jordi-gilabert-tf

lolcerts

A repository of code signing certificates known to have been leaked or stolen, then abused by threat actors

Incident-Playbook

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

vulnerability-Checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

awesome-threat-detection

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

CVE-Half-Day-Watcher

tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

ALFA

ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit logs using statistics and the MITRE ATT&CK Cloud Framework

Low-Regret-Methodology

managed-kubernetes-auditing-toolkit

All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.

flan

A pretty sweet vulnerability scanner

awesome-kubernetes-threat-detection

A curated list of resources about detecting threats and defending Kubernetes systems.

IAMSpy