network detection response
Don’t trust. Verify with evidence.
The most sophisticated cyber defense teams in the world have shifted their strategies towards the collection and analysis of high-quality evidence.
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
Zeek
Introducing the Cloud Sensor for GCP
Visibility is paramount in securing your cloud environment. Today we announce Corelight’s Cloud Sensor for GCP.
Vijit Nair
Nov 24, 2020
Zeek
Who’s your fridge talking to at night?
Corelight is excited to announce the Corelight@Home program, bringing Corelight’s enterprise-class Network Detection and Response to home networks.
Gary Fisk
Nov 19, 2020
Zeek
Small, fast and easy. Pick any three.
Zeek has been the darling of security defenders looking to get deep visibility into network traffic. Today, we are excited to announce the Software...
Seth Hall
Nov 18, 2020
Zeek
Community ID support for Wireshark
The past few weeks have seen several developments around Community ID and support for Wireshark. I’d like to summarize them in this blog post.
Christian Kreibich
Oct 7, 2020
Zeek
DNS over TLS and DNS over HTTPS
In this post, we’ll explore DNS over TLS (DoT) and DNS over HTTPS (DoH). Before examining DoT and DoH, it’s important to take a quick look at DNS...
Jamie Brim
Jun 18, 2020
Zeek
Don’t delay – Corelight today!
While I have used log collection and SIEM platforms to review Zeek transaction logs, it is not necessary to wait for a SIEM before collecting...
Richard Bejtlich
Aug 1, 2019
Zeek
Corelight + Chronicle Backstory: Technology integration brings all the right data at the right time for customers
Chronicle launched Backstory, a new security analytics platform, and we are pleased to share that Corelight is part of the Chronicle Index Partner...
Allen Male
Mar 26, 2019
Zeek
Log enrichment with DNS host names
With Corelight’s 1.15 release, we help figure out the host names associated with an IP address in prior network activity. Here's how it works.
Christian Kreibich
Oct 25, 2018
Zeek
Corelight’s recent contributions to open-source Bro
I want to take the opportunity here to talk about a few of our more recent contributions to open-source Zeek (formerly Bro).
Robin Sommer
Aug 9, 2018