Deploy Zeek (formerly Bro) as a passive network security monitor to generate structured logs of protocol metadata (HTTP, DNS, TLS, SSH, SMTP, FTP, and more), write custom detection scripts, and integrate outputs with SIEM platforms.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-network-traffic-analysis-with-zeeknpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-network-traffic-analysis-with-zeek -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-network-traffic-analysis-with-zeek -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-network-traffic-analysis-with-zeekgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-network-traffic-analysis-with-zeekgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-network-traffic-analysis-with-zeek ~/.claude/skills/performing-network-traffic-analysis-with-zeek # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-network-traffic-analysis-with-zeek ~/.agents/skills/performing-network-traffic-analysis-with-zeek # Codex, Cursor, Gemini CLI, Copilot, OpenCode