Alternatives and similar repositories for aws_ir

Users that are interested in aws_ir are comparing it to the libraries listed below

• ThreatResponse / margaritashotgun
  Remote Memory Acquisition Tool
  ☆247Updated 4 years ago
• easttimor / aws-incident-response
  ☆373Updated last year
• stuhirst / awssecurity
  for AWS Security material
  ☆248Updated 3 years ago
• awslabs / aws-security-automation
  Collection of scripts and resources for DevSecOps and Automated Incident Response Security
  ☆626Updated 4 years ago
• Netflix-Skunkworks / aws-credential-compromise-detection
  Example detection of compromise credentials in AWS
  ☆122Updated 6 years ago
• amrandazz / attack-guardduty-navigator
  A MITRE ATT&CK Navigator export for AWS GuardDuty Findings
  ☆137Updated 3 years ago
• Netflix-Skunkworks / diffy
  (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR)…
  ☆633Updated last year
• willbengtson / trailblazer-aws
  Blazing CloudTrail since 2018
  ☆138Updated 6 years ago
• dowjones / hammer
  Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)
  ☆442Updated last year
• MrSecure / review-security-groups
  A small set of scripts to summarize AWS Security Groups, and generate visualizations of the rules.
  ☆62Updated 5 years ago
• turnerlabs / antiope
  AWS Inventory and Compliance Framework
  ☆224Updated 2 years ago
• mozilla / ssm-acquire
  A python module for orchestrating content acquisitions and analysis via amazon ssm.
  ☆59Updated last year
• sonofagl1tch / AWSDetonationLab
  This script is used to generate some basic detections of the aws security services
  ☆71Updated 3 years ago
• spotify / terraform-google-grr
  A Terraform module for GRR: the distributed incident forensics and response framework
  ☆51Updated 5 years ago
• mlnrt / incident-response-and-forensic
  Incident Response and Forensic on AWS
  ☆20Updated 5 years ago
• OpenCSPM / opencspm
  Open Cloud Security Posture Management Engine
  ☆343Updated 3 years ago
• splunk / splunk-aws-project-trumpet
  ☆97Updated last year
• nccgroup / G-Scout
  Google Cloud Platform Security Tool
  ☆234Updated 5 years ago
• splunk / splunk-for-securityHub
  ☆37Updated 5 years ago
• SumoLogic / sumologic-content
  Welcome to Sumo Logic's Community Content Repository!
  ☆108Updated 2 months ago
• cyberark / SkyWrapper
  SkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS
  ☆108Updated 4 years ago
• duo-labs / cloudtrail-partitioner
  ☆156Updated 2 years ago
• twilio-labs / socless
  The SOCless automation framework
  ☆140Updated 5 months ago
• awslabs / amazon-guardduty-tester
  This repository can be used to generate and evaluate findings detected by Amazon GuardDuty
  ☆399Updated 3 weeks ago
• Netflix-Skunkworks / aardvark
  Aardvark is a multi-account AWS IAM Access Advisor API
  ☆479Updated 8 months ago
• SummitRoute / aws_exposable_resources
  Resource types that can be publicly exposed on AWS
  ☆327Updated 3 years ago
• spacesiren / spacesiren
  A honey token manager and alert system for AWS.
  ☆319Updated 3 years ago
• rams3sh / Aaia
  AWS Identity and Access Management Visualizer and Anomaly Finder
  ☆295Updated last year
• Netflix-Skunkworks / cloudtrail-anomaly
  ☆83Updated 5 years ago
• rpetrich / patrolaroid
  A production-friendly malware scanner for your AWS cloud
  ☆199Updated 3 years ago