grcengineering / grcengineering.github.io
☆19Updated 3 weeks ago
Related projects ⓘ
Alternatives and complementary repositories for grcengineering.github.io
- AI featured threat modeling and security review action☆40Updated 5 months ago
- ☆66Updated 5 months ago
- ☆16Updated last year
- ☆37Updated 2 months ago
- Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.☆53Updated 10 months ago
- Threat Modeling Manifesto☆27Updated 3 months ago
- Enriching the NVD CVSS scores to include Temporal & Threat Metrics☆61Updated this week
- Automatically generated diagrams for OSCAL models☆15Updated 2 years ago
- ☆23Updated last month
- A collection of models for organizing, prioritizing, and understanding cybersecurity and information risk management concepts.☆19Updated last month
- A POC to implement Detection-as-Code with Terraform and Sumo Logic.☆25Updated last year
- Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as we…☆51Updated last year
- Tool for obfuscating and deobfuscating data.☆63Updated 7 months ago
- A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).☆67Updated 6 months ago
- Anvilogic Forge☆86Updated this week
- ☆17Updated 3 years ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆65Updated last year
- Security Control Knowledge Graph☆26Updated 6 months ago
- StartLeft is an automation tool for generating Threat Models written in the Open Threat Model (OTM) format from a variety of different so…☆48Updated last week
- ☆18Updated 2 years ago
- Scripts to import OSCAL example content into the Neo4J graph database☆27Updated last year
- Command line tool for working with Panther rules and policies☆36Updated 2 weeks ago
- read the docs version of risk management☆24Updated last year
- Convert cloudtrail data to MITRE ATT&CK Sightings☆79Updated 2 years ago
- The Measure, Maximize, and Mature Threat-Informed Defense (M3TID) project defines what Threat-Informed Defense (TID) is and the key activ…☆12Updated 7 months ago
- ☆61Updated last year
- GCP CSPM using Google Sheets☆34Updated 5 months ago
- ☆36Updated 3 years ago
- 🖇️ STRIDE vs. ASVS equivalence table☆75Updated 2 months ago
- Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )☆152Updated 2 months ago