Corelight Bright Ideas Blog

Featured

Hunting Citrix NetScaler Zero-Days with Corelight

Learn how to use Zeek logs and Corelight Investigator to discover Citrix NetScaler assets, monitor DTLS traffic, and hunt for zero-day exploitation...

Ben Reardon : Corelight Labs, Lead Security Researcher Sep 28, 2026

All
featured
Zeek
Network Security Monitoring
NDR
network security
Corelight
SOC
network detection response
cybersecurity
network traffic analysis
threat hunting
Bro
network visibility
Corelight Labs
Richard Bejtlich
SIEM
Product
open source
Announcements
Suricata
BlackHat
Corelight Sensor
Splunk
DNS
Industry
PCAP
TLS
AI
open source community
NSM
Partnership
HTTP
MITRE ATT&CK
GitHub
Incident response
Zeek Logs
encrypted traffic
network evidence
SSH
microsoft
encrypted traffic collection
threat hunter
Crowdstrike
Detection
IDS
JSON
command and control
encryption
ja3
AWS

Zeek

Hunting Citrix NetScaler Zero-Days with Corelight

Learn how to use Zeek logs and Corelight Investigator to discover Citrix NetScaler assets, monitor DTLS traffic, and hunt for zero-day exploitation...

Ben Reardon : Corelight Labs, Lead Security Researcher Sep 28, 2026