network visibility
It’s Typhoon Season: Attackers are deliberately evading EDR. What can you do about it?
Learn how network visibility and detection are critical to closing security gaps and detecting these attacks.
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
PCAP
How SOCs can level up their PCAP game with Smart PCAP (Part 2)
Learn how Corelight Smart PCAP helps customers streamline workflows and achieve incredible efficiency.
Roger Cheeks
Jul 13, 2023
Zeek
Key takeaways from RSA 2023: #BetterTogether and AI in security
Whether or not you made it to RSA 2023, check out this blog to learn about key themes from this year’s conference.
Ed Smith
May 8, 2023
Zeek
New Sliver C2 Detection Released - Redteam detected
Corelight announces the release of a new detection package “Sliver”, which identifies and raises alerts related to the Sliver C2 framework.
Corelight Labs Team
May 4, 2023
PCAP
How SOCs can level up their PCAP game with Smart PCAP
Encrypted traffic and the security use case limitations of full packet capture vs. Corelight's Smart PCAP solution.
Roger Cheeks
May 3, 2023
Zeek
VPNs are increasingly common - how much can you see?
Corelight just shipped our latest software release (v24) which includes a brand new addition to our Encrypted Traffic Collection: VPN Insights.
Vince Stoffer
Mar 24, 2022
Zeek
Introducing RDP Inferences
This package runs on Corelight Sensors and provides network traffic analysis (NTA) inferences on live RDP traffic.
Anthony Kasza
May 20, 2021
Zeek
Introducing the C2 Collection and RDP inferences
We’re excited to announce that the Command and Control (C2) Collection is now available with today’s launch of version 21 of the Corelight software.
Vince Stoffer
May 18, 2021
Zeek
Small, fast and easy. Pick any three.
Zeek has been the darling of security defenders looking to get deep visibility into network traffic. Today, we are excited to announce the Software...
Seth Hall
Nov 18, 2020
Zeek
Zeek & Sigma: Fully compatible for cross-SIEM detections
Corelight recently teamed up with SOC Prime, creators of advanced cyber analytics platforms, to add support for the entire Zeek data set into Sigma.
Alex Kirk
Jun 25, 2020