Corelight enhances Open NDR to detect AI-driven threats and unknown assets

Corelight expanded its Open NDR platform to add passive asset classification and network performance monitoring using Zeek-based traffic analysis, enabling continuous, agentless identification of devices (including IoT/OT, unmanaged endpoints, and AI services) and anomaly-first performance alerts correlated to service names; the release is positioned to help security teams prioritize and accelerate triage against AI-driven threats by providing real-time asset and performance context for SOC and NOC workflows.