Alternatives and similar repositories for cloud-threat-detection

Users that are interested in cloud-threat-detection are comparing it to the libraries listed below

• center-for-threat-informed-defense / cloud-analytics
  Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as we…
  ☆53Updated 2 years ago
• invictus-ir / Invictus-training
  Repository with supporting materials for Invictus Academy/Training
  ☆43Updated 8 months ago
• trustoncloud / threatmodel-for-azure-storage
  Threat model for Azure Storage - Library of all the attack scenarios on Azure Storage, and how to mitigate them following a risk-based ap…
  ☆59Updated 2 years ago
• invictus-ir / ALFA
  ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…
  ☆163Updated 6 months ago
• microsoft / AzDetectSuite
  A collection of ARM-based detections for Azure/AzureAD based TTPs
  ☆88Updated last year
• carta / krang
  Knowledge Report Alert & Normalization Generator
  ☆27Updated last year
• piercing-index / cloud-vulnerabilities
  ☆41Updated 6 months ago
• mikoiv / MicrosoftSentinel-ShodanMonitor
  Ingesting Shodan Monitor Alerts to Microsoft Sentinel
  ☆34Updated 2 years ago
• BenjiTrapp / aws-threat-hunting
  Short deep dive into Threat Hunting on AWS
  ☆13Updated last year
• tuckner / automation-capability-matrix
  A tool that allows you to document and assess any security automation in your SOC
  ☆47Updated 10 months ago
• invictus-ir / Sigma-AWS
  This repository contains the research and components of our research into using Sigma for AWS Incident Response.
  ☆29Updated 2 years ago
• threat-punter / detection-as-code-example
  A POC to implement Detection-as-Code with Terraform and Sumo Logic.
  ☆29Updated 2 years ago
• Permiso-io-tools / cloudtail
  ☆30Updated 3 months ago
• cado-security / AWS_EKS_Cluster_Forensics
  AWS EKS Cluster Forensics
  ☆23Updated 4 years ago
• cylaris / awesomekql
  Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs
  ☆55Updated 2 years ago
• SecureHats / validate-detections
  GitHub action for validating Microsoft Sentinel detection rules
  ☆13Updated 2 years ago
• invictus-ir / aws-cheatsheet
  A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.
  ☆81Updated last year
• inodee / spl-to-kql
  The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects…
  ☆43Updated 4 years ago
• Algbra-Labs-OSS / Chronicle
  ☆65Updated last year
• zmallen / cloudtrail2sightings
  Convert cloudtrail data to MITRE ATT&CK Sightings
  ☆80Updated 3 years ago
• tarahmarie / investigations
  ☆77Updated 2 years ago
• kbroughton / azure_cis_scanner
  Security Scanner based on CIS benchmark 1.1 inspired by Scout2
  ☆53Updated 2 years ago
• vectra-ai-research / derf
  DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…
  ☆102Updated last year
• petebryan / blue_team_con
  ☆17Updated 3 years ago
• CrowdStrike / detection-container
  ☆48Updated 3 weeks ago
• SecureHats / Sentinel-playground
  Solution to deploy a Sentinel playground demo environment
  ☆56Updated 2 years ago
• Permiso-io-tools / azure-activity-log-axe
  Azure Activity Log Axe is a continually developing tool that simplifies the transactional log format provided by Microsoft. The tool leve…
  ☆29Updated last year
• O3-Cyber / azure-security-survival-kit
  ☆65Updated last year
• msdirtbag / ADXFlowmaster
  ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.
  ☆40Updated 10 months ago
• jsa2 / CloudShellAadApps
  ☆26Updated 2 years ago