diff --git a/salt/zeek/soc_zeek.yaml b/salt/zeek/soc_zeek.yaml
index f3e5012b2..4c9b70efb 100644
--- a/salt/zeek/soc_zeek.yaml
+++ b/salt/zeek/soc_zeek.yaml
@@ -6,7 +6,7 @@ zeek:
     description: "Enables JA4+ fingerprinting (JA4S, JA4D, JA4H, JA4L, JA4SSH, JA4T, JA4TS, JA4X). By enabling this, you agree to the terms of the JA4+ license  [https://github.com/FoxIO-LLC/ja4/blob/main/LICENSE-JA4](https://github.com/FoxIO-LLC/ja4/blob/main/LICENSE-JA4)."
     forcedType: bool
     helpLink: zeek
-    advanced: True
+    advanced: False
   config:
     local:
       load: