security2020 Goto Github PK

awesomesecuritystandardslist

Awesome List for Security Standards

aws-iam-privilege-escalation

A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.

aws-security-reference-architecture-examples

Example solutions demonstrating how to implement the AWS Security Reference Architecture using AWS Control Tower and CloudFormation StackSets

azure-networking-patterns

This repository contains traffic patterns for common Azure networking patterns

azure-security-quick-reference-guide

This guide takes you through the built-in security controls and the multi-layered security features offered by Azure to protect cloud workloads across apps and networks.

caldera

Scalable Automated Adversary Emulation Platform

certified-kubernetes-security-specialist

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

certified-kubernetes-security-specialist-cks-course

Notes from the Certified Kubernetes Security Specialist Course on KodeKloud

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cloud-security-encyclopedia

compliant-framework-for-federal-and-dod-workloads-in-aws-govcloud-us

This solution enables you to quickly deploy a secure, scalable, multi-account environment in AWS GovCloud (US) based on AWS best practices. This solution is architected to follow the Defense Information Systems Agency (DISA) Cloud Computing Security Requirements Guide (SRG) for hosting Impact Level (IL) 4 and 5 workloads in the cloud. Using the Compliant Framework solution, you are able to quickly deploy an architecture baseline that accommodates U.S. federal and Department of Defense (DoD) requirements to rapidly achieve Authority to Operate (ATO). In addition, the Compliant Framework solution is also architected to support Cybersecurity Maturity Model Certification (CMMC) readiness.

ctf-writeups

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

cves

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

cybar-osint-ctf-2020

CYBAR OSINT CTF 2020

cyberthreathunting

A collection of resources for Threat Hunters - Sponsored by Falcon Guard

dettect

Detect Tactics, Techniques & Combat Threats

devops-resources

DevOps resources - Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP

devsecops

Ultimate DevSecOps library

devskim

DevSkim is a set of IDE plugins and rules that provide security "linting" capabilities.

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

docker-bench-security-kubernetes

Docker Bench for Security: checks best-practices for deploying Docker containers in production.

forgeops

ForgeRock platform assets for Kubernetes deployment. Contains the files you need to build your own Docker images and to deploy the ForgeRock Identity Platform on Kubernetes clusters.

git-secrets

Prevents you from committing secrets and credentials into git repositories

gitgraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

gitleaks

Scan git repos for secrets using regex and entropy 🔑

hakin9.org-magazines

Hakin9 Security Related Magazines

how-to-secure-a-linux-server

An evolving how-to guide for securing a Linux server.

image-spec

OCI Image Format

impacket

Impacket is a collection of Python classes for working with network protocols.