Corelight Bright Ideas Blog

Featured

Use our Zeek package to detect the affected eMudhra certificates, since devices that don’t automatically get updates remain vulnerable.

Stories by Tillson

Detect Quasar RAT malware with Corelight’s open-source Zeek script, leveraging Quasar’s default TLS configuration.

Learn how to use Zeek to easily detect malicious use of NetSupport Manager.

Corelight Labs reviewed a POC exploit for CVE-2022-30216 and wrote a Zeek-based detection and released the package on GitHub.