Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Corelight offers the advantages of Zeek without the complications associated with Linux, network interface card issues, or the risk of packet loss. Setting it up is a matter of minutes rather than an extensive timeline, allowing your skilled personnel to focus on threat hunting instead of resolving technical glitches. This robust platform, rooted in open-source technology, provides you with full access to your metadata, enabling customization and extension of your capabilities, all while being part of an engaging community. We have assembled a top-tier team of Zeek specialists and contributors, supported by a world-class customer care team that consistently impresses clients with their exceptional expertise and quick response times. With the proactive and secure Corelight Dynamic Health Check feature activated, your Corelight Sensor transmits performance data back to Corelight, allowing for the early detection of potential issues like disk failures or unusual performance metrics. This ensures that your network remains secure and operationally efficient at all times. Ultimately, Corelight empowers organizations to safeguard their networks with confidence and efficiency.

Description

EndaceProbes deliver a flawless record of Network History, enabling the resolution of Cybersecurity, Network, and Application challenges. They provide transparency for every incident, alert, or issue through a packet capture platform that seamlessly integrates with various commercial, open-source, or custom tools. Gain a clear view of network activities, allowing for thorough investigations and defenses against even the most formidable Security Threats. Capture essential network evidence effectively to expedite the resolution of Network and Application Performance problems or outages. The open EndaceProbe Platform unifies tools, teams, and workflows into a cohesive Ecosystem, making Network History readily accessible from all your resources. This functionality is embedded within existing workflows, eliminating the need for teams to familiarize themselves with new tools. Additionally, it serves as a robust open platform that allows the deployment of preferred security or monitoring solutions. With the capability to record extensive periods of searchable, precise network history across your entire infrastructure, users can efficiently manage and respond to various network challenges as they arise. This comprehensive approach not only enhances overall security but also streamlines operational efficiency.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Gigamon Yes 
Sumo Logic Yes 
ARGUS No 
AWS Marketplace Yes 
Amazon S3 Yes 
Chronicle Yes 
Cortex XSOAR No 
Forcepoint Behavioral Analytics Yes 
FortiNDR No 
Google Security Operations (SecOps) No 
Humio Yes 
Keysight Application Threat Intelligence No 
Microsoft Sentinel No 
Network Critical No 
Palo Alto Networks DNS Security Service Yes 
Palo Alto Networks Next-Generation Firewalls No 
Splunk Enterprise No 
Splunk Enterprise Security No 
Vectra AI No 
cPacket Yes 

Integrations

Gigamon Yes 
Sumo Logic Yes 
ARGUS Yes 
AWS Marketplace No 
Amazon S3 No 
Chronicle No 
Cortex XSOAR Yes 
Forcepoint Behavioral Analytics No 
FortiNDR Yes 
Google Security Operations (SecOps) Yes 
Humio No 
Keysight Application Threat Intelligence Yes 
Microsoft Sentinel Yes 
Network Critical Yes 
Palo Alto Networks DNS Security Service No 
Palo Alto Networks Next-Generation Firewalls Yes 
Splunk Enterprise Yes 
Splunk Enterprise Security Yes 
Vectra AI Yes 
cPacket No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Corelight

Founded

2013

Country

United States

Website

www.corelight.com

Vendor Details

Company Name

Endace

Founded

2001

Country

Global

Website

www.endace.com

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection No 
High Bandwidth Usage Monitoring No 
Historical Behavior Data No 
Identify High Network Traffic Sources No 
Network Transaction Visibility No 
Stream Data to IDR or Data Lake No 
Traffic Decryption No 

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection Yes 
High Bandwidth Usage Monitoring Yes 
Historical Behavior Data Yes 
Identify High Network Traffic Sources Yes 
Network Transaction Visibility Yes 
Stream Data to IDR or Data Lake Yes 
Traffic Decryption Yes 

Alternatives

NetworkMiner Reviews

NetworkMiner

Netresec

Alternatives

Fidelis Elevate Reviews

Fidelis Elevate

Fidelis Security
Omnipeek Reviews

Omnipeek

LiveAction
Zeek Reviews

Zeek

The Zeek Project
Capsa Reviews

Capsa

Colasoft