An attacker can hide an exploit in encrypted traffic, but they cannot hide that they had to look around your network first. In a new blog post, Aashish Sharma breaks down the mechanics of scan detection in Zeek. https://zeek.org/2026/09/how-attackers-learn-your-network-before-they-attack-it/ #Zeek #NetworkSecurity #OpenSource #ThreatHunting