andrewmichaelsmith

nocodb

🔥 🔥 🔥 Open Source Airtable Alternative

gitleaks

Protect and discover secrets using Gitleaks 🔑

sniffnet

Comfortably monitor your Internet traffic 🕵️‍♂️

terraformer

CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code

post-mortems

A collection of postmortems. Sorry for the delay in merging PRs!

steampipe

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

securityonion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, and case management. It also includes other tools such as Playbook, osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

cartography

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

driftctl

Detect, track and alert on infrastructure drift

cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

AWS-SAA-C02-Study-Guide

How to become a certified AWS Solutions Architect

bors-ng

👁 A merge bot for GitHub Pull Requests

botocore

The low-level, core functionality of boto3 and the AWS CLI.

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

repokid

AWS Least Privilege for Distributed, High-Velocity Deployment

whids

Open Source EDR for Windows

monkey365

Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews.

aws-secure-environment-accelerator

The AWS Secure Environment Accelerator is a tool designed to help deploy and operate secure multi-account, multi-region AWS environments on an ongoing basis. The power of the solution is the configuration file which enables the completely automated deployment of customizable architectures within AWS without changing a single line of code.

sadcloud

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure

Signal-TLS-Proxy

leonidas

Automated Attack Simulation in the Cloud, complete with detection use cases.

aws-security-survival-kit

Bare minimum AWS Security Alerting and Configuration

aws-config-resource-schema

AWS Config resource schema define the properties and types of AWS Config resource configuration items (CIs). Resource CI schema are used by developers when performing advanced resource queries and when processing CI data.

s3-account-search

S3 Account Search

infosec-events

List of past and future infosec related events.

CanaryHunter

Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org

cloud-trail-lake-query-samples

canary-utils

Collection of useful Canary tools

modernisation-platform-terraform-baselines

Module for enabling and configuring common baseline services such as SecurityHub • This repository is defined and managed in Terraform

terraform-aws-secure-for-cloud

Terraform module that deploys the Sysdig Secure For Cloud stack in AWS