This session, Ignition Technology’s CSO Sean Remnant will host Alex Kirk, Global Principal Suricata at Corelight, as they provide a fast-paced and interactive dive into how Corelight gives you next level results for your SIEM.

Corelight is the commercial version of open-source Bro (now Zeek) and is the most powerful network visibility solution available today. Corelight converts network traffic into 50+ highly enriched logs (Zeek, FKA Bro) across 35+ protocols.

Being agnostic to SIEM, Data lake, and analysis tools, Corelight’s open framework is an ideal complement to any IR, MDR, or threat hunting team.

In this session you’ll hear:

• What is Zeek and how it powers Corelight’s data-centric approach to network detection and response
• How Zeek helps you find the problem faster when a security alert fires or you have an incident to investigate
• How integrations allow the export of Corelight’s Zeek logs to Splunk, Elastic, QRadar, Spark or just about any data tool in a matter of minutes

Also, expect to gain insights into what’s driving the market and come armed with your questions… we’ll make time to answer them after the chat.

Don’t miss out – register now.