-
Why NTA? Why NDR? Why Zeek? Why Corelight?
-
Primer of Common Logs
-
Encrypted traffic collection (ETC)
-
Command and control (C2)
-
Using Corelight data for incident response
-
End of course test - score of 70% required to pass
-
Thank You
Foundational Training
Training from the Corelight experts - Estimated Duration: 1.5 hours
Foundational Training from the Zeek, Suricata & Corelight experts
While thousands of organizations around the world use Zeek & Suricata, no one knows Network Detection & Response better than Corelight. Our founders created the open-source project Zeek and have led the effort to extend, improve and scale it over the last 25 years. Now, you can tap Corelight’s expertise to help your organization discover the powerful advantages of Zeek, combined with Suricata, SmartPCAP and Investigator. Whether you’re just getting to know Corelight or you’re an expert optimizing your Corelight deployment, we can help.
This foundational course takes prospective & current customers engaging in incident response, who are new to Zeek, Suricata and Corelight and provides insights into Corelight, our products & platforms. The main purpose of this foundational training is to provide basic orientation to Corelight as well as provide a sampling of modules that are covered in Customer Success paid training courses.