Featured Building “php2shell” detections before coordinated disclosure We built Zeek and Suricata detections for php2shell, two serious remote code execution vulnerabilities in PHP, and released them as open source. Ben Reardon : Corelight Labs, Lead Security Researcher Oct 21, 2026
ransomware Using Corelight to Identify Ransomware Blast Radius Learn how Corelight’s Open NDR products and platforms help SOC teams identify ransomware blast radius. Chris Brown Sep 29, 2023
cybersecurity Detecting Storm-0558 using Corelight evidence Learn how to leverage Corelight evidence to detect and analyze activity related to Storm-0558. Chris Brown Aug 2, 2023