Seeing shadow AI is not the same as knowing when it is a threat. Corelight now detects compromised AI components, hidden aggregators, and unusual...
Cryptography is negotiated, not configured. Learn how network data helps build a PQC inventory or CBOM by showing what systems actually use.
Corelight Sensor v29.2 adds behavioral anomaly detection for multi-stage intrusions, AI governance dashboards, and low-touch sensor provisioning.
Learn how to build a defensible AI-SOC for the Mythos era with network evidence, auditable detection, grounded agents, and explainable workflows.
Core protocols like LDAP are often left unmonitored. See how Zeek's ldap_search and DNS logs expose injection canaries and confirm whether attacks...
Learn how to test Zeek packages without PCAPs by using Zeek logs and the Input Framework to reproduce bugs, analyze historical data, and prevent...
Learn how to test Zeek packages without shareable PCAPs by hand-crafting BTest events and using Zeek event traces to reliably reproduce network...
Learn how to unit test Zeek packages with BTest and assert statements, using practical examples to catch failures and build more reliable Zeek...
Learn how Corelight Labs evaluates AI systems for network detection using custom harnesses, LLM-as-judge methods, and curated security datasets.