Corelight Bright Ideas Blog: NDR & Threat Hunting Blog

Do you know your NSM data types?

By Richard Bejtlich – April 29, 2019

When I first began writing about network security monitoring in 2002, I based my understanding on my experience in the Air Force Computer Emergency Response Team (AFCERT) and the tools and processes we used to detect criminal and nation-state... Read more »

Zeek is much more than a data format

By Gregory Bell – April 23, 2019

Last week, a candidate for a senior role at Corelight explained his motivation for joining the company this way: “the world is standardizing on Zeek.” Read more »

Mission First, People Always.

By Amber Graener – April 8, 2019

I’d like to take a moment and introduce myself. I’m Amber Graner, and I’m excited to join Corelight, Inc as the Director of Community for the Zeek project. Read more »

Is IPS a feature or a product?

By Richard Bejtlich – April 1, 2019

This post is a departure from previous editions. It is inspired by discussions I’ve had recently with a few different online and in-person communities. I will present my view on the topic, but I’m more interested in hearing what readers think! Read more »