Featured Building “php2shell” detections before coordinated disclosure We built Zeek and Suricata detections for php2shell, two serious remote code execution vulnerabilities in PHP, and released them as open source. Ben Reardon : Corelight Labs, Lead Security Researcher Oct 21, 2026
Zeek World’s first 100G Zeek sensor As we finished rolling out our v21 software release, I was reminded of when I’d first read the 2015 “100G Intrusion Detection” paper written at... Sarah Banks May 24, 2021
Zeek A network engineer in a Zeek Week world I’m seven months into a new job here at Corelight as a product manager, and I’m still as excited about Zeek as I was last month about Zeek Week.... Sarah Banks Nov 5, 2019