Threatline

CardinalOps will give Cribl customers the ability to map detection rules and security controls to the MITRE ATT&CK framework. SecOps teams can identify coverage gaps and operationalize threat intelligence.

cribl agentic detection engineering cardinalops mitre att&ck framework map detection rules

7 more topics

detection rules security controls secops coverage gaps threat intelligence operationalize threat intelligence deal

Dark Reading

3 years ago

Tel Aviv Stock Exchange Selects CardinalOps to Reduce Risk of Breaches Due to Undetected Attacks

Enables financial services firm to operationalize MITRE ATT&CK with Splunk and eliminate detection coverage gaps based on organizational risk and priorities.

risk tel aviv stock exchange

14 more topics

cardinalops breaches due undetected services firm operationalize mitre att&ck splunk detection coverage gaps priorities

Dark Reading

4 years ago

CardinalOps Launches MITRE ATT&CK Security Layers for Measuring Detection Posture

Enables enterprises to operationalize MITRE ATT&CK and build a multi-layered, threat-informed defense to eliminate gaps based on organizational risk and priorities.

mitre att&ck cardinalops security layers

8 more topics

detection posture enterprises operationalize defense gaps risk priorities

Dark Reading

5 years ago

CardinalOps Raises $17.5M Series A for Threat Coverage Optimization

CardinalOps takes on the challenge of identifying and remediating riskiest gaps in threat detection coverage, powered by AI and crowd-sourced best practices.

cardinalops threat coverage series optimization

4 more topics

challenge gaps detection practices

Dark Reading

1 year ago

SIEMs Missing the Mark on MITRE ATT&CK Techniques

CardinalOps' report shows that organizations are struggling to keep up with the evolution of the latest threats while a significant number of detection rules remain non-functional.

siems missing mark mitre att&ck

9 more topics

techniques cardinalops report organizations evolution threats number detection rules

Bleeping Computer

2 years ago

Black Basta ransomware gang linked to Windows zero-day attacks

The Cardinal cybercrime group (Storm-1811, UNC4394), who are the main operators of the Black Basta ransomware, is suspected of exploiting a Windows privilege escalation vulnerability, CVE-2024-26169, before a fix was made available. [...]

CVE-2024-26169coverage

black basta ransomware windows gang

13 more topics

zero-day attacks cardinal cybercrime group storm-1811 unc4394 operators privilege escalation vulnerability cve-2024-26169 fix