cado-security / AWS_EKS_Cluster_Forensics
AWS EKS Cluster Forensics
☆23Updated 3 years ago
Alternatives and similar repositories for AWS_EKS_Cluster_Forensics
Users that are interested in AWS_EKS_Cluster_Forensics are comparing it to the libraries listed below
Sorting:
- ☆18Updated 3 years ago
- A python script to acquire multiple aws ec2 instances in a forensically sound-ish way☆38Updated 3 years ago
- Simulates a compromise in a cloud and container environment☆32Updated 4 months ago
- Converts Sigma detection rules to a Splunk alert configuration.☆13Updated 3 years ago
- Web based analysis platform for use with the AWS_IR command line tool.☆17Updated 8 years ago
- Track progress and keep notes while working through likethecoins' CTI Self Study Plan☆28Updated 2 years ago
- pocket guide for core detection engineering concepts☆28Updated 2 years ago
- pocket guide for core threat hunting concepts☆23Updated 5 years ago
- pollen - A command-line tool for interacting with TheHive☆35Updated 5 years ago
- A simple Docker container that serves the MITRE ATT&CK Navigator web app☆27Updated 2 years ago
- Recon Hunt Queries☆77Updated 4 years ago
- A packer utility to create and capture DFIR Image for use AWS & Azure☆15Updated 5 years ago
- Collection of Slides From My Conference Talks☆20Updated 2 years ago
- Powershell Scripts to work on Crowdstrike Falcon that pull back raw data relevant to forensic investigation☆22Updated 4 months ago
- Web app that provides basic navigation and annotation of ATT&CK matrices☆16Updated 4 years ago
- Security Alert Decoration☆27Updated 3 weeks ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Updated 3 months ago
- Synopsis is a tool to aid analysts reviewing browser history files by providing a high-level “synopsis” of key information.☆21Updated 6 years ago
- Fun tools around the EBS Direct API☆18Updated 4 years ago
- Attack Range to test detection against nativel serverless cloud services and environments☆35Updated 3 years ago
- CSIRT Jump Bag☆26Updated last year
- This repository contains the research and components of our research into using Sigma for AWS Incident Response.☆29Updated last year
- Updated incident response generator for training classes☆44Updated 3 years ago
- Knowledge Report Alert & Normalization Generator☆27Updated last year
- A tool to modify timestamps in a packet capture to a user selected date☆31Updated 3 years ago
- Acheron is a RESTful vulnerability assessment and management framework built around search and dedicated to terminal extensibility.☆32Updated 2 years ago
- OpenIOC rules to facilitate hunting for indicators of compromise☆37Updated 3 years ago
- Dashboards for conducting forensic investigation using windows events in Kibana☆17Updated 6 years ago
- An experimental Velociraptor implementation using cloud infrastructure☆25Updated this week
- Docker Container to deploy Mitre Caldera Automated Adversary Emulation System☆26Updated 4 years ago