Corelight Bright Ideas Blog

Featured

Hunting Citrix NetScaler Zero-Days with Corelight: Part 2

Explore how existing Zeek logs can reveal suspicious NetScaler DTLS traffic associated with CVE-2026-88772, with practical searches and investigation...

Deepali Prasad, Corelight Labs, Senior Detection Engineer. Oct 9, 2026

All
featured
Zeek
Network Security Monitoring
NDR
network security
SOC
Corelight
network detection response
cybersecurity
network traffic analysis
threat hunting
Bro
network visibility
Corelight Labs
Richard Bejtlich
SIEM
Product
open source
Announcements
Suricata
BlackHat
Corelight Sensor
Splunk
AI
DNS
Industry
PCAP
TLS
open source community
NSM
Partnership
HTTP
MITRE ATT&CK
GitHub
Incident response
Zeek Logs
encrypted traffic
network evidence
SSH
microsoft
encrypted traffic collection
threat hunter
Crowdstrike
Detection
IDS
JSON
command and control
encryption
ja3
AWS

Zeek

Meet the Corelight CTF tournament winners

We hosted a virtual CTF tournament where hundreds of players raced to solve security challenges using Zeek data in Splunk and Elastic. Here are the...

John Gamble Sep 15, 2020