Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Rather than focusing solely on individual assets or the entire network, these security solutions continuously analyze network traffic to establish a baseline of typical patterns. Once this baseline is set, Network Traffic Analysis (NTA) tools can identify unusual traffic as potential security threats. While various methodologies exist, effective NTA tools must incorporate some level of anomaly analysis to differentiate between benign irregularities and genuine risks. In the realm of network traffic supervision, Network Insight monitors device interactions in real time, consistently gathering and linking evidence through various detection mechanisms to declare an item as "suspected" or "infected." Furthermore, the Case Analyzer, which functions as a context-sensitive network traffic analysis and threat intelligence system, validates any infections, while a series of risk profilers evaluate and rank the infection according to its assessed risk level. This comprehensive approach not only strengthens security measures but also enhances the overall understanding of network behavior dynamics.

Description

Corelight offers the advantages of Zeek without the complications associated with Linux, network interface card issues, or the risk of packet loss. Setting it up is a matter of minutes rather than an extensive timeline, allowing your skilled personnel to focus on threat hunting instead of resolving technical glitches. This robust platform, rooted in open-source technology, provides you with full access to your metadata, enabling customization and extension of your capabilities, all while being part of an engaging community. We have assembled a top-tier team of Zeek specialists and contributors, supported by a world-class customer care team that consistently impresses clients with their exceptional expertise and quick response times. With the proactive and secure Corelight Dynamic Health Check feature activated, your Corelight Sensor transmits performance data back to Corelight, allowing for the early detection of potential issues like disk failures or unusual performance metrics. This ensures that your network remains secure and operationally efficient at all times. Ultimately, Corelight empowers organizations to safeguard their networks with confidence and efficiency.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

AWS Marketplace No 
Amazon S3 No 
Azure Marketplace No 
Confluent No 
Databricks No 
Devo No 
Elastic Cloud No 
EndaceProbe No 
Exabeam No 
Forcepoint Behavioral Analytics No 
Gigamon No 
Google Cloud Platform No 
Humio No 
Palo Alto Networks DNS Security Service No 
Proofpoint Emerging Threat (ET) Intelligence No 
Splunk Cloud Platform No 
Splunk SOAR No 
Sumo Logic No 
ThreatQ No 

Integrations

AWS Marketplace Yes 
Amazon S3 Yes 
Azure Marketplace Yes 
Confluent Yes 
Databricks Yes 
Devo Yes 
Elastic Cloud Yes 
EndaceProbe Yes 
Exabeam Yes 
Forcepoint Behavioral Analytics Yes 
Gigamon Yes 
Google Cloud Platform Yes 
Humio Yes 
Palo Alto Networks DNS Security Service Yes 
Proofpoint Emerging Threat (ET) Intelligence Yes 
Splunk Cloud Platform Yes 
Splunk SOAR Yes 
Sumo Logic Yes 
ThreatQ Yes 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

Core Security (Fortra)

Founded

1996

Country

United States

Website

www.coresecurity.com/products/network-insight

Vendor Details

Company Name

Corelight

Founded

2013

Country

United States

Website

www.corelight.com

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection No 
High Bandwidth Usage Monitoring No 
Historical Behavior Data No 
Identify High Network Traffic Sources No 
Network Transaction Visibility No 
Stream Data to IDR or Data Lake No 
Traffic Decryption No 

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection No 
High Bandwidth Usage Monitoring No 
Historical Behavior Data No 
Identify High Network Traffic Sources No 
Network Transaction Visibility No 
Stream Data to IDR or Data Lake No 
Traffic Decryption No 

Alternatives

NetworkMiner Reviews

NetworkMiner

Netresec
GREYCORTEX Mendel Reviews

GREYCORTEX Mendel

GREYCORTEX
Fidelis Elevate Reviews

Fidelis Elevate

Fidelis Security
Barac Reviews

Barac

Venari Security
Sangfor Athena NDR Reviews

Sangfor Athena NDR

Sangfor Technologies
Zeek Reviews

Zeek

The Zeek Project