CONTACT US
forrester wave report 2023

Close your ransomware case with Open NDR

SEE HOW

ad-nav-crowdstrike

Corelight now powers CrowdStrike solutions and services

READ MORE

ad-images-nav_0013_IDS

Alerts, meet evidence.

LEARN MORE ABOUT OUR IDS SOLUTION

ad-images-nav_white-paper

5 Ways Corelight Data Helps Investigators Win

READ WHITE PAPER

glossary-icon

10 Considerations for Implementing an XDR Strategy

READ NOW

ad-images-nav_0006_Blog

Don't trust. Verify with evidence

READ BLOG

video

The Power of Open-Source Tools for Network Detection and Response

WATCH THE WEBCAST

ad-nav-ESG

The Evolving Role of NDR

DOWNLOAD THE REPORT

ad-images-nav_0006_Blog

Detecting 5 Current APTs without heavy lifting

READ BLOG

g2-medal-best-support-spring-2024

Network Detection and Response

SUPPORT OVERVIEW

 

Zeek is Now a Component of Microsoft Windows

World’s leading open source network security monitoring platform now deployed on more than one billion global endpoints 

San Francisco, Calif. — Oct. 12, 2022 — Corelight, the leader in open network detection and response (NDR), today announced the integration of Zeek®, the world’s most popular open source network security monitoring platform, as a component of  Microsoft Windows and Defender for Endpoint. The integration will help security teams respond to the most challenging attacks by providing “richer signals for advanced threat hunting, complete and accurate discovery of IoT devices, and more powerful detection and response capabilities.” 

Originally created by Corelight co-founder and chief scientist Dr. Vern Paxson while at Lawrence Berkeley National Laboratory (Berkeley Lab), Zeek transforms network traffic into compact and high-fidelity logs, file content, and behavioral analytics to accelerate security operations. Vital funding for Zeek came initially from the National Science Foundation and the US Department of Energy’s Office of Science.  

As adoption increased, Corelight was founded to provide a financial model and corporate sponsor for the project. This week in Austin, Texas, Corelight hosts the annual ZeekWeek user conference, where the community will gather and where Microsoft speakers will describe the new integration.  

“Microsoft is strongly committed to supporting open source projects and ecosystems,” said Rob Lefferts, corporate vice president for Microsoft. “We’re proud to be working with Zeek and are thrilled to bring this level of network intelligence and monitoring to our customers.” 

“This is an amazing development for Zeek and its community of contributors and users,” said Paxson. “I never imagined that the tool I developed for network monitoring would find broader application in defending endpoints - but that’s part of the creative magic of open source development. We are grateful for Microsoft’s contributions and support, and we are excited that the project’s impact, and that of the community of contributors, will increase so dramatically.” 

About Corelight

Corelight transforms network and cloud activity into evidence that security teams use to proactively hunt for threats, accelerate response to incidents, gain complete network visibility and create powerful analytics. Corelight’s global customers include Fortune 500 companies, major government agencies, and large research universities. Based in San Francisco, Corelight is an open-core security company founded by the creators of Zeek®, the widely-used network security technology. For more information, visit https://corelight.com or follow @corelight_inc.

About Zeek

Zeek is the world’s most popular network security monitoring platform, providing compact, high-fidelity transaction logs, file content, and behavioral analytics - all fully customizable for analysts. Adopted in environments of all types and sizes, Zeek helps organizations understand how their networks are being used, supporting security, performance, audit, and capacity workflows. As an open source technology, Zeek is licensed under the permissive BSD-license and is headquartered at the International Computer Science Institute (ICSI) in Berkeley, CA. ICSI is a 501(c)(3) nonprofit organization.

 

Recent Posts