Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Corelight offers the advantages of Zeek without the complications associated with Linux, network interface card issues, or the risk of packet loss. Setting it up is a matter of minutes rather than an extensive timeline, allowing your skilled personnel to focus on threat hunting instead of resolving technical glitches. This robust platform, rooted in open-source technology, provides you with full access to your metadata, enabling customization and extension of your capabilities, all while being part of an engaging community. We have assembled a top-tier team of Zeek specialists and contributors, supported by a world-class customer care team that consistently impresses clients with their exceptional expertise and quick response times. With the proactive and secure Corelight Dynamic Health Check feature activated, your Corelight Sensor transmits performance data back to Corelight, allowing for the early detection of potential issues like disk failures or unusual performance metrics. This ensures that your network remains secure and operationally efficient at all times. Ultimately, Corelight empowers organizations to safeguard their networks with confidence and efficiency.

Description

IronDefense serves as your essential portal for network detection and response, offering the most sophisticated NDR platform available today, specifically designed to combat even the most complex cyber threats. With IronDefense, you can achieve unmatched visibility into your network, empowering your entire team to make quicker and more informed decisions. This advanced NDR solution enhances awareness of the threat landscape while boosting detection capabilities within your network infrastructure. Consequently, your Security Operations Center (SOC) team becomes more proficient and effective, utilizing the existing cyber defense tools, resources, and analyst expertise at their disposal. You will benefit from real-time insights across various industry threatscapes, human intelligence to identify potential threats, and advanced analysis of anomalies through the integration of IronDome Collective Defense, which correlates data among peer groups. Moreover, the platform includes cutting-edge automation features that implement response playbooks developed by top national defenders, allowing you to prioritize detected alerts based on risk and support your limited cybersecurity personnel. By leveraging these tools, organizations can significantly enhance their overall cybersecurity posture and resilience against evolving threats.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Splunk Cloud Platform Yes 
AWS Marketplace Yes 
Azure Marketplace Yes 
Chronicle Yes 
Cybraics Yes 
Databricks Yes 
Elastic Cloud Yes 
EndaceProbe Yes 
Exabeam Yes 
Forcepoint Behavioral Analytics Yes 
Gigamon Yes 
Humio Yes 
IBM QRadar SIEM No 
Microsoft Azure No 
Proofpoint Emerging Threat (ET) Intelligence Yes 
ReversingLabs Yes 
ServiceNow No 
ThreatQ Yes 
cPacket Yes 

Integrations

Splunk Cloud Platform Yes 
AWS Marketplace No 
Azure Marketplace No 
Chronicle No 
Cybraics No 
Databricks No 
Elastic Cloud No 
EndaceProbe No 
Exabeam No 
Forcepoint Behavioral Analytics No 
Gigamon No 
Humio No 
IBM QRadar SIEM Yes 
Microsoft Azure Yes 
Proofpoint Emerging Threat (ET) Intelligence No 
ReversingLabs No 
ServiceNow Yes 
ThreatQ No 
cPacket No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Corelight

Founded

2013

Country

United States

Website

www.corelight.com

Vendor Details

Company Name

IronNet Cybersecurity

Founded

2014

Country

United States

Website

www.ironnet.com/products/irondefense

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection No 
High Bandwidth Usage Monitoring No 
Historical Behavior Data No 
Identify High Network Traffic Sources No 
Network Transaction Visibility No 
Stream Data to IDR or Data Lake No 
Traffic Decryption No 

Product Features

Network Security

Access Control No 
Analytics / Reporting Yes 
Compliance Reporting No 
Firewalls No 
Internet Usage Monitoring Yes 
Intrusion Detection System Yes 
Threat Response Yes 
VPN No 
Vulnerability Scanning No 

Network Traffic Analysis (NTA)

Anomalous Behavior Detection No 
High Bandwidth Usage Monitoring No 
Historical Behavior Data No 
Identify High Network Traffic Sources No 
Network Transaction Visibility No 
Stream Data to IDR or Data Lake No 
Traffic Decryption No 

Alternatives

NetworkMiner Reviews

NetworkMiner

Netresec

Alternatives

Fidelis Elevate Reviews

Fidelis Elevate

Fidelis Security
Fidelis Elevate Reviews

Fidelis Elevate

Fidelis Security
IronDome Reviews

IronDome

IronNet Cybersecurity
Zeek Reviews

Zeek

The Zeek Project