Corelight Bright Ideas Blog

Featured

Watch what happens when your AI agent actually knows how to investigate

See what a SOC agent does when it has real network forensics expertise behind it, from hypothesis to IDS alerts, timeline, and next steps.

Alyssa Ideboen Sep 29, 2026

All
featured
Zeek
Network Security Monitoring
NDR
network security
SOC
Corelight
network detection response
cybersecurity
network traffic analysis
threat hunting
Bro
network visibility
Corelight Labs
Richard Bejtlich
SIEM
Product
open source
Announcements
Suricata
BlackHat
Corelight Sensor
Splunk
AI
DNS
Industry
PCAP
TLS
open source community
NSM
Partnership
HTTP
MITRE ATT&CK
GitHub
Incident response
Zeek Logs
encrypted traffic
network evidence
SSH
microsoft
encrypted traffic collection
threat hunter
Crowdstrike
Detection
IDS
JSON
command and control
encryption
ja3
AWS

featured

Post-Quantum Cryptography: The upgrade nobody asked for (but everyone’s getting)

PQC will make handshakes chunkier and cipher names weirder. What the migration changes for defenders, and why encrypted-traffic visibility still wins.

Josh Porto Sep 25, 2026

NDR

Cryptography is negotiated, not configured: Why PQC readiness needs network data

Cryptography is negotiated, not configured. Learn how network data helps build a PQC inventory or CBOM by showing what systems actually use.

Vince Stoffer, Field CTO Sep 16, 2026

AI that shows its work for a defensible SOC

The CISO’s guide to building a Mythos-ready security program

Open NDR Platform

Corelight announces cloud enrichment for AWS, GCP, and Azure

The Corelight Partner Program

Corelight DefeNDRs

Network Detection & Response

Corelight Bright Ideas Blog

Watch what happens when your AI agent actually knows how to investigate

Post-Quantum Cryptography: The upgrade nobody asked for (but everyone’s getting)

Cryptography is negotiated, not configured: Why PQC readiness needs network data

Have questions?

Sign up for our newsletter

We’re hiring!

Get in touch