Dynamic Cybersecurity Defense: A Real-Time Approach with Zeek and Metasploit
Ali E. Takieldeen, Ali Khaled Elbably, Ahmed Anwer Elmogy, Zeyad Hesham Elsaid Aboala, Doniaa Mohamed Abdelhady, Ahmed Azzam · 2025
This research presents a real-time cybersecurity defense system integrating Zeek, Metasploit, and a Security Information and Event Management (SIEM) platform to enhance threat detection, reduce false positives, and improve response times. Zeek is used for real-time traffic monitoring, Metasploit simulates attack scenarios, and SIEM consolidates and analyzes data for alerting. Experimental evaluation demonstrates improved detection accuracy (91%) and reduced false positives (7%).