KarutisL

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

terratest

Terratest is a Go library that makes it easier to write automated tests for your infrastructure code.

tfsec

Tfsec is now part of Trivy

tflint

A Pluggable Terraform Linter

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

cyberchef-recipes

A list of cyber-chef recipes and curated links

EDRs

Sparrow

Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.

100daysofdevops

Incident-Playbook

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

cset

Cybersecurity Evaluation Tool

Sooty

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

Awesome-CobaltStrike-Defence

Defences against Cobalt Strike

High-Performance-Organizations-Reading-List

Ideas for creating and sustaining high performance organizations

terraform-aws-secure-baseline

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

artifacts

Digital Forensics artifact repository

MicrosoftWontFixList

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

yor

Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.

trailscraper

A command-line tool to get valuable information out of AWS CloudTrail

aws-secure-environment-accelerator

The AWS Secure Environment Accelerator is a tool designed to help deploy and operate secure multi-account, multi-region AWS environments on an ongoing basis. The power of the solution is the configuration file which enables the completely automated deployment of customizable architectures within AWS without changing a single line of code.

CRT

Contact: CRT@crowdstrike.com

Cloud-DevSecOps-Learning

Collection of Cloud and DevSecOps learning resources

aws-incident-response

manuka

A modular OSINT honeypot for blue teamers

Dent

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

logging-essentials

A Windows event logging and collection baseline focused on finding balance between forensic value and optimising retention.

systemd-service-hardening

Basic guide to harden systemd services

attack-guardduty-navigator

A MITRE ATT&CK Navigator export for AWS GuardDuty Findings

s3_objects_check

Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.

cloud-key-rotator

A Golang program to rotate AWS & GCP account keys