tstromberg / ttp-benchLinks
Adversary emulation for EDR/SIEM testing (macOS/Linux)
☆53Updated this week
Alternatives and similar repositories for ttp-bench
Users that are interested in ttp-bench are comparing it to the libraries listed below
Sorting:
- ☆85Updated last week
- Attaché provides an emulation layer for Cloud Provider IMDS APIs☆60Updated this week
- A Golang library for interacting with the EPSS (Exploit Prediction Scoring System).☆30Updated 10 months ago
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆37Updated last year
- ☆47Updated last year
- Automated testing, generation & manipulation of #osquery packs☆73Updated last year
- Golang-based SDK to CrowdStrike's APIs☆78Updated this week
- ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).☆119Updated 2 weeks ago
- Lightweight macOS detection agent built on Santa’s Endpoint Security telemetry.☆88Updated last month
- A recon tool for GCP Service Account Keys that requires no permissions☆25Updated 8 months ago
- ☆184Updated 8 months ago
- Fun tools around the EBS Direct API☆19Updated 4 years ago
- Repository to archive GCP Documentation for local use☆16Updated 11 months ago
- Spotter is a comprehensive Kubernetes security scanner that uses CEL-based rules to identify security vulnerabilities, misconfigurations,…☆69Updated 3 months ago
- Pentester-focused Docker registry tool to enumerate and pull images☆37Updated 2 months ago
- Tool for obfuscating and deobfuscating data.☆75Updated last year
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- ☆53Updated last year
- Modron - Cloud security compliance☆34Updated last year
- This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.☆59Updated 11 months ago
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆61Updated 2 years ago
- ☆75Updated 2 months ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆74Updated 3 years ago
- pocket guide for core detection engineering concepts☆31Updated 2 years ago
- K8s API Honeypot with Active Defense Capabilities☆44Updated 2 years ago
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆101Updated last year
- ☆52Updated 3 weeks ago
- A toolset to juggle AWS roles for persistent access☆60Updated last year
- ☆37Updated 4 years ago
- An AWS IAM Privilege Escalation Path Library☆88Updated 3 weeks ago