Collecting and analyzing core NSM data types & with host-based security provide the best chance for CIRTs to detect and respond to the sorts of...
Discover how Zeek (formerly Bro) logs gave one company better DNS traffic visibility than their DNS servers.
When we developed our commercial product we made some design decisions that make running the Corelight Sensor slightly different from running...
The Corelight for Splunk app is now available! Using the new app you can now monitor the health and performance of Corelight Sensors in Splunk and...
I’ve enjoyed meeting many companies and leaders in the Bay Area. The best was with Corelight (where I recently joined as their chief product officer).
In previous projects, I’ve tackled some needle-in-haystack problems. From these efforts, several high-level themes have emerged.
Zeek (formerly Bro) generates real-time data about network flows. But it can do a lot more, and in this blog series, we’ll highlight lesser-known...
At Corelight, we want our products to be a source of visibility and insight. I’d like to take the opportunity to explain some of the techniques we...
Here's why the riskiest part of your Zeek deployment could be you... and how Corelight has got you covered.