Corelight Network Detection and Response Platform Overview

This document is a technical report detailing the Corelight Network Detection and Response (NDR) platform, specifically designed for public sector organizations. It outlines the platform's capabilities in real-time traffic monitoring across IT and OT networks, emphasizing its ability to uncover threats before they impact critical systems. The report describes how the platform strengthens ransomware defenses, automates malware detection, and supports compliance with NERC CIP standards. It highlights features such as anomaly detection in operational technology protocols, behavioral analytics for operational disruption risks, and enhanced incident response capabilities. The document also discusses the platform's integration with existing security tools and its flexible deployment options, ensuring compatibility with various infrastructures. Additionally, it presents the benefits of using Corelight's NDR platform, including improved visibility, streamlined operations, and enhanced security for ICS/OT devices and protocols. Overall, the report serves as a comprehensive guide for understanding the functionalities and advantages of the Corelight NDR platform in safeguarding public sector networks.