CISA's catalog of bad practices that are exceptionally risky.
☆211Aug 5, 2026Updated last week
Alternatives and similar repositories for bad-practices
Users that are interested in bad-practices are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cybersecurity Evaluation Tool☆1,881Updated this week
- We borrow the concept of 'personas' from UX/service design and apply it to threat actors to improve understanding between security, techn…☆11Jun 17, 2020Updated 6 years ago
- CISA CSAF Security Advisories☆116Updated this week
- A set of guidelines and best practices for an awesome engineering team☆280Aug 5, 2026Updated last week
- A collection of awesome penetration testing resources, tools and other shiny things☆17Feb 11, 2017Updated 9 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A site for CISA directives☆176Jun 5, 2024Updated 2 years ago
- Automation to assess the state of your M365 tenant against CISA's baselines☆2,638Updated this week
- USENIX 2023 Artifacts☆12Nov 25, 2022Updated 3 years ago
- Integrate IBM QRadar and RPA to automate security L1 tasks.☆14May 20, 2022Updated 4 years ago
- AWS Quick Start Team☆17Oct 3, 2024Updated last year
- DevSecOps Guide, located devsecops.pagerduty.com☆15Jun 26, 2026Updated last month
- ☆21Mar 8, 2021Updated 5 years ago
- 🚗 A curated list of resources for learning about vehicle security and car hacking☆15Oct 4, 2021Updated 4 years ago
- A scanner to detect the use of stolen FireEye red team tools☆20Dec 18, 2020Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Repository for AsBuiltReport Microsoft DHCP module☆16Jun 19, 2026Updated last month
- ☆16May 13, 2021Updated 5 years ago
- Vulnerability Assessment Module - OpenVas with Elastic stack using VulnWhisperer☆20Jun 11, 2019Updated 7 years ago
- This project can be used to create AMIs based on Kali Linux, a penetration testing distribution.☆22Updated this week
- A skeleton project for quickly getting a new cisagov Python library started.☆32Aug 5, 2026Updated last week
- Basic guide for performing a Physical PenTest - Nist 800-12, 800-53, 800-115, 800-152☆24Jan 1, 2023Updated 3 years ago
- Purple Team Strategies, Published by Packt☆16Apr 22, 2026Updated 3 months ago
- Documentation on the Cyber Defense Matrix☆27Apr 19, 2023Updated 3 years ago
- CISA is hiring! We’re looking for candidates passionate about our mission to lead the national effort to understand and manage cyber and …☆76Nov 20, 2024Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A curated list of tools for incident response☆21Sep 24, 2019Updated 6 years ago
- ☆19Dec 31, 2022Updated 3 years ago
- CyHy Dashboard☆29Updated this week
- A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.☆25Jan 4, 2017Updated 9 years ago
- Indicators of compromise relating to our report on APT10's targeting of global MSPs☆10Sep 26, 2017Updated 8 years ago
- These are open source rules that can be utilized with QRadar to detect various types of threats in the environment.☆60Jun 11, 2019Updated 7 years ago
- Create machine images containing the Nessus vulnerability scanner☆13Updated this week
- Scripts and outputs for ATLAS data in STIX JSON and ATT&CK Navigator layer formats☆33Jun 24, 2026Updated last month
- Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as we…☆54Apr 25, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Windows Security Logging☆44Jul 17, 2022Updated 4 years ago
- Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners☆14Jul 21, 2026Updated 3 weeks ago
- The NIST Open Access to Research (OAR) Public Data Repository (PDR) system software☆16Jan 4, 2026Updated 7 months ago
- 📇Read Office 365 data via the MS Graph API and R☆15Jan 22, 2021Updated 5 years ago
- Windows Aktif Dizin Entegre Yönetim Uygulaması - Windows Active Directory Management☆22Dec 8, 2022Updated 3 years ago
- Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translatin…☆131Apr 3, 2025Updated last year
- NHSuite allows users to efficiently manage their QRadar Network Hierarchy. Utilizing the provided QRadar API, users can seamlessly export…☆26Jan 22, 2024Updated 2 years ago