Curating Falco rules with MITRE ATT&CK Matrix
☆87Mar 7, 2024Updated 2 years ago
Alternatives and similar repositories for falco_extended_rules
Users that are interested in falco_extended_rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Adaptive AWS Zero Trust Policy made easy: Auto-generate least-privilege policies based on user activity in real time! Accelerate the adop…☆76May 3, 2024Updated 2 years ago
- Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).☆91Jan 28, 2024Updated 2 years ago
- Compares and analyzes GCP IAM roles.☆78Mar 9, 2025Updated last year
- Enable Falco to read audit logs from EKS☆11Dec 13, 2020Updated 5 years ago
- A Golang library for interacting with the EPSS (Exploit Prediction Scoring System).☆30Feb 16, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆171Aug 17, 2026Updated 2 months ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 3 years ago
- Falco rule repository☆194Oct 26, 2026Updated last week
- The SaaS CTO Security Checklist Redux, The DevOps Security Checklist, and The Personal Infosec & Security Checklist☆24Jul 9, 2021Updated 5 years ago
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆353Updated this week
- Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix☆59Sep 7, 2023Updated 3 years ago
- 🧰 Multi Tool Kubernetes Pentest Image☆267Mar 30, 2026Updated 7 months ago
- ☆117Oct 8, 2026Updated 3 weeks ago
- Spot all domain controllers in a Microsoft Active Directory environment. Find computer name, FQDN, and IP address(es) of all DCs.☆19Jun 23, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Scripts and Modules for forensical analyses of mysql database systems☆23Sep 19, 2014Updated 12 years ago
- This is a collection of threat detection rules / rules engines that I have come across.☆301May 5, 2024Updated 2 years ago
- CLI audit tool for GitHub organization with OPA/Rego☆12Mar 20, 2026Updated 7 months ago
- Diagrams to visually learn Falco and its eBPF probe☆15Jun 24, 2021Updated 5 years ago
- Chrome extension that generates CloudWatch Logs Insights queries from ChatGPT prompts☆91Jun 8, 2023Updated 3 years ago
- A terraform module to create a VPC with secure default configurations.☆17Jan 18, 2022Updated 4 years ago
- go-audit is an alternative to the auditd daemon that ships with many distros☆16Oct 28, 2018Updated 8 years ago
- Analyzes CloudTrail data of a given AWS account and generates a summary of recently active IAM principals, API calls they made, as well a…☆167Aug 6, 2026Updated 3 months ago
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆100Jan 12, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Hades is an cross-platform HIDS with kernel-space data collection.☆48May 29, 2023Updated 3 years ago
- AWS Quick Start Team☆16Oct 3, 2024Updated 2 years ago
- Kubernetes Security Training Platform - focusing on security mitigation☆1,010Sep 2, 2024Updated 2 years ago
- Peirates - Kubernetes Penetration Testing tool☆1,489Oct 29, 2026Updated last week
- Tool for building Kubernetes attack paths☆1,018Updated this week
- To clean up your AWS AMIs: First, include AMIs by name or tag. Second, exclude AMIs in use, younger than N days, or the newest N images. …☆36Updated this week
- Offensive Terraform module which creates an IAM role with trust relationship with attacker's AWS account and attaches managed IAM Policy …☆12Sep 18, 2020Updated 6 years ago
- CloudDefense.ai is an automated web application security testing tool that audits your web applications by checking for vulnerabilities l…☆51Nov 10, 2025Updated 11 months ago
- Documenting your Threat Models with HCL☆470Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Cloud threat detection visualization from excalidraw☆12Apr 25, 2022Updated 4 years ago
- Generate a variety of suspect actions that are detected by Falco rulesets☆144Oct 25, 2026Updated last week
- Labs for Threat Modelling training delivered by ControlPlane☆37Mar 25, 2026Updated 7 months ago
- Tool for signing and verifying the integrity of CloudFormation templates☆15Oct 27, 2026Updated last week
- Threat Modeling (based on STRIDE approach) for Kubernetes systems.☆26Oct 14, 2024Updated 2 years ago
- A Python package which wanders across your AWS account and records your resources in a variety of Storage Connectors☆23Jan 11, 2022Updated 4 years ago
- Go client and SDK for Falco☆55Mar 18, 2026Updated 7 months ago