Featured The missing layer in modern detection architecture Signatures catch known threats and anomaly detection flags deviations. TTP-based detection closes the gap by detecting behaviors mapped to MITRE... Tim Chiu Jul 24, 2026
Zeek Countering network resident threats Anyone worrying about detecting and responding to network resident threats would benefit from the data that Corelight provides. Richard Bejtlich Feb 20, 2020