Corelight Bright Ideas Blog

This is the Custom Rich Text module

Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.

Stories by Vince

network visibility

It’s Typhoon Season: Attackers are deliberately evading EDR. What can you do about it?

Learn how network visibility and detection are critical to closing security gaps and detecting these attacks.

Vince Stoffer Dec 6, 2024

network security

Feed me!

Announcing a new monthly update cycle to our custom Suricata ruleset, the Corelight Feed.

Vince Stoffer Sep 25, 2024

NDR

How Corelight Uses AI to Empower SOC Teams

Learn how Corelight is using AI in its NDR products to help SOC teams be even more productive.

Vince Stoffer Nov 15, 2023

Zeek

Extending visibility through our new ICS/OT collection

We're excited to announce the launch of our ICS/OT Collection to help extend foundational visibility.

Vince Stoffer Jun 22, 2023

LDAP log analyzer

Expand visibility around authentication and application anomalies with Corelight’s new LDAP analyzer

Corelight's new LDAP analyzer helps detect and stop attacks that use LDAP as a transport mechanism.

Vince Stoffer Mar 20, 2023

Network Security Monitoring

Corelight launches the Entity Collection

Corelight Entity Collection, now available in v26 software release, features 3 new packages: Known Entities, Application Identification and Local...

Vince Stoffer Dec 13, 2022

Zeek

VPNs are increasingly common - how much can you see?

Corelight just shipped our latest software release (v24) which includes a brand new addition to our Encrypted Traffic Collection: VPN Insights.

Vince Stoffer Mar 24, 2022

Zeek

Introducing the C2 Collection and RDP inferences

We’re excited to announce that the Command and Control (C2) Collection is now available with today’s launch of version 21 of the Corelight software.

Vince Stoffer May 18, 2021

MITRE ATT&CK

Translating query into action

Sigma is an open-source project that provides a generic signature format for SIEMs. Here are the benefits of Sigma, and how to get these threat...

Vince Stoffer Mar 15, 2021

Zeek

The light shines even brighter: Updates to Corelight’s Encrypted Traffic Collection

We are excited to announce the expansion of our ETC. In this post, I will provide some further details and what the research team is working on next!

Vince Stoffer Jun 16, 2020

1 2

Secure your cloud.

Cloud enrichment for AWS, GCP,
and Azure

Corelight's
partner program

10 Considerations for Implementing an XDR Strategy

Don't trust. Verify with evidence

The Power of Open-Source Tools for Network Detection and Response

The Evolving Role
of NDR

Detecting 5 Current APTs without heavy lifting

Network Detection and Response

Corelight Bright Ideas Blog

This is the Custom Rich Text module

Stories by Vince

It’s Typhoon Season: Attackers are deliberately evading EDR. What can you do about it?

Feed me!

How Corelight Uses AI to Empower SOC Teams

Extending visibility through our new ICS/OT collection

Expand visibility around authentication and application anomalies with Corelight’s new LDAP analyzer

Corelight launches the Entity Collection

VPNs are increasingly common - how much can you see?

Introducing the C2 Collection and RDP inferences

Translating query into action

The light shines even brighter: Updates to Corelight’s Encrypted Traffic Collection

Have questions?

Sign up for our newsletter

We’re hiring!