NDR
Streamlining Incident Response: How CrowdStrike Falcon EDR integration enhances threat detection
Enhanced threat detection. Streamline your incident response with Corelight and CrowdStrike Falcon EDR
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
network detection response
Celebrating CrowdStrike’s New Network Detection Service “Powered by Corelight”
We couldn’t be more proud to work with a strategic partner that shares our vision and passion for advanced network security.
Allen Marin
Jun 1, 2023
Incident response
Corelight Investigator introduces new Machine Learning Models
Corelight Investigator adds new machine learning models, both supervised and deep learning, to further its commitment to evidence-first approach to...
Sara Shuman
Jan 31, 2023
network detection response
Corelight Investigator accelerates threat hunting
This morning we announced Corelight Investigator, an open NDR platform that enables security teams with next-level evidence. Here is how it works.
Nick Hunter
May 25, 2022
Zeek
Deeper visibility into Kubernetes environments with network monitoring
This post explores the need, different approaches and pros and cons of monitor traffic in Kubernetes environments.
Vijit Nair
Apr 12, 2022
Zeek
Countering network resident threats
Anyone worrying about detecting and responding to network resident threats would benefit from the data that Corelight provides.
Richard Bejtlich
Feb 20, 2020
Industry
A conversation with GE’s former CIO on three keys to CIRT success
Here are the three most important decisions Gary Reiner, former CIO of General Electric, made with respect to the success of GE-CIRT.
Richard Bejtlich
Aug 22, 2019
Zeek
Don’t delay – Corelight today!
While I have used log collection and SIEM platforms to review Zeek transaction logs, it is not necessary to wait for a SIEM before collecting...
Richard Bejtlich
Aug 1, 2019
Zeek
What did I just see? Detection, inference, and identification
Discover what the terms detection, inference, and identification mean, and how they can help you when investigating activity in your environment.
Richard Bejtlich
Jul 30, 2019
Zeek
Bring Network Security Monitoring to the cloud with Corelight and Amazon VPC Traffic Mirroring
Announcing the Corelight Cloud Sensor, deployable in AWS and capable of ingesting traffic directly from the new Amazon VPC traffic mirroring feature.
John Gamble
Jun 25, 2019