network security
Corelight Announces Cloud Enrichment for AWS, GCP, and Azure
A growing number of defenders use two SIEMs. This post explores why and whether XDR platforms will evolve to to become full threat hunting solutions.
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
network visibility
“Easy” button for cloud NDR visibility
Corelight's SaaS offering for AWS removes the heavy lift of managing a vital security tool but maintains visibility needed to keep cloud deployments...
Todd Morneau
Oct 18, 2022
Zeek
Enriching NDR logs with context
We show how enriching Zeek® logs with cloud and container context makes it faster to tie interesting activity to the container or cloud asset...
Stan Kiefer
Jun 2, 2022
network security
Monitoring AWS networks at scale
Our new integration with AWS GWLB Endpoint simplifies network traffic monitoring & generates Corelight data in massively scaled-out public cloud...
Vijit Nair
May 12, 2022
Zeek
Deeper visibility into Kubernetes environments with network monitoring
This post explores the need, different approaches and pros and cons of monitor traffic in Kubernetes environments.
Vijit Nair
Apr 12, 2022
network security
One SIEM is not enough?
A growing number of defenders use two SIEMs. This post explores why and whether XDR platforms will evolve to to become full threat hunting solutions.
Brian Dye
Mar 3, 2022
network security
Application Layer Infrastructure Visibility in IaaS
Application layer infrastructure visibility in IaaS using a recent Log4Shell example.
Ricky Lin
Feb 10, 2022
Zeek
Extending NDR visibility in AWS IaaS
Visibility is challenging in a cloud environment. Security teams have long relied on network monitoring to complement application level visibility.
Vijit Nair
Apr 8, 2021
Zeek
Introducing the Cloud Sensor for GCP
Visibility is paramount in securing your cloud environment. Today we announce Corelight’s Cloud Sensor for GCP.
Vijit Nair
Nov 24, 2020
Zeek
Bring Network Security Monitoring to the cloud with Corelight and Amazon VPC Traffic Mirroring
Announcing the Corelight Cloud Sensor, deployable in AWS and capable of ingesting traffic directly from the new Amazon VPC traffic mirroring feature.
John Gamble
Jun 25, 2019