A Software as a Service (SaaS) log collection framework.
☆187Jun 25, 2026Updated last week
Alternatives and similar repositories for grove
Users that are interested in grove are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.☆403Jan 20, 2026Updated 5 months ago
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆343Jun 19, 2026Updated 2 weeks ago
- The Event Maturity Matrix (EMM) is a comprehensive framework that provides clarity regarding the capabilities and nuances of SaaS audit l…☆32Jun 22, 2026Updated last week
- Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS☆1,677Jan 8, 2025Updated last year
- AWS STS token decoder☆47Mar 18, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- pocket guide for core detection engineering concepts☆31May 8, 2023Updated 3 years ago
- ☆84Dec 5, 2019Updated 6 years ago
- Collection of operational focused osquery dashboards.☆10Jan 20, 2021Updated 5 years ago
- ☆36Jun 26, 2026Updated last week
- Knowledge Report Alert & Normalization Generator☆26May 11, 2026Updated last month
- Slack bot which promotes Defense in Depth/Zero Trust security practices☆25Jan 17, 2023Updated 3 years ago
- Centralizing AWS CloudWatch log forwarding via EventBridge and Step Functions☆49Feb 12, 2023Updated 3 years ago
- Audit log wall of shame.☆42Aug 20, 2025Updated 10 months ago
- An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and secur…☆174Mar 11, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- HASH (HTTP Agnostic Software Honeypot)☆142Jun 15, 2026Updated 2 weeks ago
- Automated testing, generation & manipulation of #osquery packs☆75May 29, 2026Updated last month
- ☆194Jun 24, 2026Updated last week
- ☆12Apr 22, 2025Updated last year
- cloudgrep is grep for cloud storage☆332Mar 14, 2026Updated 3 months ago
- Lightweight macOS detection agent built on Santa’s Endpoint Security telemetry.☆113Dec 3, 2025Updated 7 months ago
- ☆14Jan 8, 2026Updated 5 months ago
- GCP CSPM using Google Sheets☆38Apr 4, 2025Updated last year
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆101Jan 12, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- IMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.☆106Nov 24, 2023Updated 2 years ago
- ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…☆182Mar 2, 2026Updated 4 months ago
- ☆19Sep 13, 2021Updated 4 years ago
- Built-in Panther detection rules and policies☆455Jun 26, 2026Updated last week
- Whois for the Cloud: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.☆185Oct 9, 2025Updated 8 months ago
- This is a collection of threat detection rules / rules engines that I have come across.☆300May 5, 2024Updated 2 years ago
- ☆22Apr 17, 2023Updated 3 years ago
- Enumerate Location Services using CoreLocation API on macOS☆19Dec 2, 2021Updated 4 years ago
- Golang-based SDK to CrowdStrike's APIs☆89Jun 15, 2026Updated 2 weeks ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Pipelined Query Language☆703Jan 2, 2025Updated last year
- A comprehensive knowledge base for security professionals to keep track of and build defenses against API attack techniques.☆45Sep 12, 2024Updated last year
- An extensible machine learning model store and model transformation and distribution service☆14Mar 12, 2023Updated 3 years ago
- Granular, Actionable Adversary Emulation for the Cloud☆2,349Jun 16, 2026Updated 2 weeks ago
- ☆170Sep 30, 2025Updated 9 months ago
- Collection of example YARA-L rules for use within Google Security Operations☆503Jun 10, 2026Updated 3 weeks ago
- A collection of models for organizing, prioritizing, and understanding cybersecurity and information risk management concepts.☆26Oct 3, 2024Updated last year