Corelight Bright Ideas Blog

Featured

Discover what defending the Black Hat NOC taught me about using Model Context Protocol (MCP) to build an agentic SOC and accelerate threat hunting.

Stories by Ben

Learn how you can use Zeek to detect this level of cunning evasion tactics in your own retrospective hunts and forensic investigations.

This blog is a brief story of a few points that occurred to me during the less than 24 hours it took to turn around this package from dev to testing.

We’ve just open sourced a Zeek package that detects exploit attempts and successes. This package demonstrates a couple of aspects that are worth...

Today we are open sourcing a Zeek package that passively detects the presence of some of the tell-tale signs that Treck devices can exhibit.

< 1 2 >