Corelight: Using Threat Intelligence to enhance detection correlation
SOC teams already know how challenging it is to monitor environments for possible compromises, vulnerabilities and the many other threats to an organisation.
Trying to keep on top of the new threats that are being seen in the wild and knowing what to search for and when is pretty much impossible. That's where Threat Intelligence can make a significant positive impact.
Firstly having a third party that is actively searching for new threats, ensuring that organisations are proactively protected, then providing the necessary information to add to tools to ensure these threats can be detected.
Join Matt Ellison at Corelight as we look at how our evidence based threat hunting can be significantly enhanced with the addition of threat intelligence feeds, both open source and commercial and how this can elevate your ability to detect even the newest threats.