What is Corelight?

Corelight is a network detection and response (NDR) platform that uses Zeek (formerly Bro), an open-source network security monitoring tool, to provide deep network traffic analysis. It transforms network traffic into actionable security insights, helping security teams detect and respond to threats, investigate incidents, and improve their overall security posture. Corelight is commonly used for threat hunting, incident response, and security analytics.