Tactical briefing: PHP2Shell detections and network evidence
Oct 23, 2026 10am PST / 1pm EST / 6pm BST
Zee Kallab
Principal Technical Account Manager
Yacin Nadji
Lead Security Researcher
Ed Smith
Director, Customer Advocacy
About the event
Join Corelight for a technical briefing on the PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, and the network detections developed through Corelight’s pre-disclosure research collaboration. We’ll discuss how the released Zeek® behavioral detection and Suricata® signature detections can help security teams identify suspicious activity, and what network visibility is needed to use them.
Key benefits of attending
- How the PHP2Shell detections identify suspicious HTTP activity
- How behavioral and signature detections provide complementary signals
- What the detections require from HTTP visibility, and where to find the published detection details
Gartner® and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose
The team is readily available for any question or concern. They are network security professionals who know what they are doing
Cybersecurity Engineer – Healthcare
Gartner® and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose
I like that there was minimal management of the policies that was needed to get great coverage.
Information Technology Specialist – Manufacturing
Gartner® and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose
Exceptional product and product support. Functionality and UI/UX is easy to grasp. Utility of the product is usable instantly.
Cybersecurity Specialist – Government
Gartner® and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose
It performs well at line speeds and the resulting metadata is highly valuable in triaging suspicious activities.
R&D Lead for Cybersentry – Government
Gartner® and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose
The feature set is amazing, the set up was easy (easy-ish!) and it just WORKS.
Director, IT Security and Risk Management – Government