IDS
Black Hat USA 2023 NOC: Five takeaways for SOC teams
Here are five lessons that me and my NOC teammates learned over the course of our week together at Black Hat NOC USA 2023.
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
Corelight
Enhance your search experience within Splunk by using the Corelight App
Download the Corelight App for Splunk and see how easy it is to get Corelight data into Splunk.
James Schweitzer
Oct 11, 2023
network security
Replace IDS and extend entity visibility
Corelight v27 software release enhances the platform’s integrated Suricata IDS functionality, further integrating alerts with rich context.
John Gamble
Dec 8, 2022
network detection response
Explore Corelight evidence in Humio Community Edition
Our new collaboration with CrowdStrike and Humio allows our customers and the community to experience the value of evidence.
Ed Smith
Apr 19, 2022
Zeek
Situational awareness for CISA FECB playbooks
CISA recently released a set of playbooks for the Federal Civilian Executive Branch (FCEB). Here's why we are blogging about this.
Jean Schaffer
Nov 30, 2021
Network Security Monitoring
Maximize your Splunk ES investment with Corelight
Are you looking to threat hunt but lack sufficient network and IDS data? Maximize your Splunk ES investment with Corelight.
Roger Cheeks
Mar 17, 2021
Zeek
Getting the most out of your NIDS
In this blog post, we’ll look at some tips and tricks for how you can get more out of your Network Intrusion Detection Systems (NIDS).
Jon Natkins
Mar 8, 2021
Zeek
Is IPS a feature or a product?
Is IPS a feature or a product? I will present my view on the topic, but I’m more interested in hearing what readers think!
Richard Bejtlich
Apr 2, 2019
Zeek
Corelight: a recipe I couldn’t refuse
When Greg Bell became CEO of Corelight, I knew that this company had three fundamental ingredients for success that made it worth joining.
Joy Bonaguro
Sep 26, 2018
Zeek
What’s the riskiest part of your Bro deployment? It may be you.
Here's why the riskiest part of your Zeek deployment could be you... and how Corelight has got you covered.
Seth Hall
Aug 16, 2017