Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Corelight Detection Collections by Corelight View product | NetworkMiner by NetworkMiner View product |
|---|---|---|
| Overview | ||
| What it is | Corelight Detection Collections offers curated network detection rules and behavioral analytics. Use it for Network Behavior Analysis. See Threat Detection alternatives. | NetworkMiner offers host-centric PCAP parsing and automated file and artifact extraction. Use it for network digital forensic analysis. See Network Security alternatives. |
| Product type | Curated Network Threat Detection & Analytics Rules | Network Forensic Analysis Tool & Passive Packet Investigator |
| Best for | Enterprise SOC, Financial, Defense, Government, Healthcare | Cybersecurity, Incident Response, Digital Forensics, Defense, Law Enforcement |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | Cloud |
| Deployment details | Software Rule Packages; Sensor Integration; Software rule packages; Sensor-native execution | Standalone Software; Open Source / Commercial; Standalone Windows Software / Linux Mono Executable |
| Data residency | Customer Network / On-premises / Cloud VPCs | Local Host Machine Only (No Cloud Telemetry) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: no |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Corelight SensorsZeekSuricataSplunkSentinel | PCAP Packet CapturesNetwork InterfacesLive Ethernet Streams |
| Compliance | SOC 2 Type IIISO 27001FIPS 140-2 | GPLv2 (Open Source Edition)ISO 27037 Digital Evidence Principles |
| Integrations & coverage | ||
| Integrations | Corelight SensorsSplunkMicrosoft SentinelCrowdStrikeElastic | Wireshark PCAP/PCAPNG formatsNetworkMiner ProSnort/Suricata PCAPs |
| Industries | Enterprise SOCFinancialDefenseGovernmentHealthcare | CybersecurityIncident ResponseDigital ForensicsDefenseLaw Enforcement |
| Regions | GlobalUSEU | Global |
| Vendor | ||
| Company | Corelight | NetworkMiner |
| Headquarters | San Francisco, California, USA | Sweden |
| Company size | 201-500 | 1-10 |
| Founded | 2013 | 2007 |
Overview
What it is
Corelight Detection Collections
Corelight Detection Collections offers curated network detection rules and behavioral analytics. Use it for Network Behavior Analysis. See Threat Detection alternatives.NetworkMiner
NetworkMiner offers host-centric PCAP parsing and automated file and artifact extraction. Use it for network digital forensic analysis. See Network Security alternatives.Product type
Corelight Detection Collections
Curated Network Threat Detection & Analytics RulesNetworkMiner
Network Forensic Analysis Tool & Passive Packet InvestigatorBest for
Corelight Detection Collections
Enterprise SOC, Financial, Defense, Government, HealthcareNetworkMiner
Cybersecurity, Incident Response, Digital Forensics, Defense, Law EnforcementPricing
Pricing model
Corelight Detection Collections
Contact VendorNetworkMiner
Contact VendorFree trial
Corelight Detection Collections
Free trial: yesNetworkMiner
Free trial: yesDeployment
Deployment options
Corelight Detection Collections
NetworkMiner
Deployment details
Corelight Detection Collections
Software Rule Packages; Sensor Integration; Software rule packages; Sensor-native executionNetworkMiner
Standalone Software; Open Source / Commercial; Standalone Windows Software / Linux Mono ExecutableData residency
Corelight Detection Collections
Customer Network / On-premises / Cloud VPCsNetworkMiner
Local Host Machine Only (No Cloud Telemetry)Key features
What it offers
Corelight Detection Collections
- Curated network detection rules
- Behavioral analytics
- MITRE ATT&CK mapping
- C2 beacon detection
- DNS tunneling defense
- NDR
- Threat Detection
- Security Analytics
NetworkMiner
- Host-centric PCAP parsing
- Automated file and artifact extraction
- Passive OS fingerprinting
- Credential harvesting from PCAP
- Passive network sniffing
- Network digital forensic analysis
- Passive host and OS fingerprinting
- PCAP file and artifact reconstruction
Platform & access
API access
Corelight Detection Collections
API access: yesNetworkMiner
API access: noSingle sign-on (SSO)
Corelight Detection Collections
SSO: yesNetworkMiner
SSO: noRole-based access (RBAC)
Corelight Detection Collections
RBAC: yesNetworkMiner
RBAC: noMulti-tenant
Corelight Detection Collections
Multi-tenant: yesNetworkMiner
Multi-tenant: noMobile app
Corelight Detection Collections
Mobile app: noNetworkMiner
Mobile app: noSupported platforms
Corelight Detection Collections
NetworkMiner
Compliance
Corelight Detection Collections
NetworkMiner
Integrations & coverage
Integrations
Corelight Detection Collections
NetworkMiner
Industries
Corelight Detection Collections
NetworkMiner
Regions
Corelight Detection Collections
NetworkMiner
Vendor
Company
Corelight Detection Collections
CorelightNetworkMiner
NetworkMinerHeadquarters
Corelight Detection Collections
San Francisco, California, USANetworkMiner
SwedenCompany size
Corelight Detection Collections
201-500NetworkMiner
1-10Founded
Corelight Detection Collections
2013NetworkMiner
2007