Repositories list

• Deployment-Templates

  Public
  Contains a copy of the Terraform deployment templates for Cado Response

  HCL

  •

  Other

  •11 fork•22 stars•00 issues•00 pull requests•Updated May 5, 2026May 5, 2026

• api-reference

  Public
  The documentation reference for the Cado platform's RESTful API.

  HTML

  •00 forks•11 star•00 issues•00 pull requests•Updated May 5, 2026May 5, 2026

• product-help

  Public
  Product help and user guides

  JavaScript

  •66 forks•55 stars•00 issues•88 pull requests•Updated Apr 28, 2026Apr 28, 2026

• cloudgrep

  Public
  cloudgrep is grep for cloud storage

  searchawscloud+ 8

  searchawscloudazureaws-s3gcpgrepaws-securitycloud-securityazure-security+ 1

  Python

  •

  Apache License 2.0

  •2020 forks•329329 stars•00 issues•00 pull requests•Updated Mar 14, 2026Mar 14, 2026

• gcp-setup

  Public
  Scripts to aid in automating setup of GCP environment to support acquisition by Cado

  Shell

  •00 forks•11 star•00 issues•00 pull requests•Updated Sep 18, 2025Sep 18, 2025

• cado-api-examples

  Public
  Code examples for integrate with Cado API

  apicado-security

  apicado-security

  00 forks•33 stars•00 issues•00 pull requests•Updated Jul 30, 2025Jul 30, 2025

• libfsxfs

  Public
  Fork of libfsxfs library

  C

  •

  GNU Lesser General Public License v3.0

  •22 forks•00 stars•00 issues•00 pull requests•Updated Dec 19, 2024Dec 19, 2024

• CloudAndContainerCompromiseSimulator

  Public
  Simulates a compromise in a cloud and container environment

  kubernetesawssecurity+ 9

  kubernetesawssecuritycloud-securitycloud-forensicskubernetes-securitycloudforensicsdocker-forensicskubernetes-forensicsaws-forensics+ 2

  Shell

  •

  Apache License 2.0

  •99 forks•3434 stars•00 issues•00 pull requests•Updated Dec 18, 2024Dec 18, 2024

• CadoSecurityLabs

  Public
  00 forks•00 stars•00 issues•00 pull requests•Updated Dec 6, 2024Dec 6, 2024

• varc

  Public archive
  Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when invest…

  awssecurityaws-lambda+ 11

  awssecurityaws-lambdaforensicsdfirhacktoberfestmemory-forensicscloud-securityaws-fargatedfir-automation+ 4

  Python

  •

  GNU General Public License v3.0

  •1414 forks•254254 stars•00 issues•44 pull requests•Updated Nov 18, 2024Nov 18, 2024

• yara-example

  Public
  GNU General Public License v3.0

  •11 fork•00 stars•00 issues•00 pull requests•Updated Nov 14, 2024Nov 14, 2024

• cado-poc-eks-cluster

  Public
  Easily create a simple EKS cluster for testing EKS acquisition in the Cado platform.

  kubernetesekseksctl+ 2

  kubernetesekseksctlcado-securitycado

  Shell

  •00 forks•11 star•00 issues•00 pull requests•Updated Oct 7, 2024Oct 7, 2024

• Engineering-Career-Ladder

  Public
  The Engineering Career Ladder for Cado Security

  Creative Commons Zero v1.0 Universal

  •11 fork•44 stars•00 issues•00 pull requests•Updated Oct 25, 2023Oct 25, 2023

• masked-ai

  Public archive
  Masked Python SDK wrapper for OpenAI API. Use public LLM APIs securely.

  Python

  •

  Apache License 2.0

  •1515 forks•122122 stars•22 issues•00 pull requests•Updated Mar 30, 2023Mar 30, 2023

• kape-wannacry

  Public
  An example collection of a system infected with WannaCry then collected with KAPE (Kroll Artifact Parser And Extractor)

  Apache License 2.0

  •00 forks•33 stars•00 issues•00 pull requests•Updated Mar 27, 2023Mar 27, 2023

• auto_ec2_lambda

  Public
  AWS Lambda function to continuously, automatically capture EC2 systems into Cado Platform

  Python

  •00 forks•00 stars•00 issues•00 pull requests•Updated Dec 19, 2022Dec 19, 2022

• cado-tines-stories

  Public
  Tines Stories with Cado Platform

  00 forks•00 stars•00 issues•00 pull requests•Updated Nov 1, 2022Nov 1, 2022

• docker-forensics-example-data

  Public
  Malicious Docker Images from https://unit42.paloaltonetworks.com/malicious-cryptojacking-images/

  C

  •

  Apache License 2.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated Nov 1, 2022Nov 1, 2022

• deprecated-free-tools

  Public archive
  Old tools for the community. No longer supported by Cado Security.

