magoo / Vault-for-Incident-Responders
Things to know when DFIR occurs near a vault deployment.
☆43Updated 6 years ago
Alternatives and similar repositories for Vault-for-Incident-Responders:
Users that are interested in Vault-for-Incident-Responders are comparing it to the libraries listed below
- first commit☆20Updated last year
- Python module for evaluation of AWS account best practices around incident handling readieness.☆55Updated 4 years ago
- Osquery Mangement Server☆114Updated 4 years ago
- Exfiltrate files via DNS☆96Updated 11 years ago
- Proof of Concept Zappa Based AWS Persistence and Attack Platform☆39Updated 4 years ago
- Core incident handling plugins for aws_ir cli, incident pony, and more.☆21Updated 6 years ago
- Bro/Zeek integration with osquery☆94Updated 4 years ago
- A Terraform module for GRR: the distributed incident forensics and response framework☆51Updated 4 years ago
- Materials for the BSides NoVA/Charleston 2018 Bro Workshop☆14Updated last year
- AWS EC2 and S3 Security Auditing Tool☆41Updated 11 years ago
- 🎯 Vulnerability Pryer - Prying context into your vulnerability data☆21Updated 3 years ago
- Push-button Security Operations Center using Kubernetes☆12Updated 8 years ago
- defendA Data Lake. A firehose pipeline to athena providing enrichment and normalization for security events☆16Updated last year
- AWS Metadata Proxy for protection against SSRF☆67Updated 4 years ago
- Repository for Endpoint Security Testing☆35Updated 6 years ago
- Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…☆21Updated 7 years ago
- Legal, procedural and policies document templates for operating MISP and information sharing communities☆37Updated 2 years ago
- Find ssh keys with no passwords and try them against a bunch of hosts.☆46Updated 9 years ago
- Competition Infrastructure Management☆86Updated 3 years ago
- Basic Anomaly IDS capabilities with Python and Bro☆105Updated 7 years ago
- This script is used to generate some basic detections of the aws security services☆72Updated 3 years ago
- Provides an easy way to collect and send Slack access & integration logs.☆13Updated 3 years ago
- Provide a shell like interface by utilizing osquery's distributed API☆81Updated 4 years ago
- ☆82Updated 5 years ago
- Honeypot log processor to create OTX Pulse entries☆29Updated last year
- [DEPRECATED] A quickstart demo for Kolide tools☆52Updated 6 years ago
- ☆25Updated 6 years ago
- This python scripts can calculate the WHOIS Similarity Distance between two given domains.☆30Updated 2 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Updated 7 years ago
- The SSH Multiplex Backdoor Tool☆63Updated 5 years ago