Corelight

@corelight_inc

Corelight transforms network data into definitive evidence, powering AI-driven detection and expert-authored workflows, and enabling the AI SOC ecosystem.

San Francisco and Columbus

corelight.com

Replies Reposts Media

Pinned
Corelight
@corelight_inc
Aug 31
Effective agentic triage requires moving beyond black-box AI to deliver complete inspectability at every step of an investigation. In Episode 16 of Corelight DefeNDRs, Richard Bejtlich and Dave Getman discuss how Corelight Investigator synthesizes millions of network log lines
00:00
Corelight
@corelight_inc
1h
Exploit windows are collapsing, putting more pressure on SOC teams to determine what is actively being exploited right now. AI-powered defense starts with model-ready network evidence, multi-layered threat detection, and agentic workflows that help analysts distinguish immediate
Corelight
@corelight_inc
23h
Mythos-class models automate software exploitation at machine speed, and the time-to-exploit window has collapsed from months to hours. Defending against Mythos-class models requires unedited network evidence to power machine-speed detection, triage, and root-cause analysis.
Corelight
@corelight_inc
Sep 3
Modern SOC workflows rely on structured network telemetry to sharpen visibility and speed up investigations. Visit @corelight_inc at Booth S3 from Sept. 14 to 16 at Splunk .conf2026 to see how high-fidelity network evidence powers modern investigation workflows. Co-Founder Greg
GIF
Corelight
@corelight_inc
Sep 2
Data moves across networks every day. Defenders still have to determine when that movement deserves investigation. Transfer volume, destinations, timing, and protocol behavior help defenders recognize suspicious data movement before relying on indicators alone. Explore how