TrailScraper is a command-line tool to get valuable information out of AWS CloudTrail and a general purpose toolbox for working with IAM policies. Installation: OSX: $ brew install trailscraper Installation using pip: Requirements: Python >= 3.5 pip $ pip install trailscraper Run directly using docker: $ docker run --rm --env-file <(env | grep AWS_) -v $HOME/.aws:/root/.aws ghcr.io/flosell/trailscraper:latest Usage: Get CloudTrail events matching a filter from CloudTrail API Download some logs Download some logs in organisational trails Find CloudTrail events matching a filter in downloaded logs Generate Policy from some CloudTrail records Extend existing policy by guessing matching actions Find CloudTrail events and generate an IAM Policy Get CloudTrail events matching a filter from CloudTrail API $ trailscraper select --use-cloudtrail-api --filter-assumed-role-arn some-arn --from 'one hour ago' --to 'now' { "Records": [ { "eventTime": "2017-12-11T15:01:51Z", "eventSource": "autoscaling.amazonaws.com", "eventName": "DescribeLaunchConfigurations", ...
Cloud security project focusing on discovering and protecting privileged entities in AWS and Azure environments.
Gatekeeper is a policy management tool for Kubernetes that provides an extensible, parameterized policy library and native Kubernetes CRDs for instantiating and extending the policy library.
Burp extension for identifying cloud buckets and testing for vulnerabilities
A security tool that monitors AWS objects for ownership attribution, detects domain hijacking, and verifies security services.
Show the history and changes between configuration versions of AWS resources
CloudFox helps gain situational awareness in unfamiliar cloud environments for penetration testers and offensive security professionals.
gVisor is an application kernel that provides isolation for running sandboxed containers.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.