A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

bugtraq

Scrape bugtrack for vulnerabilities related to specific software

cleantox

Clean tox for hacking

community

Kubernetes community content

compliance-trestle

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

crl-scrape

For $cert in $dir; download $cert.crl; validitycheck $cert.crl

csv-split

Simple script to split a csv file into subfiles based on any given field

drawiota

A simple tool for taking threat analysis diagrams from Draw.io and outputting some tabels / doing some simple formatting.

eks-distro

Amazon EKS Distro (EKS-D) is a Kubernetes distribution based on and used by Amazon Elastic Kubernetes Service (EKS) to create reliable and secure Kubernetes clusters.

examples

Kubernetes application example tutorials

fenix3

Playing around with Monkey C

fluentm

Fluent threat modeling

fscanary

A service which uses FUSE to populate a filesystem with fake, high value files that an attacker who has exploited the system is likely to be interested in. Fuse can then alert on these access attempts.