Corelight logo

Corelight

Unknown
-(0 Avaliações)
0 Salvo

Open NDR for network visibility, threat detection, investigation, and threat hunting.

Adicionado em:13 de jul. de 2026
Visitantes mensais:
44.3K
Redes sociais e e-mail:
Network Detection and ResponseNDRThreat HuntingNetwork SecuritySecurity OperationsZeek

Informações da ferramenta

O que é Corelight?

Corelight is an Open Network Detection and Response (NDR) platform that combines network evidence, analytics, detections, sensors, and investigation tools. It supports network monitoring, intrusion detection, threat intelligence, forensics, asset visibility, and threat hunting workflows.

Recursos principais

  • Open NDR Platform

    Combines network visibility, analytics, detections, and investigation capabilities in an Open NDR platform.

  • Network Monitoring and Intrusion Detection

    Supports network monitoring with Zeek and intrusion detection with Suricata.

  • Investigation and Forensics

    Provides Investigator for triage, Smart PCAP for forensics, and YARA for static file analysis.

  • Threat Intelligence and Detection Collections

    Includes threat intelligence capabilities and detection collections for C2, core detections, encrypted traffic, entities, and ICS/OT.

  • AI-Powered SOC

    Includes an AI-powered SOC capability for security operations workflows.

  • Sensor and Asset Management

    Provides performance and asset visibility, plus Fleet Manager for managing sensors in one place.

Casos de uso

  • #1

    Network Detection and Response

    Supports network-based detection, investigation, and response workflows.

  • #2

    Threat Hunting

    Provides network evidence and investigation capabilities for threat hunting.

  • #3

    Cloud Security

    Supports cloud security use cases.

  • #4

    Encrypted Traffic Analysis

    Supports encrypted traffic analysis and detection use cases.

  • #5

    Ransomware Defense

    Supports ransomware-focused security use cases.

Melhor para:Security operations teamsThreat huntersNetwork security teamsSecurity leadersEnergy organizationsFederal organizationsFinancial services organizationsHealthcare organizationsState, local, and education organizations

Planos de preços

Pricing is not clearly published by the official source.

Alternativas

Perguntas frequentes

What is Corelight?
Corelight is an Open Network Detection and Response platform for network visibility, threat detection, investigation, and threat hunting.
What network monitoring technologies does Corelight support?
Corelight supports network monitoring with Zeek and intrusion detection with Suricata.
Does Corelight support threat hunting?
Yes. Corelight supports threat hunting workflows using network evidence and investigation capabilities.
What investigation and forensics features does Corelight offer?
Corelight provides Investigator for triage, Smart PCAP for forensics, and YARA for static file analysis.
What deployment options are available for Corelight?
The official source lists appliance, cloud, software, and virtual sensor options.
How much does Corelight cost?
Pricing is not clearly published by the official source.

Corelight Contato e mídias sociais

Visite o site oficial

Comentários

-

Compartilhe sua experiência com esta ferramenta...

Informações da ferramenta

Modelo de preçosUnknown
CategoriaAnálise de Dados
Tags
Network Detection and ResponseNDRThreat HuntingNetwork SecuritySecurity OperationsZeek
IdiomaInglês
Última atualização16 de jul. de 2026