Zeek
Finding SUNBURST backdoor with Zeek logs & Corelight
FireEye’s threat research team has discovered a troubling new supply chain attack targeting SolarWind’s Orion IT monitoring and management platform.
Featured
Recognizing and detecting data exfiltration
See how to detect data exfiltration hiding in trusted protocols like DNS, SMB, and HTTP/S, and how Corelight catches it before it becomes a breach.