http://motasem-notes.net/en/?p=3658
Packet & Log Analysis with Zeek | TryHackMe Zeek P1 & P2 & P3