Zeek
How we decide what Bro capabilities to include in our Sensor
When we developed our commercial product we made some design decisions that make running the Corelight Sensor slightly different from running...
Featured
The missing layer in modern detection architecture
Signatures catch known threats and anomaly detection flags deviations. TTP-based detection closes the gap by detecting behaviors mapped to MITRE...