Legion malware expands scope to target AWS CloudWatch monitoring tool

Cloud Investigations

Attacking the Cloud: cloud-init as a persistence mechanism

September 8, 2022

This is the first in a new series of articles from Cado Labs focusing on offensive techniques in the cloud. For this entry,...

Continue Reading

Cloud DFIR

Scaling Log Forensics in the Cloud with cloudgrep

November 10, 2023

The Problem We built Cado Response to analyse data deeply. We'll happily churn through a 1TB disk image to find the needle...

Continue Reading

Cloud DFIR

Minimizing Permissions for Cloud Forensics: A Practical Guide to Tightening Access in the Cloud

September 24, 2024

In the rapidly evolving landscape of cloud computing, organizations face a critical challenge: how to maintain tight...

Continue Reading