Corelight Bright Ideas Blog

Featured

Discover what defending the Black Hat NOC taught me about using Model Context Protocol (MCP) to build an agentic SOC and accelerate threat hunting.

Stories by Christian

The past few weeks have seen several developments around Community ID and support for Wireshark. I’d like to summarize them in this blog post.

With Corelight’s 1.15 release, we help figure out the host names associated with an IP address in prior network activity. Here's how it works.

To us, extensibility is not an afterthought that we try to tuck on in a few release cycles. It permeates the way we think about network monitoring.