Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Corelight offers the advantages of Zeek without the complications associated with Linux, network interface card issues, or the risk of packet loss. Setting it up is a matter of minutes rather than an extensive timeline, allowing your skilled personnel to focus on threat hunting instead of resolving technical glitches. This robust platform, rooted in open-source technology, provides you with full access to your metadata, enabling customization and extension of your capabilities, all while being part of an engaging community. We have assembled a top-tier team of Zeek specialists and contributors, supported by a world-class customer care team that consistently impresses clients with their exceptional expertise and quick response times. With the proactive and secure Corelight Dynamic Health Check feature activated, your Corelight Sensor transmits performance data back to Corelight, allowing for the early detection of potential issues like disk failures or unusual performance metrics. This ensures that your network remains secure and operationally efficient at all times. Ultimately, Corelight empowers organizations to safeguard their networks with confidence and efficiency.

Description

Elevate your threat hunting and IT security operations with advanced querying and remote response functionalities. Safeguard against ransomware with file protection, automatic recovery solutions, and behavioral analytics designed to thwart ransomware and boot record intrusions. Intercept X integrates deep learning technology, utilizing artificial intelligence to identify both known and unknown malware without depending on signatures. Block attackers by preventing the exploits and methods they use to spread malware, steal credentials, and evade detection. A highly skilled team of threat hunters and response specialists proactively takes decisive actions to neutralize even the most advanced threats on your behalf. Additionally, active adversary mitigation ensures the prevention of persistence on systems, offers protection against credential theft, and enhances the detection of malicious traffic, further strengthening your security posture. With these robust features, organizations can significantly increase their resilience against evolving cyber threats.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Azure Marketplace
Blackpoint Cyber
BrightGauge
Chronicle
Cybraics
Devo
EndaceProbe
Exabeam
Forcepoint Trusted Gateway System
Gigamon
Humio
OctoXLabs
Palo Alto Networks DNS Security Service
Panaseer
Pillr
Proofpoint Emerging Threat (ET) Intelligence
Sophos Cloud Optix
Splunk SOAR
Swimlane
ThreatQ

Integrations

Azure Marketplace
Blackpoint Cyber
BrightGauge
Chronicle
Cybraics
Devo
EndaceProbe
Exabeam
Forcepoint Trusted Gateway System
Gigamon
Humio
OctoXLabs
Palo Alto Networks DNS Security Service
Panaseer
Pillr
Proofpoint Emerging Threat (ET) Intelligence
Sophos Cloud Optix
Splunk SOAR
Swimlane
ThreatQ

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

$28 per user per year
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Corelight

Founded

2013

Country

United States

Website

www.corelight.com

Vendor Details

Company Name

Sophos

Founded

1985

Country

United States

Website

www.sophos.com/en-us/products/endpoint-antivirus.aspx

Product Features

Network Traffic Analysis (NTA)

Anomalous Behavior Detection
High Bandwidth Usage Monitoring
Historical Behavior Data
Identify High Network Traffic Sources
Network Transaction Visibility
Stream Data to IDR or Data Lake
Traffic Decryption

Product Features

Endpoint Detection and Response (EDR)

Behavioral Analytics
Blacklisting/Whitelisting
Continuous Monitoring
Malware/Anomaly Detection
Prioritization
Remediation Management
Root Cause Analysis

Endpoint Protection

Activity Log
Antivirus
Application Security
Behavioral Analytics
Device Management
Encryption
Signature Matching
Web Threat Management
Whitelisting / Blacklisting

Alternatives

NetworkMiner Reviews

NetworkMiner

Netresec

Alternatives

Fidelis Elevate Reviews

Fidelis Elevate

Fidelis Security
Zeek Reviews

Zeek

The Zeek Project