MISP

Corelight Splunk App update: new dashboard and data

Corelight Splunk App update: new dashboard and data

| | Announcements, Community ID, Corelight Technical Add-on, ECS, EDR, encrypted traffic, ETC, HELK, MISP, NDR, osquery, partnership, SOC, Splunk, SSH, Suricata
By Roger Cheeks, US-East Sales Engineer, Corelight In support of Corelight’s latest software release, v19, we are pleased to launch our newest installment of the Corelight App for Splunk (Corelight App) and ...
Bright Ideas Blog

Zeek & Sigma: Fully Compatible for Cross-SIEM Detections

| | encrypted traffic collection, Joe Sandbox, Microsoft Azure, MISP, NDR, network detection response, Network Security, network traffic analysis, network visibility, partnership, SANS, SIEM, Sigma, SOC, SOC Prime, Yara, Zeek
By Alex Kirk, Corelight Global Principal for Suricata Corelight recently teamed up with SOC Prime, creators of advanced cyber analytics platforms, to add support for the entire Zeek data set into Sigma, ...
Bright Ideas Blog