Skip to content
  • There are no suggestions because the search field is empty.

Corelight recognized as a leader in the 2025 Gartner Magic Quadrant™ for network detection and response

GET THE REPORT >

Corelight recognized as a leader in the 2025 Gartner Magic Quadrant™ for network detection and response

+1(888) 547-9497

Corelight Bright Ideas Blog

This is the Custom Rich Text module

Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.

Blog Dashboard

Stories by Keith

network detection response

Understand and detect MITRE Caldera with Zeek®

Read how to identify C2 activities and agent downloads associated with MITRE Caldera agents using this Zeek Caldera detector via GitHub.

Keith J. Jones Feb 14, 2025
Zeek

Detecting Gozi Banking Malware

I ran into a sample of the Gozi banking malware in the wild. This is how I developed an open source detection package to find it with Zeek.

Keith J. Jones Sep 7, 2023
Zeek

Give me my stats!

In this post I am going to walk you through the process I used to develop a package called “my_stats” that pulls memory information from a running...

Keith J. Jones Sep 21, 2020
network detection response

Testing Screenshot code Text Extraction with AI

Read how to identify C2 activities and agent downloads associated with MITRE Caldera agents using this Zeek Caldera detector via GitHub.

Keith J. Jones Jan 1, 1970