Cybersecurity and Infrastructure Security Agency

ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines

cset

Cybersecurity Evaluation Tool

decider

A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.

untitledgoosetool

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

LME

Logging Made Easy (LME) is a no-cost and open logging and protective monitoring solution serving all organizations.

vulnrichment

A repo to conduct vulnerability enrichment.

dotgov-data

Official list of .gov domains

ScubaGoggles

SCuBA Security Configuration Baselines and assessment tool for Google Workspace

parsnip

manage.get.gov

A Django-based domain name registrar used by the .gov domain to communicate with an EPP registry

CSAF

CISA CSAF Security Advisories

cyhy_amis

AWS infrastructure for Cyber Hygiene and BOD 18-01 scanning

kali-packer

This project can be used to create AMIs based on Kali Linux, a penetration testing distribution.

guacamole-packer

Create machine images containing the Guacamole remote desktop gateway

nessus-packer

Create machine images containing the Nessus vulnerability scanner

windows-commando-vm-packer

Windows Commando VM Packer

teamserver-packer

Create an AMI with CobaltStrike and related tools.

windows-server-packer

cyhy-system

Cyber Hygiene system and overall documentation/issue tracking

freeipa-server-packer

Create a Fedora-based AMI with FreeIPA server installed.

XFD

CyHy Dashboard

guacscanner

Scan for EC2 instances added (removed) from a VPC and create (destroy) the corresponding Guacamole connections.

skeleton-packer

A skeleton project for quickly getting a new cisagov packer project started.

ansible-role-xfce-cool

Install Xfce and customize it for use within the COOL

openvpn-packer

Creates machine images for use as an OpenVPN gateway

pca-gophish-composition-packer

Create machine images that include cisagov/pca-gophish-composition

publish-egress-ip-lambda

A Lambda function that scans a set of AWS accounts and publishes file(s) (to an S3 bucket) containing the public IP addresses of EC2 instances or Elastic IPs that have been properly tagged

ansible-role-cyhy-runner

An Ansible role for installing cisagov/cyhy-runner.

egress-assess-packer

Create an AMI with the Egress-Assess egress data detection tool.

assessor-workbench-packer

Create an AMI with the Assessor Workbench and related tools.