Featured The missing layer in modern detection architecture Signatures catch known threats and anomaly detection flags deviations. TTP-based detection closes the gap by detecting behaviors mapped to MITRE... Tim Chiu Jul 24, 2026
Corelight Enhance your search experience within Splunk by using the Corelight App Download the Corelight App for Splunk and see how easy it is to get Corelight data into Splunk. James Schweitzer Oct 11, 2023
Zeek Another cool thing about Bro: SMB analysis! Bro’s SMB protocol analyzer has undergone several iterations, and it is now a built-in feature that many Bro users might have overlooked. James Schweitzer May 29, 2018