Corelight

Now available on demand, our PHP2Shell tactical briefing covers CVE-2026-109618 and CVE-2026-109619 and how to use Corelight’s open-source detections to investigate suspicious HTTP activity.

Zee Kallab, Yacin Nadji, and Ed Smith walk through the complementary signals from Zeek behavioral detections and Suricata signatures, the HTTP visibility required, and where to find the published detection details.

Watch the briefing 👉 go.corelight.com/tactical-brief…

Testing open-source Zeek packages often stalls when live PCAPs are unavailable, proprietary, or too sensitive to share publicly in code repositories.

BTest frameworks allow developers to validate complex Zeek package logic without sharing raw packet captures by manually raising synthetic events or generating event traces from an unshared PCAP.

Corelight Principal Research Scientist Yacin Nadji demonstrates how handcrafted event records and Zeek event-trace scripts (-E event-trace.zeek) enable PCAP-free unit tests, provided developers manually sanitize sensitive constants from the generated trace script.

Learn how to build PCAP-free BTests for your Zeek packages in Part 2 of the series: corelight.com/blog/the-cure-…

How can network evidence help teams investigate threats? Let’s talk at Black Hat Europe in London 🇬🇧

Meet the Corelight team at booth 630 in the Business Hall on December 9–10 to see how network evidence can help security teams investigate suspicious activity across their environments.

Want to see Corelight in action in the Black Hat Network Operations Center (NOC)? Reach out to our team to schedule a tour.

Register for Black Hat Europe 👉 corelight.com/resources/even…

#BlackHatEurope #Cybersecurity

Bridging the IT/OT visibility divide is critical as cyber threats targeting power grids and energy infrastructure become more complex.

Join Corelight Field CTO Vincent Stoffer and Omdia OT/IoT Cybersecurity Lead Hollie Hennessy on November 12 for a live discussion on protecting modern energy grids. You will learn strategies to eliminate network blind spots, manage compliance requirements, and defend converged IT and OT environments against AI-enabled attacks.

Register for the webinar: go.corelight.com/bridging-it-ot…

Secure information sharing across DHS requires connecting data across components with different missions and operational needs.

Join Corelight Senior Director, Product Management David Getman at the Potomac Officers Club 2026 Homeland Security Summit to examine strategies for federated data architecture and identity management.

David will join government and industry leaders from CISA, DHS, and Databricks for the panel, "One Mission, Many Components: Building a Federated DHS Data and Identity Fabric."

Register for the summit and join us Nov. 10 at 10–11 a.m. ET at The Ritz-Carlton, Tysons Corner in McLean, VA: potomacofficersclub.com/events/2026-ho…