samlothen / QRALib
Quantitative Risk Analysis in Cybersecurity Library (QRALib)
☆15Updated last year
Alternatives and similar repositories for QRALib:
Users that are interested in QRALib are comparing it to the libraries listed below
- Factor Analysis of Information Risk (FAIR) model written in Python. Managed and maintained by Hive Systems☆95Updated last month
- 🎓Materials for the Hands-On Introduction to OpenFAIR Risk Analysis with Tidyrisk☆13Updated 4 years ago
- Repository for the Open Information Security Risk Universe☆63Updated 2 years ago
- ⚖Open Source Toolkit for Conducting Quantitative Risk Assessment Interviews☆35Updated 11 months ago
- Factor Analysis of Information Risk (FAIR) tool developed in R☆20Updated 6 years ago
- Open FAIR Course☆13Updated 5 years ago
- These are files that a new CISO or someone introducing security to an organization can leverage to bridge the gap between security and th…☆71Updated 4 months ago
- Updated incident response generator for training classes☆43Updated 3 years ago
- 🖇️ STRIDE vs. ASVS equivalence table☆75Updated 5 months ago
- ⚖Open Source Toolkit for Quantitative Risk Assessment☆163Updated 2 years ago
- Documentation on the Cyber Defense Matrix☆24Updated last year
- read the docs version of risk management☆24Updated last year
- A MITRE ATT&CK Navigator export for AWS GuardDuty Findings☆137Updated 3 years ago
- NIST SP 800-53, Security and Privacy Controls for Federal Information Systems and Organizations☆37Updated last month
- Legal, procedural and policies document templates for operating MISP and information sharing communities☆37Updated 2 years ago
- Questions to ask about the team and company when you're interviewing for a CISO position☆12Updated 3 years ago
- 'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.☆64Updated 5 years ago
- ☆44Updated 2 years ago
- ☆63Updated 2 years ago
- A collection of security related user stories compatible with NIST Special Publication 800-53☆35Updated 7 years ago
- A small set of scripts to summarize AWS Security Groups, and generate visualizations of the rules.☆62Updated 4 years ago
- Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.☆48Updated 8 years ago
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆61Updated 7 months ago
- Automatically exported from code.google.com/p/nipper-ng☆69Updated 2 years ago
- A place to gather and organize information about using threat modeling frameworks to deal with social conflict in online systems☆56Updated last year
- Presentations, training modules, and other education materials from Duo Security's Application Security team.☆73Updated 3 years ago
- This script is used to generate some basic detections of the aws security services☆72Updated 3 years ago
- This repository is created to add value to existing Network Security Monitoring solutions.☆42Updated 8 years ago
- a curated list of useful threat modeling resources☆128Updated 7 months ago
- ☆36Updated last year