Corelight Bright Ideas Blog

This is the Custom Rich Text module

Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.

Stories by Alex

Zeek

Know your environment: Tenable/Corelight integration for prioritized IDS alerts

Prioritizing alerts just got a little easier for SOC teams with Corelight's integration with Tenable.

Alex Kirk Mar 10, 2022

cybersecurity

Acting on CISA’s advice for detecting Russian cyberattacks

This post explores the 4 key areas outlined in the CISA "Shields Up" memo and examines ways they can be detected with network data.

Alex Kirk Feb 28, 2022

Zeek

Expanded Suricata detections with Dtection.io

Corelight offers a new core recommendation - Dtection.io - for customers using its Suricata integration.

Alex Kirk Nov 4, 2021

MITRE ATT&CK

Monitoring networks for Chinese State-Sponsored Cyber Operations

In the spirit of our open-source heritage, Corelight has produced a document breaking down our ability to identify and detect these attackers’...

Alex Kirk Aug 18, 2021

Product

Exchange exploitation and architecting for visibility

The new Microsoft Exchange vulnerabilities disclosed earlier this month highlight the importance of architecting for security visibility on the...

Alex Kirk Mar 16, 2021

DNS

Beating alert fatigue with integrated data

Corelight data enables immediate SOC improvements. Here's a walkthrough of initial playbooks.

Alex Kirk Oct 8, 2020

Zeek

Zeek & Sigma: Fully compatible for cross-SIEM detections

Corelight recently teamed up with SOC Prime, creators of advanced cyber analytics platforms, to add support for the entire Zeek data set into Sigma.

Alex Kirk Jun 25, 2020

Secure your cloud.

Cloud enrichment for AWS, GCP,
and Azure

Corelight's
partner program

10 Considerations for Implementing an XDR Strategy

Don't trust. Verify with evidence

The Power of Open-Source Tools for Network Detection and Response

The Evolving Role
of NDR

Detecting 5 Current APTs without heavy lifting

Network Detection and Response

Corelight Bright Ideas Blog

This is the Custom Rich Text module

Stories by Alex

Know your environment: Tenable/Corelight integration for prioritized IDS alerts

Acting on CISA’s advice for detecting Russian cyberattacks

Expanded Suricata detections with Dtection.io

Monitoring networks for Chinese State-Sponsored Cyber Operations

Exchange exploitation and architecting for visibility

Beating alert fatigue with integrated data

Zeek & Sigma: Fully compatible for cross-SIEM detections

Have questions?

Sign up for our newsletter

We’re hiring!