Corelight Uses Gen AI to Power Smarter Threat Detection

SaaS Enhancements Aim to Boost Network Detection, Response for Small Security Teams Michael Novinson (MichaelNovinson) • July 28, 2025

Attackers are using generative AI to deploy sophisticated techniques previously limited to elite hackers such as living off the land or lateral movement, said Corelight CEO Brian Dye.

See Also: Beyond Replication & Versioning: Securing S3 Data in the Face of Advanced Ransomware Attacks

The San Francisco-based network detection and response provider has used gen AI for natural language translation of alerts, enabling analysts to understand security events even if they’re not experts in the underlying technologies, Dye said. Corelight also offers payload summarization and investigation guidance, helping junior analysts act with the confidence and efficiency of more seasoned professionals (see: Corelight's Brian Dye on NDR's Role in Defeating Ransomware).

"Even we think about some of our customers' biggest problems like living off the land and lateral movement, those ...