network security
How Corelight's anomaly detection enhances network security
Learn how Corelight’s anomaly detection improves threat detection, reduces false positives, and enables proactive threat hunting.
Corelight Bright Ideas Blog
This is the Custom Rich Text module
Feel free to edit this text to reflect your unique voice and message. Tell visitors what you do, why you do it, and what sets you apart.
- All
- Zeek
- Network Security Monitoring
- network security
- featured
- NDR
- network detection response
- Corelight
- cybersecurity
- network traffic analysis
- network visibility
- Bro
- SOC
- Corelight Labs
- Richard Bejtlich
- Product
- SIEM
- open source
- Announcements
- threat hunting
- BlackHat
- Industry
- Suricata
- Splunk
- DNS
- PCAP
- TLS
- open source community
- Corelight Sensor
- NSM
- Partnership
- HTTP
- MITRE ATT&CK
- GitHub
- Incident response
- network evidence
- Zeek Logs
- encrypted traffic
- SSH
- microsoft
- encrypted traffic collection
- JSON
- Detection
- IDS
- NOC
- command and control
- encryption
- ja3
- AWS
- HTTPS
- SSL
Mandiant
Cooking up a year of faster, smarter, and tastier security
As 2024 comes to a close, let’s take a look at the impactful product updates we delivered this year.
Vijit Nair
Dec 20, 2024
Network Security Monitoring
How YARA rules can complement NDR for malware detection
Together, NDR and YARA help SOC teams detect attackers at their point of entry and accelerate incident response.
Cynthia Gonzalez
Dec 11, 2024
Network Security Monitoring
Corelight delivers static file analysis with YARA integration
Corelight's YARA integration helps organizations increase detection rates, improve network visibility, and reduce false positives.
Christopher Sather
Dec 11, 2024
network security
Want better network visibility? Don't just go with the (net)flow
Learn how Corelight logs provide deep network visibility for incident response and threat hunting in the Black Hat NOC.
Mark Overholser
Sep 23, 2024
Mandiant
Stronger Security with Corelight and Mandiant Managed Defense
Together, Corelight and Mandiant enable defenders to achieve unparalleled visibility across their network environments.
Allen Marin
Sep 18, 2024
network security
Corelight Open NDR Achieves VMware Ready for Telco Cloud Infrastructure Certification
Our seamless integration with VMware TCI empowers enterprise customers to secure their networks against sophisticated cyber threats.
Lisa Karas
Sep 18, 2024
network security
Detecting Abuse of NetSupport Manager
Learn how to use Zeek to easily detect malicious use of NetSupport Manager.
Tillson Galloway
Sep 11, 2024
network detection response
Enhancing Incident Response with 1-Click Entity Isolation
This new feature empowers SOC analysts to isolate a host directly from Corelight Investigator.
Sahidya Devadoss
May 29, 2024
cybersecurity
Dual Defenses: 9 Reasons Why Open NDR Is Essential Alongside NGFW
Learn why adding Corelight to your cybersecurity arsenal, alongside existing NGFWs, is a strategic necessity.
Ed Smith
Mar 1, 2024