tstromberg / ttp-benchLinks
Adversary emulation for EDR/SIEM testing (macOS/Linux)
☆52Updated last week
Alternatives and similar repositories for ttp-bench
Users that are interested in ttp-bench are comparing it to the libraries listed below
Sorting:
- Attaché provides an emulation layer for Cloud Provider IMDS APIs☆60Updated last year
- A Golang library for interacting with the EPSS (Exploit Prediction Scoring System).☆30Updated 10 months ago
- Automated testing, generation & manipulation of #osquery packs☆73Updated last year
- ☆85Updated last month
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆37Updated last year
- Fun tools around the EBS Direct API☆19Updated 4 years ago
- Pentester-focused Docker registry tool to enumerate and pull images☆37Updated 2 months ago
- Golang-based SDK to CrowdStrike's APIs☆78Updated this week
- ☆47Updated last year
- Repository to archive GCP Documentation for local use☆16Updated 10 months ago
- pocket guide for core detection engineering concepts☆31Updated 2 years ago
- ☆183Updated 7 months ago
- Modron - Cloud security compliance☆34Updated last year
- ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).☆119Updated this week
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- A recon tool for GCP Service Account Keys that requires no permissions☆25Updated 8 months ago
- Red team tool that emulates the SolarWinds CI compromise attack vector.☆24Updated last year
- ☆52Updated last week
- ☆92Updated last month
- K8s API Honeypot with Active Defense Capabilities☆44Updated last year
- Kubernetes Unhinged Shell 😎☆46Updated 3 years ago
- Spotter is a comprehensive Kubernetes security scanner that uses CEL-based rules to identify security vulnerabilities, misconfigurations,…☆69Updated 3 months ago
- ☆36Updated 4 years ago
- ☆44Updated 7 months ago
- Tool for obfuscating and deobfuscating data.☆75Updated last year
- prel(iminary) is an application that temporarily assigns Google Cloud IAM Roles and includes an approval process.☆46Updated this week
- A PoC to Simulate Ransomware Attack on AWS Environment☆32Updated last year
- AWS STS token decoder☆44Updated 9 months ago
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆111Updated 11 months ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆74Updated 3 years ago