CardinalOps, the detection posture management company, is sponsoring a live SANS webinar to help today’s Security Operations teams implement a risk-based detection strategy to address modern threats and a quickly expanding attack surface.
Download the 2023 SOC Survey from the SANS Institute to gain insights from active SOC managers and analysts around best practices for running a SOC.
Phil Neray, VP of Cyber Defense Strategy at CardinalOps suggests adding “Cybersecurity First Principles: A Reboot of Strategy and Tactics” by Rick Howard to your summer reading list. You’ll get a practitioner’s point-of-view on security principles.
Michael Mumcuoglu, CEO & co-founder of CardinalOps, explores critical questions facing security operations center (SOC) leaders charged with supporting their organization’s migration to a cloud operation model and their digital transformation initiatives.
Tel Aviv Stock Exchange has deployed the CardinalOps platform to identify and remediate missing, broken, and noisy detections, enabling a proactive, threat-informed defense tied to the risks most relevant to them.
Enables financial services firm to operationalize MITRE ATT&CK with Splunk and eliminate detection coverage gaps based on organizational risk and priorities.
Join us on June 13 for a webinar hosted with SANS. With survey data from active SOC managers and analysts, this webcast will cover the 6th edition of the SANS 2023 SOC Survey.
Join us on June 20 at 3:30 pm EDT for this SANS webinar. SecOps experts discuss major challenges for the modern Security Operations Center and how to operationalize MITRE ATT&CK to build a threat-informed defense.
The CardinalOps security research team collaborates with MITRE to strengthen ATT&CK, describing new ways in which adversary groups like LAPSUS$ hijack corporate email systems such as Office 365, Microsoft Exchange, and Google Workspace.
CardinalOps contributes to the latest version of MITRE ATT&CK, providing recommended detections in the native query languages for Splunk, Microsoft Sentinel, IBM QRadar and Sumo Logic, to combat cyber adversaries abusing email rules during attacks.
Ransomware threat actors target energy companies due to significant profits and a high number of remote access connections that can be exploited via weak or stolen credentials or VPN vulnerabilities.
Adversaries are hijacking corporate email systems such as Office 365 by abusing email transport rules. Learn how these sophisticated attacks work, plus how to detect them in Splunk, Microsoft Sentinel, IBM QRadar & Sumo Logic.