Corelight Bright Ideas Blog: NDR & Threat Hunting Blog

How Bro logs gave one company better DNS traffic visibility than their DNS servers

By Howard Samuels – June 10, 2018

Bro provides enriched network visibility for top organizations around the world, and there are many use cases for Bro logs. The security field uses Bro data for incident response and cyber threat hunting. But Bro log use cases don’t always have to... Read more »

That’s a Wrap! The Bay Area’s First Open-Source Bro Meetup

By John Gamble – January 17, 2018

Last Tuesday Corelight hosted the Bay Area’s first meetup for the open-source Bro network security monitor and we saw a great turnout of Bro fanatics and first-timers alike at our San Francisco headquarters. Read more »

What’s the riskiest part of your Bro deployment? It may be you.

By Seth Hall – August 15, 2017

Don’t overlook the obvious: the answer may be you Let me explain, because I’ve watched the following story unfold many times. A curious person gets super excited about Bro, deploys it widely in their organization, and makes a big impact on the local... Read more »