Corelight Reviews

Pros

Corelight delivers really strong network telemetry and presents security network events in a way that's much easier to digest. The CrowdStrike integration adds a lot of value by correlating network activity very well and the built-in parsers help make those events much more readable.

Cons

There's definitely some complexity to it so it's not the best fit for a beginner security analyst. On top of that some of the online training stays pretty high level which means you may need personalized training sessions and those can get expensive.