Security Automation

Microsoft Sentinel Security Playbooks

A repository of sample security playbooks with ARM templates for Microsoft Sentinel that enable automated security orchestration and response capabilities.

Shuffler

Shuffle Automation provides an open-source platform for security orchestration, automation, and response.

AirIAM

AirIAM analyzes AWS IAM usage patterns and generates least-privilege Terraform configurations to optimize cloud access management.

Panther Detections

A collection of detections for Panther SIEM with detailed setup instructions.

modpot

A modular web application honeypot framework with automation and logging capabilities.

GDPatrol

A serverless SOAR framework for AWS GuardDuty that automatically executes configurable response actions based on security findings and threat severity.

WALKOFF

WALKOFF is an automation framework that provides drag-and-drop workflow creation capabilities for integrating security tools and automating repetitive tasks.