Google Security Operations (SecOps) SIEM offers powerful tools for threat detection, and one of its most valuable features is the use of metrics within YARA-L rules. Metrics allow you to aggregate historical data over extended
See how Repsol, one of the world’s largest energy companies, integrated CardinalOps into their security operations and helped to optimize their SOC with automation, enhanced speed, and accuracy. With CardinalOps, Repsol SecOps significantly increased its
See how one of the world’s largest banks leveraged the CardinalOps platform to automate their MITRE ATT&CK mapping and maximize their detection coverage and fidelity. The multinational financial services organization was able to gain visibility
A chaotic threat landscape and rapidly changing attack techniques has organizations facing increased pressure to deal with persistent threats by developing and deploying new security controls and being able to identify and manage misconfigured controls.
CardinalOps, the leading detection posture management company, today announced that its CardinalOps Platform for Falcon® LogScale and CardinalOps TI-Ops for Falcon® Adversary Intelligence Premium are now available for purchase in the CrowdStrike Marketplace.
Turn real adversary behaviors (TTPs) into actionable detection Organizations are struggling to keep up with an evolving threat landscape and security teams are increasingly burdened with the pressure to build an effective cyber defense against
Download this annual survey from the SANS Institute to gain insights from active SOC managers and analysts around best practices for running a SOC. Key observations include:
In our fourth annual report, CardinalOps set out to gain visibility into the current state of use case development and threat detection coverage in enterprise SOCs. We gathered and analyzed data from production SIEM instances.
Microsoft Azure utilizes blobs to house large amounts of unstructured data. An Azure blob can be configured to be accessed from specific IP addresses only. This is the common configuration and a known best practice
Ivanti’s recent disclosure of a new high-severity flaw in its Connect Secure VPN devices marks the fifth such vulnerability revealed over the past couple of months. This alarming trend sheds light on a broader issue
CEO and Co-Founder of CardinalOps, Michael Mumcuoglu, discusses SOC modernization and internal pressures that are forcing SOC teams to adapt their strategies including expanding attack surfaces and a shortage of well-trained security talent.
Michael Mumcuoglu, CEO and Co-founder of CardinalOps, provides three cybersecurity predictions for 2024 around Generative AI, the SEC cybersecurity disclosure rules, and the increasing impact of national-state sponsored actors.