TMCnet News
Cado Security Launches Collection and Analysis Support of SaaS Environments to Expedite Response to Microsoft 365 CompromisesCado Security, provider of the first cloud forensics and incident response platform, today announced that the Cado platform now enables customers to acquire Microsoft 365 Unified Audit Log (UAL) to help investigate and respond to Microsoft 365 compromises such as business email compromise (BEC), account takeover (ATO), and insider threats. With this new feature, security teams can seamlessly analyze UAL logs alongside other critical sources captured across on-prem and cloud environments. "With Microsoft 365's rapid adoption and the ever-increasing amount of critical data being stored on its ecosystems, the rate and scale of attacks should not be surprising," said James Campbell, CEO and Co-Founder of Cado Security. "Overburdened security teams need automated solutions that give them visibility into their organization's entire environment and enable a proactive response to suspicious activity. Our new collection and analysis support of SaaS environments does just that by providing the much-needed tools to quickly identify, investigate, and respond to threats so organizations can continuously strengthen their security posture and prevent future occurrences." Since organizations heavily rely on email for transfer-of-fund requests, BEC is one of the most common and expensive threats to organizations. Attackers employ tactics such as email spoofing and phishing attacks to take over legitimate email accounts and conduct unauthorized money transfers. According to the FBI, BEC cost organizations over $50 billion worldwide between 2013 and 2022. With Cado's new feature, customers can automatically import Microsoft 365 Unified Audit Log (UAL) by timeframe, user, IP, or workload so that security teams can rapidly invstigate and respond to potential M365 threats and gain a deeper understanding of scope and impact using the Cado Security platform. By investigating UAL events alongside other events, such as forensic artifacts of an affected user's workstation in a central platform, security teams can rapidly identify the incident's root cause, whether from a phishing attack or malware infection. The Cado platform enables organizations to perform rapid incident response with the following key capabilities:
For more information, visit https://www.cadosecurity.com/cado-introduces-support-of-saas-environments-to-expedite-response-to-microsoft-365-compromises/. About Cado Security Cado Security provides the first cloud forensics and incident response platform. By leveraging the scale and speed of the cloud, the Cado platform automates forensic-level data capture and processing across cloud, container, and serverless environments. Only Cado empowers security teams to respond at cloud speed. Backed by Eurazeo, Blossom Capital, and Ten Eleven Ventures, Cado Security has offices in the United States and the United Kingdom. For more information, please visit https://www.cadosecurity.com/ and follow us on Twitter @CadoSecurity.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240314327935/en/ |