Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Corelight offers the advantages of Zeek without the complications associated with Linux, network interface card issues, or the risk of packet loss. Setting it up is a matter of minutes rather than an extensive timeline, allowing your skilled personnel to focus on threat hunting instead of resolving technical glitches. This robust platform, rooted in open-source technology, provides you with full access to your metadata, enabling customization and extension of your capabilities, all while being part of an engaging community. We have assembled a top-tier team of Zeek specialists and contributors, supported by a world-class customer care team that consistently impresses clients with their exceptional expertise and quick response times. With the proactive and secure Corelight Dynamic Health Check feature activated, your Corelight Sensor transmits performance data back to Corelight, allowing for the early detection of potential issues like disk failures or unusual performance metrics. This ensures that your network remains secure and operationally efficient at all times. Ultimately, Corelight empowers organizations to safeguard their networks with confidence and efficiency.

Description

Rapid7 Incident Command is a cloud-native, AI-powered SIEM built to replace legacy security monitoring tools. It unifies attack surface visibility, telemetry, and risk context to give security teams a clear, real-time understanding of threats. Incident Command applies advanced behavioral analytics and AI-driven triage to reduce false positives and prioritize critical incidents. The platform enriches alerts with vulnerability data, exposure scoring, and threat intelligence so analysts know exactly what to address first. Natural language search enables rapid investigation across massive volumes of security data. Incident Command correlates activity across users, endpoints, applications, and networks to reveal full attack paths. Automated SOAR workflows allow teams to isolate systems, revoke credentials, and contain threats quickly. Integrated digital forensics and incident response capabilities support deeper investigations. The platform is designed to scale across complex hybrid environments. Rapid7 Incident Command helps SOC teams detect faster, respond smarter, and operate more efficiently.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Amazon S3
Armis Centrix
Carbon Black EDR
Cisco Duo
Confluent
CrowdStrike Falcon
CyCognito
Cybraics
Cylera Platform
Databricks
Forcepoint Behavioral Analytics
Google Cloud Platform
Imperva DDoS Protection
Imperva WAF
Monad
Panaseer
Recorded Future
Sacumen Connector as a Service (CaaS)
StatusGator
Sumo Logic

Integrations

Amazon S3
Armis Centrix
Carbon Black EDR
Cisco Duo
Confluent
CrowdStrike Falcon
CyCognito
Cybraics
Cylera Platform
Databricks
Forcepoint Behavioral Analytics
Google Cloud Platform
Imperva DDoS Protection
Imperva WAF
Monad
Panaseer
Recorded Future
Sacumen Connector as a Service (CaaS)
StatusGator
Sumo Logic

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Corelight

Founded

2013

Country

United States

Website

www.corelight.com

Vendor Details

Company Name

Rapid7

Founded

2000

Country

United States

Website

www.rapid7.com/products/siem/

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection
High Bandwidth Usage Monitoring
Historical Behavior Data
Identify High Network Traffic Sources
Network Transaction Visibility
Stream Data to IDR or Data Lake
Traffic Decryption

Product Features

Endpoint Detection and Response (EDR)

Behavioral Analytics
Blacklisting/Whitelisting
Continuous Monitoring
Malware/Anomaly Detection
Prioritization
Remediation Management
Root Cause Analysis

Incident Response

Attack Behavior Analytics
Automated Remediation
Compliance Reporting
Forensic Data Retention
Incident Alerting
Incident Database
Incident Logs
Incident Reporting
Privacy Breach Reporting
SIEM Data Ingestion / Correlation
SLA Tracking / Management
Security Orchestration
Threat Intelligence
Timeline Analysis
Workflow Automation
Workflow Management

Network Traffic Analysis (NTA)

Anomalous Behavior Detection
High Bandwidth Usage Monitoring
Historical Behavior Data
Identify High Network Traffic Sources
Network Transaction Visibility
Stream Data to IDR or Data Lake
Traffic Decryption

SIEM

Application Security
Behavioral Analytics
Compliance Reporting
Endpoint Management
File Integrity Monitoring
Forensic Analysis
Log Management
Network Monitoring
Real Time Monitoring
Threat Intelligence
User Activity Monitoring

Alternatives

NetworkMiner Reviews

NetworkMiner

Netresec

Alternatives

Alert Logic Reviews

Alert Logic

Fortra
Fidelis Elevate Reviews

Fidelis Elevate

Fidelis Security
Zeek Reviews

Zeek

The Zeek Project