Corelight Bright Ideas Blog

Featured

How to React(.js) to React2Shell and detecting behaviors to catch the Next(.js) big RCE

Ground your defense against React2Shell in verifiable network evidence. Deploy high-fidelity Suricata detections to spot unauthenticated remote code...

David Burkett Dec 6, 2025

Zeek

The last BroCon. It’ll be Zeek in 2019!

I’m back in San Francisco after the last ever BroCon! Why the last BroCon? Because the Bro Leadership Team has announced a new name for the project.

Robin Sommer Nov 5, 2018

Zeek

Databricks + Corelight – A powerful combination for cybersecurity, incident response and threat hunting

Here's why Databricks plus Corelight is a powerful combination for cybersecurity, incident response and threat hunting.

Alan Saldich Jul 17, 2018

Zeek

Another cool thing about Bro: SMB analysis!

Bro’s SMB protocol analyzer has undergone several iterations, and it is now a built-in feature that many Bro users might have overlooked.

James Schweitzer May 29, 2018

Zeek

Another cool thing about Bro: tracking files!

Zeek (formerly Bro) generates real-time data about network flows. But it can do a lot more, and in this blog series, we’ll highlight lesser-known...

Vince Stoffer Sep 15, 2017

Corelight announces cloud enrichment for AWS, GCP, and Azure

The Corelight Partner Program

10 considerations for implementing an XDR strategy

Don't trust. Verify with evidence

Network Detection & Response

Corelight Bright Ideas Blog

How to React(.js) to React2Shell and detecting behaviors to catch the Next(.js) big RCE

The last BroCon. It’ll be Zeek in 2019!

Databricks + Corelight – A powerful combination for cybersecurity, incident response and threat hunting

Another cool thing about Bro: SMB analysis!

Another cool thing about Bro: tracking files!

Have questions?

Sign up for our newsletter

We’re hiring!