Corelight

Most security teams have visibility. That doesn’t mean they can see what matters. Logs show that something happened. They don’t show what actually took place inside the connection. That gap is where a lot of investigations slow down. Corelight's NDR Buyer's Guide takes a look at where those blind spots come from and how teams are starting to address them. 📖 Find the free download link in the comments! #NetworkSecurity #NDR #Cybersecurity

The issue had been sitting on the network for years — undetected by the company's legacy NDR provider. Corelight identified it within the first 30 minutes of testing. Jay Miller walks through how a global cruise line evaluated visibility across its maritime and resort environments, including the challenge of inconsistent detections, overwhelming alarms, and limited context during investigations. The result was faster identification of network activity, more efficient investigations, and reduced SIEM storage pressure for the SOC team. 🎥 Listen in to the full story below! #NetworkSecurity #NDR #Cybersecurity

The first challenge in an AI-assisted SOC isn't the model. It's getting from a security question to the right evidence fast enough. In his latest blog, James Pope shares lessons from building and operating MCP-powered investigation workflows in the Black Hat NOC, including what worked, what didn't, and why context, retrieval, and workflow design often matter more than the protocol itself. The conclusion is simple: the evidence sets the ceiling. 📖 Read Chapter 1: https://lnkd.in/gURhseZP #BlackHat #AI #SOC #NetworkSecurity

Threat intelligence doesn't create value sitting in a feed. Its value comes from helping defenders understand what's happening on the network and prioritize what deserves attention. In his latest blog, Allen Marin explores why modern detection depends on combining high-quality threat intelligence with forensic-grade network evidence, enabling analysts to investigate activity with greater context and confidence. Read the blog: https://lnkd.in/g46sCu3Z #ThreatIntelligence #Cybersecurity #NetworkSecurity #ThreatDetection

Change happens constantly in cloud environments. The challenge isn't identifying change. It's determining which changes deserve investigation. David Burkett discusses how defenders separate routine environmental drift from activity that warrants deeper analysis, and where automation can help reduce investigative overhead. Watch the full conversation below. #CloudSecurity #Cybersecurity #SOC

A network anomaly. A failed login. An unusual DNS request. Individually, these signals may not warrant investigation. Together, they can tell a very different story. In this article on The Hacker News, Corelight examines how agentic AI can correlate activity across large volumes of network data, helping analysts surface meaningful detections while spending less time on manual triage. 📖 Read more: https://lnkd.in/gTFhiDcz #Cybersecurity #SOC #NetworkSecurity #ThreatDetection

One sensor. One source of truth. Last week, Corelight released Sensor v29.1, extending the value of network evidence beyond security operations with new native network performance monitoring and passive asset classification capabilities. The result is a more complete view of what's happening across the environment, helping security and network teams work from the same evidence and context. Learn more: https://lnkd.in/gCY24KXG #Cybersecurity #NetworkSecurity #NDR

Critical infrastructure doesn't operate in isolation. Recently, United Airlines CISO Deneen DeFiore joined Brian Dye to discuss how defenders are approaching security across increasingly interconnected ecosystems of suppliers, partners, airports, and service providers. A consistent theme throughout the conversation was that effective defense depends on more than information sharing. Trusted relationships, operational visibility, and a collective approach to responding when something goes wrong all play a role. #RSAC2026 #CriticalInfrastructure #Cybersecurity #NetworkSecurity

The Corelight Open NDR platform has achieved FedRAMP In Process for Class C (Moderate) Certification status on the FedRAMP Marketplace 🎉 This milestone marks an important step toward bringing cloud-based network detection and response to U.S. federal agencies operating some of the world’s most complex and mission-critical environments. As agencies modernize infrastructure and move more workloads to the cloud, network-level evidence becomes essential for detecting sophisticated threats, accelerating investigations, and supporting defensible security outcomes. Learn more: https://lnkd.in/gaY8er8R #FedRAMP #Cybersecurity #NDR #NetworkSecurity #PublicSector