What is Corelight Agent Builder Library and Natural Language Query?

Network detection and response is a kind of security product that watches network traffic for abnormal behaviour instead of relying only on known attack signatures. Corelight, the maker, says that using AI in security operations is held back by a gap in network expertise and a gap in query-language skills. Its Agent Builder Library is a set of triage playbooks, field explanations, entity-pivoting guides and investigation decision trees that AI agents can follow, which the maker describes as structured, machine-readable blueprints for step-by-step investigation. Natural Language Query lets an analyst ask a plain-English question about network evidence and have it turned into a query for the LogScale log-analysis platform. Corelight announced both on 15 September 2026.

Written from primary sources and reference pages, and checked against them by an independent AI fact-checker. Drafted with AI assistance.