Use Case
Container & K8s Investigations
Perform container investigations in Kubernetes environments, including EKS, AKS, and GKE.
Leave No Stone Left Unturned
.png?width=600&name=Cado%20New%20Use%20Case%20Graphics%20R2_Container%20Investigations%201%20(Collage).png)
Full Range Support.
The Cado Platform supports data collection from AWS ECS containers deployed via fargate and Kubernetes container environments in AWS, GCP, and Azure, including the ability to capture distroless / no shell containers. Cado also supports on-prem Kubernetes and OpenShift with Cado Host.
Distroless Containers? No Problem.
Distroless containers are designed for efficiency and security, stripped of standard OS components like shell utilities and package managers, which makes investigating containers highly challenging. Cado has the world's first solution to perform forensic investigations in distroless container environments.
Filesystem Exploration
Cado automatically collects key data sources, including running processes, network connections, as well as key system and log files, which can be explored using Cado's browse disk capability. Cado also uses their previously open-sourced "varc" tool-set to collect memory from individual processes for forensic analysis.
Browse Other Use Cases
Explore other ways security teams are using the Cado Security platform to advance their mission.
Cross Cloud Investigations
Investigate incidents identified in AWS, Azure, and GCP in a single pane of glass.
SOC Triage
Automate triage acquisition of endpoint resources to gain immediate event insights and facilitate quick escalation.
SaaS Investigations
Analyze SaaS logs alongside other critical sources to investigate compromises, such as Business Email Compromise (BEC).
Cloud Detection & Response (CDR)
Marry threat detection with automated forensic collection and investigation to expedite response to cloud threats.
Evidence Preservation
Ensure evidence residing in ephemeral environments is immediately captured and preserved before it disappears.
The Cado Advantage
Cado Security is helping organizations around the world achieve results.
6
x
Faster
When compared to traditional forensics tools
48
+
Hours
Saved on event triage
66
%
Cost Reduction
Associated with investigations
Relevant Blog Posts
The Blog
cloud dfir
Forensic Victory: Catching the Ransomware EDR Couldn't See
February 13, 2025Continue Reading
cloud dfir
Cloud vs. On-Prem Forensics: The Differences You Need to Know
February 11, 2025Continue Reading
cloud dfir
Defining the ‘R’ in CDR: Webinar Highlights and Key Takeaways
February 4, 2025Continue Reading
Ready for more?
Use the Cado Security platform to investigate any system. Anywhere. Anytime.
