Mandiant
Cooking up a year of faster, smarter, and tastier security
As 2024 comes to a close, let’s take a look at the impactful product updates we delivered this year.
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
Network Security Monitoring
How YARA rules can complement NDR for malware detection
Together, NDR and YARA help SOC teams detect attackers at their point of entry and accelerate incident response.
Cynthia Gonzalez
Dec 11, 2024
Network Security Monitoring
Corelight delivers static file analysis with YARA integration
Corelight's YARA integration helps organizations increase detection rates, improve network visibility, and reduce false positives.
Christopher Sather
Dec 11, 2024
Zeek
Zeek on Windows
A recap of the open-source work since the beginning of the Zeek collaboration with Microsoft. Originally posted on Zeek.org on Nov. 28, 2022.
Tim Wojtulewicz
Dec 5, 2022
Zeek
New position brings new open source opportunities
Dr. Kelley Misata shares her thoughts on why she is excited to join Corelight to lead open source and the new opportunities this role will bring.
Kelley Misata
Oct 12, 2022
Zeek
Detecting CVE-2022-26937 with Zeek
This post shows how a Microsoft NFS exploit (CVE-2022-26937) can be detected using Zeek.
Corelight Labs Team
May 26, 2022
Zeek
What makes evidence uniquely valuable?
Learn about the attributes of high-quality evidence. What should evidence look like, in order to be useful to defenders when the next security event...
Gregory Bell
May 18, 2022
Zeek
Know your environment: Tenable/Corelight integration for prioritized IDS alerts
Prioritizing alerts just got a little easier for SOC teams with Corelight's integration with Tenable.
Alex Kirk
Mar 10, 2022
Zeek
World’s first 100G Zeek sensor
As we finished rolling out our v21 software release, I was reminded of when I’d first read the 2015 “100G Intrusion Detection” paper written at...
Sarah Banks
May 24, 2021
Zeek
Who’s your fridge talking to at night?
Corelight is excited to announce the Corelight@Home program, bringing Corelight’s enterprise-class Network Detection and Response to home networks.
Gary Fisk
Nov 19, 2020