SkyWrapper
0 (0)
Open-source tool for analyzing AWS temporary tokens to detect malicious activity.
Krampus is a security solution designed to delete and disable various AWS objects such as EC2 instances, S3 buckets, etc. It accepts a simple list of objects to action in the form of a JSON tasks file, and can also be used as a cost-control tool. Krampus itself is designed to eliminate threats post by security issues, and does not actually decide whether something is insecure. For that we recommend Netflix's Security Monkey. Setting up Krampus is generally pretty simple and should only take a few minutes. It can be run locally from the command line or from Lambda in AWS. The process involves setting up the correct IAM permissions for Krampus to run, and using a method of your choice to populate an S3 bucket with a JSON tasks file that Krampus can understand (see Tasks and Whitelist Setup). The flow chart below demonstrates how we have chosen to set this up, though any method that generates a tasks file Krampus can understand should be fine. Krampus utilizes a tasks file as well as a whitelist file to understand which resources to action on, what action to perform, and which resources/accounts that should be avoided.
Open-source tool for analyzing AWS temporary tokens to detect malicious activity.
A tool to fetch all public IP addresses associated with an AWS account
A framework to analyze container images and gather useful information.
Ice provides a birds-eye view of cloud resources and usage patterns in AWS.
A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.
Comprehensive suite of tools and resources by Microsoft Azure for ensuring security and protection of data and applications in the cloud.