See how Corelight and Tenable use agentic AI to correlate network evidence with exposure data, assess blast radius, and prioritize investigations.
Explore how existing Zeek logs can reveal suspicious NetScaler DTLS traffic associated with CVE-2026-88772, with practical searches and investigation...
Inside the Black Hat USA NOC, we found cleartext Splunk and BigFix traffic, leaky apps, and an exposed MCP server with read and write access.
Seeing shadow AI is not the same as knowing when it is a threat. Corelight now detects compromised AI components, hidden aggregators, and unusual...
Cryptography is negotiated, not configured. Learn how network data helps build a PQC inventory or CBOM by showing what systems actually use.
Corelight Sensor v29.2 adds behavioral anomaly detection for multi-stage intrusions, AI governance dashboards, and low-touch sensor provisioning.
Learn how to build a defensible AI-SOC for the Mythos era with network evidence, auditable detection, grounded agents, and explainable workflows.
Core protocols like LDAP are often left unmonitored. See how Zeek's ldap_search and DNS logs expose injection canaries and confirm whether attacks...
Learn how to test Zeek packages without PCAPs by using Zeek logs and the Input Framework to reproduce bugs, analyze historical data, and prevent...