Resources Blog

Why MITRE ATT&CK Has Taken Over the SOC World

Leveraging AI and Automation with MITRE ATT&CK to Eliminate Detection Coverage Gaps in Your SOC

SIEM Detections for Okta PassBleed (Splunk, Microsoft Sentinel, IBM QRadar, Sumo Logic)

Splunk and other SIEM detections for Follina, a clever MS-Office 0-day

Enterprise SIEMs Detect Fewer Than 5 of Top 14 MITRE ATT&CK Adversary Techniques Used in the Wild

Dr. Anton Chuvakin answers questions about SIEM, EDR, and XDR — from our recent SANS webinar on the future of SIEM

Spring into action (with SIEM detection rules for Spring4shell)

Lapsus$ vs the world: SIEM detection rules with ATT&CK mapping

How do Russian threat groups avoid "friendly cyber fire"? (TL;DR – By installing a Russian language pack)

What Anton Chuvakin is Saying About SOC Threat Coverage

Why Detection for Log4j Vulnerabilities is Both Important and Difficult

Broken Glam: How healthy is your SIEM?

The Problem You Didn't Know You Had - The Threat Coverage Gap

Cloud Security Engineering - Automation to the Rescue!

SC Magazine Covers CardinalOps Threat Coverage Gap: SIEM Rules Ignore Bulk of MITRE ATT&CK

The Comforting (or Discomforting?) Feeling of Objective Data Validation

"Hello World!" - the CardinalOps Coming Out Party!

CardinalOps Introduces Industry's First Threat Coverage Optimization Platform

Security Engineering: The Next Application for AI-Powered Automation

Applying AI and Automation to a Surprisingly Unaddressed Security Function

Security Products: Missing the 'Out of Box' Experience

Hats Off to MITRE ATT&CK For Continuously Improving the Framework!

McKinsey Forecasts Rapid Growth in Security Automation Investments

It is Time to Mend Our SOCs...and Fix Their Growing Security Holes.