LambdaGuard is an AWS Lambda auditing tool designed to create asset visibility and provide actionable results. It provides a meaningful overview in terms of statistical analysis, AWS service dependencies and configuration checks from the security perspective. Requirements: * Python 3.6+ * Java 11 (optional for SonarQube) Install: * From PyPI: pip3 install lambdaguard * From Github: git clone https://github.com/Skyscanner/lambdaguard cd lambdaguard sudo make install AWS Access: * You will need a set of AWS access keys and permissions to run LambdaGuard. * Create a profile in ~/.aws/credentials with the newly created keys. * Alternatively, you can use the keys directly as CLI arguments (not recommended). Run: * lambdaguard --help * lambdaguard --function arn:aws:lambda:function * lambdaguard --input function-arns.txt * lambdaguard --output /tmp/lambdaguard * lambdaguard --profile LambdaGuardProf
Access Undenied parses AWS AccessDenied CloudTrail events, explains the reasons for them, and offers actionable fixes.
A search engine for open Amazon S3 buckets and their contents, allowing users to search for files using keywords, filename extensions, and full path.
ScubaGear assesses Microsoft 365 tenant configurations against CISA Secure Configuration Baselines, using PowerShell and Open Policy Agent to compare settings and generate compliance reports.
FunctionShield is a Serverless Security Library for Developers to enforce strict security controls on AWS Lambda & Google Cloud Functions runtimes.
Exploit that launches a process on the host from within a Docker container run with the --privileged flag by abusing the Linux cgroup v1 “notification on release” feature.
A security tool that monitors AWS objects for ownership attribution, detects domain hijacking, and verifies security services.
Cloud security project focusing on discovering and protecting privileged entities in AWS and Azure environments.
AWS serverless cloud security tool for parsing and alerting on CloudTrail logs using EQL.
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.