Skip to content
Product
Icon-Platform
Platform

Explore the core capabilities of the Cado Platform.

 Icon-Environments
Environments

Discover the broad support that the Cado platform offers.

 Icon-Integrations
Integrations

Learn how the Cado platform integrates into your broader ecosystem.
Solutions
Use Cases
Icon-Cross-Cloud Investigations
Cross Cloud Investigations

Respond to incidents identified in AWS, Azure, and GCP in a single pane of glass.

 Icon-Container-Investigations
Container & K8s Investigations

Perform container investigations in EKS, AKS, GKE, and Kubernetes.

 Icon-Endpoint-Triage
Endpoint Triage

Automate endpoint triage for immediate insights and quick escalation.

 Icon-BEC-Compromise
SaaS Investigations

Analyze critical SaaS logs to investigate Business Email Compromise.

 Icon-Incident-Containment
Cloud Detection & Response (CDR)

Marry threat detection with forensic context to expedite response.

Icon-Evidence-Preservation
Evidence Preservation

Capture data immediately and preserve it before it disappears.
Cado For
DFIR
SOC
MSSPs
Partners
Government
Resources
Icon-Report
All Resources

Explore Cado Security's entire content library.

 Icon-Blog
Blog

Timely commentary from the Cado Security team.

 Icon-Playbook
Playbooks

Best practices for investigating and responding to threats.

Icon-Cheat-Sheet
Cheat Sheets

Quick tips for investigating and responding to incidents.

 Icon-News
News

The latest Cado company announcements, press, and more.

 Icon-Community
Community

Access to our free edition of the Cado platform.

 Icon-documentation
Documentation

Technical documentation on how to best leverage the Cado platform.

 White Paper 80x80
Wiki

Everything you need to know about cloud security and cloud forensics.

Company
Icon-About
About

Learn more about the Cado Security mission, vision, and team.

 Icon-Careers
Careers

Check out current career opportunities at Cado Security.

 Icon-Incidident-Response Preparedness-II
Cado Security Labs

The research and development division at Cado Security
Get a Demo
    Get a Demo
      curve design on left

      Posts by Chris Doman

      blog post featured image
      blog icon Featured Post | Product Updates

      What's New in the Cado Platform Q1 2024 Recap

      April 23, 2024

      Over the past quarter, the Cado team has been hard at work bringing new features and enhancements to the Cado platform. Here's an overview...

      Continue Reading
      cloud image
      blog post icon
      Resources for DFIR Professionals Responding to WhisperGate Malware
      January 17, 2022

      Overview On Saturday January 15th, Microsoft released a blog titled “Destructive malware targeting Ukrainian organizations”....

      Continue Reading
      Research & Threat Intel icon
      blog icon Research & Threat Intel
      The Continued Evolution of Abcbot
      December 21, 2021

      A new version of a malicious shell script targeting insecure cloud instances running under Cloud Service Providers such as...

      Continue Reading
      Research & Threat Intel icon
      blog icon Research & Threat Intel
      Analysis of Novel Khonsari Ransomware Deployed by the Log4Shell Vulnerability
      December 14, 2021

      By Matt Muir Overview As previously reported, a recently-discovered critical vulnerability (CVE-2021-44228) in Apache’s...

      Continue Reading
      Research & Threat Intel icon
      blog icon Research & Threat Intel
      Analysis of Initial In The Wild Attacks Exploiting Log4Shell/Log4J/CVE-2021-44228
      December 13, 2021

      Introduction Log4J is an open-source logging platform running on Java and built-in to many web platforms. Public reports of...

      Continue Reading
      blog post icon
      Links to Previous Attacks in UAParserJS Compromise
      October 23, 2021

      A very popular npm library called UAParser was compromised this week. The author of the library, Faisal Salman, said: “I...

      Continue Reading
      Free Resources icon
      blog icon Free Resources
      Azure OMI Vulnerability OMIGOD (CVE-2021-38647) Now Under Exploitation
      September 17, 2021

      Azure users running Linux virtual machines are at risk of compromise unless they upgrade now. A vulnerable piece of...

      Continue Reading