panther-labs / panther_analysis_toolLinks
Command line tool for working with Panther rules and policies
☆40Updated last week
Alternatives and similar repositories for panther_analysis_tool
Users that are interested in panther_analysis_tool are comparing it to the libraries listed below
Sorting:
- Cloud security tutorials and best practices☆38Updated 2 years ago
- ☆65Updated last year
- ☆18Updated 3 years ago
- ☆44Updated 4 months ago
- Audit log wall of shame.☆41Updated 9 months ago
- Knowledge Report Alert & Normalization Generator☆27Updated last year
- Dorothy is a tool to test security monitoring and detection for Okta environments☆184Updated 11 months ago
- Attack Range to test detection against nativel serverless cloud services and environments☆35Updated 3 years ago
- A MITRE ATT&CK Navigator export for AWS GuardDuty Findings☆138Updated 3 years ago
- A POC to implement Detection-as-Code with Terraform and Sumo Logic.☆29Updated last year
- SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, man…☆78Updated 4 years ago
- Slack bot which promotes Defense in Depth/Zero Trust security practices☆24Updated 2 years ago
- This script is used to generate some basic detections of the aws security services☆71Updated 3 years ago
- GCP CSPM using Google Sheets☆36Updated 3 months ago
- Built-in Panther detection rules and policies☆402Updated last week
- OSSEM Common Data Model☆56Updated 2 years ago
- pocket guide for core detection engineering concepts☆29Updated 2 years ago
- Convert cloudtrail data to MITRE ATT&CK Sightings☆80Updated 2 years ago
- IAMFinder enumerates and finds users and IAM roles in a target AWS account.☆111Updated 4 years ago
- Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as we…☆53Updated 2 years ago
- Manage GuardDuty At Enterprise Scale☆22Updated 4 years ago
- The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools…☆156Updated this week
- Serverless honeytoken 🕵🏻♂️☆79Updated 2 years ago
- ☆46Updated 2 years ago
- Global Security Database Tools☆43Updated last year
- A small set of scripts to summarize AWS Security Groups, and generate visualizations of the rules.☆62Updated 5 years ago
- Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.☆54Updated last year
- A CALDERA plugin☆77Updated last week
- Cisco Orbital - Osquery queries by Talos☆134Updated 10 months ago
- This repo contains example of raw event examples and possible translations to the OCSF schema.☆40Updated last month