Corelight
It all comes down to the data: unlocking the potential of AI in the SOC
An AI-powered SOC must leverage exceptional best-in-class data quality to succeed. Corelight pursues three strategies to deliver it.
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
Corelight
Back in the Black Hat NOC: A familiar mission, a new crew
What stood out this year was the sheer volume of insecure application traffic. Corelight uncovered an unsecured corporate messaging app leaking...
Blake Cahen
Sep 29, 2025
Corelight
How to level up your technical documentation with Microsoft's style guide and LLMs
Speed up technical documentation with the open-source llm-styleguide-helper. It pairs Vale linting and AI to fix Microsoft Style Guide violations in...
Keith J. Jones
Sep 16, 2025
Corelight
Corelight data and LLMs
Accelerate alert analysis with Corelight’s LLM prompts for Suricata and Corelight data, featuring summaries, threat analysis, and next steps.
Stan Kiefer
Jul 31, 2025
Corelight
Corelight announces industry's first MCP server exposing detailed network data and alerts
Introducing the industry's first MCP server, enabling AI agents to securely query network data directly from your SIEM.
Ashish Malpani
Jul 31, 2025
network detection response
How to threat hunt for Volt Typhoon using NDR
Learn how to use NDR to detect Volt Typhoon attacks that evade EDR, closing blindspots to stop intrusions before they become breaches.
Jason Wood
May 12, 2025
network security
How Corelight's anomaly detection enhances network security
Learn how Corelight’s anomaly detection improves threat detection, reduces false positives, and enables proactive threat hunting.
Cynthia Gonzalez
Apr 15, 2025
network security
Streamlining security investigations with real-time enrichment of Corelight Open NDR and SentinelOne Singularity
Corelight’s integration with SentinelOne is a game-changer for security teams looking to stay ahead of evolving cyber threats.
Allen Marin
Oct 15, 2024
network security
Feed me!
Announcing a new monthly update cycle to our custom Suricata ruleset, the Corelight Feed.
Vince Stoffer
Sep 25, 2024
network security
Want better network visibility? Don't just go with the (net)flow
Learn how Corelight logs provide deep network visibility for incident response and threat hunting in the Black Hat NOC.
Mark Overholser
Sep 23, 2024