Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Corelight offers the advantages of Zeek without the complications associated with Linux, network interface card issues, or the risk of packet loss. Setting it up is a matter of minutes rather than an extensive timeline, allowing your skilled personnel to focus on threat hunting instead of resolving technical glitches. This robust platform, rooted in open-source technology, provides you with full access to your metadata, enabling customization and extension of your capabilities, all while being part of an engaging community. We have assembled a top-tier team of Zeek specialists and contributors, supported by a world-class customer care team that consistently impresses clients with their exceptional expertise and quick response times. With the proactive and secure Corelight Dynamic Health Check feature activated, your Corelight Sensor transmits performance data back to Corelight, allowing for the early detection of potential issues like disk failures or unusual performance metrics. This ensures that your network remains secure and operationally efficient at all times. Ultimately, Corelight empowers organizations to safeguard their networks with confidence and efficiency.

Description

Protecting against unseen dangers through user and entity behavior analytics is essential. This approach uncovers irregularities and hidden threats that conventional security measures often overlook. By automating the integration of numerous anomalies into a cohesive threat, security analysts can work more efficiently. Leverage advanced investigative features and robust behavioral baselines applicable to any entity, anomaly, or threat. Employ machine learning to automate threat detection, allowing for a more focused approach to hunting with high-fidelity, behavior-based alerts that facilitate prompt review and resolution. Quickly pinpoint anomalous entities without the need for human intervention. With a diverse array of over 65 anomaly types and more than 25 threat classifications spanning users, accounts, devices, and applications, organizations maximize their ability to identify and address threats and anomalies. This combination of human insight and machine intelligence empowers businesses to enhance their security posture significantly. Ultimately, the integration of these advanced capabilities leads to a more resilient and proactive defense against evolving threats.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Amazon S3 Yes 
Google Cloud Platform Yes 
Splunk Cloud Platform Yes 
Splunk SOAR Yes 
ALIP No 
Accenture Cloud Trade Promotion Management No 
Amazon Augmented AI (A2I) No 
Amazon Aurora No 
Amazon Care No 
Amazon SimpleDB No 
Amazon Web Services (AWS) No 
Booz Allen MDR No 
Chronicle Yes 
Cisco AnyConnect No 
Cisco Evolved Programmable Network (EPN) Manager No 
Crewmeister No 
CrowdStrike Falcon Yes 
Databricks Yes 
Optiv Security Awareness Training No 
SAP Ariba Spend Analysis No 

Integrations

Amazon S3 Yes 
Google Cloud Platform Yes 
Splunk Cloud Platform Yes 
Splunk SOAR Yes 
ALIP Yes 
Accenture Cloud Trade Promotion Management Yes 
Amazon Augmented AI (A2I) Yes 
Amazon Aurora Yes 
Amazon Care Yes 
Amazon SimpleDB Yes 
Amazon Web Services (AWS) Yes 
Booz Allen MDR Yes 
Chronicle No 
Cisco AnyConnect Yes 
Cisco Evolved Programmable Network (EPN) Manager Yes 
Crewmeister Yes 
CrowdStrike Falcon No 
Databricks No 
Optiv Security Awareness Training Yes 
SAP Ariba Spend Analysis Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

Corelight

Founded

2013

Country

United States

Website

www.corelight.com

Vendor Details

Company Name

Cisco

Founded

1984

Country

United States

Website

www.splunk.com/en_us/products/user-behavior-analytics.html

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection No 
High Bandwidth Usage Monitoring No 
Historical Behavior Data No 
Identify High Network Traffic Sources No 
Network Transaction Visibility No 
Stream Data to IDR or Data Lake No 
Traffic Decryption No 

Alternatives

NetworkMiner Reviews

NetworkMiner

Netresec

Alternatives

Fidelis Elevate Reviews

Fidelis Elevate

Fidelis Security
FortiInsight Reviews

FortiInsight

Fortinet
Zeek Reviews

Zeek

The Zeek Project