Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How to Benchmark Your Threat Hunting Readiness and Prepare for the Next Step

Aug 26, 2022 By Corelight In Corelight
Many organizations want to start threat hunting but struggle with knowing where to begin, how to measure success, and how to scale an effective program. This presentation draws on the experience of elite hunters and teams around the world and will discuss an actionable threat hunting maturity model and help you prepare for each step of the journey with specific guidance, concrete examples, and sample threat hunts.
View Video

Network Forensics & Incident Response with Open Source Tools

Aug 26, 2022 By Corelight In Corelight
Open source security technologies such as Zeek, Suricata, and Elastic can deliver powerful network detection and response capabilities, and the global communities behind these tools can also serve as a force multiplier for security teams, such as accelerating their response times to zero-day exploits via community-driven detection engineering and intel sharing. This presentation will review popular open source technologies used in network DFIR and cover use cases, integrations, and open source design patterns.
View Video
Corelight

Detecting CVE-2022-30216: Windows Server Service Tampering

Aug 9, 2022 By Corelight Labs Team In Corelight

In July 2022, Microsoft disclosed a vulnerability in the Windows Server Service that allows an authenticated user to remotely access a local API call on a domain controller, which triggers an NTLM request. This results in a leak of credentials that allows an attacker to authenticate to Active Directory Certification Services (ADCS) and to generate a client certificate that enables remote code execution on a domain controller.

Read Post

How to Make Progress on the Zero Trust Road Map

Aug 5, 2022 By Corelight In Corelight
It's been a year since President Biden's executive order that called out zero trust as a primary focus. Corelight's Richard "Chit" Chitamitre discusses the prevalent misunderstandings about zero trust, as well as use cases for how to embrace the framework and make measurable progress along the way. In this video interview, in partnership with Information Security Media Group, you will learn.
View Video

Raspberry Pi Sensors for Home Networks

Aug 5, 2022 By Corelight In Corelight
Is your IoT dryer transferring 1GB+ of traffic daily? Does your Tesla phone home to the mothership? Is your employer monitoring you at home? Learn a quick, easy, free method for using a Raspberry Pi to gain visibility into your home network. We'll teach you to find out what your smart (and not-so-smart) devices are doing using ZeekⓇ logs and Suricata alerts–two flagship open-source technologies–skills transferable to your day job and enterprise environments.
View Video

Integrating Open NDR To Automate Alert Response Via Better Network Evidence

Aug 1, 2022 By Corelight In Corelight
Are you interested in context for your cloud or container environment when you investigate an event from last week, last month, or last year? Would it save you time to have IDS alerts that include the full context of the connection? Watch this SANSFIRE 2022 webcast and to see James Schweitzer demonstrate easy to understand, interlinked network evidence, available wherever you need it and which also enables orchestration.
View Video

SANS 2022 Threat Hunting Survey - Hunting for a Standard Methodology for Threat Hunting Teams

Jul 27, 2022 By Corelight In Corelight
We’ll also look at the past two years to see if global economic impacts have caused any industry changes that give us cause to rethink our approach to threat hunting.. Key topics will include operationalizing threat hunting, innovative threat hunting tactics and techniques, and new tools that can help threat hunting for both endpoints and networks.
View Video

Break Threat Patterns with Complete Visibility Across all Your Data

Jul 27, 2022 By Corelight In Corelight
Master threat hunting practices to resolve incidents before they impact mission critical assets Learn about threat hunting for all roles and skill levels from CrowdStrike, Humio and Corelight. Learn how modern log management helps quickly identify the root cause of an issue. Get tips on what to look for and best courses of action for prevention and remediation — resolving incidents before they impact your mission critical assets.
View Video
Corelight

The best cybersecurity defense is great evidence

Jul 19, 2022 By Jean Schaffer In Corelight

The saying “data is king” has been around for quite a while and we all know that the world operates and makes decisions on digital data 24x7x365. But, is data king in the field of cybersecurity? I believe that evidence - not data - is what is needed to speed defenders’ knowledge and response capabilities, so let's talk about both.

Read Post
Corelight

The evidence bank: leveraging security's most valuable asset

Jun 30, 2022 By Bernard Brantley In Corelight

Evidence is the currency cyber defenders use to pay down security debt, balancing the value equation between adversaries and the enterprise. Defenders can use evidence proactively, identifying and protecting structural risks within our zone of control. Evidence can also be used reactively by supporting detection (re)engineering, response, and recovery activities, guiding us back to identifying and protecting structural risks.

Read Post

Copyright © 2026 OpsMatters™. All rights reserved.