Zeek
Log enrichment with DNS host names
With Corelight’s 1.15 release, we help figure out the host names associated with an IP address in prior network activity. Here's how it works.
Featured
The Cure for Exceptional Zeek Package Testing (Part 3)
Learn how to test Zeek packages without PCAPs by using Zeek logs and the Input Framework to reproduce bugs, analyze historical data, and prevent...