smbowen Goto Github PK

build-your-own-radar

A library that generates an interactive radar, inspired by http://thoughtworks.com/radar/

caldera

Automated Adversary Emulation

cdm-generator

Generate a matrix based on an inventory of InfoSec tools

chaosmonkey

Chaos Monkey is a resiliency tool that helps applications tolerate random instance failures.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

ciso-interview-questions

Questions to ask about the team and company when you're interviewing for a CISO position

cloud-lusat

Cloud Internal Threat Intelligence Feeds, Inventory and Compliance Data Collection

cloud-security-remediation-guides

Security Remediation Guides

cloudsploit

Cloud Security Posture Management (CSPM)

container-security-checklist

Checklist for container security - devsecops practices

crackmapexec

A swiss army knife for pentesting networks

cve

Gather and update all available and newest CVEs with their PoC.

cyberthreathunting

A collection of resources for Threat Hunters - Sponsored by Falcon Guard

d3

A JavaScript visualization library for HTML and SVG.

dettect

Detect Tactics, Techniques & Combat Threats

devsecops

Ultimate DevSecOps library

devsecops-maturitymodel

devsecops-playbook

devsecopsguideline

The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

django-defectdojo

DefectDojo is a DevSecOps and vulnerability management tool.

electriceye

Continuously monitor your AWS attack surface and evaluate services for configurations that can lead to degradation of confidentiality, integrity or availability. All results can be exported to Security Hub, JSON, CSV, Databases, and more for further aggregation and analysis.

eop

The Elevation of Privilege Threat Modeling Game

federal-dod-software-factory-compliance

This repository is a collection of resources to help facilitate compliance innovation utilizing Cloud, DevSecOps and Software Factory technologies and implementations.

fennec

Artifact collection tool for *nix systems

fides

Privacy as Code for your CI and runtime environment

frogy

My subdomain enumeration script. It's unique in the way it is built upon.

getting-into-infosec-and-cybersecurity

A shorter, less intimidating list of infosec resources helpful for anyone trying to learn.

gitoops

all paths lead to clouds

hackingtool

ALL IN ONE Hacking Tool For Hackers

how-to-secure-a-linux-server

An evolving how-to guide for securing a Linux server.