During this session, participants will discover how Corelight seamlessly integrates with the Splunk portfolio to enhance incident response times, threat-hunting capabilities, and automated response and remediation processes. Join us to discover: Insights into how rich network telemetry can provide crucial insights into operational and adversarial activities An understanding of how the limitations of visibility across the environment can severe...

Security Orchestration, Automation, and Response (SOAR) could revolutionize the Security Operations Center (SOC). Why hasn't it done so yet? Security playbooks span the entire SOC--from alerting and source data, to the execution platform to the analysts handling events and investigations. Data, platforms, process, and training all converge in playbooks, where any change or weakness can impact reliable, robust, and accurate operations. Without...

Security Orchestration, Automation, and Response (SOAR) could revolutionize the Security Operations Center (SOC). Why hasn't it done so yet?Security playbooks span the entire SOC--from alerting and source data, to the execution platform to the analysts handling events and investigations. Data, platforms, process, and training all converge in playbooks, where any change or weakness can impact reliable, robust, and accurate operations. Without t...

Join Corelight, Splunk, and Carahsoft as we privately host Corelight's popular Capture the Flag (CTF) event. CTF has gone digital to support our new work-from-home world. During this virtual CTF competition, participants will hunt for the CTF crown from the comfort of their home, race to beat other players, and answer dozens of security challenges using Zeek data in Splunk or Elastic. Players accrue points based on response accuracy and speed....

To protect the health and safety of attendees, this event has been canceled due to COVID-19 concerns. Attackers have taken over the network. They've infected workstations and are actively exfiltrating files out of your network using encrypted protocols. We suspect they used a zero-day exploit to gain initial access to our systems. Think you've got what it takes to track them down?Join Corelight and Carahsoft for a three-hour capture the flag d...

Use the code ZeekWeek10 for a 10% discount off of conference registration (excludes the training). ZeekWeek (formerly BroCon) is the most important community event for users, developers, incident responders, threat hunters and architects who rely on the open-source Zeek network security monitor as a critical element in their security stack. This year join your colleagues who rely on Zeek for workshops, technical talks, demonstrations and discu...

*Attend & receive 1 (ISC)2 CPE credit! Join Corelight and Carahsoft on May 1st for a presentation on how to leverage "Bro/Zeek" data during cyber investigations. The modern Security Operations Center (SOC) consumes an immense amount of data, however not all of it is useful during an investigation. In fact, the data often comes from a number of disparate sources with little to no correlation except time. This places a heavy burden on cybers...

Join Corelight and Bob Gourley on December 13th for a discussion with cybersecurity pioneer, Richard Bejtlich on lessons learned from years of direct contact with adversaries in cyberspace. Few defenders have seen as much action in cyberspace as Richard Bejtlich. His career in network security started in the early days of the Internet, as the Air Force recognized the need for enhanced focus in this critical mission domain (he served at the Ai...