Zeek
Zeek & Sigma: Fully compatible for cross-SIEM detections
Corelight recently teamed up with SOC Prime, creators of advanced cyber analytics platforms, to add support for the entire Zeek data set into Sigma.
Featured
The Cure for Exceptional Zeek Package Testing (Part 3)
Learn how to test Zeek packages without PCAPs by using Zeek logs and the Input Framework to reproduce bugs, analyze historical data, and prevent...