https://catalogartifact.azureedge.net/publicartifacts/corelightinc1584998267292.corelight-for-azure-sentinel-38e79f76-f8bb-4712-a0f4-87166456e5ea/image2_corelightspotlightlogogreenblackrgb.png
Corelight for Microsoft Sentinel
por Corelight Inc.
Just a moment, logging you in...
Provides a Corelight Data Connector, Workbooks, and Queries/Rules for Microsoft Sentinel
Corelight for Microsoft Sentinel enables incident responders and threat hunters who use Microsoft Sentinel to work faster and more effectively. Corelight provides a network detection and response (NDR) solution based on best-of-breed open-source technologies, Zeek and Suricata that enables network defenders to get broad visibility into their environments.
The data connector enables ingestion of events from Zeek and Suricata via Corelight Sensors into Microsoft Sentinel. Corelight for Microsoft Sentinel also includes workbooks and dashboards, hunting queries, and analytic rules to help organizations drive efficient investigations and incident response with the combination of Corelight and Microsoft Sentinel.
De un vistazo
https://catalogartifact.azureedge.net/publicartifacts/corelightinc1584998267292.corelight-for-azure-sentinel-38e79f76-f8bb-4712-a0f4-87166456e5ea/image1_CorelightFileWhite1.png
https://catalogartifact.azureedge.net/publicartifacts/corelightinc1584998267292.corelight-for-azure-sentinel-38e79f76-f8bb-4712-a0f4-87166456e5ea/image3_CorelightDNSWhite1.png
https://catalogartifact.azureedge.net/publicartifacts/corelightinc1584998267292.corelight-for-azure-sentinel-38e79f76-f8bb-4712-a0f4-87166456e5ea/image6_CorelightMainWhite1.png