network security
How Corelight's anomaly detection enhances network security
Learn how Corelight’s anomaly detection improves threat detection, reduces false positives, and enables proactive threat hunting.
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
network security
Why NDR is essential to protecting your cloud workloads
Learn how robust network security monitoring, like Corelight’s Open NDR, can help you gain comprehensive visibility into Kubernetes clusters.
David Burkett
Feb 3, 2025
Network Security Monitoring
Thrown in the deep end: My first time hunting in the Black Hat NOC
Step into the Black Hat NOC as I recount my first experience with real-time threat hunting.
Matt Ellison
Jan 28, 2025
Mandiant
Cooking up a year of faster, smarter, and tastier security
As 2024 comes to a close, let’s take a look at the impactful product updates we delivered this year.
Vijit Nair
Dec 20, 2024
Network Security Monitoring
How YARA rules can complement NDR for malware detection
Together, NDR and YARA help SOC teams detect attackers at their point of entry and accelerate incident response.
Cynthia Gonzalez
Dec 11, 2024
Network Security Monitoring
Corelight delivers static file analysis with YARA integration
Corelight's YARA integration helps organizations increase detection rates, improve network visibility, and reduce false positives.
Christopher Sather
Dec 11, 2024
network security
Tales from the Black Hat NOC (USA 2024) - speed to detect SSHAMBLE
Recapping our learnings from the Network Operations Center (NOC) at Black Hat USA 2024. Using historical network logs to detect threats during the...
Ben Reardon
Nov 27, 2024
network security
Detecting Quasar Windows RAT
Detect Quasar RAT malware with Corelight’s open-source Zeek script, leveraging Quasar’s default TLS configuration.
Tillson Galloway
Nov 22, 2024
network security
Reduce time to triage by up to 50% with Corelight's new Guided Triage capability
Reduce time to triage by up to 50% with Corelight's new Guided Triage capability.
David Getman
Nov 12, 2024
network security
Streamlining security investigations with real-time enrichment of Corelight Open NDR and SentinelOne Singularity
Corelight’s integration with SentinelOne is a game-changer for security teams looking to stay ahead of evolving cyber threats.
Allen Marin
Oct 15, 2024