zakig7

kte

Test & Compare different Kubernetes security offerings on EKS, GKE and AKS

Hunting-Queries-Detection-Rules

KQL Queries. Microsoft Defender, Microsoft Sentinel

strelka

Real-time, container-based file scanning at enterprise scale

aws-customer-security-incidents

A repository of breaches of AWS customers

sshamble

SSHamble: Unexpected Exposures in SSH

bullfrog

Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows

terraform-pr-commenter

A GitHub Action that adds opinionated comments to a PR from Terraform fmt/init/plan output

bandit

Bandit is a tool designed to find common security issues in Python code.

cdk-nag

Check CDK applications for best practices using a combination of available rule packs

nbconvert

Jupyter Notebook Conversion

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

grype

A vulnerability scanner for container images and filesystems

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

secured-bastion-host-terraform

This project provides and example of how you can use the combination of AWS Systems Manager Session Manager and Amazon EC2 Instance Connect to securely connect to an Amazon Elastic Compute Cloud (Amazon EC2) bastion host without exposing any inbound ports to the public internet or using long-lived SSH keys.

GraphRunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

avoiding-data-disasters

awesome-macadmin-tools

🕶 Awesome Mac Admin Tools list

EDR-Telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

Insider-Threat

Creating a resource to help build and manage an Insider Threat program.

insiders

Archive of Potential Insider Threats

insider-threat-ttp-kb

The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders in the IT environment. It will establish an Insider Threat TTP Knowledge Base, built upon data collected on insider threat incidents and lessons learned and experience from the ATT&CK knowledge base.

panther-analysis

Built-in Panther detection rules and policies

data_hacking

Data Hacking Project

ir-rescue

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

grr

GRR Rapid Response: remote live forensics for incident response

xzbot

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

stride-gpt

An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

aws-automated-incident-response-and-forensics

cartography

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.