invictus-ir/ALFA

An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and security implications

SCuBA Secure Configuration Baselines and assessment tool for Google Workspace

Python library to carry out DFIR analysis on the Cloud

A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of incident response.

A command-line tool to get valuable information out of AWS CloudTrail

Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.

Generate datasets of cloud audit logs for common attacks

A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID

SRE Agent - CNCF Sandbox Project