Skip to content
CardinalOps
  • Platform

    Platform

    • Threat Coverage Platform
    • Agentic Fleet
  • Use Cases

    Use Cases

    • Map all your detections to MITRE ATT&CK
    • Gain new detections to address critical gaps
    • Identify and fix broken detection rules
    • Pinpoint root causes of noisy rules
    • Continuous Threat Exposure Management (CTEM)
    • Operationalize threat intelligence
    • Measure the depth of ATT&CK coverage
    • Assess and improve your detection posture
    • Embed Detection Engineering into AI SOC
    • Manage detection posture across multiple SIEMs
  • Integrations
  • ROI & Pricing
  • Company

    Company

    • Who we are

      Meet the leadership team, advisors, investors, and mission that drive us forward.

    • Why work here

      Big challenges need big thinkers. Are you up to it?

    • Careers

      Your opportunity to make a difference … for our customers, the world, and yourself.

    • Security & Compliance

      We value the privacy and security of your data.

  • Resources

    Resources

    • Blog
    • Newsroom
    • Webinars & Events
    • White Papers
    • Videos
  • Contact Us
  • Book a Demo
HOME Resources
  • Blog
  • Newsroom
  • Webinars & Events
  • White Papers
  • Videos
  • SIEM Detections for Okta PassBleed (Splunk, Microsoft Sentinel, IBM QRadar, Sumo Logic)

    SIEM Detections for Okta PassBleed (Splunk, Microsoft Sentinel, IBM QRadar, Sumo Logic)

    Summary This blog post summarizes new password stealing and impersonation risks recently discovered for Okta, along with recommended SIEM detection rules and associated MITRE ATT&CK techniques for SIEM solutions including Splunk, Microsoft Sentinel, IBM QRadar,

  • Splunk and other SIEM detections for Follina, a clever MS-Office 0-day

    Splunk and other SIEM detections for Follina, a clever MS-Office 0-day

    Summary This blog post summarizes Follina, an RCE zero-day discovered in Microsoft Office. It provides recommended detections in the native query languages for Splunk, Microsoft Sentinel, IBM QRadar, and Sumo Logic, along with associated MITRE

  • Dr. Anton Chuvakin answers questions about SIEM, EDR, and XDR — from our recent SANS webinar on the future of SIEM

    Dr. Anton Chuvakin answers questions about SIEM, EDR, and XDR — from our recent SANS webinar on the future of SIEM

    Dr. Anton Chuvakin Discusses “20 Years of SIEM – What’s Next?” Learn what Dr. Anton Chuvakin, Head of Security Solution Strategy at Google Cloud and former Gartner Research VP, has to say about questions like:

  • Spring into action (with SIEM detection rules for Spring4shell)

    Spring into action (with SIEM detection rules for Spring4shell)

    Spring into action (with SIEM detection rules for Spring4shell) The Spring Framework is an open source application framework that provides infrastructure support for developing Java applications. The framework can be used by any Java application

  • Lapsus$ vs the world: SIEM detection rules with ATT&CK mapping

    Lapsus$ vs the world: SIEM detection rules with ATT&CK mapping

    Image credit: World of Dictionary A new player has entered the game The ”Lapsus$” group, unknown before December 2021, has made multiple headlines in recent weeks, following multiple data breaches in big companies such as

  • McKinsey Forecasts Rapid Growth in Security Automation Investments

    McKinsey Forecasts Rapid Growth in Security Automation Investments

    COVID-19 crisis shifts #cybersecurity priorities and budgets. In addition to allowing employees to access the corporate network from home, this McKinsey & Company article, reviewing some of the top impacts and spending hot spots, indicates that in 2021 #CISOs will continue

Previous Page
1 2

Never Miss Another Threat

CardinalOps’ Agentic Detection Engineering represents a fundamental shift in how detection engineering operates. Instead of relying solely on manual effort, it introduces a coordinated system of specialized AI agents that optimize the entire detection lifecycle and fly alongside human detection engineers.

Detection teams can scale without adding headcount. Alert fatigue gives way to signal clarity. Detection lifecycle management becomes streamlined instead of sprawling. Feedback from the SOC finally closes the loop to create better detections over time. 

See it for yourself.

Book a Demo
CardinalOps

Optimize your cyber defense with AI-powered detection engineering.

  • Platform
  • Use Cases
  • Integrations
  • Company
  • Resources

© 2026 CardinalOps

Privacy Policy | Terms & Conditions | Security & Compliance