Corelight Bright Ideas Blog

This is the Custom Rich Text module

Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.

Stories by Mark

Corelight

Black Hat USA 2025: A grab bag and a half

From plaintext chat leaks to unencrypted SIP and LLM jailbreaks, the Black Hat USA 2025 NOC saw it all.

Mark Overholser Sep 29, 2025

Corelight

Dispatch from Black Hat Asia 2025: To err is (still) human

Recapping findings from the Black Hat Asia 2025 NOC: location data, plain text logins, and self-hosted apps without TLS.

Mark Overholser May 19, 2025

Network Security Monitoring

Adventures in monitoring a hostile network: Black Hat Europe 2024

Working in the NOC at Black Hat Europe, we’re never quite sure what we’re going to see.

Mark Overholser Jan 28, 2025

network security

Want better network visibility? Don't just go with the (net)flow

Learn how Corelight logs provide deep network visibility for incident response and threat hunting in the Black Hat NOC.

Mark Overholser Sep 23, 2024

NDR

Black Hat NOC: Zero Trust…but Verify | Corelight

Our experience in the Black Hat NOC has made us into adherents for “Zero Trust…but verify.”

Mark Overholser Jul 8, 2024

IDS

Black Hat USA 2023 NOC: Five takeaways for SOC teams

Here are five lessons that me and my NOC teammates learned over the course of our week together at Black Hat NOC USA 2023.

Mark Overholser Oct 13, 2023

IDS

Tales from the Black Hat NOC (USA 2024) - speed to detect SSHAMBLE

Here are five lessons that me and my NOC teammates learned over the course of our week together at Black Hat NOC USA 2023.

Mark Overholser Jan 1, 1970

Secure your cloud.

Cloud enrichment for AWS, GCP,
and Azure

Corelight's
partner program

10 Considerations for Implementing an XDR Strategy

Don't trust. Verify with evidence

The Power of Open-Source Tools for Network Detection and Response

The Evolving Role
of NDR

Detecting 5 Current APTs without heavy lifting

Network Detection and Response