Detection Posture Management Archives - Page 2 of 3

Living off WinRM: Abusing Complexity in Remote Management

Key Context: What Is LOLBAS Anyway? LOLBAS (Living Off The Land Binaries, Scripts, and Libraries) are legitimate Windows tools and binaries that attackers abuse to perform malicious actions without using custom malware. One of the

Detection Pitfalls You Might Be Sleeping On

Detection engineering isn’t just about finding bad behavior. It’s about understanding how attackers appear normal—on accident or by design. Some of the most successful evasion techniques don’t involve zero-days or encryption. They rely on you writing

The Analyst Who Cried Malware: Rethinking False Positives and Alert Fatigue

False positives aren’t just annoying. They’re corrosive. Every unnecessary alert chips away at the analyst’s attention span. Every poorly designed rule teaches the SOC to distrust its own tools. Every noisy detection makes it harder

Closing the Gaps in Linux Auditing & Detection Strategies

Linux systems are often overlooked when setting up security auditing and threat detection strategies. The main reason is that Linux auditing is far less explored by the security community than Windows auditing. A survey done

CardinalOps Solution Brief: Detection Posture Management

CardinalOps Detection Posture Management automates detection engineering processes and continuously expands your MITRE ATT&CK coverage, ensuring you detect the threats that matter most.

Detection, Evasion, and the Pursuit of Immutable Artifacts

You’re probably familiar with the classic thought experiment: If a tree falls in a forest and no one is around to hear it, does it make a sound? In cybersecurity, we can ask a similar

SANS 2024 Detection and Response Survey – Transforming Cybersecurity Operations: AI, Automation, and Integration in Detection and Response

Download the SANS 2024 Detection and Response Survey to discover insights from cybersecurity professionals on navigating today’s detection and response challenges. Key findings include:

CardinalOps Case Study: Repsol Increases SOC Efficiency and Productivity While Fixing Detection Gaps

See how Repsol, one of the world’s largest energy companies, integrated CardinalOps into their security operations and helped to optimize their SOC with automation, enhanced speed, and accuracy. With CardinalOps, Repsol SecOps significantly increased its

CardinalOps Case Study: Global Bank Takes Control of their Detection Posture

See how one of the world’s largest banks leveraged the CardinalOps platform to automate their MITRE ATT&CK mapping and maximize their detection coverage and fidelity. The multinational financial services organization was able to gain visibility

Enhancing Cyber Defense Through Automated Security Control Assessment (ASCA)

A chaotic threat landscape and rapidly changing attack techniques has organizations facing increased pressure to deal with persistent threats by developing and deploying new security controls and being able to identify and manage misconfigured controls.

CardinalOps Now Available for Purchase on the CrowdStrike Marketplace

CardinalOps, the leading detection posture management company, today announced that its CardinalOps Platform for Falcon® LogScale and CardinalOps TI-Ops for Falcon® Adversary Intelligence Premium are now available for purchase in the CrowdStrike Marketplace.

Detection Posture Management: Reduce your organization’s exposure to threats

Even the best, most mature security teams must plan for worst-case scenarios – when an attack has slipped past their defensive and preventative technologies and becomes a threat. Detection is the last line of defense