Cloud Investigations

May 11, 2023
At first glance, your XDR seems like an ideal tool to investigate an incident. But an XDR alone can leave you with some serious...
May 8, 2023
Data breaches have become an unfortunate reality of today’s digital landscape. As industries become more regulated,...
May 4, 2023
KAPE (Kroll Artifact Parser And Extractor) and Cado Community Edition are both great free tools for DFIR professionals. You...
April 17, 2023
Previously we released a SIEM export feature which enabled security professionals to export a subset of events collected...
April 13, 2023
Cado Labs researchers recently encountered an emerging Python-based credential harvester and hacktool, named Legion, aimed...
April 6, 2023
When you identify an incident, the clock starts ticking. The business needs answers fast, and if you’re a public company,...
April 1, 2023
Cado Security is the provider of the first cloud forensics and incident response platform. By leveraging the scale and speed...
March 30, 2023
In our previous blog about LLMs (Large Language Models), we introduced the “Interactive Incident Response” feature within...
March 29, 2023
In our recent blog series with Invictus-IR about responding to an attack in AWS, Cado analysts performed an investigation...
March 22, 2023
In the cloud, things are fundamentally different than in an on-premises world. The scale is exponentially larger in terms...