Corelight Bright Ideas Blog

Featured

Hunting Citrix NetScaler Zero-Days with Corelight: Part 2

Explore how existing Zeek logs can reveal suspicious NetScaler DTLS traffic associated with CVE-2026-88772, with practical searches and investigation...

Deepali Prasad, Corelight Labs, Senior Detection Engineer. Oct 9, 2026

All
featured
Zeek
Network Security Monitoring
NDR
network security
SOC
Corelight
network detection response
cybersecurity
network traffic analysis
threat hunting
Bro
network visibility
Corelight Labs
Richard Bejtlich
SIEM
Product
open source
Announcements
Suricata
BlackHat
Corelight Sensor
Splunk
AI
DNS
Industry
PCAP
TLS
open source community
NSM
Partnership
HTTP
MITRE ATT&CK
GitHub
Incident response
Zeek Logs
encrypted traffic
network evidence
SSH
microsoft
encrypted traffic collection
threat hunter
Crowdstrike
Detection
IDS
JSON
command and control
encryption
ja3
AWS

Zeek

How Bro logs gave one company better DNS traffic visibility than their DNS servers

Discover how Zeek (formerly Bro) logs gave one company better DNS traffic visibility than their DNS servers.

Howard Samuels Jun 11, 2018

Zeek

Joining a New Company Selling 20 year-old Software

I’ve enjoyed meeting many companies and leaders in the Bay Area. The best was with Corelight (where I recently joined as their chief product officer).

Brian Dye Mar 26, 2018