Corelight for Microsoft Sentinel enables incident responders and threat hunters who use Microsoft Sentinel to work faster and more effectively. Corelight provides a network detection and response (NDR) solution based on best-of-breed open-source technologies, Zeek and Suricata that enables network defenders to get broad visibility into their environments.