Audit

Impost is a powerful network security auditing tool with honey pot and packet sniffer capabilities.

A Python-based Docker security audit tool that performs CIS benchmark assessments with customizable profiles and JSON reporting capabilities.

A command-line security auditing tool that performs Lynis-based security assessments across AWS, GCP, Azure, and DigitalOcean cloud platforms.

A penetration testing tool that intercepts SSH connections by patching OpenSSH source code to act as a proxy and log plaintext passwords and sessions.

An alternative to the auditd daemon with goals of safety, speed, JSON output, and pluggable pipelines connecting to the Linux kernel via netlink.

A shell script-based Unix security auditing tool that generates scored compliance reports based on CIS frameworks and provides lockdown capabilities with rollback functionality.

A comprehensive auditd configuration for Linux systems following best practices.

POFR is a Linux forensic data collection system that captures process execution, file access, and network activity for incident response and compliance analysis.

BeyondTrust Privileged Access Management (PAM) provides comprehensive security controls for privileged accounts and users.

A script that validates Group Policy Object audit settings required for proper Microsoft Defender for Endpoint functionality.

Grafeas is an API specification for managing and auditing metadata about software resources across the software supply chain.