Skip to content
Product
Icon-Platform
Platform

Explore the core capabilities of the Cado Platform.

 Icon-Integrations
Integrations

Learn how the Cado platform integrates into your broader ecosystem.
Solutions
Use Cases
Icon-Cross-Cloud Investigations
Cross Cloud Investigations

Respond to incidents identified in AWS, Azure, and GCP in a single pane of glass.

 Icon-Container-Investigations
Container & K8s Investigations

Perform container investigations in EKS, AKS, GKE, and Kubernetes.

 Icon-Endpoint-Triage
SOC Triage

Automate endpoint triage for immediate insights and quick escalation.

 Icon-BEC-Compromise
SaaS Investigations

Analyze critical SaaS logs to investigate Business Email Compromise.

 Icon-Incident-Containment
Cloud Detection & Response (CDR)

Marry threat detection with forensic context to expedite response.

Icon-Evidence-Preservation
Evidence Preservation

Capture data immediately and preserve it before it disappears.
Cado For
SecOps
Incident Responders
Forensic Teams
MSSPs
Partners
Government
Resources
Icon-Report
All Resources

Explore Cado Security's entire content library.

 Icon-Blog
Blog

Timely commentary from the Cado Security team.

 Icon-Playbook
Playbooks

Best practices for investigating and responding to threats.

Icon-Cheat-Sheet
Cheat Sheets

Quick tips for investigating and responding to incidents.

 Icon-News
News

The latest Cado company announcements, press, and more.

 Icon-Community
Community

Access free tools from Cado Security on GitHub.

 Icon-documentation
Documentation

Technical documentation on how to best leverage the Cado platform.

 White Paper 80x80
Wiki

Everything you need to know about cloud security and cloud forensics.

Company
Icon-About
About

Learn more about the Cado Security mission, vision, and team.

 Icon-Incidident-Response Preparedness-II
Cado Security Labs

The research and development division at Cado Security
Get a Demo
    Get a Demo
      curve design on left cloud image

      New Research Discovers Updated Version of Legion Malware

      Written by: Admin
      -
      Tag(s): Press Coverage

      More from the blog

      View All Posts
      Free Resources icon
      blog icon Free Resources
      Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack
      July 3, 2021

      Yesterday Sophos and Huntress Labs identified that Kaseya, a remote management provider popular with MSPs, was compromised...

      Continue Reading
      Announcements icon
      blog icon Announcements
      Intelligence Driven Cloud Incident Response with Cado Response and SophosLabs Intelix
      February 22, 2022

      By Daniel Hunt and Chris Doman In the cloud, security incidents happen fast. But defenders can move even faster. In Cloud...

      Continue Reading
      Incident Response Preparedness icon
      blog icon Incident Response Preparedness
      Incident Response: Why Preparation is the Key to Cyber Resilience
      April 17, 2025

      Organizations face increasingly sophisticated cyber threats that can disrupt operations, compromise data integrity, and...

      Continue Reading