Corelight
It all comes down to the data: unlocking the potential of AI in the SOC
An AI-powered SOC must leverage exceptional best-in-class data quality to succeed. Corelight pursues three strategies to deliver it.
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
Network Security Monitoring
Thrown in the deep end: My first time hunting in the Black Hat NOC
Step into the Black Hat NOC as I recount my first experience with real-time threat hunting.
Matt Ellison
Jan 28, 2025
Mandiant
Cooking up a year of faster, smarter, and tastier security
As 2024 comes to a close, let’s take a look at the impactful product updates we delivered this year.
Vijit Nair
Dec 20, 2024
network detection response
Simplify SOC analyst experience with the enhanced Corelight Splunk App
RSA 2024 is a wrap. Here are the biggest takeaways from conversations with security leaders and partners.
Claudio Cruz
May 29, 2024
network detection response
Enhancing Incident Response with 1-Click Entity Isolation
This new feature empowers SOC analysts to isolate a host directly from Corelight Investigator.
Sahidya Devadoss
May 29, 2024
network detection response
Fuel for Security AI
Our Series E funding is an endorsement of both our strategy and opportunity.
Brian Dye
Apr 30, 2024
cybersecurity
Dual Defenses: 9 Reasons Why Open NDR Is Essential Alongside NGFW
Learn why adding Corelight to your cybersecurity arsenal, alongside existing NGFWs, is a strategic necessity.
Ed Smith
Mar 1, 2024
cybersecurity
Inside the Mind of a Cybersecurity Threat Hunter Part 2: Identifying Persistence Techniques
Learn how threat hunters can identify MITRE ATT&CK persistence techniques.
Allen Marin
Feb 26, 2024
network detection response
Dual Defenses: 10 Reasons Why NDR Is Essential Alongside EDR
Learn how the kill web concept can be applied to cybersecurity, and how it addresses some of the concerns with the kill chain.
Ed Smith
Jan 10, 2024
SOC
Inside the Mind of a Cybersecurity Threat Hunter Part 1: Confronting Initial Access Techniques
Learn how Corelight’s integration with CrowdStrike helps threat hunters detect signs of Initial Access, one of the tactics and techniques outlined in...
Allen Marin
Nov 27, 2023