  00 forks•11 star•00 issues•00 pull requests•Updated Oct 11, 2022Oct 11, 2022

• ctf-lambda-containers

  Public
  00 forks•22 stars•00 issues•00 pull requests•Updated Sep 27, 2022Sep 27, 2022

• Awesome-Fargate-ECS-EKS-Security-Tools-and-Guides

  Public
  Awesome Fargate & ECS & EKS Security Tools and Guides

  aws-ecsaws-eksaws-ecs-fargate+ 4

  aws-ecsaws-eksaws-ecs-fargateaws-fargate-applicationaws-eks-clusteraws-ecs-capacity-provideraws-ecs-service

  33 forks•66 stars•00 issues•00 pull requests•Updated Apr 13, 2022Apr 13, 2022

• DFIR_Resources_Industroyer2

  Public
  IoCs and YARA rules for Industroyer2

  YARA

  •

  Apache License 2.0

  •11 fork•77 stars•00 issues•00 pull requests•Updated Apr 12, 2022Apr 12, 2022

• wiper_feb_2022

  Public
  Detects Wiper seen in Ukraine 23rd Feb 2022

  malwareyara-ruleshermetic-wiper+ 1

  malwareyara-ruleshermetic-wiperisaac-wiper

  00 forks•11 star•00 issues•00 pull requests•Updated Feb 25, 2022Feb 25, 2022

• guardduty-lambda-cado

  Public
  Go straight from Guard Duty alerts to Automated Investigations in AWS with Cado Response

  aws-lambdaaws-securitysoar+ 4

  aws-lambdaaws-securitysoaraws-security-automationguarddutyaws-guarddutyaws-security-hub

  Python

  •

  Apache License 2.0

  •11 fork•55 stars•00 issues•00 pull requests•Updated Feb 8, 2022Feb 8, 2022

• rip_raw

  Public archive
  Rip Raw is a small tool to analyse the memory of compromised Linux systems.

  securityforensicsdfir+ 3

  securityforensicsdfirforensic-analysismemory-forensicsdfir-automation

  Python

  •

  Apache License 2.0

  •1616 forks•132132 stars•00 issues•00 pull requests•Updated Jan 31, 2022Jan 31, 2022

• content

  Public
  Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always wel…

  Python

  •

  MIT License

  •1.9k1.9k forks•00 stars•00 issues•00 pull requests•Updated Jan 19, 2022Jan 19, 2022

• DFIR_Resources_Whispergate

  Public
  Resources for DFIR Professionals Responding to the Whispergate

  malwaremalware-analysismalware-research+ 1

  malwaremalware-analysismalware-researchwhispergate

  C#

  •11 fork•1010 stars•00 issues•00 pull requests•Updated Jan 17, 2022Jan 17, 2022

• log4shell

  Public
  Content to help the community responding to the Log4j Vulnerability Log4Shell CVE-2021-44228

  vulnerabilitycvelog4shell

  vulnerabilitycvelog4shell

  Apache License 2.0

  •11 fork•11 star•00 issues•00 pull requests•Updated Dec 11, 2021Dec 11, 2021

• Cado-Batch

  Public archive
  A Batch script to collect forensic evidence from older Windows systems

  Batchfile

  •

  Apache License 2.0

  •22 forks•22 stars•00 issues•00 pull requests•Updated Sep 13, 2021Sep 13, 2021

• AWS_EKS_Cluster_Forensics

  Public
  AWS EKS Cluster Forensics

  awssecurityincident-response+ 11

  awssecurityincident-responsedfiramazon-web-servicesekseksctleks-rolescloud-forensicseks-security+ 4

  44 forks•2323 stars•00 issues•00 pull requests•Updated Aug 16, 2021Aug 16, 2021