Zeek
Know your environment: Tenable/Corelight integration for prioritized IDS alerts
Prioritizing alerts just got a little easier for SOC teams with Corelight's integration with Tenable.
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
Zeek
Corelight & Microsoft Defender for IoT: Through an XDR lens
What is the XDR paradox? It’s the hottest term in security but there is no consensus yet on the right definition. Why is that?
Brian Dye
Nov 16, 2021
Zeek
CrowdStrike + Corelight partner to reach new heights
The CrowdStrike + Corelight partnership lets customers incorporate threat intelligence into Corelight Sensors to generate alerts and network evidence.
Lana Knop
Apr 22, 2021
Zeek
Extending NDR visibility in AWS IaaS
Visibility is challenging in a cloud environment. Security teams have long relied on network monitoring to complement application level visibility.
Vijit Nair
Apr 8, 2021
Network Security Monitoring
Maximize your Splunk ES investment with Corelight
Are you looking to threat hunt but lack sufficient network and IDS data? Maximize your Splunk ES investment with Corelight.
Roger Cheeks
Mar 17, 2021
DNS
Beating alert fatigue with integrated data
Corelight data enables immediate SOC improvements. Here's a walkthrough of initial playbooks.
Alex Kirk
Oct 8, 2020
Partnership
NDR for AWS Well-Architected
Corelight can improve operational excellence, performance, reliability, cost effectiveness, and security results in the AWS cloud.
Roger Cheeks
Aug 6, 2020
Partnership
Corelight Splunk App update: New dashboard and data
We are pleased to launch our newest installment of the Corelight App for Splunk (Corelight App) and the Corelight Technical Add-on (TA).
Roger Cheeks
Jul 20, 2020
Zeek
Zeek & Sigma: Fully compatible for cross-SIEM detections
Corelight recently teamed up with SOC Prime, creators of advanced cyber analytics platforms, to add support for the entire Zeek data set into Sigma.
Alex Kirk
Jun 25, 2020
Network Security Monitoring
Watch over DNS traffic with Corelight and Splunk
Learn about the benefits of Corelight DNS logs, and how Splunk Enterprise Security can reach a new level of functionality through integration with...
Roger Cheeks
Apr 1, 2020