Tales from the Black Hat NOC (USA 2024) - speed to detect SSHAMBLE
Recapping our learnings from the Network Operations Center (NOC) at Black Hat USA 2024. Using historical network logs to detect threats during the...
Recapping our learnings from the Network Operations Center (NOC) at Black Hat USA 2024. Using historical network logs to detect threats during the...
Detect Quasar RAT malware with Corelight’s open-source Zeek script, leveraging Quasar’s default TLS configuration.
Reduce time to triage by up to 50% with Corelight's new Guided Triage capability.
Corelight’s integration with SentinelOne is a game-changer for security teams looking to stay ahead of evolving cyber threats.
Announcing a new monthly update cycle to our custom Suricata ruleset, the Corelight Feed.
Learn how Corelight logs provide deep network visibility for incident response and threat hunting in the Black Hat NOC.
Together, Corelight and Mandiant enable defenders to achieve unparalleled visibility across their network environments.
Our seamless integration with VMware TCI empowers enterprise customers to secure their networks against sophisticated cyber threats.
A growing number of defenders use two SIEMs. This post explores why and whether XDR platforms will evolve to to become full threat hunting solutions.