Corelight Software Sensor is a software-based network detection and response solution that can be deployed on existing hardware infrastructure. The sensor parses dozens of network protocols to generate network telemetry for threat hunting and incident response activities. The software sensor is designed for deployment in environments where hardware appliances cannot be installed, including hybrid, multi-cloud, and distributed network architectures. It provides network traffic analysis capabilities across these diverse environments. The sensor includes built-in detection, monitoring, and enrichment capabilities. It processes network traffic to produce actionable telemetry data that security teams can use for analysis. The solution claims to reduce log volume by 50-80% compared to raw network data. The software sensor can be deployed and scaled within minutes on existing infrastructure. It is part of the broader Corelight Open NDR Platform and provides uniform network evidence collection across different deployment scenarios. The sensor generates rich telemetry from network protocol analysis that can be used by security operations teams for investigation and response activities.