Corelight Bright Ideas Blog

Featured

Learn how Canada’s Bill C-8 raises cybersecurity requirements for critical infrastructure and why high-fidelity network evidence is essential.

Stories by Ben

A very interesting Linux-based command-and-control (C2) malware was described by the research team at Intezer. Here are a few points about this...

Learn how you can use Zeek to detect this level of cunning evasion tactics in your own retrospective hunts and forensic investigations.

This blog is a brief story of a few points that occurred to me during the less than 24 hours it took to turn around this package from dev to testing.

We’ve just open sourced a Zeek package that detects exploit attempts and successes. This package demonstrates a couple of aspects that are worth...

Today we are open sourcing a Zeek package that passively detects the presence of some of the tell-tale signs that Treck devices can exhibit.

< 1 2 >