Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Corelight offers the advantages of Zeek without the complications associated with Linux, network interface card issues, or the risk of packet loss. Setting it up is a matter of minutes rather than an extensive timeline, allowing your skilled personnel to focus on threat hunting instead of resolving technical glitches. This robust platform, rooted in open-source technology, provides you with full access to your metadata, enabling customization and extension of your capabilities, all while being part of an engaging community. We have assembled a top-tier team of Zeek specialists and contributors, supported by a world-class customer care team that consistently impresses clients with their exceptional expertise and quick response times. With the proactive and secure Corelight Dynamic Health Check feature activated, your Corelight Sensor transmits performance data back to Corelight, allowing for the early detection of potential issues like disk failures or unusual performance metrics. This ensures that your network remains secure and operationally efficient at all times. Ultimately, Corelight empowers organizations to safeguard their networks with confidence and efficiency.

Description

Zeek, initially known as Bro, stands as the premier platform for monitoring network security. It is an adaptable, open-source solution driven by those dedicated to defense in the cybersecurity realm. With its origins tracing back to the 1990s, the project was initiated by Vern Paxson to gain insights into activities on university and national laboratory networks. In late 2018, to acknowledge its growth and ongoing advancements, the leadership team transitioned the name from Bro to Zeek. Unlike conventional security tools such as firewalls or intrusion prevention systems, Zeek operates passively by residing on a sensor, which can be a hardware, software, virtual, or cloud-based platform, that discreetly monitors network traffic. By analyzing the data it collects, Zeek generates concise, high-quality transaction logs, file contents, and customizable outputs that are well-suited for manual examination on storage devices or through more user-friendly applications like security information and event management (SIEM) systems. This unique approach allows for a deeper understanding of network activities without interfering with the traffic itself.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Cybraics Yes 
cPacket Yes 
AWS Marketplace Yes 
Amazon S3 Yes 
Azure Marketplace Yes 
Chronicle Yes 
Dropzone AI No 
Elastic Observability No 
EndaceProbe Yes 
Exabeam Yes 
Forcepoint Behavioral Analytics Yes 
Humio Yes 
IronNet Collective Defense Platform No 
LimaCharlie No 
NXLog No 
Observe No 
Splunk Cloud Platform Yes 
Tenzir No 
ThreatQ Yes 
Wraith No 

Integrations

Cybraics Yes 
cPacket Yes 
AWS Marketplace No 
Amazon S3 No 
Azure Marketplace No 
Chronicle No 
Dropzone AI Yes 
Elastic Observability Yes 
EndaceProbe No 
Exabeam No 
Forcepoint Behavioral Analytics No 
Humio No 
IronNet Collective Defense Platform Yes 
LimaCharlie Yes 
NXLog Yes 
Observe Yes 
Splunk Cloud Platform No 
Tenzir Yes 
ThreatQ No 
Wraith Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

Free
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux Yes 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Corelight

Founded

2013

Country

United States

Website

www.corelight.com

Vendor Details

Company Name

The Zeek Project

Founded

1994

Country

United States

Website

zeek.org

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection No 
High Bandwidth Usage Monitoring No 
Historical Behavior Data No 
Identify High Network Traffic Sources No 
Network Transaction Visibility No 
Stream Data to IDR or Data Lake No 
Traffic Decryption No 

Product Features

Network Monitoring

Bandwidth Monitoring No 
Baseline Manager No 
Diagnostic Tools No 
IP Address Monitoring No 
Internet Usage Monitoring No 
Real Time Analytics No 
Resource Management No 
SLA Monitoring No 
Server Monitoring No 
Uptime Monitoring No 
Web Traffic Reporting No 

Network Security

Access Control No 
Analytics / Reporting No 
Compliance Reporting No 
Firewalls No 
Internet Usage Monitoring No 
Intrusion Detection System No 
Threat Response No 
VPN No 
Vulnerability Scanning No 

Alternatives

NetworkMiner Reviews

NetworkMiner

Netresec

Alternatives

Fidelis Elevate Reviews

Fidelis Elevate

Fidelis Security
Zeek Reviews

Zeek

The Zeek Project
CloudShark Reviews

CloudShark

QA Cafe