We use the solution for packet capture sampling. We offer it as part of our managed service. It's so we can identify east-west traffic on a customer's network.

We use the solution to monitor Internet traffic, the data center, and LAN traffic.

We're not using it for our organization. We use it for our customers. We provide a service for incident response, and we use it through that service.

Corelight is a network traffic analysis product. It is an enterprise solution of Zeek and Suricata. It is deployed mostly with physical sensors, although cloud, virtual and software sensors are available as well. We deploy it for our customers, and MSSP.

It is mainly being used for security purposes, and to increase cyber visibility.