Accelerate threat detection and response

Corelight Open Network Detection and Response combines rich network telemetry with world-class endpoint and threat intelligence from CrowdStrike to detect breaches across environments. Leveraging CrowdStrike Falcon® Intelligence, Corelight correlates detection rules and indicators of compromise (IOCs) with observed network behavior, resulting in Zeek evidence, Suricata alerts, selective packet captures, and extracted files which can then be pushed to SIEMs, log management systems, and analysis tools.

1. 01

   Security for every device

   Radically improve network detection coverage, especially for high-value assets, unmanaged devices, cloud and IoT

2. 02

   Accelerate response and enable hunting

   Correlate alerts with comprehensive evidence and endpoint insights for breadth and context

3. 03

   Unified threat intelligence

   Leverage Falcon Intelligence Premium detections and IOCs across endpoints and networks to simplify and amplify threat detection