Chris Inglis
What’s next for the National Cyber Director?
By Paul Dokas, Keith Jones, Anthony Kasza, Yacin Nadji, & Vern Paxson – Corelight Labs Team Recently Blackberry analyzed a new GoLang Remote Access...
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
Chris Inglis
What’s next for the National Cyber Director?
As the first National Cyber Director settles into office, we are very hopeful this will be a turning point to solidify a true private/public...
Jean Schaffer
Jul 15, 2021
Zeek
What the Cyber EO means for federal agencies
By Jean Schaffer, Federal CTO, Corelight For those of us who have spent our careers working in cybersecurity, President Biden’s recent “Executive...
Jean Schaffer
May 26, 2021
Zeek
What the Cyber EO means for federal agencies
I highlight sections of the EO that federal agencies should study closely and offer my thoughts, drawing from more than 30 years of cybersecurity...
Jean Schaffer
May 25, 2021
Zeek
Detecting SUNBURST/Solarigate activity in retrospect with Zeek
Learn how you can use Zeek to detect this level of cunning evasion tactics in your own retrospective hunts and forensic investigations.
Ben Reardon
Dec 22, 2020
Zeek
Finding SUNBURST backdoor with Zeek logs & Corelight
FireEye’s threat research team has discovered a troubling new supply chain attack targeting SolarWind’s Orion IT monitoring and management platform.
John Gamble
Dec 15, 2020
Zeek
Who’s your fridge talking to at night?
Corelight is excited to announce the Corelight@Home program, bringing Corelight’s enterprise-class Network Detection and Response to home networks.
Gary Fisk
Nov 19, 2020
Network Security Monitoring
The election is six months away. Now is the time to instrument election infrastructure.
Richard shared his thoughts on our blog on why the overarching role of the network and election infrastructure is worthy of a deep assessment right...
Richard Bejtlich
May 7, 2020
Zeek
Using Corelight and Zeek to support remote workers
Security teams would benefit from reviewing their NSM data to ensure that only authorized parties are interacting with their remote work...
Richard Bejtlich
Mar 25, 2020
Zeek
The high ground
Whether you’re a footsoldier or a tier-one analyst, a commanding view helps you outsmart and outlast adversaries. With Corelight, you can hold the...
Charles Strauss
Feb 24, 2020