Corelight Announces Microsoft Defender for IoT Integration


Corelight, provider of the iopen network detection and response platform, announced product compatibility with Microsoft Defender for IoT. Corelight is claimed to be the first Microsoft NDR partner to take advantage of Defender for IoT’s cross-industry integration capabilities.

Corelight customers can send data from deployed sensors to Microsoft 365 Defender, and in turn Defender for IoT to apply its behavioural analytics and machine learning techniques to discover and classify devices and to protect, detect, and respond to IoT attacks. This also enables Defender for IoT to apply its global IoT and OT threat intelligence.

“The number of unmanaged systems on the Internet is soaring, and this ever-expanding risk surface is already a target. Unfortunately, most defenders lack the information they need about IoT and OT systems in their environment,” said Greg Bell, co-founder and chief strategy officer, Corelight.

Corelight’s open NDR solution provides full network coverage of on-premise, cloud, and hybrid environments to help security operations teams using Defender for IoT detect and respond to the most challenging attacks. As an open platform, Defender for IoT can use network signal from the company’s sensors for asset discovery, inventory, risk assessment, detection, and mitigation.