We use Corelight sensors in our environment to monitor and alert based off of traffic.
What do you like best about the product?
Being able to enrich data daily as it is ingested and feed that into a log agrigator has been extremly useful. Depoloyments in our environment have also gone smoothly and the price has been fair.
What do you dislike about the product?
One of the few downsides I have noticed is that we have had to write some corelight modules ourselves to properly sort and ingest data.
What problems is the product solving and how is that benefiting you?
Corelight allows us to monitor our internal traffic and alert off of supicious traffic. Without this we would be largely blind in our internal environment to what traffic is going where in any kind of meaningful way.
There are no comments to display