Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Corelight offers the advantages of Zeek without the complications associated with Linux, network interface card issues, or the risk of packet loss. Setting it up is a matter of minutes rather than an extensive timeline, allowing your skilled personnel to focus on threat hunting instead of resolving technical glitches. This robust platform, rooted in open-source technology, provides you with full access to your metadata, enabling customization and extension of your capabilities, all while being part of an engaging community. We have assembled a top-tier team of Zeek specialists and contributors, supported by a world-class customer care team that consistently impresses clients with their exceptional expertise and quick response times. With the proactive and secure Corelight Dynamic Health Check feature activated, your Corelight Sensor transmits performance data back to Corelight, allowing for the early detection of potential issues like disk failures or unusual performance metrics. This ensures that your network remains secure and operationally efficient at all times. Ultimately, Corelight empowers organizations to safeguard their networks with confidence and efficiency.

Description

EndaceProbes deliver a flawless record of Network History, enabling the resolution of Cybersecurity, Network, and Application challenges. They provide transparency for every incident, alert, or issue through a packet capture platform that seamlessly integrates with various commercial, open-source, or custom tools. Gain a clear view of network activities, allowing for thorough investigations and defenses against even the most formidable Security Threats. Capture essential network evidence effectively to expedite the resolution of Network and Application Performance problems or outages. The open EndaceProbe Platform unifies tools, teams, and workflows into a cohesive Ecosystem, making Network History readily accessible from all your resources. This functionality is embedded within existing workflows, eliminating the need for teams to familiarize themselves with new tools. Additionally, it serves as a robust open platform that allows the deployment of preferred security or monitoring solutions. With the capability to record extensive periods of searchable, precise network history across your entire infrastructure, users can efficiently manage and respond to various network challenges as they arise. This comprehensive approach not only enhances overall security but also streamlines operational efficiency.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Gigamon Yes 
Sumo Logic Yes 
AWS Marketplace Yes 
Chronicle Yes 
Cortex XSOAR No 
Darktrace No 
Databricks Yes 
FortiNDR No 
Keysight Application Threat Intelligence No 
Palo Alto Networks DNS Security Service Yes 
Palo Alto Networks Panorama No 
Proofpoint Emerging Threat (ET) Intelligence Yes 
ReversingLabs Yes 
Snort No 
Splunk Attack Analyzer No 
Splunk Enterprise Security No 
Splunk SOAR Yes 
ThreatQ Yes 
Vectra AI No 

Integrations

Gigamon Yes 
Sumo Logic Yes 
AWS Marketplace No 
Chronicle No 
Cortex XSOAR Yes 
Darktrace Yes 
Databricks No 
FortiNDR Yes 
Keysight Application Threat Intelligence Yes 
Palo Alto Networks DNS Security Service No 
Palo Alto Networks Panorama Yes 
Proofpoint Emerging Threat (ET) Intelligence No 
ReversingLabs No 
Snort Yes 
Splunk Attack Analyzer Yes 
Splunk Enterprise Security Yes 
Splunk SOAR No 
ThreatQ No 
Vectra AI Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Corelight

Founded

2013

Country

United States

Website

www.corelight.com

Vendor Details

Company Name

Endace

Founded

2001

Country

Global

Website

www.endace.com

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection No 
High Bandwidth Usage Monitoring No 
Historical Behavior Data No 
Identify High Network Traffic Sources No 
Network Transaction Visibility No 
Stream Data to IDR or Data Lake No 
Traffic Decryption No 

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection Yes 
High Bandwidth Usage Monitoring Yes 
Historical Behavior Data Yes 
Identify High Network Traffic Sources Yes 
Network Transaction Visibility Yes 
Stream Data to IDR or Data Lake Yes 
Traffic Decryption Yes 

Alternatives

NetworkMiner Reviews

NetworkMiner

Netresec

Alternatives

Fidelis Elevate Reviews

Fidelis Elevate

Fidelis Security
Omnipeek Reviews

Omnipeek

LiveAction
Zeek Reviews

Zeek

The Zeek Project
Capsa Reviews

Capsa

Colasoft