Case Study: Leading Energy Company boosts internal visibility and threat analysis with Corelight

Publicly-held energy company selects Corelight for better internal visibility & enhanced threat analysis

Leading Energy Company, a publicly held energy company serving millions of customers across the southern United States, needed better internal network visibility and a stronger way to capture and parse DNS and DHCP traffic for enterprise-scale threat analysis. To close a long-standing monitoring gap, the company turned to Corelight and its network visibility platform, including Corelight AP 3000 and AP 1000 sensors.

Corelight deployed sensors across four datacenters and integrated with Splunk UBA to provide richer security data than the company’s previous NTA tool. The result was improved correlation with other security data, support for unplanned use cases such as WPAD validation and incident response investigations, and a better balance between limited flow data and full PCAP capture; the customer also praised Corelight’s knowledgeable, responsive support.