Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Corelight offers the advantages of Zeek without the complications associated with Linux, network interface card issues, or the risk of packet loss. Setting it up is a matter of minutes rather than an extensive timeline, allowing your skilled personnel to focus on threat hunting instead of resolving technical glitches. This robust platform, rooted in open-source technology, provides you with full access to your metadata, enabling customization and extension of your capabilities, all while being part of an engaging community. We have assembled a top-tier team of Zeek specialists and contributors, supported by a world-class customer care team that consistently impresses clients with their exceptional expertise and quick response times. With the proactive and secure Corelight Dynamic Health Check feature activated, your Corelight Sensor transmits performance data back to Corelight, allowing for the early detection of potential issues like disk failures or unusual performance metrics. This ensures that your network remains secure and operationally efficient at all times. Ultimately, Corelight empowers organizations to safeguard their networks with confidence and efficiency.
Description
To effectively identify sophisticated threats, it is essential to conduct thorough inspection, extraction, and real-time analysis of all types of content traversing the network. Fidelis' network detection and response technology systematically scans all ports and protocols in both directions, gathering extensive metadata that serves as the foundation for robust machine-learning analytics. By utilizing sensors for direct, internal, email, web, and cloud communications, you achieve comprehensive network visibility and coverage. The tactics, techniques, and procedures (TTPs) of identified attackers are aligned with the MITRE ATT&CK™ framework, enabling security teams to proactively address potential threats. While threats may attempt to evade detection, they ultimately cannot escape. You can automatically profile and categorize IT assets and services, including enterprise IoT devices, legacy systems, and shadow IT, to create a detailed map of your cyber landscape. Furthermore, when combined with Fidelis' endpoint detection and response offering, you obtain a software asset inventory linked to known vulnerabilities, such as CVE and KB references, along with an assessment of security hygiene concerning patches and the status of endpoints. This comprehensive approach equips organizations with the tools needed to maintain a resilient cybersecurity posture.
API Access
Has API
API Access
Has API
Integrations
AWS Marketplace
Amazon S3
Azure Marketplace
CrowdStrike Falcon
Cybraics
Databricks Data Intelligence Platform
Devo
EndaceProbe
Fidelis LRM
Forcepoint Behavioral Analytics
Integrations
AWS Marketplace
Amazon S3
Azure Marketplace
CrowdStrike Falcon
Cybraics
Databricks Data Intelligence Platform
Devo
EndaceProbe
Fidelis LRM
Forcepoint Behavioral Analytics
Pricing Details
No price information available.
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Corelight
Founded
2013
Country
United States
Website
www.corelight.com
Vendor Details
Company Name
Fidelis Security
Founded
2002
Country
United States
Website
fidelissecurity.com/products/network/
Product Features
Network Traffic Analysis (NTA)
Anomalous Behavior Detection
High Bandwidth Usage Monitoring
Historical Behavior Data
Identify High Network Traffic Sources
Network Transaction Visibility
Stream Data to IDR or Data Lake
Traffic Decryption
Product Features
Data Loss Prevention
Compliance Reporting
Incident Management
Policy Management
Sensitive Data Identification
Web Threat Management
Whitelisting / Blacklisting
Network Traffic Analysis (NTA)
Anomalous Behavior Detection
High Bandwidth Usage Monitoring
Historical Behavior Data
Identify High Network Traffic Sources
Network Transaction Visibility
Stream Data to IDR or Data Lake
Traffic Decryption