Corelight Bright Ideas Blog

This is the Custom Rich Text module

Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.

Zeek

I downloaded Whonix version 15, in which two virtual machines work together to detect activity in a clever way.

Richard Bejtlich Jul 18, 2019

Zeek

In this post I will use Zeek logs to demonstrate alternative ways to analyze encrypted HTTP traffic.

Richard Bejtlich Feb 19, 2019

Zeek

With Corelight’s 1.15 release, we help figure out the host names associated with an IP address in prior network activity. Here's how it works.

Christian Kreibich Oct 25, 2018

Zeek

Discover how Zeek (formerly Bro) logs gave one company better DNS traffic visibility than their DNS servers.

Howard Samuels Jun 11, 2018