tstromberg / ttp-benchLinks
Adversary emulation for EDR/SIEM testing (macOS/Linux)
☆53Updated this week
Alternatives and similar repositories for ttp-bench
Users that are interested in ttp-bench are comparing it to the libraries listed below
Sorting:
- Attaché provides an emulation layer for Cloud Provider IMDS APIs☆60Updated this week
- ☆85Updated this week
- Automated testing, generation & manipulation of #osquery packs☆73Updated last year
- Lightweight macOS detection agent built on Santa’s Endpoint Security telemetry.☆67Updated last month
- Golang-based SDK to CrowdStrike's APIs☆78Updated this week
- A Golang library for interacting with the EPSS (Exploit Prediction Scoring System).☆30Updated 10 months ago
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆37Updated last year
- ☆52Updated 3 weeks ago
- ☆47Updated last year
- ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).☆119Updated 2 weeks ago
- ☆183Updated 8 months ago
- Fun tools around the EBS Direct API☆19Updated 4 years ago
- pocket guide for core detection engineering concepts☆31Updated 2 years ago
- Repository to archive GCP Documentation for local use☆16Updated 11 months ago
- Security Alert Decoration☆27Updated 5 months ago
- Modron - Cloud security compliance☆34Updated last year
- K8s API Honeypot with Active Defense Capabilities☆44Updated 2 years ago
- Spotter is a comprehensive Kubernetes security scanner that uses CEL-based rules to identify security vulnerabilities, misconfigurations,…☆69Updated 3 months ago
- ☆93Updated 2 months ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆74Updated 3 years ago
- ☆75Updated 2 months ago
- ☆31Updated this week
- A toolset to juggle AWS roles for persistent access☆60Updated last year
- Tool for obfuscating and deobfuscating data.☆75Updated last year
- ☆53Updated last year
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…☆104Updated last year
- kubernetes-for-soc aims to fast-track the learning curve for SOC analysts by enabling them to swiftly grasp the essential concepts and kn…☆57Updated 2 years ago
- Simple root privilege escalation detection using eBPF 🐝☆35Updated 3 months ago
- Knowledge Report Alert & Normalization Generator☆26Updated 3 weeks ago
- A recon tool for GCP Service Account Keys that requires no permissions☆25Updated 8 months ago