Skip to content
Product
Icon-Platform
Platform

Explore the core capabilities of the Cado Platform.

 Icon-Environments
Environments

Discover the broad support that the Cado platform offers.

 Icon-Integrations
Integrations

Learn how the Cado platform integrates into your broader ecosystem.
Solutions
Use Cases
Icon-Cross-Cloud Investigations
Cross Cloud Investigations

Respond to incidents identified in AWS, Azure, and GCP in a single pane of glass.

 Icon-Container-Investigations
Container & K8s Investigations

Perform container investigations in EKS, AKS, GKE, and Kubernetes.

 Icon-Endpoint-Triage
Endpoint Triage

Automate endpoint triage for immediate insights and quick escalation.

 Icon-BEC-Compromise
SaaS Investigations

Analyze critical SaaS logs to investigate Business Email Compromise.

 Icon-Incident-Containment
Cloud Detection & Response (CDR)

Marry threat detection with forensic context to expedite response.

Icon-Evidence-Preservation
Evidence Preservation

Capture data immediately and preserve it before it disappears.
Cado For
DFIR
SOC
MSSPs
Partners
Government
Resources
Icon-Report
All Resources

Explore Cado Security's entire content library.

 Icon-Blog
Blog

Timely commentary from the Cado Security team.

 Icon-Playbook
Playbooks

Best practices for investigating and responding to threats.

Icon-Cheat-Sheet
Cheat Sheets

Quick tips for investigating and responding to incidents.

 Icon-News
News

The latest Cado company announcements, press, and more.

 Icon-Community
Community

Access to our free edition of the Cado platform.

 Icon-documentation
Documentation

Technical documentation on how to best leverage the Cado platform.

 White Paper 80x80
Wiki

Everything you need to know about cloud security and cloud forensics.

Company
Icon-About
About

Learn more about the Cado Security mission, vision, and team.

 Icon-Careers
Careers

Check out current career opportunities at Cado Security.

 Icon-Incidident-Response Preparedness-II
Cado Security Labs

The research and development division at Cado Security
Get a Demo
    Get a Demo
      curve design on left

      Research & Threat Intel

      blog post featured image
      blog icon Featured Post |

      What’s New In The Cado Platform Q3 2024

      November 19, 2024

      As we continue to enhance and expand the capabilities of the Cado platform, Q3 2024 brings a host of updates designed to improve the...

      Continue Reading
      Research & Threat Intel icon
      blog icon Research & Threat Intel
      Abcbot - An Evolution of Xanthe
      January 10, 2022

      Overview Abcbot, the emerging botnet that we recently analyzed and reported on, has a longer history than we first thought....

      Continue Reading
      Research & Threat Intel icon
      blog icon Research & Threat Intel
      The Continued Evolution of Abcbot
      December 21, 2021

      A new version of a malicious shell script targeting insecure cloud instances running under Cloud Service Providers such as...

      Continue Reading
      Research & Threat Intel icon
      blog icon Research & Threat Intel
      Analysis of Novel Khonsari Ransomware Deployed by the Log4Shell Vulnerability
      December 14, 2021

      By Matt Muir Overview As previously reported, a recently-discovered critical vulnerability (CVE-2021-44228) in Apache’s...

      Continue Reading
      Research & Threat Intel icon
      blog icon Research & Threat Intel
      Analysis of Initial In The Wild Attacks Exploiting Log4Shell/Log4J/CVE-2021-44228
      December 13, 2021

      Introduction Log4J is an open-source logging platform running on Java and built-in to many web platforms. Public reports of...

      Continue Reading
      Research & Threat Intel icon
      blog icon Research & Threat Intel
      Cloud Malware Proliferation?
      November 9, 2021

      Recently VX Underground released a toolset they report is from the Conti and BlackMatter ransomware gang: As TeamTNT...

      Continue Reading
      Free Resources icon
      blog icon Free Resources
      Azure OMI Vulnerability OMIGOD (CVE-2021-38647) Now Under Exploitation
      September 17, 2021

      Azure users running Linux virtual machines are at risk of compromise unless they upgrade now. A vulnerable piece of...

      Continue Reading