Alternatives and similar repositories for grove

Users that are interested in grove are comparing it to the libraries listed below

• brexhq / substation
  Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.
  ☆377Updated 3 weeks ago
• chainguard-dev / osqtool
  Automated testing, generation & manipulation of #osquery packs
  ☆73Updated 9 months ago
• DataDog / grimoire
  Generate datasets of cloud audit logs for common attacks
  ☆217Updated 11 months ago
• Santiago-Labs / go-ocsf
  ☆70Updated last week
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆432Updated 2 months ago
• Permiso-io-tools / CloudConsoleCartographer
  Released at Black Hat Asia on April 18, 2024, Cloud Console Cartographer is a framework for condensing groupings of cloud events (e.g. Cl…
  ☆168Updated last year
• StevenSmiley / aws-mine
  AWS honey token manager
  ☆87Updated last year
• jdyke / gcp-iam-analyzer
  Compares and analyzes GCP IAM roles.
  ☆77Updated 4 months ago
• shellcromancer / audit-log-wall-of-shame
  Audit log wall of shame.
  ☆41Updated 9 months ago
• DataDog / attache
  Attaché provides an emulation layer for Cloud Provider IMDS APIs
  ☆58Updated last year
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆110Updated 2 weeks ago
• SecurityRunners / CloudCommotion
  Cloud Commotion intends to cause chaos to simulate security incidents
  ☆143Updated last year
• DataDog / workload-security-evaluator
  Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.
  ☆31Updated 9 months ago
• google / localtoast
  ☆113Updated last week
• zmallen / cloudtrail2sightings
  Convert cloudtrail data to MITRE ATT&CK Sightings
  ☆80Updated 3 years ago
• ReversecLabs / IAMSpy
  ☆220Updated last month
• cado-security / cloudgrep
  cloudgrep is grep for cloud storage
  ☆325Updated 5 months ago
• DataDog / supply-chain-firewall
  A tool for preventing the installation of malicious npm and PyPI packages
  ☆153Updated this week
• DataDog / threatest
  Threatest is a CLI and Go framework for end-to-end testing threat detection rules.
  ☆331Updated 3 months ago
• secengjeff / awskillswitch
  Lambda function that streamlines containment of an AWS account compromise
  ☆346Updated last year
• panther-labs / panther-analysis
  Built-in Panther detection rules and policies
  ☆404Updated last week
• fwdcloudsec / known_aws_accounts
  List of known AWS accounts
  ☆219Updated last week
• Permiso-io-tools / CloudGrappler
  ☆263Updated 8 months ago
• tenable / EscalateGPT
  An AI-powered tool for discovering privilege escalation opportunities in AWS IAM configurations.
  ☆114Updated this week
• adanalvarez / TrailDiscover
  An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and secur…
  ☆163Updated last month
• twilio-labs / socless
  The SOCless automation framework
  ☆140Updated 5 months ago
• orcasecurity / orca-toolbox
  ☆117Updated 2 months ago
• Nextdoor / cspm_evaluation_matrix
  Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix
  ☆58Updated last year
• makalin / SecureMCP
  SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context P…
  ☆80Updated last month
• ConductorOne / baton
  Identity governance for any SaaS, infrastructure, or tool
  ☆86Updated 2 months ago