Featured Inside the mind of a cybersecurity threat hunter part 3: hunting for adversaries moving inside your network Learn how to use Corelight’s rich network telemetry in CrowdStrike’s Next-Gen SIEM to expose defense evasion and lateral movement inside your network. Allen Marin Dec 22, 2025
Zeek Community ID support for Wireshark The past few weeks have seen several developments around Community ID and support for Wireshark. I’d like to summarize them in this blog post. Christian Kreibich Oct 7, 2020
Zeek Log enrichment with DNS host names With Corelight’s 1.15 release, we help figure out the host names associated with an IP address in prior network activity. Here's how it works. Christian Kreibich Oct 25, 2018
Zeek Extensibility as a Guiding Principle To us, extensibility is not an afterthought that we try to tuck on in a few release cycles. It permeates the way we think about network monitoring. Christian Kreibich Dec 6, 2017