unsmooth3182 Goto Github PK

assumer

An AWS cross-account tool to support human access with MFA for the CLI and GUI.

assumer-go

awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

awesome-lists

Awesome Security lists for SOC/CERT/CTI

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

bootcamp

A open contribute bootcamp to develop DevSecOps skills...

canarytokens

Canarytokens helps track activity and actions on your network.

chat-with-your-data-solution-accelerator

A Solution Accelerator for the RAG pattern running in Azure, using Azure AI Search for retrieval and Azure OpenAI large language models to power ChatGPT-style and Q&A experiences. This includes most common requirements and best practices.

cloud-security-remediation-guides

Cloud Security Remediation Guides

deathstarscripthub

Discover a curated collection of scripts for Microsoft Azure and Microsoft 365 in this repository. Tailored for efficiency and automation, these scripts are perfect for enhancing cloud infrastructure management in Azure and optimizing Microsoft 365 workflows. Explore to elevate your Microsoft platform experience!

defcon-workshop

demos

Repo Filled With Follow Along Guides

devsecops

This repository contains information about DevSecOps and how to get involved in this community effort.

dotfiles

@holman does dotfiles

empire

Empire is a PowerShell and Python post-exploitation agent.

falconfriday

Hunting queries and detections

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

forecast

Forecast is a big data environment for understanding security anomalies as they are presented in a project and is meant to aid in the collection of data for the end-to-end CICD pipeline.

graylog2-server

Free and open log management

grype

A vulnerability scanner for container images and filesystems

hunting-lists

A repository of curated lists with elements such as IoCs to use for threat hunting & detection queries.

hunting-queries-detection-rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

incident-response-powershell

PowerShell Digital Forensics & Incident Response Scripts.

kql

Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.

kql-threat-hunting-queries

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

kql_intune

microsoft-365-defender-hunting-queries

Sample queries for Advanced hunting in Microsoft 365 Defender

microsoft-blue-forest

Creating a hardened "Blue Forest" with Server 2016/2019 Domain Controllers

mysqldump-secure

[sh] Encrypted mysqldump script with compression, logging, blacklisting and Nagios/Icinga monitoring integration

ngrep

ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets.