Corelight Bright Ideas Blog

This is the Custom Rich Text module

Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.

Zeek

I downloaded Whonix version 15, in which two virtual machines work together to detect activity in a clever way.

Richard Bejtlich Jul 18, 2019

Filed Under: Network Security Monitoring

We reproduce our experiment using TLS 1.3. Remember that we have been visiting the Web site enabled.tls13.com, first without encryption, then with...

Richard Bejtlich Jun 7, 2019

Zeek

In part 1, I showed how Corelight would produce logs for a clear-text HTTP session. In part 2, I perform the same transaction using TLS 1.2.

Richard Bejtlich Jun 3, 2019

Zeek

CVE-2019-0708 is a serious vulnerability awaiting exploitation. Learn how to use Corelight and Zeek logs to mitigate RDS/RDP vulnerabilities.

Richard Bejtlich May 23, 2019

Zeek

Last week, a candidate for a role at Corelight explained his motivation for joining the company: “the world is standardizing on Zeek.” Here's why...

Gregory Bell Apr 24, 2019

Zeek

In this post I will use Zeek logs to demonstrate alternative ways to analyze encrypted HTTP traffic.

Richard Bejtlich Feb 19, 2019