mirror of
https://github.com/zeek/zeek.git
synced 2025-10-17 14:08:20 +00:00
![]() These are no longer loaded by default due to the performance impact they cause simply by being loaded (they have event handlers for commonly generated events) and they aren't generally useful enough to justify it. |
||
---|---|---|
.. | ||
actions | ||
__load__.zeek | ||
main.zeek | ||
README | ||
weird.zeek |
The notice framework enables Zeek to "notice" things which are odd or potentially bad, leaving it to the local configuration to define which of them are actionable. This decoupling of detection and reporting allows Zeek to be customized to the different needs that sites have.