By Vern Paxson, creator of Zeek (Bro) and co-founder of Corelight Having worked on Zeek (Bro) for well over two decades now, it’s hugely gratifying – and frankly still somewhat amazing – to see how widely it is used in today’s enterprises. Zeek’s real-time analysis capabilities, extensible scripting, community-contributed packages, and rich, detailed logs clearly […]
Author Archives: Vern Paxson
Finding Very Damaging Needles in Very Large Haystacks
By Vern Paxson, Chief Scientist at Corelight Some of the most costly security compromises that enterprises suffer manifest as tiny trickles of behavior hidden within an ocean of other site activity. Finding such incidents, and unraveling their full scope once detected, requires far-ranging network visibility, such as provided by Corelight Sensors, or, more broadly, the […]