Enhancing Incident Response with 1-Click Entity Isolation
This new feature empowers SOC analysts to isolate a host directly from Corelight Investigator.
This new feature empowers SOC analysts to isolate a host directly from Corelight Investigator.
Learn how Zeek’s metadata approach can help focus patching efforts for the SSH “Terrapin” attack.
See how we used Corelight's Open NDR platform to take an evidence-based security approach at Blackhat Europe 2023.
Learn how Zeek’s metadata approach can help focus patching efforts for the SSH “Terrapin” attack.
Learn why adding Corelight to your cybersecurity arsenal, alongside existing NGFWs, is a strategic necessity.
Learn how threat hunters can identify MITRE ATT&CK persistence techniques.
Learn about detections and findings from the network operations center (NOC) at Black Hat Asia 2023.
Learn how to leverage Corelight evidence to detect and analyze activity related to Storm-0558.
Organizations often implement a data collection strategy out of fear, collecting everything “just in case.” I challenge the assumption.