Corelight Bright Ideas Blog

This is the Custom Rich Text module

Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.

Zeek

Meet the Corelight CTF tournament winners

We hosted a virtual CTF tournament where hundreds of players raced to solve security challenges using Zeek data in Splunk and Elastic. Here are the...

John Gamble Sep 15, 2020

Zeek

Profiling Whonix

I downloaded Whonix version 15, in which two virtual machines work together to detect activity in a clever way.

Richard Bejtlich Jul 18, 2019

Filed Under: Network Security Monitoring

Investigating the effects of TLS 1.3 on Corelight logs, part 3

We reproduce our experiment using TLS 1.3. Remember that we have been visiting the Web site enabled.tls13.com, first without encryption, then with...

Richard Bejtlich Jun 7, 2019

Zeek

Investigating the effects of TLS 1.3 on Corelight logs, part 2

In part 1, I showed how Corelight would produce logs for a clear-text HTTP session. In part 2, I perform the same transaction using TLS 1.2.

Richard Bejtlich Jun 3, 2019

Zeek

Examining aspects of encrypted traffic through Zeek logs

In this post I will use Zeek logs to demonstrate alternative ways to analyze encrypted HTTP traffic.

Richard Bejtlich Feb 19, 2019

Secure your cloud.

Cloud enrichment for AWS, GCP,
and Azure

Corelight's
partner program

10 Considerations for Implementing an XDR Strategy

Don't trust. Verify with evidence

The Power of Open-Source Tools for Network Detection and Response

The Evolving Role
of NDR

Detecting 5 Current APTs without heavy lifting

Network Detection and Response

Corelight Bright Ideas Blog

This is the Custom Rich Text module

Meet the Corelight CTF tournament winners

Profiling Whonix

Investigating the effects of TLS 1.3 on Corelight logs, part 3

Investigating the effects of TLS 1.3 on Corelight logs, part 2

Examining aspects of encrypted traffic through Zeek logs

Have questions?

Sign up for our newsletter

We’re hiring!