oodog0126 Goto Github PK

4questionframe

Shostack's 4 Question Frame for Threat Modeling

airiam

Least privilege AWS IAM Terraformer

aksk_tool

AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS管理，RDS/DB管理，域名管理，添加RAM/CAM/IAM账号等

amazon-eks-custom-amis

Amazon EKS custom AMIs based on Red Hat Enterprise Linux, CentOS, Debian, Ubuntu, and Windows.

amazon-guardduty-automated-response-sample

Automated Amazon GuardDuty Security Response

amazon-guardduty-tester

This script is used to generate some basic detections of the GuardDuty service

automated-forensic-orchestrator-for-amazon-ec2

Automated Forensics Orchestrator for Amazon EC2 is a self-service AWS Solution implementation that enterprise customers can deploy to quickly set up and configure an automated orchestration workflow that enables their Security Operations Centre (SOC) to capture and examine data from EC2 instances and attached volumes as evidence for forensic analysis, in the event of a potential security breach. It will orchestrate the forensics process from the point at which a threat is first detected, enable isolation of the affected EC2 instances and data volumes, capture memory and disk images to secure storage, and trigger automated actions or tools for investigation and analysis of such artefacts. All the while, the solution will notify and report on its progress, status, and findings. It will enable SOC to continuously discover and analyze patterns of fraudulent activities across multi-account and multi-region environments. The solution will leverage native AWS services and be underpinned by a highly available, resilient, and serverless architecture, security, and operational monitoring features. Digital forensics is a 4 step process of triaging, acquisition, analysis and reporting. Automated Forensics framework provides capability to enterprise to act on security event by imaging or acquisition of breached resource for examination and generate forensic report about the security breach. In the event of a security breach, it will enable customers to easily to capture and examine required targeted data for forsensic’s storage and analysis. This solution framework enables security operations centre to discover and analyse patterns of fraudulent activities. The automated forensics solution will provide a multi-account and a multi-region [“solution”] built using native AWS services.

awesome-cloud-native-security

awesome resources about cloud native security 🐿

awesome-detection-engineering

A list of useful Detection Engineering-related resources.

awesome-detection-rules

This is a collection of threat detection rules / rules engines that I have come across.

awesome-selfhosted

A list of Free Software network services and web applications which can be hosted on your own servers

aws-allowlister

Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance frameworks.

aws-athena-apache-nginx-access-logs

aws-cli

Universal Command Line Interface for Amazon Web Services

aws-cloud-and-hybrid-operations-workshop

aws-cloudhsm-pkcs11-examples

Sample applications demonstrating how to use the CloudHSM PKCS#11 library

aws-cloudsaga

AWS CloudSaga - Simulate security events in AWS

aws-cloudtrail-analyzer-workshop

Workshop exercise materials for re:Invent 2017 - SID 341: Using AWS CloudTrail Logs for Scalable, Automated Anomaly Detection

aws-config-pci-fsbp-ssmremediations

aws-config-rdk

The AWS Config Rules Development Kit helps developers set up, author and test custom Config rules. It contains scripts to enable AWS Config, create a Config rule and test it with sample ConfigurationItems.

aws-config-resource-schema

AWS Config resource schema define the properties and types of AWS Config resource configuration items (CIs). Resource CI schema are used by developers when performing advanced resource queries and when processing CI data.

aws-config-rules

[Node, Python, Java] Repository of sample Custom Rules for AWS Config.

aws-customer-playbook-framework

This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.

aws-customer-security-incidents

A repository of breaches of AWS customers

aws-cwe-quick-reference

A collection of CloudWatch Event Rules.

aws-eks-best-practices

A best practices guide for day 2 operations, including operational excellence, security, reliability, performance efficiency, and cost optimization.

aws-guardduty-runbook-generator

Generates runbooks for GuardDuty findings

aws-imds-packet-analyzer

aws-incident-response

aws-incident-response-playbooks