research
Identifying and detecting ScoutC2 malware
Learn how Corelight detects ScoutC2 malware using Zeek, SIEM queries, and Suricata rules for distinctive HTTP paths, methods, headers, and payload...
Featured
CVE-2026-70111: How Corelight uncovered a 0-Day affecting Microsoft Distributed File System
Corelight Labs found CVE-2026-70111 while fuzzing DFS APIs: A one-packet kernel crash that kills any affected Windows Server immediately.