magoo / Vault-for-Incident-RespondersLinks
Things to know when DFIR occurs near a vault deployment.
☆43Updated 7 years ago
Alternatives and similar repositories for Vault-for-Incident-Responders
Users that are interested in Vault-for-Incident-Responders are comparing it to the libraries listed below
Sorting:
- Python module for evaluation of AWS account best practices around incident handling readieness.☆55Updated 4 years ago
- first commit☆20Updated last year
- Core incident handling plugins for aws_ir cli, incident pony, and more.☆21Updated 6 years ago
- Materials for the BSides NoVA/Charleston 2018 Bro Workshop☆14Updated this week
- Osquery Mangement Server☆114Updated 4 years ago
- Web based analysis platform for use with the AWS_IR command line tool.☆17Updated 8 years ago
- Honeypot log processor to create OTX Pulse entries☆28Updated last year
- 🎯 Vulnerability Pryer - Prying context into your vulnerability data☆21Updated 3 years ago
- Looks for GitHub org users without 2FA turned on☆9Updated 8 years ago
- Proof of Concept Zappa Based AWS Persistence and Attack Platform☆39Updated 4 years ago
- Build Automated Machine Images for MISP☆28Updated last year
- AWS Metadata Proxy for protection against SSRF☆68Updated 5 years ago
- Exfiltrate files via DNS☆96Updated 11 years ago
- A packer utility to create and capture DFIR Image for use AWS & Azure☆15Updated 5 years ago
- Find ssh keys with no passwords and try them against a bunch of hosts.☆46Updated 10 years ago
- A Terraform module for GRR: the distributed incident forensics and response framework☆51Updated 5 years ago
- This python scripts can calculate the WHOIS Similarity Distance between two given domains.☆29Updated 2 years ago
- Bringing DevOps to Forensics☆34Updated 10 years ago
- Bro/Zeek integration with osquery☆94Updated 4 years ago
- A python script to shift the timestamp on syslog data. Useful for forensicators combating time skew.☆21Updated 3 years ago
- Homographs: brutefind homographs within a font☆18Updated 8 years ago
- Serverless, real-time, ClamAV+Yara scanning for your S3 Buckets☆31Updated last year
- Duo MFA auditing tool to test users' likelihood of approving unexpected push notifications☆13Updated 7 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Updated 7 years ago
- threat-intelligence.eu website and repository of information about open standards, documents, methodologies and processes in threat intel…☆48Updated 2 years ago
- Using osquery for Mass Incident Detection & Response☆19Updated 8 years ago
- This repository is a curated list of pro bono incident response entities.☆20Updated last year
- Launchd daemon that reports major OSX modifications through growl☆16Updated 10 years ago
- Python interface to the CRITs API☆22Updated 8 years ago
- ☆25Updated 6 years ago