Skip to content
Product
Icon-Platform
Platform

Explore the core capabilities of the Cado Platform.

 Icon-Environments
Environments

Discover the broad support that the Cado platform offers.

 Icon-Integrations
Integrations

Learn how the Cado platform integrates into your broader ecosystem.
Solutions
Use Cases
Icon-Cross-Cloud Investigations
Cross Cloud Investigations

Respond to incidents identified in AWS, Azure, and GCP in a single pane of glass.

 Icon-Container-Investigations
Container & K8s Investigations

Perform container investigations in EKS, AKS, GKE, and Kubernetes.

 Icon-Endpoint-Triage
Endpoint Triage

Automate endpoint triage for immediate insights and quick escalation.

 Icon-BEC-Compromise
BEC Investigations

Analyze critical SaaS logs to investigate Business Email Compromise.

 Icon-Incident-Containment
Cloud Detection & Response (CDR)

Marry threat detection with forensic context to expedite response.

Icon-Incidident-Response Preparedness-II
Incident Response Preparedness

Continuously assess and optimize your incident response program.
Cado For
DFIR
SOC
MSSPs
Partners
Government
Resources
Icon-Report
All Resources

Explore Cado Security's entire content library.

 Icon-Blog
Blog

Timely commentary from the Cado Security team.

 Icon-Playbook
Playbooks

Best practices for investigating and responding to threats.

Icon-Cheat-Sheet
Cheat Sheets

Quick tips for investigating and responding to incidents.

 Icon-News
News

The latest Cado company announcements, press, and more.

 Icon-Community
Community

Access to our free edition of the Cado platform.

 Icon-documentation
Documentation

Technical documentation on how to best leverage the Cado platform.

 White Paper 80x80
Wiki

Everything you need to know about cloud security and cloud forensics.

Company
Icon-About
About

Learn more about the Cado Security mission, vision, and team.

 Icon-Careers
Careers

Check out current career opportunities at Cado Security.
Get a Demo
    Get a Demo
      curve design on left cloud image

      New Open Source Tool Hunts for APT Activity in the Cloud

      Written by: Jordan Bowen

      More from the blog

      View All Posts
      blog post icon
      Scaling Log Forensics in the Cloud with cloudgrep
      November 10, 2023

      The Problem We built Cado Response to analyse data deeply. We'll happily churn through a 1TB disk image to find the needle...

      Continue Reading
      Product Updates icon
      blog icon Product Updates
      New Features in Cloudgrep: Yara Rules, JSON Output and Log Parsing
      December 5, 2023

      We’ve recently added some new functionality to cloudgrep, the open source tool to search logs in cloud storage. This...

      Continue Reading
      Cloud Investigations icon
      blog icon Cloud Investigations
      Cado Security Unveils Cross Cloud Support to Further Streamline Cloud Incident Response
      June 21, 2022

      The Cado team is excited to announce the release of our cross cloud, enabling security teams to investigate incidents across...

      Continue Reading