A curated list of resources about detecting threats and defending Kubernetes systems.
☆414Sep 2, 2023Updated 3 years ago
Alternatives and similar repositories for awesome-kubernetes-threat-detection
Users that are interested in awesome-kubernetes-threat-detection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The …☆300Feb 5, 2024Updated 2 years ago
- This is a collection of threat detection rules / rules engines that I have come across.☆301May 5, 2024Updated 2 years ago
- Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).☆91Jan 28, 2024Updated 2 years ago
- Generative and mutative fuzzer for Kubernetes admission controller chains by automatically parsing the cluster api specification.☆76Apr 4, 2026Updated 7 months ago
- ☆193May 29, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆353Updated this week
- Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation o…☆1,383Oct 12, 2026Updated 3 weeks ago
- Granular, Actionable Adversary Emulation for the Cloud☆2,442Updated this week
- pocket guide for core detection engineering concepts☆31May 8, 2023Updated 3 years ago
- kubernetes-for-soc aims to fast-track the learning curve for SOC analysts by enabling them to swiftly grasp the essential concepts and kn…☆56Dec 18, 2023Updated 2 years ago
- An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and secur…☆177Oct 4, 2026Updated last month
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 11 months ago
- Tool for building Kubernetes attack paths☆1,020Updated this week
- Peirates - Kubernetes Penetration Testing tool☆1,491Oct 29, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A curated list of awesome Kubernetes security resources☆970Dec 15, 2023Updated 2 years ago
- Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic☆307Jan 6, 2023Updated 3 years ago
- All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.☆389Oct 26, 2026Updated last week
- Knowledge Report Alert & Normalization Generator☆25May 11, 2026Updated 5 months ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 3 years ago
- A repository of breaches of AWS customers☆820Oct 27, 2026Updated last week
- ✨ A curated list of awesome threat detection and hunting resources 🕵️♂️☆4,788Jan 5, 2026Updated 10 months ago
- ☆171Aug 17, 2026Updated 2 months ago
- CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.☆302Sep 4, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.☆2,210Oct 1, 2025Updated last year
- Kubernetes focused container assessment and context discovery tool for penetration testing☆492Nov 7, 2025Updated last year
- Kubernetes Security Training Platform - focusing on security mitigation☆1,010Sep 2, 2024Updated 2 years ago
- ☆87Mar 30, 2026Updated 7 months ago
- Anvilogic Forge☆119Mar 31, 2026Updated 7 months ago
- 🧰 Multi Tool Kubernetes Pentest Image☆267Mar 30, 2026Updated 7 months ago
- Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.☆638Jun 2, 2026Updated 5 months ago
- A Python, Boto3 script that leverages a forensic volume to attach & mount to a selected instance, run a memory dump, unmount and detach f…☆11Jul 15, 2020Updated 6 years ago
- Tool for obfuscating and deobfuscating data.☆80Mar 20, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Production-ready detection & response queries for osquery☆651Updated this week
- Convert cloudtrail data to MITRE ATT&CK Sightings☆83Jul 25, 2022Updated 4 years ago
- A PoC to Simulate Ransomware Attack on AWS Environment☆33Oct 14, 2024Updated 2 years ago
- Adversarial Interception Mission Oriented Discovery and Disruption Framework, or AIMOD2, is a structured threat hunting approach to proac…☆91Sep 16, 2023Updated 3 years ago
- The TTPForge is a Cybersecurity Framework for developing, automating, and executing attacker Tactics, Techniques, and Procedures (TTPs).☆447Sep 30, 2026Updated last month
- A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.☆87Jan 6, 2026Updated 10 months ago
- SCP management tool☆133Oct 23, 2023Updated 3 years ago