Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

Corelight InvestigatorNetworkMiner2 of 3 products

Side-by-side comparison of Corelight Investigator, NetworkMiner
Product	Corelight Investigator by Corelight View product	NetworkMiner by NetworkMiner View product
Overview
What it is	Looking for Network Security software? Corelight Investigator by Corelight provides entity tracking for Incident Investigation. Compare features and alternatives.	NetworkMiner offers host-centric PCAP parsing and automated file and artifact extraction. Use it for network digital forensic analysis. See Network Security alternatives.
Product type	Cloud-Native Network Detection and Response (NDR)	Network Forensic Analysis Tool & Passive Packet Investigator
Best for	Enterprise Security Operations, Banking, Tech, Healthcare, Public	Cybersecurity, Incident Response, Digital Forensics, Defense, Law Enforcement
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	SaaSCloud	Cloud
Deployment details	Cloud (SaaS); Sensor-Backed Analytics; Cloud SaaS; Sensor-backed network analytics	Standalone Software; Open Source / Commercial; Standalone Windows Software / Linux Mono Executable
Data residency	US; EU; Global	Local Host Machine Only (No Cloud Telemetry)
Key features
What it offers	Cloud-native NDR Zeek network telemetry MITRE ATT&CK threat detections Entity tracking Rapid network query pivots NDR Network Security Threat Detection	Host-centric PCAP parsing Automated file and artifact extraction Passive OS fingerprinting Credential harvesting from PCAP Passive network sniffing Network digital forensic analysis Passive host and OS fingerprinting PCAP file and artifact reconstruction
Platform & access
API access	API access: yes	API access: no
Single sign-on (SSO)	SSO: yes	SSO: no
Role-based access (RBAC)	RBAC: yes	RBAC: no
Multi-tenant	Multi-tenant: yes	Multi-tenant: no
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	Corelight SensorsAWSAzureGCPOn-premises Networks	PCAP Packet CapturesNetwork InterfacesLive Ethernet Streams
Compliance	SOC 2 Type IIISO 27001GDPRHIPAA	GPLv2 (Open Source Edition)ISO 27037 Digital Evidence Principles
Integrations & coverage
Integrations	Corelight SensorsCrowdStrike FalconMicrosoft SentinelSplunk	Wireshark PCAP/PCAPNG formatsNetworkMiner ProSnort/Suricata PCAPs
Industries	Enterprise Security OperationsBankingTechHealthcarePublic	CybersecurityIncident ResponseDigital ForensicsDefenseLaw Enforcement
Regions	GlobalUSEU	Global
Vendor
Company	Corelight	NetworkMiner
Headquarters	San Francisco, California, USA	Sweden
Company size	201-500	1-10
Founded	2013	2007

Corelight Investigator

by Corelight

View product

NetworkMiner

by NetworkMiner

View product

Overview

What it is

Corelight Investigator

Looking for Network Security software? Corelight Investigator by Corelight provides entity tracking for Incident Investigation. Compare features and alternatives.

NetworkMiner

NetworkMiner offers host-centric PCAP parsing and automated file and artifact extraction. Use it for network digital forensic analysis. See Network Security alternatives.

Product type

Corelight Investigator

Cloud-Native Network Detection and Response (NDR)

NetworkMiner

Network Forensic Analysis Tool & Passive Packet Investigator

Best for

Corelight Investigator

Enterprise Security Operations, Banking, Tech, Healthcare, Public

NetworkMiner

Cybersecurity, Incident Response, Digital Forensics, Defense, Law Enforcement

Pricing

Pricing model

Corelight Investigator

Contact Vendor

NetworkMiner

Contact Vendor

Free trial

Corelight Investigator

NetworkMiner

Deployment

Deployment options

Corelight Investigator

SaaSCloud

NetworkMiner

Cloud

Deployment details

Corelight Investigator

Cloud (SaaS); Sensor-Backed Analytics; Cloud SaaS; Sensor-backed network analytics

NetworkMiner

Standalone Software; Open Source / Commercial; Standalone Windows Software / Linux Mono Executable

Data residency

Corelight Investigator

US; EU; Global

NetworkMiner

Local Host Machine Only (No Cloud Telemetry)

Key features

What it offers

Corelight Investigator

Cloud-native NDR
Zeek network telemetry
MITRE ATT&CK threat detections
Entity tracking
Rapid network query pivots
NDR
Network Security
Threat Detection

NetworkMiner

Host-centric PCAP parsing
Automated file and artifact extraction
Passive OS fingerprinting
Credential harvesting from PCAP
Passive network sniffing
Network digital forensic analysis
Passive host and OS fingerprinting
PCAP file and artifact reconstruction

Platform & access

API access

Corelight Investigator

NetworkMiner

Single sign-on (SSO)

Corelight Investigator

NetworkMiner

Role-based access (RBAC)

Corelight Investigator

NetworkMiner

Multi-tenant

Corelight Investigator

NetworkMiner

Mobile app

Corelight Investigator

NetworkMiner

Supported platforms

Corelight Investigator

Corelight SensorsAWSAzureGCPOn-premises Networks

NetworkMiner

PCAP Packet CapturesNetwork InterfacesLive Ethernet Streams

Compliance

Corelight Investigator

SOC 2 Type IIISO 27001GDPRHIPAA

NetworkMiner

GPLv2 (Open Source Edition)ISO 27037 Digital Evidence Principles

Integrations & coverage

Integrations

Corelight Investigator

Corelight SensorsCrowdStrike FalconMicrosoft SentinelSplunk

NetworkMiner

Wireshark PCAP/PCAPNG formatsNetworkMiner ProSnort/Suricata PCAPs

Industries

Corelight Investigator

Enterprise Security OperationsBankingTechHealthcarePublic

NetworkMiner

CybersecurityIncident ResponseDigital ForensicsDefenseLaw Enforcement

Regions

Corelight Investigator

GlobalUSEU

NetworkMiner

Global

Vendor

Company

Corelight Investigator

Corelight

NetworkMiner

Headquarters

Corelight Investigator

San Francisco, California, USA

NetworkMiner

Sweden

Company size

Corelight Investigator

201-500

NetworkMiner

1-10

Founded

Corelight Investigator

2013

NetworkMiner

2007