napsolutions Goto Github PK

aws-incident-response

aws-recon

Multi-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.

azazel

Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-detection.

bane

Custom & better AppArmor profile generator for Docker containers.

bottlerocket

An operating system designed for hosting containers

bpf-tools

Performance Tools using Linux eBPF

caldera-ot

Caldera OT Plugin & Capabilities

cartography

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

cartography-queries

Utilities for programmatic analysis of Cartography data

cert-manager

Automatically provision and manage TLS certificates in Kubernetes

chain-reactor

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

conmachi

Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

dispatch

All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!

docker-nginx

Official NGINX Dockerfiles

ec2metaproxy

EC2 instance metadata proxy for linux containers

evtx-attack-samples

Windows Events Attack Samples

geoip

A script for quickly gathering GeoIP data on a single or multiple IP Addresses

geoip-api-python

GeoIP Legacy Python API

go-audit

go-audit is an alternative to the auditd daemon that ships with many distros

grepaddr

Use grepaddr to extract different kinds of addresses from stdin like URLs (incl. IPv4 & IPv6), IP addresses & ranges (IPv4 & IPv6), e-mail addresses, MAC addresses.

gvisor

Container Runtime Sandbox

hubble

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

ingraind

Data first monitoring agent using (e)BPF, built on RedBPF

kube-auto-analyzer

Kubernetes Auto Analyzer

kube2iam

kube2iam provides different AWS IAM roles for pods running on Kubernetes

kubectl-who-can

Show who has RBAC permissions to perform actions on different resources in Kubernetes

libprocesshider

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

lme

Logging Made Easy (LME) is a free and open logging and protective monitoring solution serving all organizations.

node-bash-obfuscate

A Node.js CLI tool and library to heavily obfuscate bash scripts.