tstromberg / ttp-benchLinks
Adversary emulation for EDR/SIEM testing (macOS/Linux)
☆52Updated last week
Alternatives and similar repositories for ttp-bench
Users that are interested in ttp-bench are comparing it to the libraries listed below
Sorting:
- Attaché provides an emulation layer for Cloud Provider IMDS APIs☆60Updated last year
- Automated testing, generation & manipulation of #osquery packs☆73Updated last year
- A recon tool for GCP Service Account Keys that requires no permissions☆25Updated 7 months ago
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆37Updated last year
- ☆85Updated last month
- A Golang library for interacting with the EPSS (Exploit Prediction Scoring System).☆30Updated 9 months ago
- ☆47Updated last year
- K8s API Honeypot with Active Defense Capabilities☆42Updated last year
- ☆182Updated 7 months ago
- Golang-based SDK to CrowdStrike's APIs☆77Updated last week
- Modron - Cloud security compliance☆34Updated 11 months ago
- Fun tools around the EBS Direct API☆19Updated 4 years ago
- ☆89Updated 3 weeks ago
- ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).☆117Updated last year
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- Repository to archive GCP Documentation for local use☆16Updated 9 months ago
- ☆51Updated 2 months ago
- pocket guide for core detection engineering concepts☆30Updated 2 years ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆73Updated 2 years ago
- ☆114Updated 3 months ago
- Tool for obfuscating and deobfuscating data.☆75Updated last year
- Security Alert Decoration☆27Updated 4 months ago
- kubernetes-for-soc aims to fast-track the learning curve for SOC analysts by enabling them to swiftly grasp the essential concepts and kn…☆56Updated last year
- ☆35Updated 4 years ago
- Compares and analyzes GCP IAM roles.☆77Updated 8 months ago
- Spotter is a comprehensive Kubernetes security scanner that uses CEL-based rules to identify security vulnerabilities, misconfigurations,…☆67Updated 2 months ago
- ☆31Updated 5 months ago
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…☆103Updated last year
- AWS STS token decoder☆43Updated 8 months ago
- ☆73Updated last month