Corelight Bright Ideas Blog

This is the Custom Rich Text module

Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.

Application Layer Infrastructure Visibility in IaaS

Application layer infrastructure visibility in IaaS using a recent Log4Shell example.

Ricky Lin Feb 10, 2022

network detection response

Detecting Log4j exploits via Zeek when Java downloads Java

The blog covers a third log4j detection method, this one focused on the second-stage download that happens after the first stage completes.

Corelight Labs Team Dec 18, 2021

network detection response

Detecting Log4j via Zeek & LDAP traffic

We recently discussed some methods for detecting the Log4j exploit, and we’ve developed another method that one running Zeek® or a Corelight sensor...

Corelight Labs Team Dec 17, 2021

Zeek

Finding Very Damaging Needles in Very Large Haystacks

In previous projects, I’ve tackled some needle-in-haystack problems. From these efforts, several high-level themes have emerged.

Vern Paxson Sep 26, 2017

Secure your cloud.

Cloud enrichment for AWS, GCP,
and Azure

Corelight's
partner program

10 Considerations for Implementing an XDR Strategy

Don't trust. Verify with evidence

The Power of Open-Source Tools for Network Detection and Response

The Evolving Role
of NDR

Detecting 5 Current APTs without heavy lifting

Network Detection and Response

Corelight Bright Ideas Blog

This is the Custom Rich Text module

Application Layer Infrastructure Visibility in IaaS

Detecting Log4j exploits via Zeek when Java downloads Java

Detecting Log4j via Zeek & LDAP traffic

Finding Very Damaging Needles in Very Large Haystacks

Have questions?

Sign up for our newsletter

We’re hiring!