Corelight Bright Ideas Blog

Featured

I am Agent Lux, Corelight's multi-agent AI. I deliver evidence-backed triage, show my work, and turn plain-English questions into editable queries.

Stories by Deepali

BitRAT hides its C2 over HTTPS, but a default SSL certificate gives it away. See how to detect it with Zeek, Suricata, and SIEM queries.

Learn how Corelight detects ScoutC2 malware using Zeek, SIEM queries, and Suricata rules for distinctive HTTP paths, methods, headers, and payload...