olegzhr

olegzhr's Stars

• 6mile/DevSecOps-Playbook

  This is a step-by-step guide to implementing a DevSecOps program for any size organization

  1.9k317

• crowdsecurity/crowdsec

  CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

  Language:Go9k467

• scipag/vulscan

  Advanced vulnerability scanning with Nmap NSE

  Language:Lua3.5k666

• Sysinternals/SysmonForLinux

  Language:C1.7k184

• SophosRapidResponse/OSQuery

  Language:YARA7929

• Hestat/ossec-sysmon

  A Ruleset to enhance detection capabilities of Ossec using Sysmon

  Language:PowerShell8522

• NextronSystems/APTSimulator

  A toolset to make a system look as if it was the victim of an APT attack

  Language:Batchfile2.5k428

• mitre-attack/attack-arsenal

  A collection of red team and adversary emulation resources developed and released by MITRE.

  Language:PowerShell49177

• palantir/alerting-detection-strategy-framework

  A framework for developing alerting and detection strategies for incident response.

  676119

• yeti-platform/yeti

  Your Everyday Threat Intelligence

  Language:Python1.7k287

• NUKIB/misp

  Docker image for MISP

  Language:Python11546

• 0x4D31/awesome-threat-detection

  ✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

  3.8k656

• coolacid/docker-misp

  A (nearly) production ready Dockered MISP

  Language:Shell23095

• aws-solutions/automated-security-response-on-aws

  Automated Security Response on AWS is an add-on solution that works with AWS Security Hub to provide a ready-to-deploy architecture and a library of automated playbooks. The solution makes it easier for AWS Security Hub customers to resolve common security findings and to improve their security posture in AWS.

  Language:Python389109

• sbousseaden/EVTX-ATTACK-SAMPLES

  Windows Events Attack Samples

  Language:HTML2.2k398

• 4auvar/VulnNodeApp

  A vulnerable node.js application

  Language:JavaScript3875

• OTRF/OSSEM

  Open Source Security Events Metadata (OSSEM)

  Language:Python1.2k214

• cloud-custodian/cloud-custodian

  Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

  Language:Python5.4k1.5k

• Cyb3r-Monk/Threat-Hunting-and-Detection

  Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

  Language:Jupyter Notebook63499

• jthuraisamy/SysWhispers

  AV/EDR evasion via direct system calls.

  Language:Assembly1.8k265

• iann0036/former2

  Generate CloudFormation / Terraform / Troposphere templates from your existing AWS resources.

  Language:JavaScript2.2k269

• aws-solutions/aws-waf-security-automations

  This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.

  Language:Python857364

• miztiik/url-filtering-with-nw-firewall

  Deploy a firewall that should allow or drop traffic based on customisable rules

  Language:Python32

• prowler-cloud/prowler

  Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

  Language:Python10.8k1.5k

• sullo/nikto

  Nikto web server scanner

  Language:Perl8.6k1.2k

• panther-labs/panther-analysis

  Built-in Panther detection rules and policies

  Language:Python339174

• aws-samples/amazon-guardduty-waf-acl

  AWS GD2ACL

  Language:Python5641

• aws-samples/aws-security-hub-workshop

  A Workshop for AWS Security Hub Integration, Prioritization, and Response

  7143

• aws-samples/siem-on-amazon-opensearch-service

  A solution for collecting, correlating and visualizing multiple types of logs to help investigate security incidents.

  Language:Python580191

• perryk/ansible-role-nginx-modsec3-crs3

  Ansible role for Installing Nginx, compiling ModSecurity3, and installing the OWASP CRS v3 ruleset

  Language:Jinja1010