network detection response
Explore Corelight evidence in Humio Community Edition
Our new collaboration with CrowdStrike and Humio allows our customers and the community to experience the value of evidence.
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
network security
Application Layer Infrastructure Visibility in IaaS
Application layer infrastructure visibility in IaaS using a recent Log4Shell example.
Ricky Lin
Feb 10, 2022
Corelight Labs
Corelight Sensors detect the ChaChi RAT
Recently Blackberry analyzed a new GoLang Remote Access Trojan (RAT) named “ChaChi.” Here's how Corelight Sensors can detect the ChaChi RAT.
Corelight Labs Team
Jun 25, 2021
Corelight Labs
Corelight Sensors detect the ChaChi RAT
Recently Blackberry analyzed a new GoLang Remote Access Trojan (RAT) named “ChaChi.” Here's how Corelight Sensors can detect the ChaChi RAT.
Corelight Labs Team
Jun 24, 2021
Zeek
Extending NDR visibility in AWS IaaS
Visibility is challenging in a cloud environment. Security teams have long relied on network monitoring to complement application level visibility.
Vijit Nair
Apr 8, 2021
Network Security Monitoring
Maximize your Splunk ES investment with Corelight
Are you looking to threat hunt but lack sufficient network and IDS data? Maximize your Splunk ES investment with Corelight.
Roger Cheeks
Mar 17, 2021
Zeek
Getting the most out of your NIDS
In this blog post, we’ll look at some tips and tricks for how you can get more out of your Network Intrusion Detection Systems (NIDS).
Jon Natkins
Mar 8, 2021
Zeek
Finding SUNBURST backdoor with Zeek logs & Corelight
FireEye’s threat research team has discovered a troubling new supply chain attack targeting SolarWind’s Orion IT monitoring and management platform.
John Gamble
Dec 15, 2020
DNS
Beating alert fatigue with integrated data
Corelight data enables immediate SOC improvements. Here's a walkthrough of initial playbooks.
Alex Kirk
Oct 8, 2020
Zeek
Meet the Corelight CTF tournament winners
We hosted a virtual CTF tournament where hundreds of players raced to solve security challenges using Zeek data in Splunk and Elastic. Here are the...
John Gamble
Sep 15, 2020