Vulnetix / vulnetix
Automate vulnerability triage which prioritizes remediation over discovery
☆11Updated last week
Related projects: ⓘ
- AWS Incident Response Kit (AIRK) - AWS Incident Response☆21Updated 4 years ago
- Threat Modeling Manifesto☆24Updated 2 months ago
- ☆35Updated 5 months ago
- Updated incident response generator for training classes☆41Updated 3 years ago
- Tools for AWS forensics☆64Updated 8 years ago
- CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how commo…☆43Updated last year
- Manage GuardDuty At Enterprise Scale☆22Updated 4 years ago
- ☆28Updated 2 years ago
- CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.☆15Updated 3 years ago
- This repository contains the research and components of our research into using Sigma for AWS Incident Response.☆21Updated last year
- OpenCSPM Community Controls☆14Updated 3 years ago
- 🖇️ STRIDE vs. ASVS equivalence table☆74Updated 3 weeks ago
- Convert cloudtrail data to MITRE ATT&CK Sightings☆77Updated 2 years ago
- OWASP Threat Dragon with Gitlab Integration☆24Updated 6 years ago
- Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.☆53Updated 8 months ago
- Enriching the NVD CVSS scores to include Temporal & Threat Metrics☆56Updated this week
- Visualize your Terraform files☆34Updated 4 years ago
- ☆18Updated 2 years ago
- A curated threat modeling library collection☆21Updated 9 months ago
- Knowledge Report Alert & Normalization Generator☆27Updated 6 months ago
- Security Alert Decoration☆25Updated 4 months ago
- ☆16Updated last year
- DEPRECATED: A set of utilities for converting and working with compliance data for viewing in the heimdall applications☆35Updated 2 years ago
- Defending IaaS with ATT&CK is a project to create a collection of ATT&CK techniques relevant to a Linux IaaS environment, as well as a me…☆13Updated 6 months ago
- Coalfire AWS RAMP/pak Reference Architecture☆35Updated 3 weeks ago
- A python module for orchestrating content acquisitions and analysis via amazon ssm.☆57Updated 10 months ago
- ☆30Updated this week
- Deliberately vulnerable AWS resources for security assessment demos☆31Updated 2 years ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Updated 2 years ago
- AppSecPipeline Specification for DevOps automation.☆38Updated last year