gimbimba Goto Github PK

adaz

:wrench: Deploy customizable Active Directory labs in Azure - automatically.

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

amazon-ssm-agent

An agent to enable remote management of your EC2 instances, on-premises servers, or virtual machines (VMs).

armory

Anvilogic Forge

attack-flow

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

attack-powered-suit

ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, context menus, and ATT&CK Navigator integration.

attack-sync

ATT&CK Sync is a Center for Threat-Informed Defense project that aims to improve the ability for organizations to consume MITRE ATT&CK® version updates into their internal systems and processes.

attack-workbench-frontend

An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository contains an Angular-based web application providing the user interface for the ATT&CK Workbench application.

attackgen

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.

awesome

😎 Awesome lists about all kinds of interesting topics

awesome-cloud-security

A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.

awesome-cloudnative-trainings

Awesome Trainings from Cloud Native Computing Foundation Projects and Kubernetes related software

awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

awesome-honeypots

an awesome list of honeypot resources

awesome-lists

Security lists for SOC detections

awesome-streaming

a curated list of awesome streaming frameworks, applications, etc

awesome-windows-red-team

A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams

aws

VM-Series for Amazon Web Services

aws-customer-playbook-framework

This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.

aws-incident-response-playbooks-workshop

aws_surface_mapping

Projeto desenvolvido para fazer a listagem de portas abertas no firewall de máquinas EC2 de contas AWS

awsattacks

This repo contains IOC, malware and malware analysis associated with AWS cloud

chronicle-detection-rules

Collection of YARA-L 2.0 sample rules for the Chronicle Detection API

cloud-analytics

Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as well as a blueprint for how others can create and use cloud analytics effectively.

cobra-tool

Cloud Offensive Breach and Risk Assessment (COBRA) Tool

cti-blueprints

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

cti-stix2-json-schemas

OASIS TC Open Repository: Non-normative schemas and examples for STIX 2

ddexec

A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.

defending-iaas-with-attack

Defending IaaS with ATT&CK is a project to create a collection of ATT&CK techniques relevant to a Linux IaaS environment, as well as a methodology for creating technique collections.

detection-and-response-pipeline

✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The purpose is to create a reference hub for designing effective threat detection and response pipelines. 👷 🏗