chris-watkins Goto Github PK

amazon-guardduty-hands-on

This repo can be used to quickly get hands on experience with Amazon GuardDuty by guiding you through enabling the detector, generating a variety of findings, and remediating those findings with Lambda functions.

attack-guardduty-navigator

A MITRE ATT&CK Navigator export for AWS GuardDuty Findings

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

aws-attack

AWSATT&CK adds MITRE ATT&CK context and additional logging capabilities to Rhino Security Labs's open-source AWS exploitation framework, Pacu.

aws-config-rules

[Node, Python, Java] Repository of sample Custom Rules for AWS Config.

aws-guides

AWS docs, guides, and other tools

aws-well-architected-labs

Hands on labs and code to help you learn, measure, and build using architectural best practices.

caldera

Scalable Automated Adversary Emulation Platform

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

dettect

Detect Tactics, Techniques & Combat Threats

elastalert

Easy & Flexible Alerting With ElasticSearch

gatekeeper

Gatekeeper - Policy Controller for Kubernetes

guardduty-opsec

Opsec considerations for each AWS GuardDuty finding type.

hammer

Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)

jenkins-attack-framework

lambdaexamples

logsec_blog_code

Code snippets used across blog posts

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

prowler

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

security_content

Splunk Security Content

terraform-aws-waf-owasp-top-10-rules

A Terraform module to create AWF WAF Rules for OWASP Top 10 security risks protection.