Gatekeeper - Policy Controller for Kubernetes

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

AWS docs, guides, and other tools

Easy & Flexible Alerting With ElasticSearch

This repo can be used to quickly get hands on experience with Amazon GuardDuty by guiding you through enabling the detector, generating a variety of findings, and remediating those findings with La…

Hands on labs and code to help you learn, measure, and build using architectural best practices.

Splunk Security Content

Scalable Automated Adversary Emulation Platform

Detect Tactics, Techniques & Combat Threats

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

Automate the creation of a lab environment complete with security tooling and logging best practices

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls list…

Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)

[Node, Python, Java] Repository of sample Custom Rules for AWS Config.

AWSATT&CK adds MITRE ATT&CK context and additional logging capabilities to Rhino Security Labs's open-source AWS exploitation framework, Pacu.

Code snippets used across blog posts

A MITRE ATT&CK Navigator export for AWS GuardDuty Findings

Opsec considerations for each AWS GuardDuty finding type.

A Terraform module to create AWF WAF Rules for OWASP Top 10 security risks protection.