NSA Cybersecurity Directorate

NSA Cybersecurity Directorate's repositories

Windows-Secure-Host-Baseline

Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber

Language:HTMLNOASSERTION1538 210 62

WALKOFF

A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber

Language:PythonNOASSERTION1191 91 136

goSecure

An easy to use and portable Virtual Private Network (VPN) system built with Linux and a Raspberry Pi. #nsacyber

Language:PythonNOASSERTION971 81 5

Mitigating-Web-Shells

Guidance for mitigation web shells. #nsacyber

Language:YARANOASSERTION951 58 7

GRASSMARLIN

Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber

Language:JavaNOASSERTION910 109 28

Event-Forwarding-Guidance

Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

Language:PowerShellNOASSERTION840 97 10

Hardware-and-Firmware-Security-Guidance

Guidance for the Spectre, Meltdown, Speculative Store Bypass, Rogue System Register Read, Lazy FP State Restore, Bounds Check Bypass Store, TLBleed, and L1TF/Foreshadow vulnerabilities as well as general hardware and firmware security guidance. #nsacyber

Language:CNOASSERTION747 74 10

ELITEWOLF

OT security monitoring #nsacyber

NOASSERTION560 26 2

Windows-Event-Log-Messages

Retrieves the definitions of Windows Event Log messages embedded in Windows binaries and provides them in discoverable formats. #nsacyber

Language:C#NOASSERTION392 57 18

Mitigating-Obsolete-TLS

Guidance for mitigating obsolete Transport Layer Security configurations. #nsacyber

Language:PowerShellNOASSERTION269 34 6

nsacyber.github.io

NSA Cybersecurity. Formerly known as NSA Information Assurance and the Information Assurance Directorate

Language:PowerShellCC0-1.0257 70 2

AppLocker-Guidance

Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber

Language:PowerShellNOASSERTION204 40 3

HIRS

Trusted Computing based services supporting TPM provisioning and supply chain validation concepts. #nsacyber

Language:JavaNOASSERTION171 28 344

simon-speck

The SIMON and SPECK families of lightweight block ciphers. #nsacyber

NOASSERTION167 27 1

unfetter

Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber

NOASSERTION163 25 21

BAM

The Binary Analysis Metadata tool gathers information about Windows binaries to aid in their analysis. #nsacyber

Language:PythonNOASSERTION146 9 12

WALKOFF-Apps

WALKOFF-enabled applications. #nsacyber

Language:YARACC0-1.0141 33 6

RandPassGenerator

A command-line utility for generating random passwords, passphrases, and raw keys. #nsacyber

Language:JavaNOASSERTION118 120

BitLocker-Guidance

Configuration guidance for implementing BitLocker. #nsacyber

Language:HTMLNOASSERTION113 190

HTTP-Connectivity-Tester

Aids in discovering HTTP and HTTPS connectivity issues. #nsacyber

Language:PowerShellNOASSERTION96 17 20

serial2pcap

Converts serial IP data, typically collected from Industrial Control System devices, to the more commonly used Packet Capture (PCAP) format. #nsacyber

Language:PythonNOASSERTION65 150

PRUNE

Logs key Windows process performance metrics. #nsacyber

Language:C#NOASSERTION62 11 9

paccor

The Platform Attribute Certificate Creator can gather component details, create, sign, and validate the TCG-defined Platform Credential. #nsacyber

Language:JavaApache-2.053 7 58

Blocking-Outdated-Web-Technologies

Guidance for blocking outdated web technologies. #nsacyber

Language:PowerShellNOASSERTION51 130

Detect-CVE-2017-15361-TPM

Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber

Language:PowerShellNOASSERTION49 15 2

Driver-Collider

Blocks drivers from loading by using a name collision technique. #nsacyber

Language:CNOASSERTION45 50

simon-speck-supercop

Fast implementations of the SIMON and SPECK lightweight block ciphers for the SUPERCOP benchmark toolkit. #nsacyber

Language:CNOASSERTION43 140

Cyber-Challenge

Supporting files for cyber challenge exercises. #nsacyber

Language:Jupyter NotebookNOASSERTION39 120

Chinese-State-Sponsored-Cyber-Operations-Observed-TTPs

Supporting files for the Chinese State-Sponsored Cyber Operations: Observed TTPs Cybersecurity Advisory. #nsacyber

NOASSERTION34 70

CodeGov

Creates a code.gov code inventory JSON file based on GitHub repository information. #nsacyber

Language:PowerShellNOASSERTION22 80