Corelight makes Zeek easier, faster, and even more powerful.
Minutes not months to full-scale Zeek deployment. Powerful C2 detections and encrypted insights that go well beyond JA3. Up to ten times the peak analysis throughput per sensor. Enterprise support from the people who wrote Zeek.
Features & Benefits
SENSORS
Physical Sensors
Yes
Yes
DIY hardware purchase/build
DIY hardware purchase/build
Virtual Sensors for VMware & Hyper-V
Yes
Yes
No
No
Cloud Sensors for AWS, Azure, GCP
Yes
Yes
No
No
Binary Sensors for containers & Linux environments