When PCAPs aren't available, can't be shared, or your script depends on external services, standard BTests need a different approach. Part 2 of Yacin's testing series walks through hand-crafting events and using Zeek's built-in event tracing flag. Read Part 2: https://zeek.org/2026/07/the-cure-for-exceptional-zeek-package-testing-part-2/ #Zeek #NetworkSecurity #BTest #OpenSource