Pinned Repositories
AttackingAndDefendingTheGCPMetadataAPI
This repo gives an overview of some GCP metadata API attack and defend patterns
cloud-custodian
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
cloudbuild-sa-activity
Identify anonymous CloudBuild service account activity.
fun-cloudbuild
Cloudbuild fun
gcp-iam-sentinel-examples
terraform-google-forseti
A Terraform module for installing Forseti on GCP
cloud-custodian
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
gcploit
These are tools we released with our 2020 defcon/blackhat talk https://www.youtube.com/watch?v=Ml09R38jpok
allisonis's Repositories
allisonis/gcp-iam-sentinel-examples
allisonis/fun-cloudbuild
Cloudbuild fun
allisonis/AttackingAndDefendingTheGCPMetadataAPI
This repo gives an overview of some GCP metadata API attack and defend patterns
allisonis/cloud-custodian
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
allisonis/cloudbuild-sa-activity
Identify anonymous CloudBuild service account activity.
allisonis/terraform-google-forseti
A Terraform module for installing Forseti on GCP