Featured CVE-2026-70111: How Corelight uncovered a 0-Day affecting Microsoft Distributed File System Corelight Labs found CVE-2026-70111 while fuzzing DFS APIs: A one-packet kernel crash that kills any affected Windows Server immediately. Travis Green & Labs Team Oct 13, 2026
Zeek Community ID support for Wireshark The past few weeks have seen several developments around Community ID and support for Wireshark. I’d like to summarize them in this blog post. Christian Kreibich Oct 7, 2020
Zeek Log enrichment with DNS host names With Corelight’s 1.15 release, we help figure out the host names associated with an IP address in prior network activity. Here's how it works. Christian Kreibich Oct 25, 2018
Zeek Extensibility as a Guiding Principle To us, extensibility is not an afterthought that we try to tuck on in a few release cycles. It permeates the way we think about network monitoring. Christian Kreibich Dec 6, 2017