OpenCSPM / opencspm

Related projects ⓘ

Alternatives and complementary repositories for opencspm

• easttimor / aws-incident-response
  ☆363Updated 8 months ago
• openraven / magpie
  A Cloud Security Posture Manager or CSPM with a focus on security analysis for the modern cloud stack and a focus on the emerging threat …
  ☆175Updated 2 months ago
• joshlarsen / aws-recon
  Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.
  ☆528Updated 6 months ago
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆400Updated 2 months ago
• SummitRoute / aws_exposable_resources
  Resource types that can be publicly exposed on AWS
  ☆316Updated 2 years ago
• ScaleSec / terraform_aws_scp
  AWS Organizations Service Control Policies (SCPs) written in HashiCorp Terraform.
  ☆231Updated 3 weeks ago
• awslabs / aws-cloudsaga
  AWS CloudSaga - Simulate security events in AWS
  ☆442Updated this week
• trustoncloud / threatmodel-for-aws-s3
  ThreatModel for Amazon S3 - Library of all the attack scenarios on Amazon S3, and how to mitigate them following a risk-based approach
  ☆151Updated last year
• turnerlabs / antiope
  AWS Inventory and Compliance Framework
  ☆223Updated last year
• dowjones / hammer
  Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
  ☆434Updated last year
• iacsecurity / tool-compare
  ☆278Updated last year
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆96Updated 10 months ago
• salesforce / metabadger
  Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).
  ☆138Updated 7 months ago
• orcasecurity / orca-toolbox
  ☆109Updated 3 weeks ago
• salesforce / aws-allowlister
  Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance frame…
  ☆224Updated last year
• SummitRoute / imdsv2_wall_of_shame
  List of vendors that do not allow IMDSv2 enforcement
  ☆142Updated 6 months ago
• awslabs / amazon-guardduty-tester
  This repository can be used to generate and evaluate findings detected by Amazon GuardDuty
  ☆341Updated 3 months ago
• WithSecureLabs / leonidas
  Automated Attack Simulation in the Cloud, complete with detection use cases.
  ☆485Updated 2 months ago
• awslabs / aws-security-analytics-bootstrap
  AWS Security Analytics Bootstrap enables customers to perform security investigations on AWS service logs by providing an Amazon Athena a…
  ☆238Updated this week
• chughes757 / SecureSoftwareSupplyChain
  This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.
  ☆137Updated 2 years ago
• tenable / cnappgoat
  CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
  ☆266Updated 2 months ago
• common-fate / iamzero
  Identity & Access Management simplified and secure.
  ☆249Updated last year
• ihamburglar / Redboto
  Red Team Scripts for AWS.
  ☆166Updated 4 years ago
• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆656Updated last year
• elastic / dorothy
  Dorothy is a tool to test security monitoring and detection for Okta environments
  ☆175Updated 3 months ago
• ThreatResponse / aws_ir
  Python installable command line utiltity for mitigation of host and key compromises.
  ☆343Updated 3 years ago
• domain-protect / domain-protect
  OWASP Domain Protect - prevent subdomain takeover
  ☆397Updated last month
• rams3sh / Aaia
  AWS Identity and Access Management Visualizer and Anomaly Finder
  ☆287Updated 4 months ago
• awslabs / assisted-log-enabler-for-aws
  Assisted Log Enabler for AWS - Find AWS resources that are not logging, and turn them on.
  ☆225Updated this week
• amrandazz / attack-guardduty-navigator
  A MITRE ATT&CK Navigator export for AWS GuardDuty Findings
  ☆136Updated 3 years ago