Corelight training

Discover how Corelight Training helps analysts and hunters detect DNS tunneling, find threats in encrypted traffic, and more.

Effective instruction from security experts

Training on Corelight's Open NDR Platform can get your team up to speed or enhance their performance in investigation, remediation, and threat hunting. Choose from a one day or three day course.

Open NDR Platform

Training overview

Learn about our Zeek^® training materials and courses. Try our free video training.

Training overview

One day Corelight / Zeek training session

For incident responders, threat hunters, and pen testers who are new to Zeek, this class teaches them everything they need to use this powerful tool. Online.

Class summary

Three day Corelight / Zeek training session

Our most in-depth offering gives your team three days of activity-based training from world-class Zeek experts. Online.

Class summary

One day Investigator training session

This course teaches incident responders and handlers, threat hunters, and security operations teams everything they need to know to start using this powerful platform. Online.

Class summary

On demand training / silver

On demand learning at your pace delivered virtually.

This course teaches new-to-Corelight incident responders, threat hunters and penetration testers everything they need to know to start using this powerful tool.

Class summary

On demand training / gold

On demand learning at your pace delivered virtually.

Our most in-depth offering gives your team hands-on training from world-class Corelight experts.

Class summary

Tap into unmatched expertise

Corelight's team includes some of the most preeminent practitioners and thinkers in network security. Bring in this expertise to help your organization discover what the Open NDR Platform can do. Whether you're just getting to know Zeek and IDS, or you're an expert optimizing your Corelight deployment, we can help.