#USA #San Francisco #Corelight #Microsoft Defender #NDR Solutions

Corelight Revolutionizes Network Visibility and Threat Response

Corelight, recognized as a leading provider in network detection and response (NDR) solutions, has unveiled a strategic integration with Microsoft Defender for Endpoint and Microsoft Defender Vulnerability Management. This development aims to bolster the capabilities of security operation centers (SOCs) by enhancing network visibility and accelerative threat detection, allowing organizations to effectively combat an increasingly intricate security landscape.

In today's cyber environment, security teams are often inundated with a relentless flow of alerts, making it challenging to maintain a heightened security posture. The SANS Institute highlights that most SOC teams depend on alerts from endpoint security solutions to initiate their incident response. However, the newly established integration with Microsoft Defender provides real-time data that enriches Corelight's logs, enabling security teams to streamline their incident response processes.

Improved Incident Response Efficiency

With the incorporation of Microsoft Defender's data, Corelight facilitates precise risk-based alert prioritization. This enables SOC teams to focus on the most critical vulnerabilities and threats, thereby enhancing their operational efficiency. Todd Wingler, Vice President of Global Alliances and Channels at Corelight, emphasized that this integration assists in alleviating analyst fatigue resulting from inefficiencies within the SOC environment. By utilizing Corelight's advanced network telemetry, security teams can identify unknown systems more effectively, allowing for better inventory management and protection against sophisticated adversaries adept at bypassing traditional endpoint detection and response (EDR) solutions.

Furthermore, Corelight has positioned itself as the only NDR vendor capable of providing real-time enrichment of its network telemetry with endpoint data from leading EDR vendors. This unique capability empowers security teams to conduct streamlined investigations, leading to faster remediation of threats.

Key Highlights of the Integration

1. Enhanced Detection Capabilities: With the integration, Corelight's telemetry enriched with Microsoft Defender's endpoint and vulnerability data equips users with prioritized alerts based on environmental risks, significantly improving threat detection at the point of network observation.

2. Streamlined Incident Response: By enriching Corelight logs with unique device IDs from Microsoft Defender, SOC analysts can seamlessly pivot between network detection and endpoint telemetry, accelerating investigations and streamlining the entire incident response process.

3. Expanded Network Visibility: Corelight's extensive network telemetry allows users to gain enhanced visibility across all devices, including those that are unmanaged or unknown, thereby improving the readiness and effectiveness of security responses.

Alon Rosental, General Manager of Defender for Endpoint at Microsoft, stated, "Integrating EDR and vulnerability management data from Microsoft Defender into Corelight's network sensors empowers analysts to streamline investigations with enriched insights, significantly boosting network security."

Conclusion

The collaboration between Corelight and Microsoft Defender marks a transformative step towards enhancing network visibility and threat detection for organizations of all sizes. By leveraging the integration of these powerful tools, security teams are equipped with the necessary insights to proactively hunt for threats, accelerate incident responses, and ultimately, create a fortified network environment. For further details on how Corelight and Microsoft Defender work together to enhance security, visit Corelight's official website.

Corelight has made significant strides in the realm of cyber security, enabling their global clientele, including Fortune 500 companies, major government entities, and universities, to strengthen their defense mechanisms against cyber threats. As cyber threats continue to evolve, partnerships like these are essential in ensuring a robust response to ever-changing vulnerabilities. If you seek to bolster your organization's security measures, now is the time to explore the advanced solutions offered by Corelight and Microsoft Defender.