Corey's starred repositories
prowler
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
kube-bench
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
ScoutSuite
Multi-Cloud Security Auditing Tool
kube-hunter
Hunt for security weaknesses in Kubernetes clusters
Azure-Sentinel
Cloud-native SIEM for intelligent security analytics for your entire enterprise.
cloudsploit
Cloud Security Posture Management (CSPM)
tag-security
🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!
Microsoft-Defender-for-Cloud
Welcome to the Microsoft Defender for Cloud community repository
compliance-masonry
Security Documentation Builder
security-policy-templates
A set of policies, standards and control procedures with mapping to HIPAA, NIST CSF, PCI DSS, SOC2, FedRAMP, CIS Controls, and more.
fedramp-automation
FedRAMP Automation
amazon-eks-custom-amis
Amazon EKS custom AMIs based on Amazon Linux 2.
openrmf-docs
Documentation on the OpenRMF application, including scripts to run the whole stack as well as just infrastructure with documentation on using the tool.
security-policy-builder
CLI for generating policies, standards and control procedures (PSP) documentation in Markdown and publishing to JupiterOne or Confluence
blossom-case-study
A case study for ACSAC 2022 utilizing OSCAL with a custom GitHub action to automate assessments.
fedramp-integrated-inventory-workbook
This example shows how you can create a Lambda function to retrieve inventory information to create the integrated inventory spreadsheet which can be used as a separate attachment to the FedRAMP System Security Plan (SSP)
fedramp-ssp
Taking FedRAMP templates to Markdown