Zeek Workshop Berkeley 2026

Share what you know with our community

If you use Zeek in production, have built something useful with it, or have a story about how it helped you solve a real problem, we want to hear from you.

This workshop is practitioner-focused. We’re looking for talks about real deployments, real incidents, and real workflows. The best talks at events like this are the ones where someone in the audience thinks “I’ve been dealing with that exact problem!”

We’re particularly interested in:

1. How you use Zeek at scale or in a constrained environment
2. Integration stories (Zeek as part of a broader detection or response stack)
3. Scripts, packages, or tools you’ve built that others could use
4. Post-mortems or hunting workflows where Zeek made the difference
5. Unexpected or creative uses of Zeek outside traditional NSM
6. The basics done really well (deployment decisions, logging practices, tuning)

Presentation materials will be shared with the community after the workshop.

No product presentations, product marketing, or vendor pitches. This is a community event.

Format

We’re planning a mix of talk formats:

1. Standard talks (30 minutes including Q&A): The core of the program. Focused and practical with time for questions.
2. Lightning talks (5 minutes): A lower-stakes format for first-time speakers, works in progress, quick tool demos, or one interesting thing you want to share with the room.

How to submit

Fill out the submission form with:

1. Your name and email
2. Talk title
3. Abstract (what you’ll cover and why it’s useful to practitioners)
4. Short bio
5. Preferred format (standard talk or lightning talk)
6. Confirmation that you can travel to Berkeley, CA

This is a community event with no speaker fees or travel stipends. Speakers are recognized across Zeek community channels before and after the event.