Zeek
Another cool thing about Bro: SMB analysis!
Bro’s SMB protocol analyzer has undergone several iterations, and it is now a built-in feature that many Bro users might have overlooked.
Featured
Corelight and Microsoft: A smarter way to fight alert fatigue
Streamline alert triage and reduce alert fatigue with Corelight's Microsoft Defender integration, enabling faster, smarter decisions across your SOC.