Berkeley Lab Cyber Security team · Lawrence Berkeley National Laboratory
Phuong Cao
Research Scientist at National Center for Supercomputing Applications (NCSA), University of Illinois Urbana-Champaign · NCSA/UIUC
Vern Paxson
Co-founder and chief scientist at Corelight; Professor of Computer Science at University of California, Berkeley · Corelight / University of California, Berkeley
Zach Chadwick
Software Engineer at QA Cafe · QA Cafe

Sponsors

The companies behind the program. Tiers as disclosed.

Corelight

Agenda

Selected from 154 sessions.

  • 10:15 AM

    Speaker and topic to be announced soon!

  • 10:45 AM

    Beyond conn.log: What We Learned Feeding Zeek Logs to an LLM

  • 10:45 AM

    Break

    Training
  • 10:45 AM

    Speaker and topic to be announced soon!

  • 11:00 AM

    Introduction to Running Zeek cont’d

    Training
  • 11:15 AM

    From Packets to Practice: Running Zeek Operationally at NERSC

  • 12:00 PM

    Lunch

    Lunch (offsite, 90 minutes)

  • 12:15 PM

    Lunch

    Lunch (offsite)

    Training
  • 1:30 PM

    Hands-on Scripting

    An in-depth exploration of the Zeek scripting language. Designed for users who want to go beyond a standard deployment, this session focuses on developing custom Zeek scripts to ex…

    Training
Company intelligence

What does it mean when 10 companies show up, and 1 bet on three roles at once?

Ten companies. one are betting more than once.

The numbers below are derived from the speakers, sponsors, and exhibitors on this page, cross-referenced into one ledger. They are the only thing here that 10times.com cannot tell you.

Who's in the room
1All threespeak · spons · exh
0Sponsoringsponsor only
9Speakingspeaker only

In all three roles

Corelight

Speakers by seniority

8% of the speakers carry senior titles: C-suite, Founder, VP, or Director-level.

  • C-suite18%
  • Manager / Lead18%
  • Engineer · IC431%
  • Research / Science18%
  • Other roles646%

Of 13 speakers · classified by free-text title

Most-represented companies
#CompanyRolesSpeakers
1CorelightSponsor3
2Lawrence Berkeley National Laboratory2
3Black Hat NOC1
4Corelight / University of California, Berkeley1
5ESnet / Lawrence Berkeley National Laboratory1
6National Energy Research Scientific Computing Center1
7NCSA/UIUC1
8NERSC1
9QA Cafe1
10Zeek Project1
Sponsors by tier
unspecified1
100% of 1