Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Corelight offers the advantages of Zeek without the complications associated with Linux, network interface card issues, or the risk of packet loss. Setting it up is a matter of minutes rather than an extensive timeline, allowing your skilled personnel to focus on threat hunting instead of resolving technical glitches. This robust platform, rooted in open-source technology, provides you with full access to your metadata, enabling customization and extension of your capabilities, all while being part of an engaging community. We have assembled a top-tier team of Zeek specialists and contributors, supported by a world-class customer care team that consistently impresses clients with their exceptional expertise and quick response times. With the proactive and secure Corelight Dynamic Health Check feature activated, your Corelight Sensor transmits performance data back to Corelight, allowing for the early detection of potential issues like disk failures or unusual performance metrics. This ensures that your network remains secure and operationally efficient at all times. Ultimately, Corelight empowers organizations to safeguard their networks with confidence and efficiency.

Description

Darktrace / NETWORK is an advanced AI-driven solution designed for network detection and response, aiming to thwart, identify, scrutinize, and manage both recognized and novel threats in contemporary environments. Utilizing its Self-Learning AI, the system operates directly on an organization’s data, adapting to the typical behavior of each device, user, connection, and attack vector, thereby detecting anomalies without relying on predefined signatures, past attack data, or generalized models. This solution offers comprehensive visibility across various infrastructures, including on-premises, virtual, cloud, and hybrid networks, as well as remote endpoints, operational technology (OT) devices, zero-trust network access (ZTNA), and traffic in both encrypted and decrypted forms. Moreover, it continuously refines its detection capabilities to enhance precision and minimize alert fatigue without the need for manual rule updates. The Cyber AI Analyst conducts thorough investigations at scale, forms theories, derives conclusions, ranks incidents based on potential business repercussions, and links occurrences across network, endpoint, cloud, identity, OT, email, and remote systems, ensuring a robust defense against cyber threats. Thus, organizations can benefit from a proactive security posture that evolves in tandem with emerging challenges.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

AWS Marketplace
Amazon S3
Chronicle
Confluent
CrowdStrike Falcon
Cybraics
Darktrace
Databricks
Devo
Exabeam
Forcepoint Behavioral Analytics
Humio
Palo Alto Networks DNS Security Service
Proofpoint Emerging Threat (ET) Intelligence
Splunk Cloud Platform
Splunk SOAR
Sumo Logic
ThreatQ
cPacket

Integrations

AWS Marketplace
Amazon S3
Chronicle
Confluent
CrowdStrike Falcon
Cybraics
Darktrace
Databricks
Devo
Exabeam
Forcepoint Behavioral Analytics
Humio
Palo Alto Networks DNS Security Service
Proofpoint Emerging Threat (ET) Intelligence
Splunk Cloud Platform
Splunk SOAR
Sumo Logic
ThreatQ
cPacket

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Corelight

Founded

2013

Country

United States

Website

www.corelight.com

Vendor Details

Company Name

Darktrace

Founded

2013

Country

United Kingdom

Website

www.darktrace.com/products/network

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection
High Bandwidth Usage Monitoring
Historical Behavior Data
Identify High Network Traffic Sources
Network Transaction Visibility
Stream Data to IDR or Data Lake
Traffic Decryption

Product Features

Cloud Security

Antivirus
Application Security
Behavioral Analytics
Encryption
Endpoint Management
Incident Management
Intrusion Detection System
Threat Intelligence
Two-Factor Authentication
Vulnerability Management

Cloud Workload Protection

Anomaly Detection
Asset Discovery
Cloud Gap Analysis
Cloud Registry
Data Loss Prevention (DLP)
Data Security
Governance
Logging & Reporting
Machine Learning
Security Audit
Workload Diversity

Incident Response

Attack Behavior Analytics
Automated Remediation
Compliance Reporting
Forensic Data Retention
Incident Alerting
Incident Database
Incident Logs
Incident Reporting
Privacy Breach Reporting
SIEM Data Ingestion / Correlation
SLA Tracking / Management
Security Orchestration
Threat Intelligence
Timeline Analysis
Workflow Automation
Workflow Management

Network Monitoring

Bandwidth Monitoring
Baseline Manager
Diagnostic Tools
IP Address Monitoring
Internet Usage Monitoring
Real Time Analytics
Resource Management
SLA Monitoring
Server Monitoring
Uptime Monitoring
Web Traffic Reporting

Network Traffic Analysis (NTA)

Anomalous Behavior Detection
High Bandwidth Usage Monitoring
Historical Behavior Data
Identify High Network Traffic Sources
Network Transaction Visibility
Stream Data to IDR or Data Lake
Traffic Decryption

Alternatives

NetworkMiner Reviews

NetworkMiner

Netresec

Alternatives

Fidelis Elevate Reviews

Fidelis Elevate

Fidelis Security
Zeek Reviews

Zeek

The Zeek Project